last executing test programs:

2.17266869s ago: executing program 1 (id=3859):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={<r1=>r0, &(0x7f0000000040)='gretap\x00', 0x401600, &(0x7f00000001c0)={@_ha_fsid={[0x401, 0x40]}, {0x1, 0xa, 0x7fff, 0x5f7}}, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x9})
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000e80)={0x330, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0d97621acb09ee532af3eaf858369d7dd9b1aafb19f8ed69fe00"/36}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffdca3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3fff80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x146}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3a978cd228e5d627bece071f0f982743a2d3b4e4c640fac88cb87fdf9c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "6f36fbbb5504eb40e506301dcd2301511cde5e5298f8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "08f8e2eb0d79736ef0ec2cc7bcc90d0a58c55d035df591661fd1bff83ec60046"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "37507c6bfd681f4de6ea02c5e875f5cc1850aeb61ef13c8e19ed"}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffc60}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x311}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf69}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40000}, 0x24048001)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000940)={'syztnl0\x00', <r5=>0x0, 0x4, 0x5, 0x5, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, 0x7800, 0x8000, 0x1}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x1a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @ldst={0x3, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffe0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x7, 0xec, &(0x7f0000000840)=""/236, 0x40f00, 0x44, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0xa, 0x7ff, 0xf}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[r3, r2], &(0x7f0000000a40)=[{0x1, 0x4, 0x5, 0x8}, {0x5, 0x3, 0x9, 0x3}, {0x0, 0x5, 0x8, 0xa}, {0x2, 0x3, 0xb, 0x4}, {0x5, 0x2, 0xe, 0xa}], 0x10, 0x200}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r2]}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r3}, 0xc)
writev(r2, &(0x7f0000000480)=[{&(0x7f00000003c0)="25157e404d6478b5a2308ed05426d5ea69cccdecbda5ac21765df4b80ecfae0318ca1c63eb277386528baaeb89c70ef213adc91f3bd0c73185c7df121bea76b1a4380d0206e9de2c2a26023876e0c435ebe7ea0d3b0a566da3c24cf04a563a35403dfa38782541bcb4c25c8fc420a8f0151c1266eb3e04da0a0e36c7b4d2765d6961dc4847f812cc0f7685b7586693622220a9", 0x93}], 0x1)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

2.000856349s ago: executing program 1 (id=3863):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000010500160002000000040012000500170040"], 0x60}}, 0x0) (async)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async)
sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) (async)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0xffffffff}, 0x8) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
connect(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, 0x0, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001bc0), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x4c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4040880) (async, rerun: 64)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @remote, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000001000)={<r7=>0x0, <r8=>0x0})
recvmmsg(r0, &(0x7f00000011c0)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000840)=""/162, 0xa2}], 0x5, &(0x7f0000002d40)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/210, 0xd2}], 0x3}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/176, 0xb0}], 0x1, &(0x7f0000000d40)=""/245, 0xf5}, 0x7}, {{&(0x7f0000000e40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000f00)=""/120, 0x78}, {&(0x7f0000000f80)}], 0x3, &(0x7f00000010c0)=""/255, 0xff}}], 0x4, 0x0, &(0x7f0000001040)={r7, r8+60000000}) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020752500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000008000000b703000000eb00edc3d8e5fd6530650095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (rerun: 64)

1.99551105s ago: executing program 3 (id=3865):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000500), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)

1.909053592s ago: executing program 0 (id=3866):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xc6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000824}, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x5, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x3ff, 0x6}})

1.836278082s ago: executing program 3 (id=3869):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="170500001300290a0000000000000000070000000d8287971eb78d50db437b2f8991a1367c3015725a6e2276b06e4e04dbcbc3b84389142a8ee8077fca8f2e8edbfc6629058e25b8c93db1db194e6f0797bd4739c1ce562c5202423113720a2b9e36c71f93ffe399c144bfd8dd2f927732d23d602d6c2c8b5a70e656dc69b8c5dbfe656cc808f8893b409c16ea", @ANYRES32=0x0, @ANYBLOB="00940fef940000000000200000000000e3aab8fb15fd15af23928240539f6fdc5dfef5c39f1847d98413b838af7d2e74351b3da4fa689ac076ba22f1e588c536ef9ca0ec764b3c8a1770"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000000b000002", @ANYRES32=r3], 0x20, 0x2400e044}, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r3, 0xc}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x4000000)
socket(0x15, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000004c0)={r3, 0x6}, 0x8)
getsockopt(r4, 0x3, 0x22721, 0x0, &(0x7f0000000040))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x4, 0x0, &(0x7f0000000180))
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4)
r8 = socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_proto_private(r8, 0x8b15, &(0x7f0000000080))
shutdown(r5, 0x0)
sendmmsg$sock(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
r9 = socket(0x1, 0x3, 0xfc)
setsockopt$WPAN_SECURITY(r9, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4)

1.757523948s ago: executing program 1 (id=3870):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x298, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x355}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4a6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfc2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x48}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x37d8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe3998d54}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x14000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff4ac}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1d}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe58c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x18, @empty, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x653e}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf2e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3f}}}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xc4}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)

1.671015344s ago: executing program 2 (id=3872):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) (async)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
close(r1) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r10 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r11=>0x0})
bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0xa, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r3], 0xc405) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) (async)
r12 = socket$inet6(0xa, 0x3, 0x80)
getsockopt$sock_buf(r12, 0x1, 0x2b, 0x0, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)

501.455304ms ago: executing program 0 (id=3874):
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x1, 0x4)
r1 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3, 0x1)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffff8)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000340)={<r2=>r1, &(0x7f0000000240)='+:]#,#*.()-\x00', 0x20080, &(0x7f0000000280)={@_ha_fsid={[0xfffffffc, 0x364a]}, {0x4f, 0x172c, 0x5, 0xd}}, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x9})
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000380)=0x4, 0x4)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', <r3=>0x0, 0x2f, 0x7, 0x1, 0x0, 0x69, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8000, 0x8, 0x7f}})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000840)={{<r4=>0xffffffffffffffff, &(0x7f0000000680)='+:]#,#*.()-\x00', 0x8000, &(0x7f00000006c0)={@align=0x1, {0xfff8, 0x8, 0x6, 0x7}}, 0xc, &(0x7f0000000700), &(0x7f0000000740)=0x2}, {[0x401, 0x7, 0x8001, 0x9]}, 0x9, 0xb4, &(0x7f0000000780)=""/180})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x2, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x6}], &(0x7f0000000400)='GPL\x00', 0x2, 0xca, &(0x7f0000000440)=""/202, 0x41100, 0x18, '\x00', r3, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xf, 0x4, 0x8}, 0x10, 0x0, r4, 0x1, 0x0, &(0x7f00000008c0)=[{0x0, 0x4, 0x9, 0x5}], 0x10, 0x4}, 0x94)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0)={0x0, r4}, 0x8)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000a00)=[@timestamp, @mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x6}, @window={0x3, 0x6, 0x48d1}], 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000c80)=0x40, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000cc0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}], 0x2, "22053b8b667b93"})
ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001cc0)={r8, 0xffff})
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000002cc0)=<r9=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000002d00)=r9)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000002d40)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002dc0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xea, 0x68}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDDLCI(r11, 0x8980, &(0x7f0000002ec0)={'ip_vti0\x00', 0xa874})
r12 = syz_genetlink_get_family_id$fou(&(0x7f0000002f40), r2)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x34, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000011}, 0x4041)

500.692394ms ago: executing program 1 (id=3875):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {0x0, 0xfff1}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r7=>0x0})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14"], 0x34}], 0x1}, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000027c0000040042800c0001"], 0xf8}}, 0xc000)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r11=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r11, 0x0, r8}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x7}}}, 0x24}}, 0x0)

499.553322ms ago: executing program 0 (id=3876):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004)

499.283797ms ago: executing program 2 (id=3877):
r0 = socket(0x2, 0xa, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2002, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4)

497.594967ms ago: executing program 4 (id=3879):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r5, 0x4}, &(0x7f0000000180)=0x8)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000)

496.114514ms ago: executing program 0 (id=3880):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xd, 0x5}, {0xa, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x2, 0xa8}}, @TCA_CHAIN={0x8, 0xb, 0xec59}]}, 0x4c}}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

495.788465ms ago: executing program 2 (id=3881):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r2], 0xa)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}, {&(0x7f0000002380)="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", 0x2f1}], 0x2}, 0x4005)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe29}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

494.537836ms ago: executing program 4 (id=3882):
r0 = socket(0x23, 0x80000, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000018c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="c3c266725e20038326a131b36acc26d115a6ae90f50a6d", 0x17}], 0x1, 0x0, 0x0, 0x4008014}], 0x1, 0xc041)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={<r4=>0x0, 0x73, "d91803bcede2756adbc8fb8741376dc00c10640acd4d1db28191cf0f328954dd1b29aa50bdab175b6057101ce02293c2ad2a5187981e0ecf9e503b5924705544c4365478cddf7a51c355f9bb55e0d14ed798c03a38d6d1fcc129d43931accccdfc39e146b577880b95b93a841eadcd458dd631"}, &(0x7f0000000080)=0x7b)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r5, 0xfffffffd)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={r4, 0x0, 0x7f, 0x5}, &(0x7f0000000340)=0x10)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001001040000000003000000000000e79483f89af80533053efeb95ec2ce65ad69eead36cd5212957fa22f94aa223a665367a936bda20d0099d535728c997c3bcbab3e34930e775e0b10d06eea9f027b63fd783c5670314fe6c9ad6c9bdf53a308e9fb0be10a4306324ebe421784f3147e4bda2045ad628a23ad85fb98e81239e4", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a20001280110001006272696467655f736c617665000000000800058004001800140003006272696467655f736c6176655f300000"], 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r7 = socket(0x1, 0xa, 0xfffffffe)
sendto$x25(r7, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES16=r2], 0x1c}}, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'gretap0\x00', <r8=>0x0, 0x0, 0x20, 0xd, 0x8, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x67, 0x0, 0x8, 0x29, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x8, 0x11, 0x0, 0xd, [0x9]}, @rr={0x7, 0x7, 0xc, [@multicast1]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0x6, [0x211, 0x0, 0x3, 0x3342, 0x0]}]}}}}})
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r10 = accept4(r9, 0x0, 0x0, 0x800)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000500)={{0xa, 0x4e20, 0x1d, @private2, 0xb76}, {0xa, 0x4e22, 0x3cf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x0, {[0x401, 0x0, 0x7, 0x7, 0xc, 0x6, 0x5, 0x72]}}, 0x5c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r8, 0x29, 0xc, 0x1, 0x10, 0x8b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @remote, 0x8000, 0x40, 0x6, 0x8}})

493.59094ms ago: executing program 0 (id=3883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001800000008000000430000e4ee22d090", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000001240), 0x0}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r3=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000020100800c00"], 0x114}], 0x1}, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=<r5=>0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r6, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040)
writev(r6, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b7098bd6d7ca7b8b4a88ab0392855030d5d2d2f8034ae9327ec8f7c6022984aa7a5c846e81f4939f94f74f821e07eb0c2be4108c334f9bc366cd46119232932152ceda30b8464bdb15d357cfc7091d1b5f6ae1946b3643c6d1ff2968f5d44c6a63107fb87c129d745ed3adefd728ff95b174f327a521d948e6047c69eb9c9276bb654c126ef65a16c371c5fe5191948cfc94f8bf8149ab3e976f0a33883d48a5a60508d7532f56516f2d94b06b6f11096d0b6d135b0030457b79f0ca5620f2dfba0", 0xc5}, {&(0x7f0000000500)="a2e58ccb13d06763c3791dd274d055828473fe185a62bd394a12ddc68de919", 0x1f}, {&(0x7f0000000600), 0xc512}, {0x0}], 0x4)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"363651af6b5e3d29cd724d584bc21e87", r3, r5, {0xd4, 0x2}, {0x9}, 0x9, [0x1, 0xd, 0x100, 0x80000001, 0x9, 0x720, 0x2, 0xfb, 0x2, 0x7, 0x80000000, 0x4, 0x4, 0x3, 0x9, 0xffffffffffffffff]})
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
sendmsg$nl_xfrm(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@newspdinfo={0x1c, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, 0x1, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20008000)

493.052672ms ago: executing program 1 (id=3884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="74010000070a01040000000000000000010000082c000580080001400000002f080001400000002f0800014000006006080001400000000408000240000000010900010073797a30"], 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x2004c084)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0)

492.703278ms ago: executing program 2 (id=3885):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket(0x5, 0x5, 0x20000202)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000007c80)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x34, r3, 0xa5c59466aaff822d, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0x60040)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@local, <r4=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r4, 0x29, 0x40, 0x9, 0x1, 0x0, @loopback, @remote, 0x20, 0x1, 0x6, 0x9}})
getsockopt(r1, 0x1, 0x4, &(0x7f00000002c0)=""/138, &(0x7f0000000380)=0x8a)

487.551824ms ago: executing program 3 (id=3886):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="6eec498ba7"]}, 0x1c}}, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040), 0x4)

461.598356ms ago: executing program 4 (id=3887):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="10c9b801eece64f31f6b2bda8bc39e2d", 0x10)
close(r1)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200)=0x44, 0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000380)="075fdaf9"}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0x8, 0xf}, {0xffe5, 0xd}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r0})
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402148006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000480)={'veth1_to_team\x00', 0x2002, 0x7f05})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)

388.690998ms ago: executing program 3 (id=3888):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000), 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r3, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x2, 0xfffffffc, 0xe8, 0x9e, 0x2]}, &(0x7f0000000080)=0x54)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x1a, r5, 0x1}, 0x10)

387.911668ms ago: executing program 4 (id=3889):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x6}}, 0x0, 0x0, 0x39, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, <r4=>0xffffffffffffffff}, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000b7092000000000003509fbffffff00009500000000100000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000f01e6ba05857fd977b70225f20979fbd6e59edb4e1122cb3cd47d8c11c98d72a042ab088695ff3c9472fe305fc7cd9a40b7912c70885ee3dcb82ebb8457e146e59e71fc2f204fe256374d6b301794d228420cd1debbe3d562704a275e59e9dbf89aaf4472bc197a9a705fe0a1c63da1383f49804b1ba89e9d56eed53c2efc0645e91c83ce5c543eb0c36a735021b0352ad53f95a40d6f66b64e74c9db99474e25dc9cae4f32d296fd87ba8ad536562a6d1c0a7afdcd867a8fa93120af65f3a2167990dc8c61fd9cbf472715173fe1d4a0c0a8e87bc537f6f3c37d616515b2c4a2f493d787d5bbff4943c5319911d9d105bde2cddc2a8d13d5dc54f201499074c2744a4f43d20ea6bc3c02aa6b395d70f6038c414538c4f0554ffd1b578adf46ddc10cfaf4e187aa0abae531b54e2e9cc68", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

279.096752ms ago: executing program 2 (id=3890):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000081060000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

214.880928ms ago: executing program 3 (id=3891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x29}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x1f, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}]}, @generic="c1dd85"]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r3)
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r4, 0x1, 0x470bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)

148.908753ms ago: executing program 4 (id=3892):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xfe}]}]}, 0x28}}, 0x0)

110.166347ms ago: executing program 0 (id=3893):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0)
sendmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f36088e85e", 0x5}], 0x1, 0x0, 0x0, 0x20060000}}], 0x1, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x4)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010180000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, &(0x7f0000000040)=0x7, 0x4)

87.842121ms ago: executing program 2 (id=3894):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a300000000005004200050000000800010001000000090002007379b6bf000000000900020073797a3000000000080001"], 0x68}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a300000000005004200050000000800010001000000090002007379b6bf000000000900020073797a3000000000080001"], 0x68}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async)

53.999202ms ago: executing program 1 (id=3895):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x6, 0x1, 0x7ded, 0xfffff001}, 0x10)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r6 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r6)

51.353802ms ago: executing program 4 (id=3896):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbfd, {0x8, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x58}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
r3 = accept4$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10, 0x800)
sendmsg$sock(r3, &(0x7f0000000540)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="a66ef7cce606978effd781ba4f6567b38303151f5a9870ae0f276eacb510353b4e8b483cdf712ca5a6162c4797a0cd95f5f19bf76e9bdc97e40f611cd7e947972ff3e5d3521321d8f01227ee50f5db179532f6f8ac7798102835b139f0b58a2d1d8aa50db4739b0d7e6eb5f37829a2ff0b2791bcf5856a59bf801351c7fbe17f049ead2b2d8fd080e27765958845de21dd8e2b26", 0x94}, {&(0x7f0000001b00)="fe0193781ff0cb9cbfe71ff965d6619a180ab54a367fee825f8755ceb4a806c92587ed1e475d1e9e9503969408e2d4a31725f733be276b6ea5f1d80e8c750a24da1cc097b0ca671299a6e4d0d35d7353371874f5f624ee20168a4c6d5d15b6bd418dd342312510772f358ee51009f370f1e739aec05173cda1c5ea6b3d5ba16c966a16fc865ecd9f603179987ec069e00398711a5cf4e65919c6db4d3620d89e2670b867499aadcbcf09937a73c5a745ed07b63b92e4d4a1e2f1861180bdde71a97ed53e4c281c5e499e87f4bc32ebf0cac0b5b12a497a12af3d1c3341ebc63a6936d6a71614ce528a23ad5199252c1bfcec3b8c8b73ecc804a90408018cf4cff5f4f9333e98fc9ad14671fb620ec4e43be59e735b76d1c28f0de415182dc4ed5bdacc6fa6bccf38d6ccf6b9c63ae35fb5e44a24b27a111b6c68d540da5ec4cff28b747afbc01d995fa97548e6b3b8b3de565943794b1ad67ef6710c87654fb40084ee315a6f895fea1358078e4cc502173ef1585774000211b9e970a072f48a20376b2fa3c2a7eb0682074b2f6d611d810bcc3f7a392975e5d0af407ccca230a67b54795f44f93bde42adac77341e677fa448850a7cd983c377d87845a5b05a2f8d2e4c85c6da684851e953f886546d718000908eb190d0e14db3a64e55a299fff22f61673a7fb6603b855812b3186be17f621d3fb7e163477bbea4c03401c4ff0c4e576374bb83f8f78ed75a14aecdc0081be78434741330033d69a8d9a7d40c7196d8641100ffe019b2f2ca8cc8d16bca90c0e7cf5fcf44fd5eb3ae4ca43d1f36f89becad5b901f0b15016d6a2f45b269f00a03409f3e77edd59c870d6cb6b572ce783445e7dabd9defd7e2e9ff68bfb5cf24b049f1e9e73fe20cb09416ea89055d39b575129606a84df25375160baf176a29560f304ddcde9194c039923b3942a37d09e24cc21cc9a1829df020d9481b714b9d4e650fc52baf0ac12df15ff452e779ab1af308b8515de9823915a141683bee9ef8947c2d33bc26af99f2ebd7877d87ee5c51f0015ae53167b836a632700c8c564d93987d3c89bc79eb513edc9ae6acb7ec83b16cdaf5316a677aeeccb647e03c37169d757e090f953986574c95466710a092bdb1b7f8f99b93c97295c223c122df24b03cfc4df4dd91c731074271a6d5b521e9f2f14ff7d8db68a1295ac2830fd8765f3a2313178d62392539ab9d2fa3ffdb7084e8e937ab4cf1a79c54e52aef060776e7a2b30804a7d65b428b2476e18081c8b6ddf9a84694f4cbcfd4290fb4c6917ffedbe8285017450897249166ea73a88ff75226774779ed709192851cc824b8cab88dd628e7eca5205e364cccbb27ad4f231e323d57862f099ee6aa3eedab1c05c2a2c2fd5c76c336d8ad98deb146e39afe357eeb9410b674f6a4c6f8c017d136c1b09b61fe09e8dd2287ea6cd04f8872db2ae800f09852d1e2251ff028906f462845533bd61ac1a97bfa03cca716a05eee5ed20195e9a7f7d84c25d519a070740a645e464f3e2dc964c5248afca19585ebc25560a7f5fca9b06a60b15eb6196964b1960f2cd9a068ad77b126f8ca5c6e57c9fb6e2c3c2ffa2d5592216317120b74c15191115221fe19322c493bf005e7909a947d95cc784225d34b0c45404fc6c51490a8f5ebd11302c77015bd1057b08a14dc5592805df772872e94a789b1207dcceeae85b330a2e2600bba61b0fe7667a864b911e75564d52e5bfd16ac11948f052ae2d26d70b90efc1f60b4004222ad109415737282734e43d6eeeee193bf788fc93f25274befb69a21d0da0cdaed00623338521ee330f994d288ba355f4e9d8b35aa2de2f84623c99fcb0b1c992898862ed675ecbb0312b7e8a1c53b92cd91aa84819b88d47e7f56d314316b9072cfef96c5fe85e5603a71517bd8903a13c1747fcf4bf934d9439716189de168854459e30076a6c86c1ef558ed5e0e68d1ed61d890a8b2947b8f74bda3c2f6d5c3c36cbbed25dbc4b7c13df44e285fa042e4de8f720f5cfe8085977a21c1672a42b8140c68845d8cfb6dc44b7fee347092d49e2b6ab7cca597a210b7d29482fa3608660499fb775bccf7c88afac06927e6191ab16860e84298f0faa43c7e9775c77188ae7177c639408d380cd427457f41fe9538e52db87b1997e0aac16297718a119f0711b81297dd823cb6e9f493d6937bd68b1b25f73e426745618daf6785836ccfc98d305deb972cce088c7728225ccb5b848a4c382394b0aa9599e7a9d590031096199151fdcb22464e942b02a152236a5195cfe76308e724dd22cb6002153daa746f679eca17fe63883fa90d2891ca9895ba1a3850446621c1ff03fe6c572fbf636e7a4faa6cc8b549d744336adf2821b20a2c53a5297ce5c7f0f0bee48b05393e36680c05afeae548d8d7dad08ef34e24384224c539731fea434a4aa2c75cd00d57a7e7c6d3ec35321beaa68e6ef75af715eb1c7675ff2311c6eac651b780ae984635d92a676b3c06ea7dcd5e3adc0230a45d48d93b08fe4ec9e47ef60a55dbebca658aafeea1c675514a13b7ef56004e8cc4e9b57a3d8ef61899f2093e3cdf909d027a5b1470c243773ac1fc148897b29bfba116f9934c2ebd8db94acf6c5f70f7fdcfac71d88799847b7a694d20cc4fbc40dd41b365441628a106f0a1b456a2a3b4b2175c9cbaac97572aaf9fa07354a2515fe5eee19d2e935b4336c017f96e0aa7d63b63fb4fc2873a95ccfe02b441fef74fce29c39cca7a42d5a539cfbfe7b19011b3df9acd609f802bd1a6ff84088a309ce5494601fee6b9406015e8d74f9bdf0b90e32fcb0c4952b31c90283560b50a3b635647aad8f411bf6a51dbb3471df0b0d437b2f4723a258b0836950f21a7a33459b0ffe55dc751a710164fe96ab401e9434700537d3cfe5411cba88145a3970b2251fe589809d4454ac0555b99490320b6ac42c889b782c0d82358ed48f18545124b0e14ffc10faf896e9c3709296134e1a4329f2055030dfa4965a4459eaf78e843518248fb1ced057bed28de08cfd7bbc4f01c2d0abb77996c783f71c89bf3f57ea2fd485cffdcad1c6f690085ff3df712bde92aa5bb7d9f011b9b84bb43ca6bec0d91e9aa300f26cf0e98cdd350f41bf16f1130f67de427c8a32055b798f3199a0477ef2b0083400f5074f37028fbb3e3acce40a7f3e1d12bad7d9269d32f50f705f0ca1048be0a4c508ca4db04b4a82b0c90811c287c9f93738ebe737096d9501d79e463f90a160e70d44689b3a9e3449547bd35a2223603647421add8c723b666eb97c887a11c6d9bb5d8ed8a5dde0f86307482af62b4411a4d7085667995b6d0548e737dd47859d1f1347ecab0ad7e8814fe7d8f6dea6570cddb66723a70e9a2806905d4f9175024516faa285f678a09c6d3930fd3dc5c7b3bb4a3f18452f952e735c7fdc5b5d54c09dc7443f6076541e575821dfcf036b32205fc2615378a5eeba6b75e064d0b618c92818aef3c4373a7166524995d479c5e550db191a881358639d1fc6e85db1f46c4096ab050b655b10f4756b023e183a41645d00de99481da629ceb2aa2e8241b8739400f924b47c77804a614bd0c01918a9b2bd2dd6bc8d60bc4f1ceb56e525b404e852375731e7e19658ecab01692795e762699f22a45942d777502371edbb30f00b969ab52817234e97ba43145a3fc6be329eeb326b95f25864219b38ff5616a61353ab147aa438fb4fe860a0e68f298d7b22460ac63e5dc50249f833a4fdb81dd4fb682703d20bc6759e6c5c0d16af406b64bb065e3a1cfa7d8599331b71484b8c3a83195c1db9eb788d6e90ec395fa62ba5642167a40a78432a66a8d6ebc4c663108ba692a7f41a9c4594fb3b0a72a42fa73328ec5bca2325329144a6f7a6624e56c55989d6391f54996dafe1b900e5ffc5f2ff2b49d0d0f2404cc924b84291682c71fa67eab801d1a8a2cbe83a8d6ca04abfba0dd3171a814cce4cca5cf64da9046c34d7df9cc89a81897598fa712d8429ebe79eb0eaa1ae9cfda018b86e98672da7d9ff9863b2159462de49c6d1de3300961b0434b837ca886f081d147d86f97d11abfb73b7b4d02e1ac271db3d4daf70f8acec18fa688bf15947ae2af7c4c819668f6f4211a7f725ba3e8ae70895aa5736de85bd5e8440875546075aa587f63955a379657247f098c9aad7f289aeb32595e01ea504f1c8b002fbafff713c51267d4ca2b79bd36f11d0cdb5a4922bea1a1f25ce9938516a3dca974041f5253a161fd3b54984fb1062f868f86241d58a93865a77fd32a8ebbff6c2708f805515603c470d7291f2b0b153a7fb45080502cba527e922563de2368968e4a162961b941ee6f47f39696427114802afbdd156b38c7f9d4b6cbc9f72ef4b69f54b07c899355142bfb5500cb0cb15da5a2ccba945c6ffe7a5b23274cfb2e520024a75ef2c354a878bb5029916693f2135be30342753de296c2ff6d1cb850ff825d025afe6d83a94cdbf535536f2c26f34025a2e573c0ae8a21988f82aa797e9bbd7142c450c6ee5a90bf64e83abaf75ce08d816d17bb1396bbdd6698bd1c8f0fe989cf25e4a0084579044ea2950e98ad98cfc6e9731438b008c9e2d574575bb6dc2772742312307ca6fadefd689c7adff825089e52c6e0dd2440270a9a613da40bdde100dace27821e8ab265a40e2fbc025abfa799193fb17ead52d275a2a83c00b7b159e6237cfed4cf2837731b4635755823d4eccfb32bea25e9c056bc84fb901fc382c1d1655c65ac145fd22d1047aeb3acdbb88509b1390a7a04979efce1cfb84f81b303edaafa783db178bab2fad7eeab09ee6332d9ea6464f5753338c17735734906c3badb624ba886b311e0a7953645f8bde76fb7f6f5de052d70b7adddc6987d6212ba34c643f2d5b08f16ecb9a1a24b2500093add0c68ebd9bb8c3f3550245387d7724f1209df4845e53a43e4c381dfb0b26297eb02c3633610f1472ae5505d52690859ca873c3d785c06cc4036cce5e10b6e0665ea035451c912243777899df88a5d3802a349b4a547e0653ef60f3a5edcb977d13a15b3945f0e27d0c76d277c6445b86eb59f6fde50fcf25ebf58524c420d0f83eb7204e1e81f6587c8fa85d227244c7a9c2c1946e643a818e8c9fbe769503887f46714cbf935084c000ab0a0285d33d164168f3f17534d621fe409d33295130dd89ca5470704c82438a8ecf85eab257081a6d60af65d339e8da1ac11ff9771a62c43d77b69b1345811c0d84ed1126a0cf7c0eab68b165979975af4ec618c1557ed8fee04028f3a93179465a0ce79c58b079dcf7ecbcee72238929a90696d354e80259899446898453ec2ef6259ff3d8c2155338f5d03316dcdcbc41e00f42af25909e7b7f7f8c43e82fb1dabd066fec6cad33d0f4826f2b2b9e5a1590b211916693c07d13557c9ef0e1bf3da6621327c20dcabc22c0da6f696b1e13cb4144d82518a14c73a07d81ad0347c647dbfb30a61e8dba05cc7188b90664d4cb305488ca2a6c67b848a4e86fae9a4ca0feb6fc33a590c22fbb538630ca7a3cadfdadce123368b31e85354041379cb2c4f306ae235100fc18e3c7a21480c94bcac8a964b5a41fd938ef1ee53610f637d775cfc1dbb8b15048bb060e805ec785d58824b7586fc5889b36de512c8180ef7d90b878d959f08a8b7fc66293f2182c9d2a7632aeffc1302b78c461d9682995d4b45d081f707d8a979ecfdce8a377fd6d110f6336b2783a4470be0f8054a2ed7d835ba6de52fb976cde3b265e0cd201db50b", 0x1000}, {&(0x7f0000000200)="b5acf99b875b43d70c6c78cb5b3323f5b181ec0b783b8d71edcba63cfe0d34408313bbb374378c47f3034a440ede", 0x2e}, {&(0x7f00000037c0)="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", 0x1000}, {&(0x7f0000000340)="5357714c2bae3db5d1b469af3498ae837f6622fae3709f9adb17d1363f4fe7d6e6ffc6ae86f027f533aab73b1965b44043d2e4ee00883cfbf3f167f40492a29fc6204b6f85", 0x45}, {&(0x7f00000003c0)="1a2887538a6cfda585c5004a2b0757d8fb37cdcd264d9c3c76035cd7ec91b65da46520574f3fafdef5a68788", 0x2c}], 0x6, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x8de}}], 0x90}, 0x54aba66121ababf)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

0s ago: executing program 3 (id=3897):
r0 = socket$kcm(0x10, 0x2, 0x0)
close(0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB    \x00'}, 0x20)
ioctl$FIONCLEX(r1, 0x5450)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x9, 0x2, 0x1ff, 0x42a, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040)

kernel console output (not intermixed with test programs):

14': attribute type 17 has an invalid length.
[  279.796188][T14077] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.2312'.
[  279.815295][T14084] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:32789
[  279.965678][T14079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.978928][T14095] x_tables: duplicate underflow at hook 1
[  279.996351][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2316'.
[  279.999567][T14079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.181302][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'.
[  280.256991][ T9020] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.271089][ T9020] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0
[  280.294408][ T9020] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  280.318191][T14109] block nbd0: server does not support multiple connections per device.
[  280.325893][ T9020] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.338280][T14109] block nbd0: shutting down sockets
[  280.363229][ T9020] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0
[  280.372799][ T9020] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  280.382033][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.391085][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.400046][ T9020] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.410107][ T9020] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0
[  280.431919][ T9020] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  280.479075][ T9020] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.502707][ T9020] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0
[  280.536291][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.546238][ T9020] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.174649][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.237691][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'.
[  281.267240][T14180] netlink: 'syz.4.2341': attribute type 3 has an invalid length.
[  281.289740][T14185] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2341'.
[  281.311770][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'.
[  281.348553][T14180] netlink: 'syz.4.2341': attribute type 75 has an invalid length.
[  281.360190][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2344'.
[  281.554243][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2347'.
[  281.574686][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.762506][T14223] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  281.776381][T14223] bond14 (unregistering): Released all slaves
[  281.904697][T14235] netlink: 'syz.3.2354': attribute type 4 has an invalid length.
[  281.960681][T14242] netlink: 'syz.3.2357': attribute type 1 has an invalid length.
[  282.089424][T14252] netlink: 'syz.1.2361': attribute type 32 has an invalid length.
[  282.305791][T13959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.339084][T14265] FAULT_INJECTION: forcing a failure.
[  282.339084][T14265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.352233][T14265] CPU: 1 UID: 0 PID: 14265 Comm: syz.1.2365 Not tainted syzkaller #0 PREEMPT(full) 
[  282.352268][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  282.352283][T14265] Call Trace:
[  282.352291][T14265]  <TASK>
[  282.352299][T14265]  dump_stack_lvl+0xe8/0x150
[  282.352326][T14265]  should_fail_ex+0x412/0x560
[  282.352352][T14265]  _copy_from_user+0x2d/0xb0
[  282.352369][T14265]  ___sys_sendmsg+0x1c6/0x360
[  282.352389][T14265]  ? __lock_acquire+0x6b5/0x2cf0
[  282.352410][T14265]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.352458][T14265]  ? __fget_files+0x2a/0x420
[  282.352473][T14265]  ? __fget_files+0x3a0/0x420
[  282.352498][T14265]  __x64_sys_sendmsg+0x1bd/0x2a0
[  282.352520][T14265]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  282.352546][T14265]  ? __pfx_ksys_write+0x10/0x10
[  282.352574][T14265]  do_syscall_64+0x14d/0xf80
[  282.352594][T14265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.352610][T14265]  ? trace_irq_disable+0x37/0x100
[  282.352628][T14265]  ? clear_bhb_loop+0x40/0x90
[  282.352648][T14265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.352662][T14265] RIP: 0033:0x7ffa3119c629
[  282.352678][T14265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.352690][T14265] RSP: 002b:00007ffa31f85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.352707][T14265] RAX: ffffffffffffffda RBX: 00007ffa31415fa0 RCX: 00007ffa3119c629
[  282.352718][T14265] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  282.352727][T14265] RBP: 00007ffa31f85090 R08: 0000000000000000 R09: 0000000000000000
[  282.352736][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.352744][T14265] R13: 00007ffa31416038 R14: 00007ffa31415fa0 R15: 00007ffccea3cbf8
[  282.352768][T14265]  </TASK>
[  282.614440][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.739829][T14283] bond8 (unregistering): Released all slaves
[  282.888750][T14292] syzkaller0: entered promiscuous mode
[  282.895669][T14292] syzkaller0: entered allmulticast mode
[  282.913917][T14296] dvmrp1: entered allmulticast mode
[  282.977995][T14299] __nla_validate_parse: 2 callbacks suppressed
[  282.978012][T14299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2376'.
[  283.001956][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'.
[  283.030237][T14299] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.031640][T14303] FAULT_INJECTION: forcing a failure.
[  283.031640][T14303] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.037467][T14299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.067429][T14303] CPU: 1 UID: 0 PID: 14303 Comm: syz.2.2377 Not tainted syzkaller #0 PREEMPT(full) 
[  283.067453][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  283.067463][T14303] Call Trace:
[  283.067470][T14303]  <TASK>
[  283.067476][T14303]  dump_stack_lvl+0xe8/0x150
[  283.067499][T14303]  should_fail_ex+0x412/0x560
[  283.067525][T14303]  _copy_from_user+0x2d/0xb0
[  283.067541][T14303]  __copy_msghdr+0x3c5/0x5b0
[  283.067563][T14303]  ___sys_sendmsg+0x213/0x360
[  283.067579][T14303]  ? __lock_acquire+0x6b5/0x2cf0
[  283.067599][T14303]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.067646][T14303]  ? __fget_files+0x2a/0x420
[  283.067661][T14303]  ? __fget_files+0x3a0/0x420
[  283.067683][T14303]  __x64_sys_sendmsg+0x1bd/0x2a0
[  283.067705][T14303]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.067732][T14303]  ? __pfx_ksys_write+0x10/0x10
[  283.067761][T14303]  do_syscall_64+0x14d/0xf80
[  283.067780][T14303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.067794][T14303]  ? trace_irq_disable+0x37/0x100
[  283.067811][T14303]  ? clear_bhb_loop+0x40/0x90
[  283.067829][T14303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.067845][T14303] RIP: 0033:0x7f8bae19c629
[  283.067860][T14303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.067873][T14303] RSP: 002b:00007f8bac3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.067890][T14303] RAX: ffffffffffffffda RBX: 00007f8bae415fa0 RCX: 00007f8bae19c629
[  283.067902][T14303] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  283.067913][T14303] RBP: 00007f8bac3f6090 R08: 0000000000000000 R09: 0000000000000000
[  283.067923][T14303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.067932][T14303] R13: 00007f8bae416038 R14: 00007f8bae415fa0 R15: 00007fff7955fd78
[  283.067958][T14303]  </TASK>
[  283.311603][T14314] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2381'.
[  283.321783][T14314] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2381'.
[  283.379921][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'.
[  283.392546][T14314] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2381'.
[  283.607696][T14334] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004
[  283.658333][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.756360][T14348] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2393'.
[  283.797266][T14355] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2398'.
[  283.998164][T14371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2402'.
[  284.040086][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'.
[  284.054522][T14384] openvswitch: netlink: Message has 6 unknown bytes.
[  284.070105][T14384] netlink: 'syz.4.2406': attribute type 10 has an invalid length.
[  284.148215][T14389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.715635][T14427] bond8 (unregistering): Released all slaves
[  284.783021][T14438] rdma_rxe: rxe_newlink: failed to add lo
[  284.902687][T14440] bond14: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  284.924840][T14440] vcan0: entered promiscuous mode
[  284.929899][T14440] vcan0: entered allmulticast mode
[  285.017862][T14454] tipc: Resetting bearer <eth:syzkaller0>
[  285.082406][T14459] netlink: 'syz.4.2429': attribute type 1 has an invalid length.
[  285.091109][T14453] tipc: Resetting bearer <eth:syzkaller0>
[  285.197681][T14465] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  285.304817][T14473] syzkaller0: entered promiscuous mode
[  285.317187][T14473] syzkaller0: entered allmulticast mode
[  285.381595][T14482] netlink: 'syz.1.2439': attribute type 3 has an invalid length.
[  285.445209][ T9022] tipc: Resetting bearer <eth:syzkaller0>
[  285.531897][T14490] syzkaller0: entered promiscuous mode
[  285.537951][T14490] syzkaller0: entered allmulticast mode
[  285.637380][T14497] netlink: 'syz.0.2445': attribute type 11 has an invalid length.
[  285.646451][T14498] netlink: 'syz.0.2445': attribute type 11 has an invalid length.
[  285.735840][ T5895] net_ratelimit: 9 callbacks suppressed
[  285.735857][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.037854][T14504] netlink: 'syz.3.2447': attribute type 1 has an invalid length.
[  286.045945][T14504] netlink: 'syz.3.2447': attribute type 7 has an invalid length.
[  286.053676][T14504] netlink: 'syz.3.2447': attribute type 8 has an invalid length.
[  286.063422][T14504] NCSI netlink: No device for ifindex 65584
[  286.752145][T14519] pim6reg1: entered promiscuous mode
[  286.772869][T14519] pim6reg1: entered allmulticast mode
[  286.783028][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.360663][T14594] ieee802154 phy1 wpan1: encryption failed: -22
[  287.523241][T14602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.818638][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.152377][T14650] bond0: entered promiscuous mode
[  288.182490][T14650] bond_slave_0: entered promiscuous mode
[  288.194766][T14650] bond_slave_1: entered promiscuous mode
[  288.200618][T14650] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  288.201048][T14652] __nla_validate_parse: 23 callbacks suppressed
[  288.201063][T14652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2496'.
[  288.226076][T14650] bond0: left promiscuous mode
[  288.230857][T14650] bond_slave_0: left promiscuous mode
[  288.247013][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2495'.
[  288.257864][T14650] bond_slave_1: left promiscuous mode
[  288.263905][T14650] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  288.386068][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.484155][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2500'.
[  288.635892][T14678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.645168][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.675581][T14678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.684169][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.760687][T14686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2508'.
[  288.800030][T14686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2508'.
[  288.854417][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.881907][T14686] gretap1: entered promiscuous mode
[  288.896646][T14686] gretap1: entered allmulticast mode
[  289.482866][T14729] tipc: Enabling of bearer <eth:syzkal> rejected, failed to enable media
[  289.637197][T14737] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2523'.
[  289.754806][T14745] ip6tnl0: Caught tx_queue_len zero misconfig
[  289.801410][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2527'.
[  289.813141][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2526'.
[  290.152998][T14765] IPv6: sit3: Disabled Multicast RS
[  290.167692][T14765] sit3: entered allmulticast mode
[  290.357247][T14775] netlink: 'syz.0.2535': attribute type 13 has an invalid length.
[  290.387140][T14780] netlink: 'syz.4.2536': attribute type 4 has an invalid length.
[  290.416359][T14775] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2535'.
[  290.474715][T14775] syz_tun: refused to change device tx_queue_len
[  290.710348][T14796] netlink: 'syz.3.2539': attribute type 1 has an invalid length.
[  290.776878][ T5933] net_ratelimit: 4 callbacks suppressed
[  290.776895][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.935237][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.223571][T14822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2550'.
[  291.236217][T14822] netlink: 'syz.0.2550': attribute type 12 has an invalid length.
[  291.244756][T14822] netlink: 'syz.0.2550': attribute type 29 has an invalid length.
[  291.252640][T14822] netlink: 'syz.0.2550': attribute type 2 has an invalid length.
[  291.414585][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.715384][T14847] team0: Caught tx_queue_len zero misconfig
[  291.757472][T14852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.974970][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.997512][T14865] 8021q: adding VLAN 0 to HW filter on device bond7
[  292.013487][T14873] netlink: 'syz.2.2566': attribute type 1 has an invalid length.
[  292.091658][T14865] 8021q: adding VLAN 0 to HW filter on device bond7
[  292.131329][T14865] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  292.156995][T14865] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  292.503824][T14907] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[  292.535582][T14907] netlink: 'syz.0.2576': attribute type 10 has an invalid length.
[  292.589540][T14907] 8021q: adding VLAN 0 to HW filter on device team0
[  292.606632][T14907] team_slave_0: entered promiscuous mode
[  292.612487][T14907] team_slave_1: entered promiscuous mode
[  292.623640][T14907] bond0: (slave team0): Enslaving as an active interface with an up link
[  292.804406][T14927] netlink: 'syz.1.2584': attribute type 1 has an invalid length.
[  292.869855][T14927] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  292.883038][T14927] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  292.894851][T14927] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  292.939044][T14934] bond7: (slave vcan0): The slave device specified does not support setting the MAC address
[  292.953242][T14934] bond7: (slave vcan0): making interface the new active one
[  292.961468][T14934] bond7: (slave vcan0): Enslaving as an active interface with an up link
[  292.971772][T14936] tipc: Resetting bearer <eth:syzkaller0>
[  293.016516][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.036913][T14943] syzkaller0: left promiscuous mode
[  293.053446][T14943] syzkaller0: left allmulticast mode
[  293.112510][T14946] netlink: 'syz.3.2589': attribute type 2 has an invalid length.
[  293.351355][T14959] __nla_validate_parse: 15 callbacks suppressed
[  293.351372][T14959] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2594'.
[  293.758989][T14936] tipc: Resetting bearer <eth:syzkaller0>
[  293.775060][T14983] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2600'.
[  293.795917][T14983] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2600'.
[  293.824597][T14982] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2599'.
[  293.854731][ T9019] tipc: Resetting bearer <eth:syzkaller0>
[  294.004677][T14994] xt_CONNSECMARK: invalid mode: 0
[  294.057086][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.153325][T15009] netlink: zone id is out of range
[  294.177042][T15009] netlink: zone id is out of range
[  294.178651][T15006] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  294.185651][T15009] netlink: zone id is out of range
[  294.320753][T15013] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2608'.
[  294.700857][T15034] x_tables: duplicate underflow at hook 3
[  294.707929][T15034] set match dimension is over the limit!
[  294.771744][T15038] siw: device registration error -23
[  294.786537][T15038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2616'.
[  294.943577][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'.
[  295.061769][T15054] syzkaller0: entered promiscuous mode
[  295.070225][T15056] FAULT_INJECTION: forcing a failure.
[  295.070225][T15056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.071487][T15054] syzkaller0: entered allmulticast mode
[  295.101351][T15054] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2623'.
[  295.111727][T15056] CPU: 1 UID: 0 PID: 15056 Comm: syz.1.2624 Not tainted syzkaller #0 PREEMPT(full) 
[  295.111749][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.111759][T15056] Call Trace:
[  295.111765][T15056]  <TASK>
[  295.111772][T15056]  dump_stack_lvl+0xe8/0x150
[  295.111799][T15056]  should_fail_ex+0x412/0x560
[  295.111826][T15056]  _copy_from_user+0x2d/0xb0
[  295.111844][T15056]  ___sys_sendmsg+0x1c6/0x360
[  295.111865][T15056]  ? __lock_acquire+0x6b5/0x2cf0
[  295.111887][T15056]  ? __pfx____sys_sendmsg+0x10/0x10
[  295.111908][T15056]  ? kstrtouint+0x6e/0xe0
[  295.111951][T15056]  ? __fget_files+0x2a/0x420
[  295.111967][T15056]  ? __fget_files+0x3a0/0x420
[  295.111993][T15056]  __sys_sendmmsg+0x27c/0x4e0
[  295.112019][T15056]  ? __pfx___sys_sendmmsg+0x10/0x10
[  295.112037][T15056]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  295.112078][T15056]  ? ksys_write+0x242/0x270
[  295.112100][T15056]  ? __pfx_ksys_write+0x10/0x10
[  295.112124][T15056]  __x64_sys_sendmmsg+0xa0/0xc0
[  295.112145][T15056]  do_syscall_64+0x14d/0xf80
[  295.112173][T15056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.112188][T15056]  ? trace_irq_disable+0x37/0x100
[  295.112206][T15056]  ? clear_bhb_loop+0x40/0x90
[  295.112225][T15056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.112240][T15056] RIP: 0033:0x7ffa3119c629
[  295.112256][T15056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.112270][T15056] RSP: 002b:00007ffa31f85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  295.112288][T15056] RAX: ffffffffffffffda RBX: 00007ffa31415fa0 RCX: 00007ffa3119c629
[  295.112300][T15056] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  295.112312][T15056] RBP: 00007ffa31f85090 R08: 0000000000000000 R09: 0000000000000000
[  295.112323][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.112333][T15056] R13: 00007ffa31416038 R14: 00007ffa31415fa0 R15: 00007ffccea3cbf8
[  295.112362][T15056]  </TASK>
[  295.525059][T15075] syzkaller0: entered promiscuous mode
[  295.545930][T15075] syzkaller0: entered allmulticast mode
[  295.557419][T15082] validate_nla: 2 callbacks suppressed
[  295.557435][T15082] netlink: 'syz.0.2631': attribute type 39 has an invalid length.
[  295.570902][T15076] ip6gre0: entered promiscuous mode
[  295.578174][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'.
[  295.696593][T15087] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2633'.
[  296.138706][T13960] net_ratelimit: 18 callbacks suppressed
[  296.138724][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.478476][T15138] netlink: 'syz.0.2647': attribute type 13 has an invalid length.
[  296.553303][T15141] netlink: 'syz.0.2647': attribute type 16 has an invalid length.
[  296.587871][T15141] netlink: 'syz.0.2647': attribute type 17 has an invalid length.
[  296.639819][T15141] lo: left promiscuous mode
[  296.722800][T15141] bridge0: port 3(dummy0) entered disabled state
[  296.730271][T15156] ieee802154 phy1 wpan1: encryption failed: -22
[  296.766233][T15141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  296.802851][T15153] lo: entered allmulticast mode
[  296.805068][T15165] netlink: 'syz.1.2654': attribute type 10 has an invalid length.
[  296.823664][T15153] lo: left allmulticast mode
[  296.862019][T15165] veth0_vlan: left promiscuous mode
[  296.901576][T15165] veth0_vlan: entered promiscuous mode
[  296.924622][T15165] team0: Device veth0_vlan failed to register rx_handler
[  297.082631][T15187] openvswitch: netlink: Flow actions attr not present in new flow.
[  297.199866][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.494983][T13959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.558578][T15213] netlink: 'syz.3.2663': attribute type 3 has an invalid length.
[  297.747717][T15225] netlink: Unknown conntrack attr (type=2304, max=9)
[  297.763041][T15227] openvswitch: netlink: Unknown nsh attribute 0
[  297.777097][T15229] netlink: 'syz.0.2669': attribute type 3 has an invalid length.
[  297.956895][T15247] netlink: 'syz.1.2674': attribute type 1 has an invalid length.
[  298.200201][T15246] ip6gre1: entered allmulticast mode
[  298.214614][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.225227][T15258] netlink: 'syz.4.2676': attribute type 1 has an invalid length.
[  298.505825][T15276] __nla_validate_parse: 32 callbacks suppressed
[  298.505843][T15276] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2685'.
[  298.581237][T15280] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  298.656171][T15280] netlink: 'syz.1.2687': attribute type 15 has an invalid length.
[  298.907890][T15305] FAULT_INJECTION: forcing a failure.
[  298.907890][T15305] name failslab, interval 1, probability 0, space 0, times 0
[  298.944078][T15305] CPU: 1 UID: 0 PID: 15305 Comm: syz.4.2694 Not tainted syzkaller #0 PREEMPT(full) 
[  298.944103][T15305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  298.944114][T15305] Call Trace:
[  298.944120][T15305]  <TASK>
[  298.944128][T15305]  dump_stack_lvl+0xe8/0x150
[  298.944155][T15305]  should_fail_ex+0x412/0x560
[  298.944183][T15305]  should_failslab+0xa8/0x100
[  298.944205][T15305]  ? skb_clone+0x212/0x3a0
[  298.944226][T15305]  kmem_cache_alloc_noprof+0x87/0x650
[  298.944245][T15305]  ? __netlink_lookup+0xc6/0x8b0
[  298.944270][T15305]  skb_clone+0x212/0x3a0
[  298.944292][T15305]  __netlink_deliver_tap+0x404/0x850
[  298.944321][T15305]  ? netlink_deliver_tap+0x2e/0x1b0
[  298.944340][T15305]  netlink_deliver_tap+0x19c/0x1b0
[  298.944359][T15305]  netlink_unicast+0x7e3/0x9b0
[  298.944390][T15305]  ? __pfx_netlink_unicast+0x10/0x10
[  298.944415][T15305]  ? netlink_sendmsg+0x650/0xb40
[  298.944430][T15305]  ? skb_put+0x11b/0x210
[  298.944452][T15305]  netlink_sendmsg+0x813/0xb40
[  298.944477][T15305]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.944497][T15305]  ? aa_sock_msg_perm+0xf1/0x1b0
[  298.944520][T15305]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  298.944542][T15305]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.944558][T15305]  ____sys_sendmsg+0xa68/0xad0
[  298.944578][T15305]  ? __might_fault+0xaf/0x130
[  298.944604][T15305]  ? __pfx_____sys_sendmsg+0x10/0x10
[  298.944630][T15305]  ? import_iovec+0x73/0xa0
[  298.944650][T15305]  ___sys_sendmsg+0x2a5/0x360
[  298.944668][T15305]  ? __lock_acquire+0x6b5/0x2cf0
[  298.944689][T15305]  ? __pfx____sys_sendmsg+0x10/0x10
[  298.944714][T15305]  ? kstrtouint+0x6e/0xe0
[  298.944759][T15305]  ? __fget_files+0x2a/0x420
[  298.944774][T15305]  ? __fget_files+0x3a0/0x420
[  298.944799][T15305]  __sys_sendmmsg+0x27c/0x4e0
[  298.944829][T15305]  ? __pfx___sys_sendmmsg+0x10/0x10
[  298.944846][T15305]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  298.944888][T15305]  ? ksys_write+0x242/0x270
[  298.944910][T15305]  ? __pfx_ksys_write+0x10/0x10
[  298.944935][T15305]  __x64_sys_sendmmsg+0xa0/0xc0
[  298.944957][T15305]  do_syscall_64+0x14d/0xf80
[  298.944977][T15305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.944992][T15305]  ? trace_irq_disable+0x37/0x100
[  298.945010][T15305]  ? clear_bhb_loop+0x40/0x90
[  298.945034][T15305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.945050][T15305] RIP: 0033:0x7fc36999c629
[  298.945065][T15305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.945079][T15305] RSP: 002b:00007fc36a865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  298.945098][T15305] RAX: ffffffffffffffda RBX: 00007fc369c15fa0 RCX: 00007fc36999c629
[  298.945110][T15305] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  298.945121][T15305] RBP: 00007fc36a865090 R08: 0000000000000000 R09: 0000000000000000
[  298.945132][T15305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.945142][T15305] R13: 00007fc369c16038 R14: 00007fc369c15fa0 R15: 00007ffd84e8bee8
[  298.945172][T15305]  </TASK>
[  298.966952][T15308] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  299.185142][T15324] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2698'.
[  299.282318][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'.
[  299.287502][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.314608][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'.
[  299.380501][T15331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2702'.
[  299.413595][T15331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2702'.
[  299.619232][T15348] veth0: Caught tx_queue_len zero misconfig
[  299.632019][T15348] macvtap0: refused to change device tx_queue_len
[  299.644200][T15348] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2707'.
[  299.747736][T15362] FAULT_INJECTION: forcing a failure.
[  299.747736][T15362] name failslab, interval 1, probability 0, space 0, times 0
[  299.761989][T15344] IPVS: persistence engine module ip_vs_pe_�
 not found
[  299.779388][T15362] CPU: 1 UID: 0 PID: 15362 Comm: syz.0.2710 Not tainted syzkaller #0 PREEMPT(full) 
[  299.779412][T15362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  299.779422][T15362] Call Trace:
[  299.779428][T15362]  <TASK>
[  299.779435][T15362]  dump_stack_lvl+0xe8/0x150
[  299.779461][T15362]  should_fail_ex+0x412/0x560
[  299.779488][T15362]  should_failslab+0xa8/0x100
[  299.779512][T15362]  __kmalloc_noprof+0xe8/0x760
[  299.779532][T15362]  ? u32_change+0x12e0/0x2720
[  299.779552][T15362]  u32_change+0x12e0/0x2720
[  299.779571][T15362]  ? tc_new_tfilter+0x8a0/0x1630
[  299.779589][T15362]  ? __pfx_u32_change+0x10/0x10
[  299.779602][T15362]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  299.779630][T15362]  ? lockdep_rtnl_is_held+0x26/0x40
[  299.779646][T15362]  ? u32_lookup_ht+0x1b7/0x1d0
[  299.779665][T15362]  tc_new_tfilter+0xe1c/0x1630
[  299.779699][T15362]  ? __pfx_tc_new_tfilter+0x10/0x10
[  299.779725][T15362]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  299.779750][T15362]  ? __pfx_tc_new_tfilter+0x10/0x10
[  299.779774][T15362]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  299.779790][T15362]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  299.779802][T15362]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  299.779814][T15362]  ? ref_tracker_free+0x693/0x840
[  299.779830][T15362]  ? __copy_skb_header+0xa3/0x4a0
[  299.779847][T15362]  ? __pfx_ref_tracker_free+0x10/0x10
[  299.779872][T15362]  netlink_rcv_skb+0x232/0x4b0
[  299.779885][T15362]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  299.779900][T15362]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  299.779921][T15362]  ? netlink_deliver_tap+0x2e/0x1b0
[  299.779940][T15362]  netlink_unicast+0x80f/0x9b0
[  299.779964][T15362]  ? __pfx_netlink_unicast+0x10/0x10
[  299.779982][T15362]  ? netlink_sendmsg+0x650/0xb40
[  299.779993][T15362]  ? skb_put+0x11b/0x210
[  299.780010][T15362]  netlink_sendmsg+0x813/0xb40
[  299.780030][T15362]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.780046][T15362]  ? aa_sock_msg_perm+0xf1/0x1b0
[  299.780063][T15362]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.780083][T15362]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.780094][T15362]  ____sys_sendmsg+0xa68/0xad0
[  299.780110][T15362]  ? __might_fault+0xaf/0x130
[  299.780129][T15362]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.780151][T15362]  ? import_iovec+0x73/0xa0
[  299.780167][T15362]  ___sys_sendmsg+0x2a5/0x360
[  299.780181][T15362]  ? __lock_acquire+0x6b5/0x2cf0
[  299.780198][T15362]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.780218][T15362]  ? kstrtouint+0x6e/0xe0
[  299.780253][T15362]  ? __fget_files+0x2a/0x420
[  299.780265][T15362]  ? __fget_files+0x3a0/0x420
[  299.780285][T15362]  __sys_sendmmsg+0x27c/0x4e0
[  299.780305][T15362]  ? __pfx___sys_sendmmsg+0x10/0x10
[  299.780318][T15362]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  299.780353][T15362]  ? ksys_write+0x242/0x270
[  299.780370][T15362]  ? __pfx_ksys_write+0x10/0x10
[  299.780390][T15362]  __x64_sys_sendmmsg+0xa0/0xc0
[  299.780407][T15362]  do_syscall_64+0x14d/0xf80
[  299.780422][T15362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.780435][T15362]  ? trace_irq_disable+0x37/0x100
[  299.780449][T15362]  ? clear_bhb_loop+0x40/0x90
[  299.780465][T15362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.780477][T15362] RIP: 0033:0x7f70ad19c629
[  299.780490][T15362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.780500][T15362] RSP: 002b:00007f70adf91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  299.780516][T15362] RAX: ffffffffffffffda RBX: 00007f70ad415fa0 RCX: 00007f70ad19c629
[  299.780528][T15362] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  299.780537][T15362] RBP: 00007f70adf91090 R08: 0000000000000000 R09: 0000000000000000
[  299.780545][T15362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.780553][T15362] R13: 00007f70ad416038 R14: 00007f70ad415fa0 R15: 00007ffd2ebd0ea8
[  299.780575][T15362]  </TASK>
[  300.227477][T15353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.532970][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'.
[  300.560145][T15378] bond8: invalid ARP target 0.0.0.0 specified for addition
[  300.567607][T15378] bond8: option arp_ip_target: invalid value (0)
[  300.579407][T15378] bond8 (unregistering): Released all slaves
[  300.615440][T15388] syzkaller1: left promiscuous mode
[  300.620748][T15388] syzkaller1: left allmulticast mode
[  300.888309][T15408] validate_nla: 4 callbacks suppressed
[  300.888328][T15408] netlink: 'syz.3.2721': attribute type 22 has an invalid length.
[  300.903266][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'.
[  300.912714][T15408] netlink: 'syz.3.2721': attribute type 22 has an invalid length.
[  300.921173][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'.
[  300.979110][T15412] netlink: 'syz.1.2725': attribute type 1 has an invalid length.
[  301.010417][T15412] bond9: entered promiscuous mode
[  301.017077][T15412] 8021q: adding VLAN 0 to HW filter on device bond9
[  301.053628][T15414] bond9: (slave bridge6): making interface the new active one
[  301.105361][T15414] bridge6: entered promiscuous mode
[  301.120797][T15414] bond9: (slave bridge6): Enslaving as an active interface with an up link
[  301.286497][T15425] veth7: entered promiscuous mode
[  301.291650][T15425] veth7: entered allmulticast mode
[  301.325848][T15427] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  301.340159][ T5895] net_ratelimit: 4 callbacks suppressed
[  301.340175][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.744294][T15465] FAULT_INJECTION: forcing a failure.
[  301.744294][T15465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.764180][T15465] CPU: 1 UID: 0 PID: 15465 Comm: syz.1.2743 Not tainted syzkaller #0 PREEMPT(full) 
[  301.764204][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  301.764214][T15465] Call Trace:
[  301.764220][T15465]  <TASK>
[  301.764227][T15465]  dump_stack_lvl+0xe8/0x150
[  301.764252][T15465]  should_fail_ex+0x412/0x560
[  301.764279][T15465]  _copy_to_user+0x31/0xb0
[  301.764298][T15465]  simple_read_from_buffer+0xe1/0x170
[  301.764326][T15465]  proc_fail_nth_read+0x1bb/0x230
[  301.764351][T15465]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  301.764374][T15465]  ? rw_verify_area+0x2a6/0x4d0
[  301.764392][T15465]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  301.764413][T15465]  vfs_read+0x20c/0xa70
[  301.764430][T15465]  ? fdget_pos+0x246/0x320
[  301.764451][T15465]  ? __pfx___mutex_lock+0x10/0x10
[  301.764472][T15465]  ? __pfx_vfs_read+0x10/0x10
[  301.764491][T15465]  ? __fget_files+0x2a/0x420
[  301.764512][T15465]  ? __fget_files+0x3a0/0x420
[  301.764527][T15465]  ? __fget_files+0x2a/0x420
[  301.764551][T15465]  ksys_read+0x150/0x270
[  301.764574][T15465]  ? __pfx_ksys_read+0x10/0x10
[  301.764604][T15465]  do_syscall_64+0x14d/0xf80
[  301.764625][T15465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.764651][T15465]  ? trace_irq_disable+0x37/0x100
[  301.764669][T15465]  ? clear_bhb_loop+0x40/0x90
[  301.764689][T15465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.764705][T15465] RIP: 0033:0x7ffa3115cece
[  301.764721][T15465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  301.764734][T15465] RSP: 002b:00007ffa31f84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  301.764753][T15465] RAX: ffffffffffffffda RBX: 00007ffa31f856c0 RCX: 00007ffa3115cece
[  301.764765][T15465] RDX: 000000000000000f RSI: 00007ffa31f850a0 RDI: 0000000000000005
[  301.764775][T15465] RBP: 00007ffa31f85090 R08: 0000000000000000 R09: 0000000000000000
[  301.764786][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.764796][T15465] R13: 00007ffa31416038 R14: 00007ffa31415fa0 R15: 00007ffccea3cbf8
[  301.764824][T15465]  </TASK>
[  302.085754][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.181697][T15480] netlink: 'syz.4.2745': attribute type 10 has an invalid length.
[  302.288348][T15480] veth0_vlan: left promiscuous mode
[  302.304993][T15480] veth0_vlan: entered promiscuous mode
[  302.320873][T15480] team0: Device veth0_vlan failed to register rx_handler
[  302.375837][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.376173][T15497] netlink: 'syz.1.2753': attribute type 1 has an invalid length.
[  302.488916][T15505] bond0: left promiscuous mode
[  302.489168][ T9019] bond0: (slave bond_slave_0): interface is now down
[  302.501339][ T9019] bond0: (slave bond_slave_1): interface is now down
[  302.508083][T15505] bond_slave_0: left promiscuous mode
[  302.508365][T15505] bond_slave_1: left promiscuous mode
[  302.835047][T15530] dvmrp0: entered allmulticast mode
[  303.014189][T13959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.204280][T15552] 8021q: adding VLAN 0 to HW filter on device bond15
[  303.414799][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.425256][T15575] bond0: Caught tx_queue_len zero misconfig
[  303.574549][T13959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.604014][T15580] __nla_validate_parse: 14 callbacks suppressed
[  303.604033][T15580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2775'.
[  303.703775][T15583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2775'.
[  303.881372][T15599] bond0: (slave bond_slave_0): Releasing backup interface
[  304.010973][T15599] bond0: (slave bond_slave_1): Releasing backup interface
[  304.034541][T15599] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.047552][T15599] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.069581][T15599] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.087263][T15599] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.128675][T15599] bond1: (slave geneve2): Releasing active interface
[  304.205825][T13959] syz1: Port: 1 Link DOWN
[  304.456420][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.502418][T15636] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2789'.
[  304.608084][T15644] netlink: 'syz.4.2793': attribute type 11 has an invalid length.
[  304.681465][T15646] netlink: 'syz.3.2794': attribute type 1 has an invalid length.
[  304.797373][T15653] syzkaller0: entered promiscuous mode
[  304.823223][T15653] syzkaller0: entered allmulticast mode
[  304.853612][T15660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2797'.
[  304.961814][T15666] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2800'.
[  305.024497][T15663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2799'.
[  305.081082][T15675] netlink: 'syz.3.2805': attribute type 21 has an invalid length.
[  305.095295][ T9012] bond0: (slave bond_slave_0): interface is now down
[  305.103274][ T9012] bond0: (slave bond_slave_1): interface is now down
[  305.113835][T15678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.204417][T15687] netlink: 'syz.4.2804': attribute type 46 has an invalid length.
[  305.269814][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'.
[  305.354333][T15687] netlink: 'syz.4.2804': attribute type 9 has an invalid length.
[  305.395424][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2808'.
[  305.499587][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.740891][T15739] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  305.887426][T15743] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2818'.
[  306.226642][T15757] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  306.272687][T15759] netlink: 'syz.2.2824': attribute type 6 has an invalid length.
[  306.355579][T15766] xt_cluster: node mask cannot exceed total number of nodes
[  306.376831][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2827'.
[  306.416482][T15768] x_tables: unsorted underflow at hook 4
[  306.428970][T15770] can: request_module (can-proto-0) failed.
[  306.464358][T15770] netlink: 'syz.2.2827': attribute type 5 has an invalid length.
[  307.138619][T15821] batadv_slave_0: Caught tx_queue_len zero misconfig
[  307.398731][T15833] syzkaller0: entered promiscuous mode
[  307.412349][T15833] syzkaller0: entered allmulticast mode
[  307.440712][ T9047] 0: reclassify loop, rule prio 0, protocol 800
[  307.456208][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.467166][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.484944][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.495957][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.510766][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.654662][ T9012] bond0: (slave bond_slave_0): interface is now down
[  307.672349][ T9012] bond0: (slave bond_slave_1): interface is now down
[  307.708134][ T9012] bond0: now running without any active interface!
[  307.935326][T15858] netlink: 'syz.0.2856': attribute type 1 has an invalid length.
[  308.001908][T15863] bond16: (slave gretap3): making interface the new active one
[  308.010606][T15863] bond16: (slave gretap3): Enslaving as an active interface with an up link
[  308.287987][T15840] chnl_net:caif_netlink_parms(): no params data found
[  308.472841][T15883] syzkaller1: entered promiscuous mode
[  308.489865][T15883] syzkaller1: entered allmulticast mode
[  308.505074][T15840] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.512382][T15840] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.519956][T15840] bridge_slave_0: entered allmulticast mode
[  308.527546][T15840] bridge_slave_0: entered promiscuous mode
[  308.537873][T15840] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.545150][T15840] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.553300][T15840] bridge_slave_1: entered allmulticast mode
[  308.561108][T15840] bridge_slave_1: entered promiscuous mode
[  308.624718][T15840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.640970][T15896] openvswitch: netlink: IP tunnel dst address not specified
[  308.663832][T15840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.737570][T15898] __nla_validate_parse: 77 callbacks suppressed
[  308.737589][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'.
[  308.779194][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'.
[  308.810956][T15840] team0: Port device team_slave_0 added
[  308.823873][T15840] team0: Port device team_slave_1 added
[  308.939440][ T9012] bridge_slave_1: left allmulticast mode
[  308.951920][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.956512][T15908] xt_CT: No such helper "snmp_trap"
[  308.974899][ T9012] bridge_slave_0: left promiscuous mode
[  308.993265][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.052233][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2872'.
[  309.115762][ T9012] bond1 (unregistering): (slave vti0): Releasing backup interface
[  309.123744][ T9012] vti0 (unregistering): left promiscuous mode
[  309.171364][ T9012] dvmrp1 (unregistering): left allmulticast mode
[  309.180231][ T9012] dvmrp0 (unregistering): left allmulticast mode
[  309.282642][T15923] netlink: 'syz.4.2873': attribute type 2 has an invalid length.
[  309.292095][T15923] netlink: 'syz.4.2873': attribute type 1 has an invalid length.
[  309.353661][T15924] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2873'.
[  309.528327][ T9012] bond9 (unregistering): (slave bridge6): Releasing backup interface
[  309.536686][ T9012] bridge6 (unregistering): left promiscuous mode
[  309.570574][ T9012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.580330][ T9012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.584334][ T5834] Bluetooth: hci5: command tx timeout
[  309.599478][ T9012] bond0 (unregistering): Released all slaves
[  309.609829][ T9012] bond1 (unregistering): Released all slaves
[  309.622381][ T9012] bond2 (unregistering): Released all slaves
[  309.639731][ T9012] bond3 (unregistering): Released all slaves
[  309.653036][ T9012] bond4 (unregistering): Released all slaves
[  309.667642][ T9012] bond5 (unregistering): Released all slaves
[  309.687559][ T9012] bond6 (unregistering): Released all slaves
[  309.702032][ T9012] bond7 (unregistering): (slave vcan0): Releasing backup interface
[  309.715308][ T9012] bond7 (unregistering): Released all slaves
[  309.727746][ T9012] bond8 (unregistering): Released all slaves
[  309.740840][ T9012] bond9 (unregistering): Released all slaves
[  309.753515][T15840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.761468][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.788241][T15840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.852112][T15840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.870958][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.924592][T15840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.239756][T15950] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2881'.
[  310.276449][T15840] hsr_slave_0: entered promiscuous mode
[  310.294758][T15840] hsr_slave_1: entered promiscuous mode
[  310.310636][T15840] debugfs: 'hsr0' already exists in 'hsr'
[  310.331253][T15840] Cannot create hsr debugfs directory
[  310.654732][T15978] geneve3: entered promiscuous mode
[  310.695084][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'.
[  310.781438][T15972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2886'.
[  310.824292][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2886'.
[  310.926458][T15994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2889'.
[  310.952926][T15998] netlink: 29 bytes leftover after parsing attributes in process `syz.4.2892'.
[  310.995848][T16002] pimreg3: entered allmulticast mode
[  311.393378][T16024] nftables ruleset with unbound chain
[  311.604736][T16023] syzkaller0: entered promiscuous mode
[  311.610243][T16023] syzkaller0: entered allmulticast mode
[  311.659082][ T5834] Bluetooth: hci5: command tx timeout
[  313.744925][ T5834] Bluetooth: hci5: command tx timeout
[  314.119030][ T9012] hsr_slave_0: left promiscuous mode
[  314.144791][ T9012] hsr_slave_1: left promiscuous mode
[  314.153529][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.163507][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.308098][ T9012] team0 (unregistering): Port device team_slave_1 removed
[  314.673885][T16071] __nla_validate_parse: 3 callbacks suppressed
[  314.673901][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2907'.
[  314.716495][T16066] veth0_vlan: entered allmulticast mode
[  314.723438][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2908'.
[  314.769359][T16073] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  315.285043][ T9012] IPVS: stop unused estimator thread 0...
[  315.452770][T16112] tipc: Resetting bearer <eth:syzkaller0>
[  315.471409][T16075] infiniband 
: set down
[  315.487063][T16111] tipc: Resetting bearer <eth:syzkaller0>
[  315.493747][ T9046] tipc: Resetting bearer <eth:syzkaller0>
[  315.507750][T15840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  315.510188][T16075] infiniband 
: added ipvlan0
[  315.521752][T16075] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  315.536614][T16075] infiniband 
: Couldn't open port 1
[  315.558006][T15840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  315.628935][T15840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  315.657736][T16075] RDS/IB: 
: added
[  315.661526][T16075] smc: adding ib device 
 with port count 1
[  315.672722][T15840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  315.689919][T16075] smc:    ib device 
 port 1 has no pnetid
[  315.816297][ T5834] Bluetooth: hci5: command tx timeout
[  316.012774][T15840] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.066305][T15840] 8021q: adding VLAN 0 to HW filter on device team0
[  316.086927][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2926'.
[  316.118342][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.125522][ T9012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.140177][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.147367][ T9012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.156711][T16152] x_tables: duplicate underflow at hook 1
[  316.261033][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2926'.
[  316.347643][T16161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2928'.
[  316.611846][T16169] netlink: 'syz.2.2931': attribute type 10 has an invalid length.
[  316.957743][T16186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2935'.
[  316.972120][T15840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.033219][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  317.121967][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'.
[  317.154904][T15840] veth0_vlan: entered promiscuous mode
[  317.176590][T15840] veth1_vlan: entered promiscuous mode
[  317.244405][T15840] veth0_macvtap: entered promiscuous mode
[  317.266856][T15840] veth1_macvtap: entered promiscuous mode
[  317.297403][T15840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.345327][T15840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.354553][T16196] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  317.380407][ T9019] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.402044][T16199] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2940'.
[  317.418335][ T9019] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.451712][T16194] netlink: 'syz.0.2938': attribute type 1 has an invalid length.
[  317.462834][ T9019] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.496216][ T9019] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.573267][T16194] 8021q: adding VLAN 0 to HW filter on device bond17
[  317.610949][T16196] bond17: (slave veth9): Enslaving as an active interface with a down link
[  317.646557][T16204] bond17: (slave veth0_to_bond): making interface the new active one
[  317.662565][T16204] veth0_to_bond: entered promiscuous mode
[  317.670815][T16204] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  317.686810][T16207] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  317.829811][ T9046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.844402][ T9046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.930349][ T9047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.942453][ T9047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.460015][T16256] openvswitch: netlink: VXLAN extension 78 out of range max 1
[  318.479574][T16250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2950'.
[  318.669378][T16262] bpq0: entered promiscuous mode
[  318.824833][T16268] �����(: renamed from veth1_to_hsr (while UP)
[  318.985378][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'.
[  318.996687][T16277] netlink: 'syz.1.2958': attribute type 1 has an invalid length.
[  319.120044][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.128639][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.140596][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.155047][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.162886][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  319.461213][ T9046] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.497172][ T9046] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.601498][ T9046] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.620554][ T9046] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.684818][ T9046] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.697959][ T9046] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.783600][ T9046] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.810299][ T9046] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.947853][T16297] netlink: 'syz.1.2964': attribute type 25 has an invalid length.
[  320.199318][T16316] __nla_validate_parse: 2 callbacks suppressed
[  320.199338][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2969'.
[  320.291122][T16320] netlink: 'syz.1.2970': attribute type 13 has an invalid length.
[  320.340532][T16320] veth0_macvtap: left promiscuous mode
[  320.347137][T16320] macvtap0: entered allmulticast mode
[  320.363174][T16320] macvtap0: refused to change device tx_queue_len
[  320.406018][T16316] netlink: 'syz.3.2969': attribute type 5 has an invalid length.
[  320.435956][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'.
[  320.481958][ T9046] team0: left allmulticast mode
[  320.494778][ T9046] team_slave_1: left allmulticast mode
[  320.511611][ T9046] batadv1: left allmulticast mode
[  320.530179][ T9046] team0: left promiscuous mode
[  320.547673][ T9046] team_slave_1: left promiscuous mode
[  320.553261][ T9046] batadv1: left promiscuous mode
[  320.568861][ T9046] bridge0: port 3(team0) entered disabled state
[  320.595488][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.626113][ T9046] bridge_slave_0: left promiscuous mode
[  320.631866][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.684530][ T9046] veth3: left allmulticast mode
[  320.689501][ T9046] veth3: left promiscuous mode
[  320.698348][ T9046] bridge2: port 1(veth3) entered disabled state
[  320.741029][T16342] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2973'.
[  320.753576][ T9046] veth0_to_bond: left allmulticast mode
[  320.777571][ T9046] veth0_to_bond: left promiscuous mode
[  320.783247][ T9046] bridge6: port 1(veth0_to_bond) entered disabled state
[  320.962385][T16355] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2974'.
[  321.240701][ T9046] bond6 (unregistering): (slave gretap2): Releasing backup interface
[  321.254134][ T5834] Bluetooth: hci3: command tx timeout
[  321.811644][ T9046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  321.822099][ T9046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  321.835035][ T9046] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  321.849874][ T9046] bond0 (unregistering): Released all slaves
[  321.859419][ T9046] bond1 (unregistering): Released all slaves
[  321.871920][ T9046] bond2 (unregistering): Released all slaves
[  321.887532][ T9046] bond3 (unregistering): Released all slaves
[  321.902042][ T9046] bond4 (unregistering): Released all slaves
[  321.915148][ T9046] bond5 (unregistering): (slave dummy0): Releasing backup interface
[  321.928229][ T9046] bond5 (unregistering): Released all slaves
[  321.941375][ T9046] bond6 (unregistering): (slave bond7): Releasing backup interface
[  321.954364][ T9046] bond6 (unregistering): Released all slaves
[  321.966763][ T9046] bond7 (unregistering): Released all slaves
[  321.979913][ T9046] bond8 (unregistering): Released all slaves
[  322.207816][ T9046] tipc: Disabling bearer <eth:syzkaller0>
[  322.240030][ T9046] tipc: Disabling bearer <udp:syz2>
[  322.257211][ T9046] tipc: Left network mode
[  322.502786][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'.
[  322.810306][T16428] syzkaller1: entered promiscuous mode
[  322.816003][T16428] syzkaller1: entered allmulticast mode
[  323.011567][T16279] chnl_net:caif_netlink_parms(): no params data found
[  323.334345][ T5834] Bluetooth: hci3: command 0x041b tx timeout
[  323.445233][T16279] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.456561][T16279] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.470859][T16279] bridge_slave_0: entered allmulticast mode
[  323.482602][T16279] bridge_slave_0: entered promiscuous mode
[  323.498914][T16279] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.507629][T16279] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.517016][T16279] bridge_slave_1: entered allmulticast mode
[  323.525807][T16279] bridge_slave_1: entered promiscuous mode
[  323.590619][T16462] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2
[  323.665890][T16465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2990'.
[  323.732152][T16279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.758386][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'.
[  323.786358][T16279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.814500][T16469] sctp: [Deprecated]: syz.1.2992 (pid 16469) Use of int in maxseg socket option.
[  323.814500][T16469] Use struct sctp_assoc_value instead
[  324.096707][T16485] atomic_op ffff88803436e198 conn xmit_atomic 0000000000000000
[  324.455838][T16483] 8021q: adding VLAN 0 to HW filter on device bond1
[  324.488858][T16495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2994'.
[  324.522107][ T9046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.541589][ T9046] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.558241][ T9046] batman_adv: batadv0: Interface deactivated: ipvlan2
[  324.588173][ T9046] batman_adv: batadv0: Removing interface: ipvlan2
[  324.610716][ T9046] veth1_macvtap: left promiscuous mode
[  324.616561][ T9046] veth0_macvtap: left promiscuous mode
[  324.778571][ T9046] team0 (unregistering): Port device batadv1 removed
[  324.857717][ T9046] team0 (unregistering): Port device team_slave_1 removed
[  325.026888][T16511] syz_tun: entered allmulticast mode
[  325.058863][T16279] team0: Port device team_slave_0 added
[  325.079092][T16279] team0: Port device team_slave_1 added
[  325.101568][T16516] syz_tun: left allmulticast mode
[  325.181577][T16279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.215291][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.252155][T16279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.265174][T16533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2999'.
[  325.276396][T16279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.283364][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.311147][T16279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.323013][T16534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2999'.
[  325.416737][ T5819] Bluetooth: hci3: command 0x041b tx timeout
[  325.462518][T16279] hsr_slave_0: entered promiscuous mode
[  325.469706][T16279] hsr_slave_1: entered promiscuous mode
[  325.476416][T16279] debugfs: 'hsr0' already exists in 'hsr'
[  325.482217][T16279] Cannot create hsr debugfs directory
[  325.528587][T16538] netlink: 'syz.4.3002': attribute type 5 has an invalid length.
[  325.568720][ T9046] IPVS: stop unused estimator thread 0...
[  325.649368][T16541] openvswitch: netlink: Flow actions attr not present in new flow.
[  325.660459][T16548] openvswitch: netlink: Flow actions attr not present in new flow.
[  325.685478][T16540] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  325.792375][T16554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3007'.
[  325.930440][T16551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3006'.
[  325.946352][T16560] bond8 (unregistering): Released all slaves
[  325.992143][T16555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3006'.
[  326.011388][T16555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3006'.
[  326.043467][T16551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.295361][T16590] netlink: 'syz.4.3015': attribute type 7 has an invalid length.
[  326.382902][T16594] netlink: 'syz.0.3014': attribute type 13 has an invalid length.
[  326.630934][T16605] syzkaller0: entered promiscuous mode
[  326.640602][T16605] syzkaller0: entered allmulticast mode
[  326.642603][T16587] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3014'.
[  326.747878][T16606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3018'.
[  326.782275][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3018'.
[  326.907289][T16279] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  326.939982][T16279] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  327.006480][T16623] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3020'.
[  327.048171][T16623] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[  327.084292][T16279] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  327.110696][T16279] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  327.256067][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.365992][T16650] syzkaller0: entered promiscuous mode
[  327.372079][T16650] syzkaller0: entered allmulticast mode
[  327.402344][T16279] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.466276][T16279] 8021q: adding VLAN 0 to HW filter on device team0
[  327.494310][ T5819] Bluetooth: hci3: command 0x041b tx timeout
[  327.618593][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.625802][ T9046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.699782][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.706996][ T9046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.147445][T16687] bond8: entered allmulticast mode
[  328.505262][T16279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.685175][T16279] veth0_vlan: entered promiscuous mode
[  328.743062][T16279] veth1_vlan: entered promiscuous mode
[  328.836586][ T9022] veth0_to_bond: left promiscuous mode
[  328.839906][T16733] netlink: 'syz.1.3043': attribute type 1 has an invalid length.
[  328.892779][T16733] bond2: entered promiscuous mode
[  328.901733][T16733] 8021q: adding VLAN 0 to HW filter on device bond2
[  328.915212][T16279] veth0_macvtap: entered promiscuous mode
[  328.926176][T16279] veth1_macvtap: entered promiscuous mode
[  328.952924][T16733] 8021q: adding VLAN 0 to HW filter on device bond2
[  328.963028][T16733] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  328.975821][T16733] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  328.989622][T16733] bond2: (slave vti0): making interface the new active one
[  328.997853][T16733] vti0: entered promiscuous mode
[  329.006324][T16733] bond2: (slave vti0): Enslaving as an active interface with an up link
[  329.023729][T16739] tipc: Enabling <eth:lo> not permitted
[  329.030663][T16739] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  329.047575][T16279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.059924][T16279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.099136][ T9022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.129354][ T9022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.188921][ T9047] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.229104][ T9047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.249050][ T9039] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  329.262532][ T9039] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  329.576052][ T5819] Bluetooth: hci3: command 0x041b tx timeout
[  329.598595][T16774] syzkaller0: entered promiscuous mode
[  329.604545][T16774] syzkaller0: entered allmulticast mode
[  329.613253][T16777] netlink: 'syz.1.3049': attribute type 12 has an invalid length.
[  331.566548][T16826] __nla_validate_parse: 4 callbacks suppressed
[  331.566561][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'.
[  331.582907][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'.
[  331.709527][T16832] netlink: 'syz.1.3057': attribute type 1 has an invalid length.
[  332.106797][T16744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  332.245164][ T9039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.270121][ T9039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.344153][T16853] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3061'.
[  332.358495][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'.
[  332.467924][ T9039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.476723][ T9039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.489942][T16865] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.690030][T16877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2956'.
[  332.720961][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3070'.
[  332.765741][T16883] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3070'.
[  332.837545][T16898] netlink: 'syz.1.3071': attribute type 1 has an invalid length.
[  332.866571][T16898] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  332.952656][T16908] netlink: 'syz.4.3075': attribute type 3 has an invalid length.
[  333.058652][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'.
[  333.149190][T16919] netlink: 'syz.1.3076': attribute type 4 has an invalid length.
[  333.205877][T16923] netlink: 'syz.1.3079': attribute type 1 has an invalid length.
[  333.221985][T16923] netlink: 'syz.1.3079': attribute type 3 has an invalid length.
[  333.243318][T16923] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3079'.
[  333.253103][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  333.282675][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  333.291050][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  333.302292][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  333.310530][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  333.514809][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3082'.
[  333.564383][T16946] netlink: 'syz.4.3083': attribute type 1 has an invalid length.
[  333.696498][T16946] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  333.697448][T16945] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  333.744939][T16950] tap0: tun_chr_ioctl cmd 1074025676
[  333.764936][T16950] tap0: owner set to 0
[  334.000726][T16966] netlink: 'syz.4.3089': attribute type 3 has an invalid length.
[  334.102470][T16972] x_tables: duplicate underflow at hook 2
[  334.109258][T16976] IPv6: NLM_F_CREATE should be specified when creating new route
[  334.641516][T16925] chnl_net:caif_netlink_parms(): no params data found
[  334.793323][T17015] bpq0: left promiscuous mode
[  334.916840][T16925] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.955656][T16925] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.962906][T16925] bridge_slave_0: entered allmulticast mode
[  334.981447][T16925] bridge_slave_0: entered promiscuous mode
[  334.998872][T17042] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  335.028524][T17042] bond1: (slave lo): Enslaving as an active interface with an up link
[  335.044646][T17042] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  335.067200][T16925] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.075983][T16925] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.083298][T16925] bridge_slave_1: entered allmulticast mode
[  335.091637][T16925] bridge_slave_1: entered promiscuous mode
[  335.128282][T17051] netlink: 'syz.3.3114': attribute type 9 has an invalid length.
[  335.296457][T17049] netlink: 'syz.3.3114': attribute type 12 has an invalid length.
[  335.334917][ T5819] Bluetooth: hci4: command tx timeout
[  335.410305][T16925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.447859][T16925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.492131][T17060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  335.509952][T17060] openvswitch: netlink: Missing valid actions attribute.
[  335.518589][T17060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.530079][T17060] veth1_to_batadv: mtu less than device minimum
[  335.692389][T16925] team0: Port device team_slave_0 added
[  335.706138][T16925] team0: Port device team_slave_1 added
[  335.748607][T16925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.762108][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.795215][T16925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.810857][T16925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.818441][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.846502][T16925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.959739][T16925] hsr_slave_0: entered promiscuous mode
[  335.976343][T16925] hsr_slave_1: entered promiscuous mode
[  335.990136][T16925] debugfs: 'hsr0' already exists in 'hsr'
[  336.003337][T16925] Cannot create hsr debugfs directory
[  336.411799][T16925] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  336.428041][T16925] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 59724 - 0
[  336.452125][T16925] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  336.506713][T16925] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  336.521915][T16925] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 59724 - 0
[  336.541545][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88801d319c00: rx timeout, send abort
[  336.550906][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801d319c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  336.609803][T17117] ieee802154 phy1 wpan1: encryption failed: -22
[  336.725433][T16925] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  336.782742][T17116] veth0_to_bond: entered allmulticast mode
[  336.851075][T16925] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  336.869292][T17119] __nla_validate_parse: 10 callbacks suppressed
[  336.869309][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3131'.
[  336.888331][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'.
[  336.899340][T16925] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 59724 - 0
[  336.917982][T16925] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  337.066848][T16925] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  337.077156][T16925] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 59724 - 0
[  337.087556][T16925] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  337.192410][T17139] syzkaller0: entered promiscuous mode
[  337.205534][T17139] syzkaller0: entered allmulticast mode
[  337.331206][T17136] netlink: 'syz.4.3135': attribute type 24 has an invalid length.
[  337.426329][ T5834] Bluetooth: hci4: command tx timeout
[  338.607608][T16925] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  338.637901][T16925] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  338.712089][T16925] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  338.729488][T16925] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  338.788233][T17180] netlink: 'syz.1.3148': attribute type 9 has an invalid length.
[  338.801650][T17172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3145'.
[  338.886640][T17196] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3147'.
[  338.970457][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3151'.
[  338.981661][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3151'.
[  339.236533][T16925] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.287550][T16925] 8021q: adding VLAN 0 to HW filter on device team0
[  339.367233][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.374427][ T9022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.415176][T17233] netlink: 'syz.1.3159': attribute type 12 has an invalid length.
[  339.491338][T17233] bond3: option primary_reselect: invalid value (255)
[  339.498349][ T5834] Bluetooth: hci4: command 0x040f tx timeout
[  339.508467][T17233] bond3 (unregistering): Released all slaves
[  339.551210][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.558419][ T9039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.729080][T13957] 
: Port: 1 Link ACTIVE
[  339.837088][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3165'.
[  340.162097][T17278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3170'.
[  340.176644][T16925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.198346][T17281] netlink: 'syz.1.3172': attribute type 1 has an invalid length.
[  340.253407][T17281] bond3: entered promiscuous mode
[  340.254463][T17286] netlink: 'syz.2.3173': attribute type 1 has an invalid length.
[  340.259178][T17281] 8021q: adding VLAN 0 to HW filter on device bond3
[  340.364449][T17281] bond3: (slave bridge4): making interface the new active one
[  340.372524][T17281] bridge4: entered promiscuous mode
[  340.380098][T17281] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  340.392983][T16925] veth0_vlan: entered promiscuous mode
[  340.407818][T17296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.419677][T17286] veth3: entered promiscuous mode
[  340.441682][T17291] syzkaller0: entered promiscuous mode
[  340.447691][T17291] syzkaller0: entered allmulticast mode
[  340.507338][T16925] veth1_vlan: entered promiscuous mode
[  340.558073][T16925] veth0_macvtap: entered promiscuous mode
[  340.570865][T16925] veth1_macvtap: entered promiscuous mode
[  340.604953][T16925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.626042][T16925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.650269][ T9047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.679608][ T9047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.740241][ T9047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.761571][ T9047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.843834][T17315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3180'.
[  340.927833][ T9039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.946075][ T9039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.084954][ T9019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.093553][ T9019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.201780][T17325] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3184'.
[  341.216607][  T795] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  341.415614][T17333] Bluetooth: MGMT ver 1.23
[  341.574344][ T5819] Bluetooth: hci4: command 0x040f tx timeout
[  341.653077][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.662547][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.671157][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.681493][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.690500][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  341.779350][T17344] bond0: Device is already in use.
[  342.010994][T17363] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  342.198815][T17372] __nla_validate_parse: 2 callbacks suppressed
[  342.198834][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'.
[  342.244203][T17372] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  342.327845][T17383] netlink: 'syz.0.3201': attribute type 17 has an invalid length.
[  342.354471][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'.
[  342.384527][T17383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3201'.
[  342.499211][T17393] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3204'.
[  342.635449][T17400] netlink: 'syz.0.3206': attribute type 4 has an invalid length.
[  342.728939][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'.
[  342.999264][T17420] bond4: (slave bond_slave_1): Device is not our slave
[  343.009778][T17420] bond4: option active_slave: invalid value (bond_slave_1)
[  343.019590][T17420] bond4 (unregistering): Released all slaves
[  343.205401][T17346] chnl_net:caif_netlink_parms(): no params data found
[  343.442655][T17454] sctp: [Deprecated]: syz.0.3221 (pid 17454) Use of int in maxseg socket option.
[  343.442655][T17454] Use struct sctp_assoc_value instead
[  343.453164][T17346] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.503076][T17346] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.511961][T17346] bridge_slave_0: entered allmulticast mode
[  343.520211][T17346] bridge_slave_0: entered promiscuous mode
[  343.538422][T17346] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.546808][T17346] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.554842][T17346] bridge_slave_1: entered allmulticast mode
[  343.564939][T17346] bridge_slave_1: entered promiscuous mode
[  343.565950][T17463] sctp: [Deprecated]: syz.0.3221 (pid 17463) Use of int in max_burst socket option deprecated.
[  343.565950][T17463] Use struct sctp_assoc_value instead
[  343.655690][ T5834] Bluetooth: hci4: command 0x040f tx timeout
[  343.707834][T17346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.722023][T17470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3223'.
[  343.734724][ T5834] Bluetooth: hci0: command tx timeout
[  343.741343][T17346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.802035][T17346] team0: Port device team_slave_0 added
[  343.812846][T17346] team0: Port device team_slave_1 added
[  343.856701][T17346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.863769][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.925137][T17346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.943191][T17346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.952990][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.986528][T17346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.990375][T17485] netlink: 'syz.2.3227': attribute type 1 has an invalid length.
[  344.040445][T17485] netlink: 'syz.2.3227': attribute type 4 has an invalid length.
[  344.073899][T17485] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.3227'.
[  344.118174][T17491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.159281][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'.
[  344.169343][T17346] hsr_slave_0: entered promiscuous mode
[  344.177210][T17346] hsr_slave_1: entered promiscuous mode
[  344.183557][T17346] debugfs: 'hsr0' already exists in 'hsr'
[  344.193715][T17346] Cannot create hsr debugfs directory
[  344.335915][T17504] netlink: 'syz.2.3231': attribute type 1 has an invalid length.
[  344.455880][T17513] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3235'.
[  344.502407][T17346] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.536551][T17346] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.658305][T17346] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.685630][T17346] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.769756][T17346] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.791676][T17346] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.835483][T17545] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3242'.
[  344.889126][T17545] bond4 (unregistering): Released all slaves
[  344.923411][T17346] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.933564][T17346] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.227507][T17346] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  345.267549][T17346] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  345.335420][T17346] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  345.384927][T17346] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  345.482085][T17593] netlink: 'syz.4.3254': attribute type 1 has an invalid length.
[  345.502034][T17594] netlink: 'syz.4.3254': attribute type 1 has an invalid length.
[  345.653811][T17346] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.717213][T17346] 8021q: adding VLAN 0 to HW filter on device team0
[  345.801538][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.808733][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.826523][ T5834] Bluetooth: hci0: command tx timeout
[  345.837971][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.845158][ T9046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.339750][T17647] syzkaller0: entered promiscuous mode
[  346.346136][T17647] syzkaller0: entered allmulticast mode
[  347.694522][T17346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.790331][T17346] veth0_vlan: entered promiscuous mode
[  347.819258][T17346] veth1_vlan: entered promiscuous mode
[  347.895447][ T5834] Bluetooth: hci0: command tx timeout
[  347.900004][T17346] veth0_macvtap: entered promiscuous mode
[  347.989740][T17346] veth1_macvtap: entered promiscuous mode
[  348.008776][T17698] : entered promiscuous mode
[  348.009672][T17705] __nla_validate_parse: 8 callbacks suppressed
[  348.009685][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'.
[  348.097682][T17346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.126265][T17346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.178867][ T3028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.203744][ T3028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.227063][ T3028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.227269][T17718] netlink: 'syz.4.3287': attribute type 10 has an invalid length.
[  348.255440][ T3028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.313319][T17718] team0: Port device dummy0 added
[  348.323302][T17720] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  348.350796][T17720] ieee802154 phy1 wpan1: encryption failed: -22
[  348.541740][T17740] netlink: 'syz.1.3293': attribute type 16 has an invalid length.
[  348.550954][T17740] netlink: 'syz.1.3293': attribute type 17 has an invalid length.
[  348.559154][T17733] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3291'.
[  348.644743][T17740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.680990][ T9046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.689556][T17747] TCP: tcp_parse_options: Illegal window scaling value 179 > 14 received
[  348.719206][ T9046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.742593][T17754] vxcan1 speed is unknown, defaulting to 1000
[  348.765455][T17754] vxcan1 speed is unknown, defaulting to 1000
[  348.822701][T17754] vxcan1 speed is unknown, defaulting to 1000
[  348.965273][T17767] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3300'.
[  349.065974][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'.
[  349.067253][T17754] infiniband syz2: set active
[  349.080294][T17754] infiniband syz2: added vxcan1
[  349.090758][ T5934] vxcan1 speed is unknown, defaulting to 1000
[  349.131115][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'.
[  349.147853][T17754] RDS/IB: syz2: added
[  349.164946][T17754] smc: adding ib device syz2 with port count 1
[  349.195908][T17754] smc:    ib device syz2 port 1 has pnetid SYZ1 (user defined)
[  349.217737][T13960] vxcan1 speed is unknown, defaulting to 1000
[  349.229342][T17754] vxcan1 speed is unknown, defaulting to 1000
[  349.340193][T17787] batadv_slave_0: entered promiscuous mode
[  349.442378][T17784] batadv_slave_0: left promiscuous mode
[  349.482664][T17754] vxcan1 speed is unknown, defaulting to 1000
[  349.600756][T17797] netlink: 'syz.1.3307': attribute type 7 has an invalid length.
[  349.722813][T17754] vxcan1 speed is unknown, defaulting to 1000
[  349.789925][T17809] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  349.855477][T17813] 8021q: VLANs not supported on ip_vti0
[  349.954800][T17754] vxcan1 speed is unknown, defaulting to 1000
[  349.974309][ T5834] Bluetooth: hci0: command tx timeout
[  350.085698][T17754] vxcan1 speed is unknown, defaulting to 1000
[  350.213046][T17754] vxcan1 speed is unknown, defaulting to 1000
[  350.343024][T17754] vxcan1 speed is unknown, defaulting to 1000
[  351.525672][T17741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  351.618603][ T9022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.630552][ T9022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.750577][T17819] x_tables: duplicate underflow at hook 1
[  351.916432][T17831] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.924182][T17831] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.029317][T17831] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.049485][T17831] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.131803][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  352.143852][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  352.153141][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  352.161647][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  352.169879][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  352.275428][ T9012] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.297926][ T9012] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.400608][ T9012] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.418974][ T9012] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.501069][T17850] openvswitch: netlink: Key 11 has unexpected len 8 expected 2
[  352.537317][T17850] openvswitch: netlink: Key 11 has unexpected len 8 expected 2
[  352.550351][T17853] sctp: [Deprecated]: syz.3.3322 (pid 17853) Use of struct sctp_assoc_value in delayed_ack socket option.
[  352.550351][T17853] Use struct sctp_sack_info instead
[  352.609164][ T3028] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  352.630033][ T3028] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  352.651596][ T3028] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 35322 - 0
[  352.672228][T17864] openvswitch: netlink: Invalid VLAN frame
[  352.680151][T17864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3324'.
[  352.690599][ T3028] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  352.711337][ T3028] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  352.829550][ T3028] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  352.839842][ T3028] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  352.859106][ T3028] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 35322 - 0
[  352.870233][ T3028] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  352.870838][T17866] Can't find ip_set type haPM�*�
[  352.880775][ T3028] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  352.914085][T17876] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3328'.
[  352.989644][ T3028] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  353.025040][T17883] xt_NFQUEUE: number of total queues is 0
[  353.026123][ T3028] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  353.064115][ T3028] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 35322 - 0
[  353.090112][ T3028] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  353.137572][ T3028] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  353.363734][ T3028] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  353.383768][ T3028] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  353.396305][ T3028] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 35322 - 0
[  353.407043][ T3028] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  353.417761][ T3028] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  353.440909][T17890] syzkaller1: entered promiscuous mode
[  353.454315][T17890] syzkaller1: entered allmulticast mode
[  353.508736][T17840] vxcan1 speed is unknown, defaulting to 1000
[  353.793153][ T3028] bridge_slave_0: left allmulticast mode
[  353.824014][ T3028] bridge_slave_0: left promiscuous mode
[  353.842218][ T3028] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.229723][ T5819] Bluetooth: hci1: command tx timeout
[  354.270957][ T3028] bond5 (unregistering): (slave ip6gretap0): Releasing active interface
[  354.431536][T17963] netlink: 'syz.2.3345': attribute type 1 has an invalid length.
[  354.448849][T17963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.507656][ T3028] bond6 (unregistering): (slave geneve2): Releasing active interface
[  354.711589][ T3028] bond3 (unregistering): (slave bridge3): Releasing backup interface
[  354.719908][ T3028] bridge3 (unregistering): left promiscuous mode
[  354.997900][ T3028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.008245][ T3028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.019671][ T3028] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  355.031769][ T3028] bond0 (unregistering): Released all slaves
[  355.041341][ T3028] bond1 (unregistering): Released all slaves
[  355.055311][ T3028] bond2 (unregistering): Released all slaves
[  355.067680][ T3028] bond3 (unregistering): Released all slaves
[  355.080116][ T3028] bond4 (unregistering): Released all slaves
[  355.093874][ T3028] bond5 (unregistering): Released all slaves
[  355.116881][ T3028] bond6 (unregistering): Released all slaves
[  355.131121][ T3028] bond7 (unregistering): Released all slaves
[  355.143714][ T3028] bond8 (unregistering): Released all slaves
[  355.365266][ T3028] : left promiscuous mode
[  355.444914][ T3028] : left promiscuous mode
[  355.517414][ T3028] �9: left promiscuous mode
[  355.612716][ T3028] tipc: Left network mode
[  355.656375][T17987] netlink: 'syz.3.3352': attribute type 10 has an invalid length.
[  355.693640][T17987] team0: Device ipvlan1 failed to register rx_handler
[  355.721836][T17840] chnl_net:caif_netlink_parms(): no params data found
[  355.723065][T17991] delete_channel: no stack
[  355.759856][T17991] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3353'.
[  355.836631][T17996] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3353'.
[  355.873389][T17996] nbd: illegal input index -8454144
[  355.964776][T18005] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3355'.
[  355.979887][T18007] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3355'.
[  356.157860][T17840] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.165723][T17840] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.172924][T17840] bridge_slave_0: entered allmulticast mode
[  356.189144][T17840] bridge_slave_0: entered promiscuous mode
[  356.216280][T17840] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.252128][T17840] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.274276][T17840] bridge_slave_1: entered allmulticast mode
[  356.282001][T17840] bridge_slave_1: entered promiscuous mode
[  356.296111][ T5819] Bluetooth: hci1: command tx timeout
[  356.483490][T17840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.529949][T17840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.743907][T17840] team0: Port device team_slave_0 added
[  356.778220][T17840] team0: Port device team_slave_1 added
[  356.826812][T18043] netlink: 'syz.0.3365': attribute type 24 has an invalid length.
[  356.967077][T17840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.984846][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.019097][T17840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.080224][T17840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.110281][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.155465][T17840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.237331][T18065] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3372'.
[  357.274441][T18065] nbd: illegal input index -8454144
[  357.300385][T18063] syzkaller0: entered promiscuous mode
[  357.336025][T18063] syzkaller0: entered allmulticast mode
[  357.457343][T18074] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3373'.
[  357.532666][T18078] xt_hashlimit: size too large, truncated to 1048576
[  357.619201][T17840] hsr_slave_0: entered promiscuous mode
[  357.650858][T17840] hsr_slave_1: entered promiscuous mode
[  357.679299][T17840] debugfs: 'hsr0' already exists in 'hsr'
[  357.711357][T17840] Cannot create hsr debugfs directory
[  358.041181][T18092] openvswitch: netlink: IP tunnel dst address not specified
[  358.283485][ T3028] hsr_slave_0: left promiscuous mode
[  358.298086][ T3028] hsr_slave_1: left promiscuous mode
[  358.313455][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'.
[  358.340178][ T3028] veth1_macvtap: left promiscuous mode
[  358.362411][ T3028] veth0_macvtap: left promiscuous mode
[  358.374140][ T5819] Bluetooth: hci1: command tx timeout
[  358.379843][ T3028] �
: left promiscuous mode
[  358.597344][ T3028] pimreg3 (unregistering): left allmulticast mode
[  358.617184][ T3028] team0 (unregistering): Port device batadv6 removed
[  358.629029][ T3028] team0 (unregistering): Port device batadv5 removed
[  358.644910][ T3028] team0 (unregistering): Port device batadv4 removed
[  358.655798][ T3028] team0 (unregistering): Port device batadv3 removed
[  358.665713][ T3028] team0 (unregistering): Port device batadv2 removed
[  358.678767][ T3028] team0 (unregistering): Port device batadv1 removed
[  358.808593][ T3028] team0 (unregistering): Port device team_slave_1 removed
[  358.831951][ T3028] team0 (unregistering): Port device team_slave_0 removed
[  358.902600][ T3028] team0 (unregistering): Port device dummy0 removed
[  358.935666][T18116] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.943114][T18116] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.189335][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3389'.
[  359.233808][T18151] netlink: 'syz.1.3391': attribute type 1 has an invalid length.
[  359.273209][T18157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3390'.
[  359.436940][T18166] netlink: 'syz.0.3394': attribute type 4 has an invalid length.
[  359.555781][T18168] IPv4: Oversized IP packet from 172.20.20.24
[  359.563637][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  359.570395][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  359.703015][T18173] 8021q: adding VLAN 0 to HW filter on device bond1
[  359.760513][T18192] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3400'.
[  360.138485][ T3028] IPVS: stop unused estimator thread 0...
[  360.387351][T17840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  360.435937][T17840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  360.454689][ T5819] Bluetooth: hci1: command tx timeout
[  360.482085][T17840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  360.510026][T17840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  360.822075][T17840] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.879037][T17840] 8021q: adding VLAN 0 to HW filter on device team0
[  360.896479][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.903660][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.961696][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.968877][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.048669][T18274] __nla_validate_parse: 6 callbacks suppressed
[  361.048686][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3418'.
[  361.455445][T18305] netlink: 'syz.2.3424': attribute type 83 has an invalid length.
[  361.556012][T18308] bond1: option fail_over_mac: invalid value (16)
[  361.568101][T18308] bond1 (unregistering): Released all slaves
[  361.666968][T18317] netlink: 'syz.2.3427': attribute type 1 has an invalid length.
[  361.713037][T18325] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3428'.
[  361.750267][T18327] xt_hashlimit: size too large, truncated to 1048576
[  361.761973][T17840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.937690][T18337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3431'.
[  361.984024][T18337] netlink: 'syz.1.3431': attribute type 7 has an invalid length.
[  362.018854][T18340] netlink: 'syz.1.3431': attribute type 7 has an invalid length.
[  362.028504][T18337] netlink: 'syz.1.3431': attribute type 8 has an invalid length.
[  362.105698][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3431'.
[  362.353844][T18356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.429567][T18356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3435'.
[  362.546550][T18375] netlink: 'syz.3.3438': attribute type 1 has an invalid length.
[  362.708918][T18380] netlink: 'syz.0.3439': attribute type 1 has an invalid length.
[  362.734550][T18380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3439'.
[  362.840538][T17840] veth0_vlan: entered promiscuous mode
[  362.898214][T17840] veth1_vlan: entered promiscuous mode
[  363.070592][T17840] veth0_macvtap: entered promiscuous mode
[  363.133416][T17840] veth1_macvtap: entered promiscuous mode
[  363.353141][T17840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.503017][T18424] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  363.540543][T18424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.580955][T18432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.789620][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3449'.
[  363.810681][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3449'.
[  363.831213][T17840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.847705][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'.
[  363.862445][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.872284][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.924175][   T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.933708][ T9025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.962440][T18443] netlink: 'syz.1.3450': attribute type 5 has an invalid length.
[  363.973528][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'.
[  364.076581][ T9018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.094711][ T9018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.133281][ T9025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.141449][T18454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.155301][ T9025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.481343][T18473] netlink: 'syz.4.3456': attribute type 11 has an invalid length.
[  364.639129][T18490] netlink: 'syz.4.3461': attribute type 4 has an invalid length.
[  365.034254][T18524] netlink: 'syz.1.3468': attribute type 4 has an invalid length.
[  365.226770][T18535] netlink: 'syz.3.3471': attribute type 10 has an invalid length.
[  365.428982][T18549] tipc: Started in network mode
[  365.442295][T18549] tipc: Node identity ac14140f, cluster identity 4711
[  365.460852][T18549] tipc: New replicast peer: 255.255.255.255
[  365.476768][T18549] tipc: Enabled bearer <udp:syz2>, priority 10
[  365.548826][T18549] syzkaller0: entered promiscuous mode
[  365.555358][T18549] syzkaller0: entered allmulticast mode
[  365.936917][T18576] veth0: entered promiscuous mode
[  365.967553][T18521] vxcan1 speed is unknown, defaulting to 1000
[  366.130694][T18587] netlink: 'syz.4.3488': attribute type 9 has an invalid length.
[  366.155955][T18586] syzkaller0: entered promiscuous mode
[  366.161472][T18586] syzkaller0: entered allmulticast mode
[  366.403620][T18600] netlink: 'syz.1.3495': attribute type 1 has an invalid length.
[  366.502776][T18606] netlink: 'syz.4.3497': attribute type 1 has an invalid length.
[  366.522130][T18606] __nla_validate_parse: 4 callbacks suppressed
[  366.522148][T18606] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3497'.
[  366.656909][T13960] tipc: Node number set to 2886997007
[  366.667703][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'.
[  366.695802][T18616] netlink: 'syz.3.3501': attribute type 1 has an invalid length.
[  366.703550][T18616] netlink: 'syz.3.3501': attribute type 2 has an invalid length.
[  366.909166][T18613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.003231][T18613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.028306][T18613] bond0 (unregistering): Released all slaves
[  367.240511][T18642] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.280098][T18653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3510'.
[  367.295790][T18642] 8021q: adding VLAN 0 to HW filter on device team0
[  367.319497][T18642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.538838][T18664] netlink: 'syz.0.3515': attribute type 1 has an invalid length.
[  367.556981][T18665] netlink: 'syz.2.3516': attribute type 11 has an invalid length.
[  367.566427][T18665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3516'.
[  367.617367][T18666] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3514'.
[  367.752664][T18673] netlink: 'syz.0.3518': attribute type 2 has an invalid length.
[  367.801660][T18673] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3518'.
[  367.878487][T18680] delete_channel: no stack
[  368.009782][T18690] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  368.061655][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  368.136432][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3526'.
[  368.367098][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3532'.
[  368.380644][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3532'.
[  368.449899][T18715] geneve2: entered promiscuous mode
[  368.465432][T18715] geneve2: entered allmulticast mode
[  368.616907][T18729] Bluetooth: MGMT ver 1.23
[  368.791993][T18739] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  369.444774][T18797] syzkaller0: entered promiscuous mode
[  369.452621][T18797] syzkaller0: entered allmulticast mode
[  369.471347][T18799] bond0: Device is already in use.
[  369.521439][T18797] bond4: option fail_over_mac: invalid value (16)
[  369.530735][T18797] bond4 (unregistering): Released all slaves
[  369.582624][T18807] xt_l2tp: v2 doesn't support IP mode
[  369.710786][T18810] gretap1: entered promiscuous mode
[  369.716527][T18810] gretap1: entered allmulticast mode
[  372.077016][T18784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  372.086898][T18807] __nla_validate_parse: 12 callbacks suppressed
[  372.086915][T18807] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3559'.
[  372.311533][T18830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  372.333371][T18833] validate_nla: 3 callbacks suppressed
[  372.333388][T18833] netlink: 'syz.3.3568': attribute type 1 has an invalid length.
[  372.350511][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'.
[  372.400860][T18836] openvswitch: netlink: IP tunnel dst address not specified
[  372.448165][T18842] sctp: [Deprecated]: syz.0.3570 (pid 18842) Use of int in maxseg socket option.
[  372.448165][T18842] Use struct sctp_assoc_value instead
[  372.499204][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'.
[  372.508267][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'.
[  372.590077][T18850] SET target dimension over the limit!
[  372.616763][T18854] netlink: 'syz.2.3573': attribute type 1 has an invalid length.
[  372.624987][T18854] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3573'.
[  372.702295][T18858] syzkaller0: entered promiscuous mode
[  372.708276][T18858] syzkaller0: entered allmulticast mode
[  372.755086][ T9017] tipc: Subscription rejected, illegal request
[  372.765784][T18860] netlink: 'syz.1.3576': attribute type 1 has an invalid length.
[  372.783856][T18860] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3576'.
[  372.791120][T18866] syzkaller0: entered promiscuous mode
[  372.802217][T18866] syzkaller0: entered allmulticast mode
[  372.819957][T18864] netlink: 'syz.1.3576': attribute type 1 has an invalid length.
[  372.828953][T18864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3576'.
[  373.021932][T18877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  373.044070][T18877] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.060569][T18877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  373.068308][T18877] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.107246][T18883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3583'.
[  373.141788][T18879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3583'.
[  373.287232][T18889] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3586'.
[  373.775400][T18932] veth0: entered promiscuous mode
[  373.781782][T18931] netlink: 'syz.1.3600': attribute type 9 has an invalid length.
[  373.796719][T18936] netlink: 'syz.0.3601': attribute type 1 has an invalid length.
[  373.812431][T18927] netlink: 'syz.2.3599': attribute type 1 has an invalid length.
[  373.834792][T18936] 8021q: adding VLAN 0 to HW filter on device bond1
[  373.913221][T18924] veth0: left promiscuous mode
[  374.063276][T18949] sctp: [Deprecated]: syz.1.3604 (pid 18949) Use of struct sctp_assoc_value in delayed_ack socket option.
[  374.063276][T18949] Use struct sctp_sack_info instead
[  374.152066][T18955] netlink: 'syz.2.3605': attribute type 29 has an invalid length.
[  374.438678][T18975] netlink: 'syz.4.3612': attribute type 12 has an invalid length.
[  374.461497][T18975] bond1: option primary_reselect: invalid value (255)
[  374.469802][T18975] bond1 (unregistering): Released all slaves
[  374.671914][T18980] netlink: 'syz.3.3614': attribute type 1 has an invalid length.
[  374.696658][T18980] 8021q: adding VLAN 0 to HW filter on device bond2
[  377.379193][T18971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  377.581943][T19020] __nla_validate_parse: 10 callbacks suppressed
[  377.581962][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3622'.
[  377.612550][T19020] netlink: 'syz.3.3622': attribute type 5 has an invalid length.
[  377.752034][T19039] openvswitch: netlink: Key type 150 is out of range max 32
[  377.778316][T19045] openvswitch: netlink: Key type 150 is out of range max 32
[  377.806557][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3632'.
[  377.871771][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3632'.
[  377.919759][T19051] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3632'.
[  377.930003][T19057] openvswitch: netlink: Multiple metadata blocks provided
[  378.230331][T19086] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  378.286778][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3644'.
[  378.332667][T19092] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3645'.
[  378.338784][T19094] sctp: [Deprecated]: syz.4.3646 (pid 19094) Use of int in maxseg socket option.
[  378.338784][T19094] Use struct sctp_assoc_value instead
[  378.359627][T19089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3644'.
[  378.498553][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3649'.
[  378.511626][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3650'.
[  378.537297][T19103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3649'.
[  378.571356][T19102] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.667661][T19109] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.687186][T19109] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  378.735003][T19109] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  378.788709][T19125] x_tables: duplicate underflow at hook 1
[  378.865782][T19131] tipc: Failed to obtain node identity
[  378.881007][T19131] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  378.944440][T19133] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  379.131403][T19151] netlink: 'syz.3.3663': attribute type 29 has an invalid length.
[  379.160039][T19151] netlink: 'syz.3.3663': attribute type 29 has an invalid length.
[  379.540071][T19187] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  379.778595][T19204] IPv6: addrconf: prefix option has invalid lifetime
[  379.785374][T19204] IPv6: addrconf: prefix option has invalid lifetime
[  380.139717][T19227] openvswitch: netlink: Missing key (keys=40, expected=80)
[  380.282215][T19231] can: request_module (can-proto-4) failed.
[  380.294742][T19241] netlink: 'syz.2.3684': attribute type 10 has an invalid length.
[  380.789337][T19266] 8021q: adding VLAN 0 to HW filter on device bond4
[  380.821923][T19283] vlan2: entered allmulticast mode
[  380.837016][T19283] geneve1: entered allmulticast mode
[  380.990123][T19294] openvswitch: netlink: Flow key attr not present in new flow.
[  381.324372][T19326] netlink: 'syz.1.3707': attribute type 1 has an invalid length.
[  381.340179][T19326] netlink: 'syz.1.3707': attribute type 2 has an invalid length.
[  381.348435][T19326] netlink: 'syz.1.3707': attribute type 1 has an invalid length.
[  381.609415][T19342] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  381.623147][T19342] bond3 (unregistering): Released all slaves
[  381.700536][T19346] vlan2: entered promiscuous mode
[  381.705748][T19346] hsr0: entered promiscuous mode
[  381.943119][T19366] xt_ecn: cannot match TCP bits for non-tcp packets
[  382.059835][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c04e400: rx timeout, send abort
[  382.559985][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c04fc00: rx timeout, send abort
[  382.568869][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c04e400: abort rx timeout. Force session deactivation
[  382.855495][T19420] netlink: 'syz.0.3734': attribute type 15 has an invalid length.
[  382.870672][T19420] __nla_validate_parse: 21 callbacks suppressed
[  382.870696][T19420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3734'.
[  382.901762][T19420] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3734'.
[  383.068235][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c04fc00: abort rx timeout. Force session deactivation
[  383.862152][T19434] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  383.868784][T19434] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  384.168486][T19434] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  384.197153][T19477] sit1: entered promiscuous mode
[  384.211230][T19434] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  384.242824][T19477] sit1: entered allmulticast mode
[  384.500095][T19434] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  384.510469][T19434] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  384.635272][T19434] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  384.644791][T19434] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  385.127428][T19541] netlink: 'syz.4.3757': attribute type 1 has an invalid length.
[  385.143368][T19541] gretap1: entered promiscuous mode
[  385.185771][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'.
[  385.436221][   T29] audit: type=1107 audit(1771398008.217:7): pid=19556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':F`j�g(�Fe��_�)ч����)��=ß���Ly`Z���H�s���}j�20}����Aw'
[  385.613135][T19570] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3766'.
[  385.785674][T19580] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3769'.
[  385.994488][T19514] vxcan1 speed is unknown, defaulting to 1000
[  386.697104][T19630] netlink: 'syz.1.3779': attribute type 1 has an invalid length.
[  386.839136][T19633] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  386.852125][T19633] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  386.866467][T19633] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  386.909266][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3782'.
[  386.961157][T19634] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[  386.977514][T19634] bond5: (slave vcan1): making interface the new active one
[  386.985622][T19634] bond5: (slave vcan1): Enslaving as an active interface with an up link
[  387.081908][T19643] netlink: 'syz.3.3783': attribute type 2 has an invalid length.
[  387.094342][T19643] netlink: 'syz.3.3783': attribute type 1 has an invalid length.
[  387.791040][T19679] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3789'.
[  387.839251][T19679] block nbd0: not configured, cannot reconfigure
[  388.042392][T19680] syzkaller0: entered promiscuous mode
[  388.088849][T19699] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3793'.
[  388.096452][T19680] syzkaller0: entered allmulticast mode
[  389.259880][T19721] xt_hashlimit: size too large, truncated to 1048576
[  389.941966][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'.
[  390.239103][T19769] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3807'.
[  390.295891][T19778] netlink: 'syz.3.3809': attribute type 10 has an invalid length.
[  390.441729][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3812'.
[  390.565787][T19788] tun0: tun_chr_ioctl cmd 1074025675
[  390.608936][T19788] tun0: persist disabled
[  390.619331][T19793] netlink: 'syz.2.3814': attribute type 1 has an invalid length.
[  390.689216][T19796] netlink: 'syz.1.3817': attribute type 9 has an invalid length.
[  390.697683][T19796] netlink: 'syz.1.3817': attribute type 11 has an invalid length.
[  390.711549][T19796] netlink: 'syz.1.3817': attribute type 12 has an invalid length.
[  390.720589][T19796] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3817'.
[  390.752412][T19796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3817'.
[  390.762794][T19798] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3816'.
[  390.795252][T19798] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  391.327375][T19843] team0: Port device team_slave_0 removed
[  391.684856][T19860] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  391.734948][T19860] bond3 (unregistering): Released all slaves
[  391.796398][T19839] syzkaller0: entered promiscuous mode
[  391.801985][T19839] syzkaller0: entered allmulticast mode
[  391.965418][   T29] audit: type=1800 audit(1771398014.727:8): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3836" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=809 res=0 errno=0
[  392.228513][T19900] bond3: option all_slaves_active: invalid value (222)
[  392.243360][T19905] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3841'.
[  392.281787][T19900] bond3 (unregistering): Released all slaves
[  392.902029][T19959] netlink: 'syz.1.3852': attribute type 1 has an invalid length.
[  392.947916][T19959] bond6: entered promiscuous mode
[  392.953745][T19959] bond6: entered allmulticast mode
[  392.960208][T19959] 8021q: adding VLAN 0 to HW filter on device bond6
[  392.992185][T19963] macvlan3: entered promiscuous mode
[  392.998040][T19963] macvlan3: entered allmulticast mode
[  393.021035][T19963] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  393.076671][T19969] tipc: Started in network mode
[  393.081624][T19969] tipc: Node identity 1e9657100f8c, cluster identity 4711
[  393.091425][T19969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.099400][T19969] syzkaller0: entered promiscuous mode
[  393.105146][T19969] syzkaller0: entered allmulticast mode
[  393.135552][T19969] tipc: Resetting bearer <eth:syzkaller0>
[  393.156311][T19968] tipc: Resetting bearer <eth:syzkaller0>
[  393.236827][T19968] tipc: Disabling bearer <eth:syzkaller0>
[  393.267200][T19976] vlan0: entered promiscuous mode
[  393.272568][T19976] vlan0: entered allmulticast mode
[  393.290220][T19976] hsr_slave_1: entered allmulticast mode
[  393.354810][T19982] netlink: 'syz.0.3860': attribute type 10 has an invalid length.
[  393.367609][T19982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3860'.
[  393.466170][T19985] sctp: [Deprecated]: syz.0.3862 (pid 19985) Use of struct sctp_assoc_value in delayed_ack socket option.
[  393.466170][T19985] Use struct sctp_sack_info instead
[  393.538556][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'.
[  393.565246][T19992] netlink: 'syz.1.3863': attribute type 5 has an invalid length.
[  394.061814][T20035] tipc: New replicast peer: 255.255.255.255
[  394.082052][T20035] tipc: Enabled bearer <udp:syz2>, priority 10
[  394.096899][T20032] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3875'.
[  394.111337][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3876'.
[  394.117531][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3875'.
[  394.142509][T20032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.157054][T20032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.173212][T20043] netlink: 'syz.4.3879': attribute type 1 has an invalid length.
[  394.181405][T20043] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3879'.
[  394.190563][T20043] NCSI netlink: No device for ifindex 0
[  395.057488][T20086] netlink: 'syz.0.3883': attribute type 1 has an invalid length.
[  395.071161][T20091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.108900][T20095] gretap0: entered promiscuous mode
[  395.113730][T20096] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3884'.
[  395.118085][T20086] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3883'.
[  395.133343][T20086] NCSI netlink: No device for ifindex 813332851
[  395.161078][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3885'.
[  395.170342][T20092] gretap0: left promiscuous mode
[  395.314949][T20096] bond7: entered promiscuous mode
[  395.332866][T20096] bond7: entered allmulticast mode
[  395.343287][T20096] 8021q: adding VLAN 0 to HW filter on device bond7
[  395.352462][T20110] validate_nla: 1 callbacks suppressed
[  395.352477][T20110] netlink: 'syz.3.3891': attribute type 7 has an invalid length.
[  395.353274][ T5895] tipc: Node number set to 286938896
[  395.490660][T20113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3893'.
[  395.496865][T20117] netlink: 'syz.4.3896': attribute type 1 has an invalid length.
[  395.522516][T20113] ------------[ cut here ]------------
[  395.528359][T20113] msk->pm.local_addr_used == 0
[  395.528381][T20113] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb1/0x1430, CPU#0: syz.0.3893/20113
[  395.544385][T20113] Modules linked in:
[  395.548642][T20113] CPU: 0 UID: 0 PID: 20113 Comm: syz.0.3893 Not tainted syzkaller #0 PREEMPT(full) 
[  395.558062][T20113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  395.568165][T20113] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  395.574724][T20113] Code: 01 00 00 49 89 c6 e8 7e bc 36 f6 e9 28 fb ff ff e8 74 bc 36 f6 48 89 df be 03 00 00 00 e8 e7 5d 17 f9 eb a4 e8 60 bc 36 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48
[  395.594369][T20113] RSP: 0018:ffffc9000214f160 EFLAGS: 00010287
[  395.600452][T20113] RAX: ffffffff8b8d7e70 RBX: 0000000000000000 RCX: 0000000000080000
[  395.608482][T20113] RDX: ffffc9000c593000 RSI: 0000000000002458 RDI: 0000000000002459
[  395.616498][T20113] RBP: ffffc9000214f3b0 R08: ffff888054ea70c7 R09: 1ffff1100a9d4e18
[  395.624515][T20113] R10: dffffc0000000000 R11: ffffed100a9d4e19 R12: 1ffff1100a9d4e17
[  395.632494][T20113] R13: ffff888032995300 R14: ffff888054ea6600 R15: ffff888054ea70b8
[  395.640501][T20113] FS:  00007f8a74bf66c0(0000) GS:ffff8881254ae000(0000) knlGS:0000000000000000
[  395.649470][T20113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  395.656087][T20113] CR2: 000000110c301b16 CR3: 000000002b90e000 CR4: 00000000003526f0
[  395.664104][T20113] Call Trace:
[  395.667388][T20113]  <TASK>
[  395.670333][T20113]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[  395.676550][T20113]  ? rcu_is_watching+0x15/0xb0
[  395.681343][T20113]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  395.687745][T20113]  genl_family_rcv_msg_doit+0x22a/0x330
[  395.693311][T20113]  ? __asan_memcpy+0x40/0x70
[  395.697984][T20113]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  395.704107][T20113]  ? bpf_lsm_capable+0x9/0x20
[  395.708794][T20113]  ? security_capable+0x7e/0x2c0
[  395.713765][T20113]  genl_rcv_msg+0x61c/0x7a0
[  395.718342][T20113]  ? __pfx_genl_rcv_msg+0x10/0x10
[  395.723383][T20113]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[  395.729600][T20113]  ? __pfx_ref_tracker_free+0x10/0x10
[  395.735023][T20113]  netlink_rcv_skb+0x232/0x4b0
[  395.739803][T20113]  ? __pfx_genl_rcv_msg+0x10/0x10
[  395.744899][T20113]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  395.750195][T20113]  ? genl_rcv+0x19/0x40
[  395.754421][T20113]  ? down_read+0x272/0x2e0
[  395.758858][T20113]  ? genl_rcv+0xd/0x40
[  395.762942][T20113]  genl_rcv+0x28/0x40
[  395.766979][T20113]  netlink_unicast+0x80f/0x9b0
[  395.771779][T20113]  ? __pfx_netlink_unicast+0x10/0x10
[  395.777135][T20113]  ? netlink_sendmsg+0x650/0xb40
[  395.782086][T20113]  ? skb_put+0x11b/0x210
[  395.786403][T20113]  netlink_sendmsg+0x813/0xb40
[  395.791187][T20113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.796527][T20113]  ? aa_sock_msg_perm+0xf1/0x1b0
[  395.801480][T20113]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  395.806824][T20113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.812121][T20113]  ____sys_sendmsg+0xa68/0xad0
[  395.816923][T20113]  ? __might_fault+0xaf/0x130
[  395.821619][T20113]  ? __pfx_____sys_sendmsg+0x10/0x10
[  395.826974][T20113]  ? import_iovec+0x73/0xa0
[  395.831494][T20113]  ___sys_sendmsg+0x2a5/0x360
[  395.836233][T20113]  ? __lock_acquire+0x6b5/0x2cf0
[  395.841186][T20113]  ? __pfx____sys_sendmsg+0x10/0x10
[  395.846442][T20113]  ? futex_wake+0x4ac/0x580
[  395.850989][T20113]  ? __fget_files+0x2a/0x420
[  395.855628][T20113]  ? __fget_files+0x3a0/0x420
[  395.860328][T20113]  __x64_sys_sendmsg+0x1bd/0x2a0
[  395.865320][T20113]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  395.870798][T20113]  ? rcu_is_watching+0x15/0xb0
[  395.875620][T20113]  do_syscall_64+0x14d/0xf80
[  395.880223][T20113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.886346][T20113]  ? trace_irq_disable+0x37/0x100
[  395.891382][T20113]  ? clear_bhb_loop+0x40/0x90
[  395.896115][T20113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.902019][T20113] RIP: 0033:0x7f8a7699c629
[  395.906478][T20113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.926120][T20113] RSP: 002b:00007f8a74bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.934587][T20113] RAX: ffffffffffffffda RBX: 00007f8a76c15fa0 RCX: 00007f8a7699c629
[  395.942567][T20113] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b
[  395.950584][T20113] RBP: 00007f8a76a32b39 R08: 0000000000000000 R09: 0000000000000000
[  395.958686][T20113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.966695][T20113] R13: 00007f8a76c16038 R14: 00007f8a76c15fa0 R15: 00007ffcb555cd68
[  395.974736][T20113]  </TASK>
[  395.977777][T20113] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  395.985057][T20113] CPU: 0 UID: 0 PID: 20113 Comm: syz.0.3893 Not tainted syzkaller #0 PREEMPT(full) 
[  395.994429][T20113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  396.004659][T20113] Call Trace:
[  396.007942][T20113]  <TASK>
[  396.010874][T20113]  vpanic+0x1e0/0x670
[  396.014879][T20113]  panic+0xc5/0xd0
[  396.018613][T20113]  ? __pfx_panic+0x10/0x10
[  396.023142][T20113]  __warn+0x315/0x4a0
[  396.027137][T20113]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[  396.033043][T20113]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[  396.038955][T20113]  __report_bug+0x29a/0x540
[  396.043485][T20113]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[  396.049386][T20113]  ? __pfx___report_bug+0x10/0x10
[  396.054412][T20113]  ? __lock_acquire+0x6b5/0x2cf0
[  396.059362][T20113]  ? reacquire_held_locks+0x104/0x190
[  396.064747][T20113]  ? __lock_sock_fast+0x45/0xe0
[  396.069608][T20113]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[  396.075496][T20113]  report_bug+0x16a/0x220
[  396.079819][T20113]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[  396.085703][T20113]  ? mptcp_pm_nl_del_addr_doit+0xfb3/0x1430
[  396.091581][T20113]  handle_bug+0x98/0x200
[  396.095819][T20113]  exc_invalid_op+0x1a/0x50
[  396.100319][T20113]  asm_exc_invalid_op+0x1a/0x20
[  396.105154][T20113] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[  396.111644][T20113] Code: 01 00 00 49 89 c6 e8 7e bc 36 f6 e9 28 fb ff ff e8 74 bc 36 f6 48 89 df be 03 00 00 00 e8 e7 5d 17 f9 eb a4 e8 60 bc 36 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48
[  396.131234][T20113] RSP: 0018:ffffc9000214f160 EFLAGS: 00010287
[  396.137290][T20113] RAX: ffffffff8b8d7e70 RBX: 0000000000000000 RCX: 0000000000080000
[  396.145247][T20113] RDX: ffffc9000c593000 RSI: 0000000000002458 RDI: 0000000000002459
[  396.153200][T20113] RBP: ffffc9000214f3b0 R08: ffff888054ea70c7 R09: 1ffff1100a9d4e18
[  396.161154][T20113] R10: dffffc0000000000 R11: ffffed100a9d4e19 R12: 1ffff1100a9d4e17
[  396.169108][T20113] R13: ffff888032995300 R14: ffff888054ea6600 R15: ffff888054ea70b8
[  396.177073][T20113]  ? mptcp_pm_nl_del_addr_doit+0xfb0/0x1430
[  396.182971][T20113]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[  396.189127][T20113]  ? rcu_is_watching+0x15/0xb0
[  396.193889][T20113]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  396.200216][T20113]  genl_family_rcv_msg_doit+0x22a/0x330
[  396.205756][T20113]  ? __asan_memcpy+0x40/0x70
[  396.210335][T20113]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  396.216398][T20113]  ? bpf_lsm_capable+0x9/0x20
[  396.221063][T20113]  ? security_capable+0x7e/0x2c0
[  396.225993][T20113]  genl_rcv_msg+0x61c/0x7a0
[  396.230490][T20113]  ? __pfx_genl_rcv_msg+0x10/0x10
[  396.235502][T20113]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[  396.241650][T20113]  ? __pfx_ref_tracker_free+0x10/0x10
[  396.247017][T20113]  netlink_rcv_skb+0x232/0x4b0
[  396.251766][T20113]  ? __pfx_genl_rcv_msg+0x10/0x10
[  396.256784][T20113]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  396.262052][T20113]  ? genl_rcv+0x19/0x40
[  396.266206][T20113]  ? down_read+0x272/0x2e0
[  396.270610][T20113]  ? genl_rcv+0xd/0x40
[  396.274671][T20113]  genl_rcv+0x28/0x40
[  396.278645][T20113]  netlink_unicast+0x80f/0x9b0
[  396.283405][T20113]  ? __pfx_netlink_unicast+0x10/0x10
[  396.288680][T20113]  ? netlink_sendmsg+0x650/0xb40
[  396.293605][T20113]  ? skb_put+0x11b/0x210
[  396.297844][T20113]  netlink_sendmsg+0x813/0xb40
[  396.302615][T20113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.307888][T20113]  ? aa_sock_msg_perm+0xf1/0x1b0
[  396.312818][T20113]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  396.318092][T20113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.323360][T20113]  ____sys_sendmsg+0xa68/0xad0
[  396.328112][T20113]  ? __might_fault+0xaf/0x130
[  396.332780][T20113]  ? __pfx_____sys_sendmsg+0x10/0x10
[  396.338066][T20113]  ? import_iovec+0x73/0xa0
[  396.342559][T20113]  ___sys_sendmsg+0x2a5/0x360
[  396.347223][T20113]  ? __lock_acquire+0x6b5/0x2cf0
[  396.352153][T20113]  ? __pfx____sys_sendmsg+0x10/0x10
[  396.357342][T20113]  ? futex_wake+0x4ac/0x580
[  396.361851][T20113]  ? __fget_files+0x2a/0x420
[  396.366423][T20113]  ? __fget_files+0x3a0/0x420
[  396.371094][T20113]  __x64_sys_sendmsg+0x1bd/0x2a0
[  396.376023][T20113]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  396.381480][T20113]  ? rcu_is_watching+0x15/0xb0
[  396.386239][T20113]  do_syscall_64+0x14d/0xf80
[  396.390822][T20113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.396870][T20113]  ? trace_irq_disable+0x37/0x100
[  396.401879][T20113]  ? clear_bhb_loop+0x40/0x90
[  396.406540][T20113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.412415][T20113] RIP: 0033:0x7f8a7699c629
[  396.416817][T20113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.436407][T20113] RSP: 002b:00007f8a74bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.444809][T20113] RAX: ffffffffffffffda RBX: 00007f8a76c15fa0 RCX: 00007f8a7699c629
[  396.452764][T20113] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b
[  396.460723][T20113] RBP: 00007f8a76a32b39 R08: 0000000000000000 R09: 0000000000000000
[  396.468689][T20113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.476653][T20113] R13: 00007f8a76c16038 R14: 00007f8a76c15fa0 R15: 00007ffcb555cd68
[  396.484630][T20113]  </TASK>
[  396.487996][T20113] Kernel Offset: disabled
[  396.492299][T20113] Rebooting in 86400 seconds..