last executing test programs:

19.396423619s ago: executing program 0 (id=2929):
r0 = socket(0x1e, 0x5, 0x10000)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x41}, 0x1, 0x0, 0x0, 0x20008000}, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0)
ppoll(&(0x7f0000000180)=[{r6, 0x1c}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0x10, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, 0x1, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_MASK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x440}, 0x8000)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x7, 0x6, 0x4, 0x8, 0x9, 0x80, 0x1, 0xc9, 0x7, 0x8, 0x1, 0x6, 0x7}, 0xe)

19.076512838s ago: executing program 0 (id=2934):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200068c0}], 0x1, 0xc0001)
recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x301}}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884)

18.481991723s ago: executing program 0 (id=2938):
r0 = socket$kcm(0xf, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/212, 0x1a, 0xd4, 0x8}, 0x20)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r3], 0xfdef)
sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0xffffffffffffff66, &(0x7f00000005c0)=[{&(0x7f0000000500)="78d28cfd01e4270b6f4653ba778e6204c7e45998e57a7df29cad860ff514f1102def"}]}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'wg0\x00', 0x200})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000000)
close(0x4)
close(0x3)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000002c0), 0x10)
readv(r8, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r8], 0x80}}, 0x0)

17.434413213s ago: executing program 0 (id=2945):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x0, 0x0, "4ebf8c5b2ace28ec8b46e174794a3fc2"})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601020000000000000000020000090900020073797a3000000000050005000200000028000400020000001400134000000001320ecb8b890e1e51c42217a5564e4c080006400000000914000300686173683a69702c706f72742c697000050001000700000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xffff}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xfc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x4, 0x5}})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@getchain={0x3c, 0x66, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xa}, {0xfff3, 0xf}, {0xb, 0xfff2}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xbf}, {0x8, 0xb, 0x5}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@deltaction={0x180, 0x31, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x473551a8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe22}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f2e}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0xa00, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x138, 0x210, 0x2b0, 0x0, 0x2b0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'tunl0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xa, @rand_addr=0x64010100, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='{-\\^\x00', 0x400000, &(0x7f0000000040)={@_ha_fsid={[0xd6, 0x2]}, {0x0, 0x41de, 0x2, 0xfffffffffffffffb}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8})

17.081072393s ago: executing program 0 (id=2947):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141400000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x500, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

16.812452508s ago: executing program 0 (id=2948):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="0000000000f084007dcd12800987000100763cbd4e683c6d49a1f8133736c19c035b6c616e000000000c00f57f0600010000000000"], 0x3c}}, 0x24040000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5], 0x0, [0x1, 0xffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000080)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r11)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0702000200000014000180060001000200000008180300ac2e000000000000000000"], 0x28}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004886}, 0x20000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0@\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700000000001010000001c000180060001000200000008000300ac1414370800060003000000"], 0x30}, 0x1, 0xff07}, 0x2000000)

2.706423976s ago: executing program 4 (id=3045):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0xb9, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

2.67098685s ago: executing program 2 (id=3046):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4)
r1 = socket$netlink(0x10, 0x3, 0xe)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x3, @random="21e6b238ff37"}, 0x31)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @random="00000200"}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000780)={r3, 0x1, 0x6}, 0x10)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r6, 0x305, 0x70bd27, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24044080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4000027}, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r10=>0x0}, 0x8)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r10, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000014c0)={r11, r9, 0x4, r7}, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091118d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

2.194246642s ago: executing program 4 (id=3050):
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x10, r0, 0x3607e000)

2.046908405s ago: executing program 1 (id=3051):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x8, 0x7, 0x2e, @private2, @remote, 0x8, 0x20, 0x4, 0xfffffffb}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40c0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffe5}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001800200027bd7000fddbdf25021010050003fd0100260000100016800c000880050002000000000008000300", @ANYRES32=r5, @ANYBLOB="08001900", @ANYRES32=r1, @ANYBLOB="3a117feb95284236cd8a393d7ab8ceac3405c7f0635a72d1aeaba6786a78e546c9d1a86c46be464cedc7b31463c5bc23bdb4f26bd81a9f3107916cfff192d5bdf732d831410fe2b81bbee237ba970d858ea8757f5150fa11bf2e699b40cb7cc0d3ea32be1f9e6fb70820c8e9207fb81fcd9a7a5084cdac43d364207fe737f818f05d446429d660ed234b03164b98303928ec15fa37e518894d8044d030b450bbe482032911"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x200100bc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x64, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9ea2d32815a5b100000000000000000000000000c90c9c35c4737dabb32467bb60e86607"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x806}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r9, 0xc0e, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x49}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e66c1478cf2c338925ddcdf9c35a1710"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x35}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20048081)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x148, 0x30, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{0x134, 0x1, [@m_mpls={0x130, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x1, 0x7, 0x8}, 0x4}}]}, {0xdd, 0x4, "45ad780d9f9545777dac0e15b4d0114bcb9299066be1b01407c9283db5334240cbfd4bbb6d9d7deaf99542b562d040f81cd31cb380459cdb8b884cdef4716fdcd431ce6686cdc90f594d0ac08a81d098bff08acaa5fa972c9cd2b8f0d71bfc0e619d0632ca28d136cf097367260ae391310b8a3d2ab29d5d4073e669249ea4b36eb0d72890af27b7fd25f3188cba9760f1163ea6d15acbf031bf9ec824bcd039bf1ac7e78b149b8c2128d411cbebbb64fd7d96a0f4ef7fa0a74f79fc42fe0cf3632644f53fa51537a803895974c1f21fa2bc150bb8533944ed"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

1.941795032s ago: executing program 4 (id=3052):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f00000003c0)=""/146, &(0x7f0000000480)=0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a40)={{<r5=>r0, &(0x7f00000004c0)='syz0\x00', 0x248002, &(0x7f0000000500)={@align=0x2ce2, {0x7, 0x87c, 0x4, 0x3}}, 0x3, &(0x7f0000000540), &(0x7f0000000580)}, 0x3, &(0x7f0000000940)=[{0x2, 0x0, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="3a687c332259984e5903caec7911dd3f8dcf8468f8bb24ec349515e315bdf409d8ffc2cd140bce0ae7ade64df99cce87fe952ee99fa9fd69e484aa886c5afae75e7921527351e0df740ec114567ebbfdec9479c6162b8fd35d9ba13f75baf7bf405aa54a761c26e685348baca42a4be23135f0a33177069163c0160127897c3355bb18b61e83802f357c30e49b8b5ffda91c897f64c1a21db6d971cbbb0da768792f2a13501e0d78ae6b09830fee4a915b01ce1c68bac1a1cf2993ab279cf7f27e88e93491fc99240ff5ec1b8304e5d7164c3c78cbbfb18e0750d147f19401ccaff55430d5781ea6", 0xe8, 0x28}, {0x2, 0xfffffff8, &(0x7f0000000700)='ip6tnl0\x00', &(0x7f0000000740)="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", 0xfc, 0x8}, {0xc80c934711b56dcd, 0x0, &(0x7f0000000840)='\xa1:\xeb}\x00', &(0x7f0000000880)="d67a7e38b3efe3de635672124b246bc3229a89c62c2660bf61090220e4fd9b5d4e7885e722dd6d0f49601e1b230e7d547fb85326d170f1b5576348fb3404663800abe2fe7300b9aea328833fd96cca8fdab06a49a9e3216bb60d5e1d9ee483ea8902e103138c621d30605422dee67e1db3320ea32d4a16fade4dd09e7e3448b75b80ba280d1c65843502227d7cf979a2de4e70c25a7449d8f976b4392a24bbea40c0d4ac004d4ab817632581debdc0dda5d1f1daa418298551d5575c", 0xbc, 0x18}]})
write$nbd(r5, &(0x7f0000000ac0)={0x67446698, 0x0, 0x4, 0x0, 0x4, "736c0ac74e87b7b1685d5d88f43261f94a2b0844d32ff0ca2e2c38fb48fdb51c610d156466de3393c705a0ba9a110650f7565a697019d699f6e80bd2daef7902e25300191f15255a071cb9afba13cdbe62ca7120033304dbec6303a7dd7d3e9dbcf89a0c99c26e5c51a71f13e9b7c4dd78686fcae710613c5c7f0e238e8776f4469d4ab5bc2faedec4c951bfef27562e65e2ed2205309d4b7a65cae9034e7f6a303bdfd68cc9c8a39677e7b08ba19ecfceae25a9aaf2b8e785"}, 0xc9) (async)
write$nbd(r5, &(0x7f0000000ac0)={0x67446698, 0x0, 0x4, 0x0, 0x4, "736c0ac74e87b7b1685d5d88f43261f94a2b0844d32ff0ca2e2c38fb48fdb51c610d156466de3393c705a0ba9a110650f7565a697019d699f6e80bd2daef7902e25300191f15255a071cb9afba13cdbe62ca7120033304dbec6303a7dd7d3e9dbcf89a0c99c26e5c51a71f13e9b7c4dd78686fcae710613c5c7f0e238e8776f4469d4ab5bc2faedec4c951bfef27562e65e2ed2205309d4b7a65cae9034e7f6a303bdfd68cc9c8a39677e7b08ba19ecfceae25a9aaf2b8e785"}, 0xc9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0xb619, '.\x00'}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r6, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001"], 0xb4}}, 0x4000000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001"], 0xb4}}, 0x4000000)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000)
sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
listen(r1, 0x800)
preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000280)=""/221, 0xdd}], 0x4, 0x1, 0x6)

1.701429619s ago: executing program 2 (id=3054):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x138, 0x210, 0x2b0, 0x0, 0x2b0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x3f00}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'tunl0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xa, @rand_addr=0x64010100, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)

1.676390316s ago: executing program 3 (id=3055):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}]}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x5815)
socket(0xa, 0x5, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0)
ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000001000000000000000900000085000000870000009500000000000000ec32dc01"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800080000020000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)

1.522120264s ago: executing program 1 (id=3056):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff}, 0xe)
r1 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x1d, 0x2, 0x6)
epoll_create(0x2)
unshare(0x22020400)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="07000000010003", 0x7)
r4 = socket$kcm(0x21, 0x2, 0xa)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000b92c2b000000001800000000000000100100000c000000aa00000000000000"], 0x30}, 0xfc40)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff}, 0xe) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket(0x1d, 0x2, 0x6) (async)
epoll_create(0x2) (async)
unshare(0x22020400) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) (async)
bind$can_j1939(r2, 0x0, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r3, &(0x7f0000000040)="07000000010003", 0x7) (async)
socket$kcm(0x21, 0x2, 0xa) (async)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000b92c2b000000001800000000000000100100000c000000aa00000000000000"], 0x30}, 0xfc40) (async)

1.421109559s ago: executing program 2 (id=3057):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0x15}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet6_int(r0, 0x84, 0x8, &(0x7f0000000040)=0x1000, 0x4)

1.367782342s ago: executing program 3 (id=3058):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a30000000000800410072786500140033"], 0x38}}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

1.18202974s ago: executing program 1 (id=3059):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x5, 0x7, 0x7, 0x8000, 0x400, 0x4]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
unshare(0x2a060400)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(0xffffffffffffffff, 0x0, 0x0)
bind$x25(r3, &(0x7f0000000080), 0x12)

1.178915548s ago: executing program 3 (id=3060):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$unix(r1, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000001c0)={'ip6gretap0\x00'})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
unshare(0x22020400)
socket$tipc(0x1e, 0x5, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000180), 0x2ae, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="2001000012001307"], 0x120}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x44)
ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

973.502768ms ago: executing program 2 (id=3061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x2, 0x9, 0x1, 0x2, 0x6, 0x6}}, {0x10, 0x2, [0xa, 0x4, 0x5, 0x6, 0x1, 0xa]}}, {{0x1c, 0x1, {0x0, 0x5, 0x3896, 0x80, 0x2, 0xf, 0xb, 0x4}}, {0xc, 0x2, [0x2, 0xfff, 0x7f, 0x6]}}, {{0x45, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0xa, 0x4}}, {0xc, 0x2, [0x3389, 0x4, 0x600, 0x2]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0xe0}}, 0x4000010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000911019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))

830.006663ms ago: executing program 1 (id=3062):
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aac3f72cc9f0ba1f848350000100000fe098000001294", 0x21}], 0x1}, 0x2000489c)

829.49821ms ago: executing program 4 (id=3063):
r0 = socket(0x2, 0x80805, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0)

730.598032ms ago: executing program 2 (id=3064):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000020605000000000000000000fe1500070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001c000000004080008400000005c05000500020000000500010006"], 0x6c}}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2074, 0x0, 0x0, 0x0, 0x5e09}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x640, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94)

719.323328ms ago: executing program 1 (id=3065):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)={0x0, {{0xa, 0x4e23, 0xffff8e27, @mcast2, 0xc}}}, 0x90)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x7ffffffd}}, 0x2, 0x0, 0xe457, 0x0, 0xa, 0x6}, 0x9c)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @remote, @broadcast}, &(0x7f0000000100)=0xc)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x9, 0x6, 0x400, 0x3, 0x80000002, r2})
r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000))

548.765425ms ago: executing program 3 (id=3066):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x138, 0x210, 0x2b0, 0x0, 0x2b0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x6000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'tunl0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xa, @rand_addr=0x64010100, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)

470.387823ms ago: executing program 4 (id=3067):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/171, 0xab}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000440)=""/126, 0x7e}], 0x7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000933a0000c00000000800000046020000", @ANYRES32, @ANYBLOB="1600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/28], 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) (async)
r4 = socket$kcm(0x11, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000b40)={<r7=>0xffffffffffffffff, &(0x7f0000000a40)='/dev/net/tun\x00', 0x40200, &(0x7f0000000a80)={@_ha_fsid={[0x0, 0xd]}, {0xffff, 0x900, 0xfff, 0x200}}, 0x1, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0x7})
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0x0, 0x9, 0x10}, 0xc) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r11) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r12, 0x26}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r11}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x28, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x64}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0x8, 0x9, 0x7, 0x40, 0x3c}, @call={0x85, 0x0, 0x0, 0xc7}, @jmp={0x5, 0x1, 0x0, 0x7, 0x9, 0xfffffffffffffff8}]}, &(0x7f00000008c0)='syzkaller\x00', 0xf, 0xb7, &(0x7f0000000900)=""/183, 0x40f00, 0x22, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0xf, 0xb93, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d00)=[r7, 0x1, r8, r9, r10, r13], &(0x7f0000000d40)=[{0x0, 0x2, 0xe}], 0x10, 0x1ff}, 0x94) (async)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000540)=""/179) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc"], 0xffdd)

469.938672ms ago: executing program 2 (id=3068):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0x87, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x1, 'sed\x00', 0x0, 0x1, 0x2e}, {@remote, 0x4e24, 0x10000, 0x6, 0x9, 0x4}}, 0x44)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r6=>0x0})
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0xf, 0x756e, @vifc_lcl_ifindex=r6, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x9}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={<r8=>r5, &(0x7f0000000200)='^~@!\x83-[\x00', 0x28000, &(0x7f00000002c0)={@align=0x200000000000000, {0x8, 0x9, 0x5, 0x3}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000440)=0x9})
ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000540)={0x8, &(0x7f0000000500)=[{0x5f39, 0x3e, 0x81, 0x4}, {0x9, 0x7, 0xb, 0x8000}, {0x80, 0x5, 0x9, 0xc}, {0x4000, 0x2, 0x60, 0x9}, {0x5, 0x6, 0x9, 0x9}, {0x1, 0x81, 0xc, 0x9}, {0x1, 0x6, 0x7, 0x3}, {0xdce, 0x1, 0x3, 0x2}]})
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000001c0)=0x5, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000300)=@ethtool_ringparam={0x1, 0x6, 0x7, 0x2, 0x0, 0x0, 0x4, 0x3, 0x80000001}})
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000600)=<r11=>0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@migrate={0x50, 0x21, 0x10, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x32}, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x4, 0x4e24, 0x36, 0x2, 0x20, 0xa0, 0x67, r3, r11}, 0x6e6bba}}, 0x50}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
writev(r12, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98", 0x2}], 0x1)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="b3", 0x1}], 0x1, &(0x7f0000000040)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}], 0x18, 0x40}, 0x6008045)

298.450446ms ago: executing program 3 (id=3069):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0x0) (async)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0)

285.83728ms ago: executing program 1 (id=3070):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={<r5=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000680)=r5, 0x4)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x80b0}, 0x20008890)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], <r6=>0x0, 0x8000a4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r6}, 0x94)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000040)=0x4, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000500)={r5, 0x7}, 0x8)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x2e8, 0xc0, 0xc0, 0x228, 0x2e8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xff, 0x2}}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0xffffff00, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0x70, 0x70}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @empty, 0x5607d1016e8ee1dd, 0xffffff00, 'wlan0\x00', 'syz_tun\x00', {}, {}, 0xff, 0x0, 0x1a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x6, 0x7, 0x6, 0x2, 0x1], 0x6, 0x5}, {0x1, [0x3, 0x4, 0x3, 0x4, 0x7], 0x4, 0x6}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@addrtype={{0x30}, {0x0, 0xe48, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8)
unshare(0xe040400)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, &(0x7f0000000100)=0x3, 0x5, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006d00673c2bbd7000ffdadf25000000003b"], 0x20}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x2, 0x3, 0x0, [{@private=0xa010132}, {@local, 0x4000}, {@empty}, {@remote}, {@private}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@private}]}]}}}}}}}, 0x0)
r12 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r12, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x2, 0x70bd2b, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

105.697975ms ago: executing program 4 (id=3071):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) (rerun: 32)
close(r1) (async, rerun: 32)
r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async)
r8 = socket(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r10 = socket(0x10, 0x803, 0x2) (rerun: 32)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) (async)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) (async, rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async, rerun: 32)
socket$unix(0x1, 0x1, 0x0) (rerun: 32)
socket$inet6(0xa, 0x3, 0x5)
r13 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020400) (async)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4)

0s ago: executing program 3 (id=3072):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3715], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @isdn={0x22, 0x6, 0x10, 0x88, 0x8}, @qipcrtr={0x2a, 0x0, 0xfffffffe}, @ax25={0x3, @null}, 0x3, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='team_slave_1\x00', 0x843, 0x9, 0xd})

kernel console output (not intermixed with test programs):

][T11986]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.076254][T11986]  ? aa_sock_msg_perm+0xf1/0x1b0
[  252.076288][T11986]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  252.076317][T11986]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.076343][T11986]  ____sys_sendmsg+0x9b9/0xa20
[  252.076367][T11986]  ? __might_fault+0xaf/0x130
[  252.076403][T11986]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.076436][T11986]  ? import_iovec+0x73/0xa0
[  252.076465][T11986]  ___sys_sendmsg+0x2a5/0x360
[  252.076492][T11986]  ? __lock_acquire+0x683/0x2cd0
[  252.076520][T11986]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.076587][T11986]  ? __fget_files+0x2a/0x420
[  252.076613][T11986]  ? __fget_files+0x3a2/0x420
[  252.076650][T11986]  __x64_sys_sendmsg+0x1bd/0x2a0
[  252.076678][T11986]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  252.076712][T11986]  ? __pfx_ksys_write+0x10/0x10
[  252.076759][T11986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.076783][T11986]  do_syscall_64+0x174/0x580
[  252.076807][T11986]  ? trace_irq_disable+0x3b/0x140
[  252.076839][T11986]  ? clear_bhb_loop+0x40/0x90
[  252.076866][T11986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.076888][T11986] RIP: 0033:0x7fbe9ed9ce59
[  252.076908][T11986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.076927][T11986] RSP: 002b:00007fbe9fc2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.076948][T11986] RAX: ffffffffffffffda RBX: 00007fbe9f015fa0 RCX: 00007fbe9ed9ce59
[  252.076964][T11986] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  252.076977][T11986] RBP: 00007fbe9fc2b090 R08: 0000000000000000 R09: 0000000000000000
[  252.076989][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.077001][T11986] R13: 00007fbe9f016038 R14: 00007fbe9f015fa0 R15: 00007fff1786f428
[  252.077034][T11986]  </TASK>
[  252.405236][T11995] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1516'.
[  252.607403][T11980] netlink: 'syz.1.1511': attribute type 2 has an invalid length.
[  253.188385][T12039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1523'.
[  253.189471][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'.
[  253.322702][T12028] block nbd3: not configured, cannot reconfigure
[  253.404566][T12032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.585202][T12054] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.1532'.
[  253.618434][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'.
[  253.628075][T12052] syzkaller0: entered promiscuous mode
[  253.633840][T12052] syzkaller0: entered allmulticast mode
[  253.642529][T12054] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1532'.
[  255.686469][T12079] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1538'.
[  255.702043][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'.
[  255.787174][   T12] net_ratelimit: 10 callbacks suppressed
[  255.787196][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  255.937131][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  255.970107][T12092] FAULT_INJECTION: forcing a failure.
[  255.970107][T12092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.027679][T12092] CPU: 0 UID: 0 PID: 12092 Comm: syz.0.1541 Not tainted syzkaller #0 PREEMPT(full) 
[  256.027710][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  256.027722][T12092] Call Trace:
[  256.027731][T12092]  <TASK>
[  256.027740][T12092]  dump_stack_lvl+0xe8/0x150
[  256.027770][T12092]  should_fail_ex+0x40c/0x560
[  256.027810][T12092]  _copy_to_user+0x31/0xb0
[  256.027837][T12092]  simple_read_from_buffer+0xe1/0x170
[  256.027870][T12092]  proc_fail_nth_read+0x1bb/0x230
[  256.027902][T12092]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  256.027934][T12092]  ? rw_verify_area+0x24a/0x4c0
[  256.027966][T12092]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  256.027993][T12092]  vfs_read+0x213/0xa80
[  256.028029][T12092]  ? __pfx___mutex_lock+0x10/0x10
[  256.028055][T12092]  ? __pfx_vfs_read+0x10/0x10
[  256.028087][T12092]  ? __fget_files+0x2a/0x420
[  256.028118][T12092]  ? __fget_files+0x3a2/0x420
[  256.028143][T12092]  ? __fget_files+0x2a/0x420
[  256.028179][T12092]  ksys_read+0x150/0x270
[  256.028211][T12092]  ? __pfx_ksys_read+0x10/0x10
[  256.028254][T12092]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.028295][T12092]  do_syscall_64+0x174/0x580
[  256.028319][T12092]  ? trace_irq_disable+0x3b/0x140
[  256.028356][T12092]  ? clear_bhb_loop+0x40/0x90
[  256.028383][T12092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.028405][T12092] RIP: 0033:0x7fbe9ed5d68e
[  256.028425][T12092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  256.028443][T12092] RSP: 002b:00007fbe9fc2afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  256.028465][T12092] RAX: ffffffffffffffda RBX: 00007fbe9fc2b6c0 RCX: 00007fbe9ed5d68e
[  256.028480][T12092] RDX: 000000000000000f RSI: 00007fbe9fc2b0a0 RDI: 0000000000000004
[  256.028493][T12092] RBP: 00007fbe9fc2b090 R08: 0000000000000000 R09: 0000000000000000
[  256.028505][T12092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.028517][T12092] R13: 00007fbe9f016038 R14: 00007fbe9f015fa0 R15: 00007fff1786f428
[  256.028552][T12092]  </TASK>
[  256.295021][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  256.353088][T12096] dummy0: entered promiscuous mode
[  256.363444][T12096] dummy0: left promiscuous mode
[  256.412469][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  256.507609][T12105] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1544'.
[  256.532723][T12107] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1545'.
[  256.544690][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  256.571235][T12110] netlink: 748 bytes leftover after parsing attributes in process `syz.2.1547'.
[  256.666450][   T36] bond3: (slave batadv0): failed to get link speed/duplex
[  256.784319][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  256.894867][ T7309] bond3: (slave batadv0): failed to get link speed/duplex
[  257.035002][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  257.166400][   T36] bond3: (slave batadv0): failed to get link speed/duplex
[  257.231541][T12144] ip6gre1: entered promiscuous mode
[  257.250071][T12144] ip6gre1: entered allmulticast mode
[  257.292073][T12144] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  257.777033][T12171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.795658][T12171] syzkaller0: entered promiscuous mode
[  257.811711][T12171] syzkaller0: entered allmulticast mode
[  257.845424][T12171] tipc: Resetting bearer <eth:syzkaller0>
[  257.894493][T12169] tipc: Resetting bearer <eth:syzkaller0>
[  257.996916][T12169] tipc: Disabling bearer <eth:syzkaller0>
[  258.163802][T12186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1565'.
[  258.195337][T12186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1565'.
[  258.217345][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'.
[  258.247683][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'.
[  258.846051][T12219] netlink: 'syz.2.1573': attribute type 32 has an invalid length.
[  259.010928][T12227] netlink: 'syz.4.1574': attribute type 5 has an invalid length.
[  259.027132][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'.
[  259.237464][T12238] veth1_to_batadv: entered promiscuous mode
[  259.249732][T12238] veth1_to_batadv: entered allmulticast mode
[  259.781068][T12278] xt_hashlimit: size too large, truncated to 1048576
[  260.118219][T12299] netlink: 'syz.1.1592': attribute type 9 has an invalid length.
[  260.133867][   T30] audit: type=1804 audit(1781498121.662:4): pid=12299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1592" name="/newroot/295/cgroup.controllers" dev="tmpfs" ino=1520 res=1 errno=0
[  260.186304][   T30] audit: type=1800 audit(1781498121.692:5): pid=12299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1592" name="cgroup.controllers" dev="tmpfs" ino=1520 res=0 errno=0
[  260.894750][   T12] net_ratelimit: 27 callbacks suppressed
[  260.894772][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  261.045519][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  261.165326][   T36] bond3: (slave batadv0): failed to get link speed/duplex
[  261.305118][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  261.326041][T12360] __nla_validate_parse: 6 callbacks suppressed
[  261.326062][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'.
[  261.346871][T12361] xt_addrtype: ipv6 does not support BROADCAST matching
[  261.391546][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1607'.
[  261.444483][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  261.725266][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  261.965141][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  262.017391][T12388] syzkaller0: entered promiscuous mode
[  262.030296][T12388] syzkaller0: entered allmulticast mode
[  262.094260][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  262.178202][T12406] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1620'.
[  262.284913][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  262.324087][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1622'.
[  262.392674][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'.
[  262.405346][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  262.490510][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'.
[  262.550945][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'.
[  262.577099][T12428] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.1627'.
[  262.637121][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'.
[  262.936572][T12454] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1633'.
[  263.024200][T12457] sctp: [Deprecated]: syz.0.1635 (pid 12457) Use of struct sctp_assoc_value in delayed_ack socket option.
[  263.024200][T12457] Use struct sctp_sack_info instead
[  263.230434][T12474] x_tables: duplicate entry at hook 1
[  264.926165][T12547] xt_hashlimit: size too large, truncated to 1048576
[  265.032538][T12558] lo: entered allmulticast mode
[  265.834800][T12584] erspan0: entered allmulticast mode
[  265.924627][ T7309] net_ratelimit: 35 callbacks suppressed
[  265.924649][ T7309] bond3: (slave batadv0): failed to get link speed/duplex
[  266.081024][T12597] netlink: 'syz.3.1674': attribute type 49 has an invalid length.
[  266.209771][T12597] ip6gretap0: entered allmulticast mode
[  266.294720][   T36] bond3: (slave batadv0): failed to get link speed/duplex
[  266.353939][T12603] __nla_validate_parse: 8 callbacks suppressed
[  266.353959][T12603] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1676'.
[  266.517407][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  266.548988][T12612] netlink: 'syz.4.1678': attribute type 1 has an invalid length.
[  266.658041][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  266.774345][T12623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1679'.
[  266.815740][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  266.842127][T12628] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1681'.
[  266.868299][T12628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1681'.
[  266.934589][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  267.068105][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'.
[  267.114818][T12632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  267.194719][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  267.336155][   T36] bond3: (slave batadv0): failed to get link speed/duplex
[  267.503161][T12655] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1688'.
[  267.530262][T12651] erspan0: default FDB implementation only supports local addresses
[  267.585589][   T36] bond3: (slave batadv0): failed to get link speed/duplex
[  267.693326][T12659] netlink: 'syz.3.1689': attribute type 1 has an invalid length.
[  267.941214][T12666] bond5: (slave dummy0): making interface the new active one
[  267.979811][T12666] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  268.022443][T12671] bond5: entered promiscuous mode
[  268.055410][T12671] dummy0: entered promiscuous mode
[  268.153250][T12685] xt_HMARK: spi-set and port-set can't be combined
[  268.188998][T12658] bond5: left promiscuous mode
[  268.197022][T12658] dummy0: left promiscuous mode
[  268.208119][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'.
[  268.415302][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'.
[  268.467205][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'.
[  268.533501][T12701] 8021q: adding VLAN 0 to HW filter on device bond8
[  268.630262][T12727] netlink: 'syz.4.1697': attribute type 2 has an invalid length.
[  268.666784][T12727] netlink: 'syz.4.1697': attribute type 2 has an invalid length.
[  268.711765][T12707] bond8: (slave veth15): Enslaving as an active interface with an up link
[  268.769152][T12707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1698'.
[  268.868744][T12734] x_tables: ip_tables: icmp match: only valid for protocol 1
[  268.929731][T12707] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  268.999226][T12716] syzkaller1: entered promiscuous mode
[  269.007370][T12716] syzkaller1: entered allmulticast mode
[  269.609436][T12762] netlink: 'syz.3.1713': attribute type 1 has an invalid length.
[  269.810780][T12762] 8021q: adding VLAN 0 to HW filter on device bond6
[  269.827166][T12767] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode
[  269.839790][T12767] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode
[  269.854933][T12780] veth0: entered promiscuous mode
[  269.877640][T12777] veth0: left promiscuous mode
[  269.993479][T12740] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode
[  270.027980][T12740] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode
[  270.060252][T12740] team0: Port device netdevsim1 removed
[  270.239164][T12799] netlink: 'syz.0.1721': attribute type 28 has an invalid length.
[  270.276159][T12799] netlink: 'syz.0.1721': attribute type 3 has an invalid length.
[  270.405751][T12804] bridge0: port 1(vlan0) entered blocking state
[  270.438725][T12804] bridge0: port 1(vlan0) entered disabled state
[  270.462350][T12804] vlan0: entered allmulticast mode
[  270.499465][T12804] dummy0: entered allmulticast mode
[  270.539697][T12813] vlan0: entered promiscuous mode
[  270.551473][T12813] dummy0: entered promiscuous mode
[  271.098121][  T755] net_ratelimit: 14 callbacks suppressed
[  271.098142][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  271.284657][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  271.392417][T12852] netlink: 'syz.0.1736': attribute type 3 has an invalid length.
[  271.404299][   T36] bond3: (slave batadv0): failed to get link speed/duplex
[  271.433110][T12852] netlink: 'syz.0.1736': attribute type 3 has an invalid length.
[  271.535975][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  271.617129][T12862] __nla_validate_parse: 11 callbacks suppressed
[  271.617159][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'.
[  271.641778][T12863] netlink: 'syz.3.1738': attribute type 2 has an invalid length.
[  271.664325][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  271.784770][ T7309] bond3: (slave batadv0): failed to get link speed/duplex
[  271.934853][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  272.095141][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  272.234273][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  272.864620][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  272.883427][T12893] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ůŕ^!‚Y‡°”őËí
[  272.883427][T12893] 3ěUH†5rşBnśŹć
[  273.019855][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5
[  273.057726][T12924] netlink: 'syz.4.1745': attribute type 10 has an invalid length.
[  273.163153][T12929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'.
[  273.188581][T12929] netlink: 'syz.1.1747': attribute type 7 has an invalid length.
[  273.207419][T12929] netlink: 'syz.1.1747': attribute type 8 has an invalid length.
[  273.233514][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1747'.
[  273.604496][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'.
[  273.654051][T12947] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  273.757549][T12957] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1754'.
[  274.540100][T12989] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  274.771423][T13004] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode
[  274.810145][T13004] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode
[  274.913654][T13008] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  274.953495][T13009] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  275.030575][T13011] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1768'.
[  275.041680][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6
[  275.216675][T13023] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.240147][T13023] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.255286][T13023] bridge_slave_0: entered allmulticast mode
[  275.328876][T13023] bridge_slave_0: entered promiscuous mode
[  275.358632][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1772'.
[  275.649375][T13046] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1778'.
[  275.863187][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'.
[  275.898652][T13057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1780'.
[  275.939369][T13054] ip6erspan0: entered allmulticast mode
[  275.964107][T13057] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  276.125377][ T3389] net_ratelimit: 27 callbacks suppressed
[  276.125398][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  276.305223][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  276.445558][ T1040] bond3: (slave batadv0): failed to get link speed/duplex
[  276.591168][T13094] bridge3: entered promiscuous mode
[  276.648004][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  276.751367][T13098] netlink: 'syz.4.1792': attribute type 30 has an invalid length.
[  276.794990][  T619] bond3: (slave batadv0): failed to get link speed/duplex
[  276.935797][T13114] __nla_validate_parse: 2 callbacks suppressed
[  276.935816][T13114] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1795'.
[  276.967318][T13098] bond9: option arp_missed_max: invalid value (0)
[  276.980023][T13098] bond9: option arp_missed_max: allowed values 1 - 255
[  276.989197][T13098] bond9 (unregistering): Released all slaves
[  277.017489][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'.
[  277.027156][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  277.067721][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7
[  277.171975][T13121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1797'.
[  277.275737][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  277.367813][T13128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1798'.
[  277.538026][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  277.565475][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'.
[  277.664347][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  277.674526][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'.
[  277.716995][T13147] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  277.747270][T13147] Unsupported ieee802154 address type: 0
[  277.804825][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  277.843139][T13155] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  277.882590][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'.
[  277.934868][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  278.076745][T13162] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1807'.
[  278.162717][T13162] netlink: 'syz.0.1807': attribute type 3 has an invalid length.
[  278.213805][T13175] syzkaller0: entered promiscuous mode
[  278.229312][T13175] syzkaller0: entered allmulticast mode
[  278.267896][T13169] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1809'.
[  278.317472][T13171] virt_wifi0 speed is unknown, defaulting to 1000
[  278.682242][T13188] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.721187][T13191] set match dimension is over the limit!
[  278.729509][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8
[  278.807412][T13188] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.042173][T13188] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.493609][T13188] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.647041][T10282] udevd[10282]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  279.865790][T13217] netlink: 'syz.2.1818': attribute type 6 has an invalid length.
[  279.924812][T13217] netlink: 'syz.2.1818': attribute type 23 has an invalid length.
[  279.995888][T13217] IPv6: NLM_F_CREATE should be specified when creating new route
[  280.279568][T13235] netlink: 'syz.0.1821': attribute type 1 has an invalid length.
[  280.642085][T13250] virt_wifi0 speed is unknown, defaulting to 1000
[  280.717074][T13265] netlink: 'syz.0.1827': attribute type 1 has an invalid length.
[  280.982527][T13275] xt_l2tp: unknown flags: 51
[  281.134326][ T7312] net_ratelimit: 19 callbacks suppressed
[  281.134347][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  281.452208][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  281.681502][T13297] bond9 (unregistering): Released all slaves
[  281.734298][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  281.865008][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  281.986528][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9
[  282.034506][ T3372] bond3: (slave batadv0): failed to get link speed/duplex
[  282.086412][T13314] __nla_validate_parse: 8 callbacks suppressed
[  282.086434][T13314] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1839'.
[  282.174280][ T3372] bond3: (slave batadv0): failed to get link speed/duplex
[  282.209508][T13320] syzkaller0: entered promiscuous mode
[  282.220235][T13320] syzkaller0: entered allmulticast mode
[  282.249718][T13320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.304408][  T755] bond3: (slave batadv0): failed to get link speed/duplex
[  282.439599][T13318] tipc: Resetting bearer <eth:syzkaller0>
[  282.518979][T13318] tipc: Disabling bearer <eth:syzkaller0>
[  282.626852][T13336] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  282.648005][T13336] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.679642][T13336] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  282.738488][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'.
[  282.770199][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'.
[  282.791667][T13345] netlink: 'syz.2.1846': attribute type 13 has an invalid length.
[  282.810527][T13345] netlink: 'syz.2.1846': attribute type 11 has an invalid length.
[  282.856421][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  282.911910][T13336] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  282.950983][T13336] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.989524][T13336] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  283.077956][T13354] openvswitch: netlink: Flow key attr not present in new flow.
[  283.088639][  T619] bond3: (slave batadv0): failed to get link speed/duplex
[  283.148485][T13336] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.184642][T13336] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.217111][T13336] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  283.263020][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'.
[  283.495315][T13366] bridge0: port 2(syz_tun) entered blocking state
[  283.521047][T13366] bridge0: port 2(syz_tun) entered disabled state
[  283.535895][T13366] syz_tun: entered allmulticast mode
[  283.543042][T13366] syz_tun: entered promiscuous mode
[  283.577541][T13366] bridge0: port 2(syz_tun) entered blocking state
[  283.584247][T13366] bridge0: port 2(syz_tun) entered forwarding state
[  283.680194][T13336] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.721676][T13336] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.733642][T13336] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  283.931861][ T7312] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  283.967842][ T7312] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  283.998732][ T7312] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  284.099714][T13390] netlink: 'syz.3.1854': attribute type 21 has an invalid length.
[  284.109783][ T7312] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.132196][ T7312] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  284.156211][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1856'.
[  284.168335][ T7312] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  284.185872][T13393] nbd: must specify at least one socket
[  284.213800][T13390] netlink: 'syz.3.1854': attribute type 21 has an invalid length.
[  284.258327][ T7312] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.273496][ T7312] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  284.301600][ T7312] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  284.502691][T13406] batadv0: entered promiscuous mode
[  284.548114][T13336] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.583784][T13336] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  284.607899][T13336] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  284.657558][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'.
[  284.678674][T13415] netlink: 'syz.4.1858': attribute type 20 has an invalid length.
[  284.708741][T13415] netlink: 'syz.4.1858': attribute type 21 has an invalid length.
[  284.729745][T13336] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.767317][T13336] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  284.803332][T13336] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  284.820439][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'.
[  284.843569][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'.
[  285.012054][T13336] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  285.040794][T13431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1860'.
[  285.066848][T13336] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  285.099903][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1862'.
[  285.104357][T13336] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  285.197891][T13436] tipc: Failed to remove unknown binding: 66,0,0/0:3360179251/3360179253
[  285.216335][T13436] tipc: Failed to remove unknown binding: 66,0,0/0:3360179251/3360179252
[  285.232543][T13436] tipc: Failed to remove unknown binding: 66,0,0/0:3360179251/3360179253
[  285.242096][T13436] tipc: Failed to remove unknown binding: 66,0,0/0:3360179251/3360179252
[  285.269708][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10
[  286.059412][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11
[  286.462080][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12
[  303.106261][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'.
[  303.142564][T13620] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1865'.
[  303.186442][T13624] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1867'.
[  303.425526][T13637] netlink: 'syz.0.1870': attribute type 6 has an invalid length.
[  303.451841][T13637] netlink: 'syz.0.1870': attribute type 7 has an invalid length.
[  303.472965][T13637] netlink: 'syz.0.1870': attribute type 8 has an invalid length.
[  303.474018][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'.
[  303.551272][T13644] syzkaller1: entered promiscuous mode
[  303.582222][T13644] syzkaller1: entered allmulticast mode
[  303.664674][T13652] netlink: 'syz.0.1874': attribute type 1 has an invalid length.
[  303.679238][T13652] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.1874'.
[  303.723890][T13652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1874'.
[  303.859566][T13652] bond_slave_0: entered promiscuous mode
[  303.874725][T13652] bond_slave_0: entered allmulticast mode
[  304.193633][  T809] IPVS: starting estimator thread 0...
[  304.209984][T13671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1878'.
[  304.296578][T13676] IPVS: using max 26 ests per chain, 62400 per kthread
[  304.853680][T13702] netlink: 'syz.0.1887': attribute type 12 has an invalid length.
[  323.349205][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1890'.
[  323.440228][T13769] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.462336][T13764] bridge_slave_1: entered promiscuous mode
[  323.521239][T13775] netlink: 'syz.2.1895': attribute type 39 has an invalid length.
[  323.542145][T13773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.587866][T13779] bridge0: port 3(vlan3) entered blocking state
[  323.614621][T13779] bridge0: port 3(vlan3) entered disabled state
[  323.640630][T13779] vlan3: entered allmulticast mode
[  323.655527][T13779] geneve0: entered allmulticast mode
[  323.675778][T13779] vlan3: entered promiscuous mode
[  323.680995][T13779] geneve0: entered promiscuous mode
[  323.758372][T13788] bond9: entered allmulticast mode
[  323.819498][T13788] macvlan2: entered promiscuous mode
[  323.819999][T13795] netlink: 'syz.1.1900': attribute type 12 has an invalid length.
[  323.833626][T13788] macvlan2: entered allmulticast mode
[  323.847268][T13788] bond9: entered promiscuous mode
[  323.856985][T13788] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  323.881013][T13788] bond9: left promiscuous mode
[  324.126995][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1905'.
[  324.453788][T13820] hmó3)˙: entered promiscuous mode
[  324.478671][T13819] netlink: 'syz.2.1911': attribute type 12 has an invalid length.
[  324.608696][T13827] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  324.762348][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'.
[  324.779651][T13839] syzkaller0: entered promiscuous mode
[  324.792071][T13839] syzkaller0: entered allmulticast mode
[  324.817916][T13839] net_ratelimit: 5 callbacks suppressed
[  324.817933][T13839] TC_ACT_REPEAT abuse ?
[  325.095494][T13858] netlink: 'syz.4.1926': attribute type 1 has an invalid length.
[  325.104974][T13858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1926'.
[  325.133824][T13852] bond8: entered promiscuous mode
[  325.140328][T13852] bond8: entered allmulticast mode
[  325.146133][T13852] 8021q: adding VLAN 0 to HW filter on device bond8
[  325.153520][T13860] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  325.452943][T13878] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1931'.
[  325.593696][T13889] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1935'.
[  325.606635][T13887] netlink: ct family unspecified
[  325.612289][T13887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.632609][T13891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1932'.
[  325.648782][T13889] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  325.703950][T13887] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  325.813067][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'.
[  325.907470][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'.
[  325.931780][T13909] syz_tun: entered promiscuous mode
[  325.939418][T13909] team0: Port device syz_tun added
[  326.000552][T13903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1938'.
[  326.355781][T13918] vlan3: entered promiscuous mode
[  326.380793][T13918] bridge0: entered promiscuous mode
[  326.443460][T13919] netlink: zone id is out of range
[  326.464290][T13919] netlink: zone id is out of range
[  326.469630][T13919] netlink: zone id is out of range
[  326.482275][T13921] pim6reg: entered allmulticast mode
[  326.493207][T13921] pim6reg: left allmulticast mode
[  326.501248][T13919] netlink: zone id is out of range
[  326.524535][T13919] netlink: zone id is out of range
[  326.634628][T13933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.646019][T13934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.655190][T13933] syzkaller0: entered promiscuous mode
[  326.661002][T13933] syzkaller0: entered allmulticast mode
[  326.736509][T13939] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  326.749867][T13937] bridge4: entered allmulticast mode
[  326.764353][T13933] tipc: Resetting bearer <eth:syzkaller0>
[  326.784344][T13931] tipc: Resetting bearer <eth:syzkaller0>
[  326.803129][T13931] tipc: Disabling bearer <eth:syzkaller0>
[  326.837217][T13942] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode
[  326.872001][T13942] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode
[  327.149386][T13957] netlink: 'syz.1.1955': attribute type 11 has an invalid length.
[  327.681915][T13977] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  327.702426][T13977] bond7: left promiscuous mode
[  327.707552][T13977] batadv0: left promiscuous mode
[  327.712687][T13977] batadv0: left allmulticast mode
[  327.719550][T13977] gretap1: left promiscuous mode
[  327.735079][T13977] ip6erspan0: left allmulticast mode
[  327.751588][T13977] bond9: left allmulticast mode
[  328.312393][T13999] netlink: 'syz.4.1971': attribute type 1 has an invalid length.
[  328.362892][T14002] __nla_validate_parse: 6 callbacks suppressed
[  328.362911][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'.
[  328.383537][T13999] bond10: entered promiscuous mode
[  328.390541][T13999] 8021q: adding VLAN 0 to HW filter on device bond10
[  328.449349][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'.
[  328.475936][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'.
[  328.681834][T14014] vlan0: entered allmulticast mode
[  328.698683][T14014] veth0_vlan: entered allmulticast mode
[  328.742965][T14019] netlink: 'syz.4.1975': attribute type 58 has an invalid length.
[  328.941333][T14025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1979'.
[  329.122946][T14036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1982'.
[  329.230923][T14046] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1986'.
[  329.244866][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'.
[  329.264362][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1986'.
[  329.284691][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'.
[  329.314620][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1986'.
[  329.358833][T14053] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  329.435079][T14053] netlink: 'syz.0.1987': attribute type 1 has an invalid length.
[  329.575457][T14053] bond9: entered promiscuous mode
[  329.581138][T14053] 8021q: adding VLAN 0 to HW filter on device bond9
[  329.589931][T14058] bond9: entered allmulticast mode
[  330.290821][T14082] netlink: 'syz.3.1994': attribute type 9 has an invalid length.
[  330.309284][T14082] netlink: 'syz.3.1994': attribute type 6 has an invalid length.
[  330.331523][T14082] netlink: 'syz.3.1994': attribute type 7 has an invalid length.
[  330.356072][T14082] netlink: 'syz.3.1994': attribute type 8 has an invalid length.
[  330.565341][T14090] syzkaller0: entered promiscuous mode
[  330.570905][T14090] syzkaller0: entered allmulticast mode
[  330.611815][T14094] syzkaller0: entered promiscuous mode
[  330.618640][T14094] syzkaller0: entered allmulticast mode
[  330.809959][T14090] netlink: 'syz.0.1997': attribute type 3 has an invalid length.
[  330.831305][T14090] netlink: 'syz.0.1997': attribute type 2 has an invalid length.
[  330.839338][T14090] netlink: 'syz.0.1997': attribute type 2 has an invalid length.
[  333.495510][T14105] syzkaller1: tun_chr_ioctl cmd 2147767521
[  333.518128][T14117] veth1_to_team: entered promiscuous mode
[  333.537654][T14117] veth1_to_team: left promiscuous mode
[  333.868099][T14147] __nla_validate_parse: 14 callbacks suppressed
[  333.868120][T14147] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2012'.
[  334.366861][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'.
[  334.407395][T14179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2022'.
[  334.660814][T14191] net_ratelimit: 50 callbacks suppressed
[  334.660835][T14191] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  334.782608][T14196] netlink: 'syz.0.2028': attribute type 1 has an invalid length.
[  334.828637][T14196] 8021q: adding VLAN 0 to HW filter on device bond10
[  335.015209][T14208] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2031'.
[  335.076151][T14211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2032'.
[  335.136421][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2034'.
[  335.443018][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2038'.
[  335.725228][T14232] virt_wifi0 speed is unknown, defaulting to 1000
[  335.740101][T14238] netlink: 7076 bytes leftover after parsing attributes in process `syz.0.2040'.
[  335.768767][T14238] openvswitch: netlink: Flow key attr not present in new flow.
[  335.793705][T14241] netlink: 'syz.4.2042': attribute type 1 has an invalid length.
[  335.943642][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'.
[  336.028654][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2044'.
[  336.121769][T14263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.276183][T14354] syzkaller1: entered promiscuous mode
[  338.294694][T14354] syzkaller1: entered allmulticast mode
[  338.366498][T14363] tipc: Started in network mode
[  338.378529][T14363] tipc: Node identity cec8c6831268, cluster identity 4711
[  338.393660][T14363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.411747][T14364] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  338.486286][T14358] syzkaller0: entered promiscuous mode
[  338.499116][T14358] syzkaller0: entered allmulticast mode
[  338.536682][T14358] tipc: Resetting bearer <eth:syzkaller0>
[  338.567301][T14358] xt_bpf: check failed: parse error
[  338.615233][T14356] tipc: Resetting bearer <eth:syzkaller0>
[  338.682482][T14356] tipc: Disabling bearer <eth:syzkaller0>
[  338.901176][T14379] __nla_validate_parse: 37 callbacks suppressed
[  338.901199][T14379] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2069'.
[  339.311498][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'.
[  339.402948][T14406] batadv0: entered promiscuous mode
[  339.503709][T14407] bond11: option xmit_hash_policy: invalid value (10)
[  339.521066][T14407] bond11 (unregistering): Released all slaves
[  339.553013][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'.
[  339.669588][T14423] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  340.149348][T14441] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  340.170662][T14441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2087'.
[  340.195825][T14441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2087'.
[  340.331731][T14449] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20001
[  340.343399][T14446] syzkaller0: entered promiscuous mode
[  340.371212][T14446] syzkaller0: entered allmulticast mode
[  340.496419][T14455] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2092'.
[  340.611665][T14453] syzkaller0: entered promiscuous mode
[  340.621609][T14453] syzkaller0: entered allmulticast mode
[  340.632576][T14460] netlink: 'syz.4.2093': attribute type 1 has an invalid length.
[  340.707793][T14464] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2095'.
[  340.725275][T14466] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  340.761879][T14463] can: request_module (can-proto-5) failed.
[  340.815303][T14463] sctp: [Deprecated]: syz.3.2094 (pid 14463) Use of int in max_burst socket option.
[  340.815303][T14463] Use struct sctp_assoc_value instead
[  340.830446][T14470] block nbd0: Unsupported socket: should be TCP or UNIX.
[  341.478049][T14481] netlink: 'syz.3.2098': attribute type 10 has an invalid length.
[  341.486197][T14481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2098'.
[  342.761858][T14460] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  342.766351][T14464] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode
[  342.786207][T14464] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode
[  342.915440][T14481] team0: Port device geneve1 added
[  343.053321][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'.
[  343.088614][T14493] vlan4: entered promiscuous mode
[  343.103052][T14493] gretap0: entered promiscuous mode
[  343.131738][T14496] sctp: [Deprecated]: syz.3.2105 (pid 14496) Use of struct sctp_assoc_value in delayed_ack socket option.
[  343.131738][T14496] Use struct sctp_sack_info instead
[  343.170091][T14498] netlink: 'syz.0.2104': attribute type 1 has an invalid length.
[  343.179927][T14496] sctp: [Deprecated]: syz.3.2105 (pid 14496) Use of struct sctp_assoc_value in delayed_ack socket option.
[  343.179927][T14496] Use struct sctp_sack_info instead
[  343.197046][T14500] bond0: (slave ip6tnl0): refused to change device type
[  343.289854][T14504] netlink: 'syz.1.2106': attribute type 1 has an invalid length.
[  343.326919][T14508] netlink: 'syz.3.2107': attribute type 12 has an invalid length.
[  343.337266][T14498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2104'.
[  343.352693][T14500] ip6erspan1: entered allmulticast mode
[  343.504745][T14504] 8021q: adding VLAN 0 to HW filter on device bond7
[  343.514875][T14498] 8021q: adding VLAN 0 to HW filter on device bond11
[  343.703468][T14522] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  343.948671][T14535] netlink: 'syz.2.2117': attribute type 1 has an invalid length.
[  343.987872][T14535] bond9: entered promiscuous mode
[  343.993596][T14535] 8021q: adding VLAN 0 to HW filter on device bond9
[  344.019161][T14535] macvtap1: entered allmulticast mode
[  344.087342][T14535] macvtap2: entered allmulticast mode
[  344.111168][T14525] __nla_validate_parse: 1 callbacks suppressed
[  344.111190][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'.
[  344.177220][T14540] bond9: (slave bridge1): making interface the new active one
[  344.186871][T14540] bridge1: entered promiscuous mode
[  344.202619][T14540] bond9: (slave bridge1): Enslaving as an active interface with an up link
[  344.233235][T14547] netlink: 'syz.3.2120': attribute type 12 has an invalid length.
[  344.480419][T14525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2112'.
[  344.501741][T14525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2112'.
[  344.610820][T14564] x_tables: duplicate underflow at hook 1
[  344.737546][T14572] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2126'.
[  344.771394][T14572] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  344.909253][T14578] erspan0: entered promiscuous mode
[  344.924987][T14577] erspan0: left promiscuous mode
[  344.963805][T14576] virt_wifi0 speed is unknown, defaulting to 1000
[  345.688158][T14610] netlink: 'syz.3.2139': attribute type 9 has an invalid length.
[  345.715961][T14610] netlink: 'syz.3.2139': attribute type 6 has an invalid length.
[  345.741981][T14610] netlink: 'syz.3.2139': attribute type 7 has an invalid length.
[  345.782391][T14610] netlink: 'syz.3.2139': attribute type 8 has an invalid length.
[  345.817642][T14618] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2141'.
[  345.900513][T14618] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  346.348029][T14615] vlan4: entered promiscuous mode
[  346.369690][T14615] bridge0: entered promiscuous mode
[  346.756513][T14654] netlink: 'syz.3.2155': attribute type 1 has an invalid length.
[  346.794867][T14654] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2155'.
[  346.860884][T14665] sock: sock_timestamping_bind_phc: sock not bind to device
[  346.945878][T14673] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  346.968075][T14669] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  347.021773][T14678] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  347.039343][T14670] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  347.120257][T14674] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2158'.
[  347.145316][T14674] netlink: 'syz.4.2158': attribute type 1 has an invalid length.
[  347.163446][T14674] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2158'.
[  347.252442][T14686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  347.762631][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'.
[  347.790025][T14715] xt_TCPMSS: Only works on TCP SYN packets
[  347.809196][   T30] audit: type=1800 audit(1781498209.342:6): pid=14721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2172" name="memory.events" dev="tmpfs" ino=2231 res=0 errno=0
[  347.854466][   T30] audit: type=1804 audit(1781498209.372:7): pid=14721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2172" name="/newroot/432/memory.events" dev="tmpfs" ino=2231 res=1 errno=0
[  348.205667][T14736] veth0: entered promiscuous mode
[  348.515498][T14735] veth0: left promiscuous mode
[  348.605996][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2181'.
[  349.178744][T14751] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode
[  349.189140][T14751] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode
[  349.214886][T14751] team0: Port device netdevsim1 removed
[  349.296323][T14765] syzkaller0: entered promiscuous mode
[  349.302061][T14765] syzkaller0: entered allmulticast mode
[  350.236941][T14798] __nla_validate_parse: 1 callbacks suppressed
[  350.236960][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2197'.
[  350.341743][T14799] syzkaller0: entered promiscuous mode
[  350.357322][T14801] can: request_module (can-proto-0) failed.
[  351.258204][T14837] tipc: Enabled bearer <udp:syz2>, priority 10
[  351.514508][T14848] netlink: 'syz.1.2211': attribute type 11 has an invalid length.
[  351.644557][T14857] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2214'.
[  351.885930][T14871] batman_adv: batadv0: Adding interface: macsec3
[  351.892558][T14871] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.933032][T14871] batman_adv: batadv0: Interface activated: macsec3
[  352.040967][T14882] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  352.358428][T14902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2226'.
[  352.396057][T14905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2227'.
[  352.417765][ T5639] tipc: Node number set to 3180436308
[  352.545410][T14908] ip6tnl0: entered promiscuous mode
[  352.550899][T14908] ip6tnl0: entered allmulticast mode
[  352.588993][T14910] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2228'.
[  352.700375][T14910] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  353.300413][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'.
[  353.379187][T14942] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2240'.
[  353.689325][T14957] bridge5: the hash_elasticity option has been deprecated and is always 16
[  353.701051][T14957] bridge5: entered allmulticast mode
[  353.722947][T14956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2245'.
[  353.898188][T14961] syzkaller0: entered promiscuous mode
[  353.922406][T14961] syzkaller0: entered allmulticast mode
[  354.194690][T14972] netlink: 'syz.4.2250': attribute type 1 has an invalid length.
[  354.634010][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'.
[  354.772529][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2255'.
[  355.645816][T15032] team_slave_1: entered promiscuous mode
[  355.769723][T15036] __nla_validate_parse: 2 callbacks suppressed
[  355.769743][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'.
[  355.786035][T15040] FAULT_INJECTION: forcing a failure.
[  355.786035][T15040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.799893][T15040] CPU: 0 UID: 0 PID: 15040 Comm: syz.3.2269 Not tainted syzkaller #0 PREEMPT(full) 
[  355.799935][T15040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  355.799963][T15040] Call Trace:
[  355.799972][T15040]  <TASK>
[  355.799981][T15040]  dump_stack_lvl+0xe8/0x150
[  355.800052][T15040]  should_fail_ex+0x40c/0x560
[  355.800184][T15040]  _copy_from_user+0x2d/0xb0
[  355.800242][T15040]  __sys_connect+0x155/0x460
[  355.800352][T15040]  ? __pfx___sys_connect+0x10/0x10
[  355.800398][T15040]  ? __pfx_ksys_write+0x10/0x10
[  355.800434][T15040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.800459][T15040]  __x64_sys_connect+0x7a/0x90
[  355.800491][T15040]  do_syscall_64+0x174/0x580
[  355.800605][T15040]  ? trace_irq_disable+0x3b/0x140
[  355.800637][T15040]  ? clear_bhb_loop+0x40/0x90
[  355.800674][T15040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.800699][T15040] RIP: 0033:0x7fdd7e39ce59
[  355.800719][T15040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.800737][T15040] RSP: 002b:00007fdd7c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  355.800760][T15040] RAX: ffffffffffffffda RBX: 00007fdd7e615fa0 RCX: 00007fdd7e39ce59
[  355.800776][T15040] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003
[  355.800790][T15040] RBP: 00007fdd7c5f6090 R08: 0000000000000000 R09: 0000000000000000
[  355.800803][T15040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.800814][T15040] R13: 00007fdd7e616038 R14: 00007fdd7e615fa0 R15: 00007ffcc0cb1a38
[  355.800848][T15040]  </TASK>
[  355.826571][T15036] netlink: 'syz.0.2267': attribute type 9 has an invalid length.
[  356.260145][T15058] netlink: 'syz.4.2275': attribute type 1 has an invalid length.
[  356.333047][T15058] 8021q: adding VLAN 0 to HW filter on device bond12
[  356.609716][T15064] bond12: (slave veth11): Enslaving as an active interface with a down link
[  356.691131][T15065] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  356.733818][T15058] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  356.786482][T15077] 8021q: adding VLAN 0 to HW filter on device batadv3
[  356.808451][T15077] bond12: (slave batadv3): making interface the new active one
[  356.838381][T15077] batadv3: entered promiscuous mode
[  356.852130][T15077] bond12: (slave batadv3): Enslaving as an active interface with an up link
[  356.923024][T15085] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  357.091833][T15085] tipc: Resetting bearer <eth:vlan0>
[  357.324756][T15102] sch_fq: defrate 4294967293 ignored.
[  357.397950][T15102] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  358.316103][T15156] netlink: 'syz.2.2301': attribute type 11 has an invalid length.
[  358.324461][T15156] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.2301'.
[  358.340583][T15156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2301'.
[  358.351082][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'.
[  358.383915][T15156] macsec2: entered allmulticast mode
[  358.396959][T15156] bond0: entered allmulticast mode
[  358.408138][T15156] vlan3: entered allmulticast mode
[  358.413339][T15156] veth0_to_bond: entered allmulticast mode
[  358.421535][T15156] 8021q: adding VLAN 0 to HW filter on device macsec2
[  358.442044][T15159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2302'.
[  358.708695][T15169] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  358.724627][T15169] bond8 (unregistering): Released all slaves
[  359.040239][T15186] bridge0: entered allmulticast mode
[  359.198444][T15201] netlink: 'syz.4.2314': attribute type 3 has an invalid length.
[  359.295992][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2315'.
[  359.592580][T15219] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2320'.
[  359.623516][T15212] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  359.694041][T15219] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  359.781816][T15224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.240851][T15243] netlink: 'syz.4.2328': attribute type 1 has an invalid length.
[  360.251381][T15243] netlink: 'syz.4.2328': attribute type 1 has an invalid length.
[  360.260342][T15243] netlink: 'syz.4.2328': attribute type 2 has an invalid length.
[  360.268494][T15243] netlink: 'syz.4.2328': attribute type 1 has an invalid length.
[  360.561432][T15250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2330'.
[  360.638639][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'.
[  360.659689][T15254] xt_ecn: cannot match TCP bits for non-tcp packets
[  360.911866][T15266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2335'.
[  360.928977][T15267] openvswitch: netlink: ct_state flags ffffffff unsupported
[  360.948038][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'.
[  361.246943][T15280] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  361.446698][T15293] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2345'.
[  361.514375][T15296] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2344'.
[  361.553706][T15296] netlink: 'syz.4.2344': attribute type 1 has an invalid length.
[  361.593205][T15296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2344'.
[  361.690839][T15293] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  361.699981][T15308] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2347'.
[  361.700375][T15303] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  362.233968][T15331] dvmrp0: entered allmulticast mode
[  362.300277][T15334] block nbd0: not configured, cannot reconfigure
[  362.363667][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'.
[  362.483405][T15338] hsr0: entered promiscuous mode
[  362.588542][T15335] hsr0: left promiscuous mode
[  362.784725][T15343] FAULT_INJECTION: forcing a failure.
[  362.784725][T15343] name failslab, interval 1, probability 0, space 0, times 0
[  362.799267][T15343] CPU: 1 UID: 0 PID: 15343 Comm: syz.4.2359 Not tainted syzkaller #0 PREEMPT(full) 
[  362.799296][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  362.799314][T15343] Call Trace:
[  362.799322][T15343]  <TASK>
[  362.799335][T15343]  dump_stack_lvl+0xe8/0x150
[  362.799366][T15343]  should_fail_ex+0x40c/0x560
[  362.799407][T15343]  should_failslab+0xa8/0x100
[  362.799441][T15343]  ? __inet_hash_connect+0xe9b/0x25a0
[  362.799561][T15343]  kmem_cache_alloc_noprof+0x87/0x650
[  362.799601][T15343]  __inet_hash_connect+0xe9b/0x25a0
[  362.799633][T15343]  ? __pfx___inet_check_established+0x10/0x10
[  362.799673][T15343]  ? __inet_hash_connect+0x5ce/0x25a0
[  362.799707][T15343]  ? __pfx___inet_hash_connect+0x10/0x10
[  362.799732][T15343]  ? lockdep_hardirqs_on+0x7a/0x110
[  362.799772][T15343]  ? inet_hash_connect+0xf1/0x380
[  362.799805][T15343]  tcp_v4_connect+0xcee/0x1950
[  362.799874][T15343]  ? __pfx_tcp_v4_connect+0x10/0x10
[  362.799908][T15343]  __inet_stream_connect+0x258/0xe00
[  362.800009][T15343]  ? do_raw_spin_lock+0x12b/0x2f0
[  362.800039][T15343]  ? lock_sock_nested+0x6a/0x100
[  362.800114][T15343]  ? __pfx___inet_stream_connect+0x10/0x10
[  362.800151][T15343]  ? inet_stream_connect+0x51/0xa0
[  362.800186][T15343]  ? __local_bh_enable_ip+0xd0/0x130
[  362.800215][T15343]  inet_stream_connect+0x66/0xa0
[  362.800250][T15343]  __sys_connect+0x323/0x460
[  362.800287][T15343]  ? __pfx___sys_connect+0x10/0x10
[  362.800332][T15343]  ? __pfx_ksys_write+0x10/0x10
[  362.800369][T15343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.800394][T15343]  __x64_sys_connect+0x7a/0x90
[  362.800428][T15343]  do_syscall_64+0x174/0x580
[  362.800452][T15343]  ? trace_irq_disable+0x3b/0x140
[  362.800485][T15343]  ? clear_bhb_loop+0x40/0x90
[  362.800513][T15343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.800535][T15343] RIP: 0033:0x7f8f71d9ce59
[  362.800556][T15343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.800575][T15343] RSP: 002b:00007f8f72ca9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  362.800598][T15343] RAX: ffffffffffffffda RBX: 00007f8f72015fa0 RCX: 00007f8f71d9ce59
[  362.800614][T15343] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003
[  362.800627][T15343] RBP: 00007f8f72ca9090 R08: 0000000000000000 R09: 0000000000000000
[  362.800640][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.800656][T15343] R13: 00007f8f72016038 R14: 00007f8f72015fa0 R15: 00007ffd09c3d6f8
[  362.800693][T15343]  </TASK>
[  363.346682][T15354] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2362'.
[  363.421162][T15354] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  363.709867][T15365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.070855][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'.
[  364.141162][T15379] FAULT_INJECTION: forcing a failure.
[  364.141162][T15379] name failslab, interval 1, probability 0, space 0, times 0
[  364.155543][T15379] CPU: 1 UID: 0 PID: 15379 Comm: syz.1.2371 Not tainted syzkaller #0 PREEMPT(full) 
[  364.155571][T15379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  364.155585][T15379] Call Trace:
[  364.155594][T15379]  <TASK>
[  364.155604][T15379]  dump_stack_lvl+0xe8/0x150
[  364.155644][T15379]  should_fail_ex+0x40c/0x560
[  364.155689][T15379]  should_failslab+0xa8/0x100
[  364.155724][T15379]  ? __inet_hash_connect+0x1631/0x25a0
[  364.155752][T15379]  kmem_cache_alloc_noprof+0x87/0x650
[  364.155779][T15379]  ? __inet_hash_connect+0xe9b/0x25a0
[  364.155814][T15379]  __inet_hash_connect+0x1631/0x25a0
[  364.155860][T15379]  ? __inet_hash_connect+0x5ce/0x25a0
[  364.155895][T15379]  ? __pfx___inet_hash_connect+0x10/0x10
[  364.155921][T15379]  ? lockdep_hardirqs_on+0x7a/0x110
[  364.155952][T15379]  ? inet_hash_connect+0xf1/0x380
[  364.155985][T15379]  tcp_v4_connect+0xcee/0x1950
[  364.156025][T15379]  ? __pfx_tcp_v4_connect+0x10/0x10
[  364.156060][T15379]  __inet_stream_connect+0x258/0xe00
[  364.156099][T15379]  ? do_raw_spin_lock+0x12b/0x2f0
[  364.156129][T15379]  ? lock_sock_nested+0x6a/0x100
[  364.156161][T15379]  ? __pfx___inet_stream_connect+0x10/0x10
[  364.156197][T15379]  ? inet_stream_connect+0x51/0xa0
[  364.156232][T15379]  ? __local_bh_enable_ip+0xd0/0x130
[  364.156261][T15379]  inet_stream_connect+0x66/0xa0
[  364.156298][T15379]  __sys_connect+0x323/0x460
[  364.156334][T15379]  ? __pfx___sys_connect+0x10/0x10
[  364.156381][T15379]  ? __pfx_ksys_write+0x10/0x10
[  364.156420][T15379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.156445][T15379]  __x64_sys_connect+0x7a/0x90
[  364.156480][T15379]  do_syscall_64+0x174/0x580
[  364.156504][T15379]  ? trace_irq_disable+0x3b/0x140
[  364.156537][T15379]  ? clear_bhb_loop+0x40/0x90
[  364.156565][T15379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.156587][T15379] RIP: 0033:0x7f50af59ce59
[  364.156607][T15379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.156634][T15379] RSP: 002b:00007f50b0467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  364.156657][T15379] RAX: ffffffffffffffda RBX: 00007f50af815fa0 RCX: 00007f50af59ce59
[  364.156673][T15379] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003
[  364.156687][T15379] RBP: 00007f50b0467090 R08: 0000000000000000 R09: 0000000000000000
[  364.156700][T15379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.156713][T15379] R13: 00007f50af816038 R14: 00007f50af815fa0 R15: 00007ffee67f33e8
[  364.156749][T15379]  </TASK>
[  364.642793][T15384] sctp: [Deprecated]: syz.1.2373 (pid 15384) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.642793][T15384] Use struct sctp_sack_info instead
[  364.709861][T15386] sctp: [Deprecated]: syz.2.2374 (pid 15386) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.709861][T15386] Use struct sctp_sack_info instead
[  364.731241][T15388] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2375'.
[  364.806661][T15388] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  365.853772][T15435] Cannot find del_set index 14804 as target
[  365.923849][T15440] __nla_validate_parse: 2 callbacks suppressed
[  365.923870][T15440] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2389'.
[  366.039820][T15440] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  366.263991][T15452] syzkaller0: entered promiscuous mode
[  366.287987][T15452] syzkaller0: entered allmulticast mode
[  366.305380][T15455] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2391'.
[  366.335829][T15457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.361842][T15450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.380625][T15460] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  366.391111][T15449] tipc: Resetting bearer <eth:syzkaller0>
[  366.428582][T15449] tipc: Disabling bearer <eth:syzkaller0>
[  366.680163][T15469] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2397'.
[  366.699378][T15469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2397'.
[  367.013251][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'.
[  367.160062][T15499] xt_TPROXY: Can be used only with -p tcp or -p udp
[  367.375310][T15509] SET target dimension over the limit!
[  367.612068][T15521] syzkaller0: entered promiscuous mode
[  367.637166][T15521] syzkaller0: entered allmulticast mode
[  367.714581][T15523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2410'.
[  367.728502][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'.
[  368.089730][T15547] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2415'.
[  368.151508][T15547] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  368.283012][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'.
[  368.299008][ T7305] batadv3: left promiscuous mode
[  368.601933][T15564] bond8: option miimon: invalid value (18446744073709551607)
[  368.630912][T15564] bond8: option miimon: allowed values 0 - 2147483647
[  368.682475][T15564] bond8 (unregistering): Released all slaves
[  368.836151][T15570] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.852907][T15570] 8021q: adding VLAN 0 to HW filter on device team0
[  368.940429][T15575] syzkaller0: entered promiscuous mode
[  368.957476][T15575] syzkaller0: entered allmulticast mode
[  368.979296][T15577] syzkaller0: entered promiscuous mode
[  368.985850][T15577] syzkaller0: entered allmulticast mode
[  368.992871][T15581] netlink: 'syz.1.2425': attribute type 11 has an invalid length.
[  369.009628][T15581] netlink: 138916 bytes leftover after parsing attributes in process `syz.1.2425'.
[  369.271805][T15590] netlink: 'syz.0.2428': attribute type 1 has an invalid length.
[  369.400986][T15596] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  369.591717][T15608] xt_CT: You must specify a L4 protocol and not use inversions on it
[  370.256254][T15649] FAULT_INJECTION: forcing a failure.
[  370.256254][T15649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.279244][T15647] sctp: [Deprecated]: syz.1.2445 (pid 15647) Use of int in maxseg socket option.
[  370.279244][T15647] Use struct sctp_assoc_value instead
[  370.321464][T15649] CPU: 0 UID: 0 PID: 15649 Comm: syz.0.2447 Not tainted syzkaller #0 PREEMPT(full) 
[  370.321494][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  370.321508][T15649] Call Trace:
[  370.321516][T15649]  <TASK>
[  370.321525][T15649]  dump_stack_lvl+0xe8/0x150
[  370.321556][T15649]  should_fail_ex+0x40c/0x560
[  370.321599][T15649]  _copy_to_user+0x31/0xb0
[  370.321628][T15649]  simple_read_from_buffer+0xe1/0x170
[  370.321661][T15649]  proc_fail_nth_read+0x1bb/0x230
[  370.321693][T15649]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  370.321726][T15649]  ? rw_verify_area+0x24a/0x4c0
[  370.321774][T15649]  ? tun_chr_write_iter+0xe0/0x200
[  370.321919][T15649]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  370.321948][T15649]  vfs_read+0x213/0xa80
[  370.321986][T15649]  ? __pfx___mutex_lock+0x10/0x10
[  370.322047][T15649]  ? __pfx_vfs_read+0x10/0x10
[  370.322081][T15649]  ? __fget_files+0x2a/0x420
[  370.322121][T15649]  ? __fget_files+0x3a2/0x420
[  370.322147][T15649]  ? __fget_files+0x2a/0x420
[  370.322186][T15649]  ksys_read+0x150/0x270
[  370.322220][T15649]  ? __pfx_ksys_read+0x10/0x10
[  370.322263][T15649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.322288][T15649]  do_syscall_64+0x174/0x580
[  370.322312][T15649]  ? trace_irq_disable+0x3b/0x140
[  370.322346][T15649]  ? clear_bhb_loop+0x40/0x90
[  370.322374][T15649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.322396][T15649] RIP: 0033:0x7fbe9ed5d68e
[  370.322416][T15649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  370.322435][T15649] RSP: 002b:00007fbe9fc09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  370.322457][T15649] RAX: ffffffffffffffda RBX: 00007fbe9fc0a6c0 RCX: 00007fbe9ed5d68e
[  370.322473][T15649] RDX: 000000000000000f RSI: 00007fbe9fc0a0a0 RDI: 0000000000000010
[  370.322491][T15649] RBP: 00007fbe9fc0a090 R08: 0000000000000000 R09: 0000000000000000
[  370.322504][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.322516][T15649] R13: 00007fbe9f016128 R14: 00007fbe9f016090 R15: 00007fff1786f428
[  370.322552][T15649]  </TASK>
[  370.331169][T15647] netlink: 'syz.1.2445': attribute type 16 has an invalid length.
[  370.797575][ T5639] IPVS: starting estimator thread 0...
[  370.886384][T15667] bridge6: entered promiscuous mode
[  370.895443][T15662] IPVS: using max 27 ests per chain, 64800 per kthread
[  371.159882][T15676] __nla_validate_parse: 4 callbacks suppressed
[  371.159904][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'.
[  371.289160][T15679] syzkaller1: entered promiscuous mode
[  371.305196][T15679] syzkaller1: entered allmulticast mode
[  371.415673][T15682] virt_wifi0 speed is unknown, defaulting to 1000
[  372.270822][T15721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2465'.
[  372.296198][T15720] xt_hashlimit: size too large, truncated to 1048576
[  372.730275][T15721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2465'.
[  373.202939][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2471'.
[  373.290294][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'.
[  373.435523][T15765] netlink: 'syz.2.2473': attribute type 1 has an invalid length.
[  373.465598][T15765] netlink: 'syz.2.2473': attribute type 2 has an invalid length.
[  373.705007][T15775] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2475'.
[  373.726987][T15775] 0·: renamed from hsr0
[  373.813190][T15775] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  373.957079][T15775] 0·: entered allmulticast mode
[  374.023586][T15775] hsr_slave_0: entered allmulticast mode
[  374.078527][T15792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2475'.
[  374.123781][T15775] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  374.274818][T15799] syzkaller0: entered promiscuous mode
[  374.287646][T15799] syzkaller0: entered allmulticast mode
[  374.572287][T15808] netlink: 'syz.4.2479': attribute type 1 has an invalid length.
[  374.619650][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2479'.
[  375.036673][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'.
[  375.171912][T15827] netlink: 'syz.1.2487': attribute type 1 has an invalid length.
[  375.180099][T15827] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2487'.
[  375.377981][T15837] syzkaller0: entered promiscuous mode
[  375.391173][T15837] syzkaller0: entered allmulticast mode
[  375.719447][T15858] openvswitch: netlink: Flow actions attr not present in new flow.
[  375.745372][T15863] openvswitch: netlink: Flow actions attr not present in new flow.
[  375.880289][T15869] netlink: 'syz.1.2500': attribute type 2 has an invalid length.
[  376.057039][T15877] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  376.085378][T15877] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20000
[  376.886306][T15917] syzkaller0: entered promiscuous mode
[  376.910624][T15917] syzkaller0: entered allmulticast mode
[  376.967519][T15920] geneve4: entered promiscuous mode
[  377.010940][T15924] __nla_validate_parse: 4 callbacks suppressed
[  377.010961][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2520'.
[  377.442504][T15947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  377.506172][T15947] team0: Mode changed to "loadbalance"
[  377.523118][T15947] vlan0: left allmulticast mode
[  377.528469][T15947] bridge0: port 1(vlan0) entered disabled state
[  377.568046][T15947] team0: Port device vlan0 added
[  377.673652][T15956] netlink: 'syz.2.2531': attribute type 1 has an invalid length.
[  377.698905][T15956] syzkaller1: entered promiscuous mode
[  377.714531][T15956] syzkaller1: entered allmulticast mode
[  377.827290][T15966] netlink: 'syz.1.2535': attribute type 1 has an invalid length.
[  377.857498][T15966] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2535'.
[  377.872872][T15966] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2535'.
[  377.894042][T15966] netlink: 'syz.1.2535': attribute type 1 has an invalid length.
[  377.908132][T15966] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2535'.
[  377.929332][T15967] netlink: 'syz.1.2535': attribute type 1 has an invalid length.
[  377.937573][T15967] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2535'.
[  377.947145][T15967] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2535'.
[  377.960152][T15967] netlink: 'syz.1.2535': attribute type 1 has an invalid length.
[  377.968751][T15967] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2535'.
[  395.313252][T15972] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1623861288/1623861290
[  395.335263][T15972] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1623861288/1623861290
[  395.364311][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'.
[  395.404447][T15982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2539'.
[  395.655879][T16002] netlink: 'syz.4.2545': attribute type 1 has an invalid length.
[  395.667644][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'.
[  395.878411][T16009] netpci0: tun_chr_ioctl cmd 1074025673
[  395.896386][T16009] netpci0: tun_chr_ioctl cmd 1074025678
[  395.932089][T16009] netpci0: group set to 0
[  395.952043][T16013] netlink: 'syz.1.2548': attribute type 4 has an invalid length.
[  395.962202][T16013] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2548'.
[  396.218597][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2550'.
[  396.426195][T16031] ip6erspan1: entered allmulticast mode
[  396.556961][T16035] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:52763
[  396.589140][T16035] netlink: zone id is out of range
[  396.599302][T16035] netlink: zone id is out of range
[  396.607974][T16039] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2555'.
[  396.624534][T16035] netlink: zone id is out of range
[  396.629910][T16035] netlink: zone id is out of range
[  396.637345][T16035] netlink: zone id is out of range
[  396.651139][T16035] netlink: zone id is out of range
[  396.666057][T16035] netlink: zone id is out of range
[  396.685851][T16035] netlink: zone id is out of range
[  396.696014][T16039] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  396.705317][T16035] netlink: zone id is out of range
[  396.892768][T16044] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2558'.
[  397.119839][T16053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2560'.
[  397.148948][T16053] block nbd0: Unsupported socket: should be TCP or UNIX.
[  397.188963][T16061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2562'.
[  397.236391][T16061] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  397.554936][T16080] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2565'.
[  397.750695][T16086] netlink: 'syz.1.2568': attribute type 10 has an invalid length.
[  397.789200][T16086] bridge0: port 2(syz_tun) entered disabled state
[  397.811753][T16086] syz_tun: left allmulticast mode
[  397.833418][T16086] bridge0: port 2(syz_tun) entered disabled state
[  397.857927][T16086] vlan3: left promiscuous mode
[  397.877546][T16086] geneve0: left promiscuous mode
[  398.250455][T16105] netlink: 'syz.1.2574': attribute type 14 has an invalid length.
[  398.356704][T16094] syzkaller0: entered promiscuous mode
[  398.377670][T16094] syzkaller0: entered allmulticast mode
[  398.412024][T16094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.463729][T16094] tipc: Resetting bearer <eth:syzkaller0>
[  398.495415][T16093] tipc: Resetting bearer <eth:syzkaller0>
[  398.576037][T16093] tipc: Disabling bearer <eth:syzkaller0>
[  398.747604][T16124] netlink: 'syz.1.2579': attribute type 1 has an invalid length.
[  398.808044][T16124] vlan5: entered allmulticast mode
[  398.825717][T16124] veth0_to_bond: entered allmulticast mode
[  398.863409][T16129] virt_wifi0 speed is unknown, defaulting to 1000
[  398.925694][T16138] bridge_slave_1: entered promiscuous mode
[  398.956129][T16138] bridge_slave_1: entered allmulticast mode
[  399.062760][T16144] bond8: option packets_per_slave: invalid value (1048582)
[  399.070574][T16144] bond8: option packets_per_slave: allowed values 0 - 65535
[  399.083233][T16144] bond8 (unregistering): Released all slaves
[  399.274321][T16157] syz_tun: entered allmulticast mode
[  399.337187][T16157] syz_tun (unregistering): left allmulticast mode
[  399.636413][T16162] batman_adv: batadv0: Interface deactivated: macsec3
[  399.643280][T16162] batman_adv: batadv0: Removing interface: macsec3
[  399.677660][T16178] 8021q: VLANs not supported on ip_vti0
[  400.155337][T16210] ip6tnl0: left promiscuous mode
[  400.198088][T16210] ip6tnl0: left allmulticast mode
[  400.385780][T16210] __nla_validate_parse: 8 callbacks suppressed
[  400.385801][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'.
[  400.406186][T16218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2601'.
[  400.460488][T16210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2599'.
[  400.489994][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'.
[  400.529791][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'.
[  400.540842][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2599'.
[  400.688978][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2606'.
[  400.801337][T16233] tap0: tun_chr_ioctl cmd 1074025677
[  400.814649][T16233] tap0: linktype set to 6
[  401.233437][T16241] virt_wifi0 speed is unknown, defaulting to 1000
[  401.276007][T16257] syzkaller0: entered promiscuous mode
[  401.289290][T16257] syzkaller0: entered allmulticast mode
[  401.399465][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'.
[  401.832756][T16275] netlink: 1544 bytes leftover after parsing attributes in process `syz.0.2613'.
[  402.203732][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'.
[  402.932517][T16324] syzkaller0: entered promiscuous mode
[  402.940180][T16324] syzkaller0: entered allmulticast mode
[  403.133755][T16328] FAULT_INJECTION: forcing a failure.
[  403.133755][T16328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.155534][T16328] CPU: 1 UID: 0 PID: 16328 Comm: syz.2.2625 Not tainted syzkaller #0 PREEMPT(full) 
[  403.155563][T16328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  403.155577][T16328] Call Trace:
[  403.155592][T16328]  <TASK>
[  403.155602][T16328]  dump_stack_lvl+0xe8/0x150
[  403.155633][T16328]  should_fail_ex+0x40c/0x560
[  403.155673][T16328]  _copy_from_user+0x2d/0xb0
[  403.155699][T16328]  copy_from_sockptr_offset+0x66/0xa0
[  403.155802][T16328]  do_ipt_set_ctl+0x991/0xe20
[  403.155833][T16328]  ? rcu_is_watching+0x15/0xb0
[  403.155859][T16328]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  403.155904][T16328]  ? __pfx___mutex_lock+0x10/0x10
[  403.155932][T16328]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  403.155966][T16328]  ? __pfx_aa_sk_perm+0x10/0x10
[  403.156064][T16328]  nf_setsockopt+0x26f/0x290
[  403.156164][T16328]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  403.156199][T16328]  do_sock_setsockopt+0x17c/0x1b0
[  403.156226][T16328]  __x64_sys_setsockopt+0x13d/0x1b0
[  403.156251][T16328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.156275][T16328]  do_syscall_64+0x174/0x580
[  403.156299][T16328]  ? trace_irq_disable+0x3b/0x140
[  403.156331][T16328]  ? clear_bhb_loop+0x40/0x90
[  403.156358][T16328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.156379][T16328] RIP: 0033:0x7ffb0ad9ce59
[  403.156400][T16328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.156418][T16328] RSP: 002b:00007ffb0bd13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  403.156441][T16328] RAX: ffffffffffffffda RBX: 00007ffb0b015fa0 RCX: 00007ffb0ad9ce59
[  403.156457][T16328] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  403.156470][T16328] RBP: 00007ffb0bd13090 R08: 0000000000000440 R09: 0000000000000000
[  403.156484][T16328] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001
[  403.156497][T16328] R13: 00007ffb0b016038 R14: 00007ffb0b015fa0 R15: 00007ffeccafb8d8
[  403.156533][T16328]  </TASK>
[  405.210851][T16335] ip6gre1: entered allmulticast mode
[  405.451287][T16386] syzkaller0: entered promiscuous mode
[  405.470397][T16386] syzkaller0: entered allmulticast mode
[  405.509308][T16392] __nla_validate_parse: 1 callbacks suppressed
[  405.509327][T16392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2637'.
[  405.763530][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2641'.
[  405.857692][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'.
[  405.891493][T16417] veth1_to_bond: entered allmulticast mode
[  405.921298][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2643'.
[  405.970709][T16417] veth1_to_bond (unregistering): left allmulticast mode
[  406.056041][T16422] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  406.083452][T16422] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  406.186074][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2646'.
[  406.397873][T16431] 8021q: adding VLAN 0 to HW filter on device bond11
[  406.608536][T16455] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  406.626660][T16455] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  406.704670][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'.
[  406.717453][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2651'.
[  406.748342][T16453] nbd: must specify a size in bytes for the device
[  407.260857][T16489] netlink: 'syz.0.2658': attribute type 3 has an invalid length.
[  407.663686][T16509] syzkaller0: entered promiscuous mode
[  407.674701][T16509] syzkaller0: entered allmulticast mode
[  408.551661][T16547] netlink: 'syz.2.2671': attribute type 39 has an invalid length.
[  408.572357][T16545] bridge0: port 4(batadv4) entered blocking state
[  408.594664][T16545] bridge0: port 4(batadv4) entered disabled state
[  408.627240][T16545] batadv4: entered allmulticast mode
[  408.676403][T16545] batadv4: entered promiscuous mode
[  408.848764][T16545] IPVS: Scheduler module ip_vs_ not found
[  408.912497][T16564] netlink: 393 bytes leftover after parsing attributes in process `syz.2.2675'.
[  409.044661][T10611] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  409.053994][T10611] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  409.439388][T16592] syzkaller0: entered promiscuous mode
[  409.468834][T16592] syzkaller0: entered allmulticast mode
[  409.562985][T16597] netlink: 'syz.3.2683': attribute type 1 has an invalid length.
[  409.601634][T16597] netlink: 936 bytes leftover after parsing attributes in process `syz.3.2683'.
[  409.788320][T16597] netlink: 'syz.3.2683': attribute type 1 has an invalid length.
[  409.836474][T16597] netlink: 936 bytes leftover after parsing attributes in process `syz.3.2683'.
[  410.639325][T16650] bridge0: entered promiscuous mode
[  410.665539][T16650] vlan3: entered promiscuous mode
[  410.680942][T16650] geneve0: entered promiscuous mode
[  410.698449][T16650] bridge0: entered allmulticast mode
[  410.941318][T16657] syzkaller0: entered promiscuous mode
[  410.968078][T16657] syzkaller0: entered allmulticast mode
[  410.994900][T16664] __nla_validate_parse: 1 callbacks suppressed
[  410.994926][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2698'.
[  411.533192][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2704'.
[  411.572777][T16686] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  411.628527][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'.
[  411.657841][T16700] netlink: 'syz.3.2707': attribute type 6 has an invalid length.
[  411.685816][T16686] bond12: (slave lo): Enslaving as an active interface with an up link
[  411.693768][T16700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2707'.
[  411.707728][T16697] tipc: Failed to remove unknown binding: 66,1,1/134353152:2806696421/2806696423
[  411.720923][T16704] netlink: 480 bytes leftover after parsing attributes in process `syz.1.2704'.
[  411.735594][T16686] net_ratelimit: 16 callbacks suppressed
[  411.735615][T16686] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  411.758288][T16695] tipc: Failed to remove unknown binding: 66,1,1/134353152:2806696421/2806696423
[  411.775008][T16704] netlink: 480 bytes leftover after parsing attributes in process `syz.1.2704'.
[  411.928187][T16692] virt_wifi0 speed is unknown, defaulting to 1000
[  411.953837][T16694] virt_wifi0 speed is unknown, defaulting to 1000
[  412.425350][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'.
[  413.071485][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2716'.
[  413.614159][T16758] veth1_to_batadv: left promiscuous mode
[  413.901484][T16775] netlink: 'syz.4.2727': attribute type 13 has an invalid length.
[  414.330700][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'.
[  414.446572][T16795] netlink: 'syz.3.2731': attribute type 9 has an invalid length.
[  414.470997][T16795] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2731'.
[  414.561006][T16798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.585287][T16798] netlink: 'syz.3.2731': attribute type 7 has an invalid length.
[  414.899396][T16812] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  415.475174][T16826] virt_wifi0 speed is unknown, defaulting to 1000
[  415.505705][T16808] infiniband syz1: set down
[  415.519901][T16808] infiniband syz1: added syz_tun
[  415.630791][T16808] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  415.654525][T16808] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  415.687856][T16808] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  415.790672][T16808] RDS/IB: syz1: added
[  415.803660][T16808] smc: adding ib device syz1 with port count 1
[  415.825002][T16808] smc:    ib device syz1 port 1 has no pnetid
[  416.007317][T16839] bond8: option packets_per_slave: invalid value (1048582)
[  416.014885][T16839] bond8: option packets_per_slave: allowed values 0 - 65535
[  416.049789][T16839] bond8 (unregistering): Released all slaves
[  416.628742][T16846] lo: Caught tx_queue_len zero misconfig
[  416.962531][T16855] dummy0: Caught tx_queue_len zero misconfig
[  417.320574][T16868] __nla_validate_parse: 4 callbacks suppressed
[  417.320618][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'.
[  417.431545][T16872] netlink: zone id is out of range
[  418.539084][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'.
[  418.586216][T16906] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  418.700362][T16910] netlink: 'syz.2.2761': attribute type 1 has an invalid length.
[  418.775924][T16910] 8021q: adding VLAN 0 to HW filter on device bond12
[  418.893757][T16916] bond12: (slave veth7): Enslaving as an active interface with a down link
[  418.907930][T16921] xt_TPROXY: Can be used only with -p tcp or -p udp
[  419.037767][T16910] bond12: (slave veth9): Enslaving as an active interface with a down link
[  419.049775][T16917] syzkaller1: entered promiscuous mode
[  419.062889][T16917] syzkaller1: entered allmulticast mode
[  419.082984][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2765'.
[  419.459549][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'.
[  419.488198][T16940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.533651][T16935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.107151][T16865] virt_wifi0 speed is unknown, defaulting to 1000
[  420.292247][T16967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2774'.
[  420.320943][T16964] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2773'.
[  420.415635][T16970] xt_TPROXY: Can be used only with -p tcp or -p udp
[  420.771964][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'.
[  420.784911][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2778'.
[  420.823327][T16995] IPVS: length: 1869440365 != 24
[  421.118855][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'.
[  421.137816][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2778'.
[  421.867687][T17033] xt_TPROXY: Can be used only with -p tcp or -p udp
[  422.139489][T17044] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  422.267383][T17052] block nbd0: not configured, cannot reconfigure
[  422.401688][T17062] __nla_validate_parse: 1 callbacks suppressed
[  422.401709][T17062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2798'.
[  422.452559][T17065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2798'.
[  422.479902][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2796'.
[  422.489072][T17065] IPv6: NLM_F_CREATE should be specified when creating new route
[  422.489281][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2798'.
[  422.628954][   T30] audit: type=1800 audit(1781498284.162:8): pid=17058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2795" name="memory.events" dev="tmpfs" ino=2861 res=0 errno=0
[  423.083484][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2804'.
[  423.092789][T17081] xt_TPROXY: Can be used only with -p tcp or -p udp
[  423.405450][T17107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2809'.
[  423.437476][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2811'.
[  423.639998][T17117] bond13: option min_links: invalid value (18446744073709551612)
[  423.648371][T17117] bond13: option min_links: allowed values 0 - 2147483647
[  423.658587][T17117] bond13 (unregistering): Released all slaves
[  424.041401][T17147] batadv0: entered promiscuous mode
[  424.055241][T17147] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  424.256749][T17156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.272150][T17150] hmó3)ó
€: entered promiscuous mode
[  424.379187][T17162] sctp: [Deprecated]: syz.1.2824 (pid 17162) Use of struct sctp_assoc_value in delayed_ack socket option.
[  424.379187][T17162] Use struct sctp_sack_info instead
[  424.548391][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'.
[  424.558357][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'.
[  424.645546][T17170] macsec4: entered promiscuous mode
[  424.650917][T17170] veth1: entered promiscuous mode
[  424.659872][T17170] macsec4: entered allmulticast mode
[  424.666359][T17170] veth1: entered allmulticast mode
[  424.672958][T17170] veth1: left allmulticast mode
[  424.678327][T17170] veth1: left promiscuous mode
[  425.058620][T17181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2831'.
[  425.313121][T17193] xt_TPROXY: Can be used only with -p tcp or -p udp
[  425.334037][T17190] 8021q: adding VLAN 0 to HW filter on device bond14
[  426.308805][T17238] netlink: 'syz.2.2844': attribute type 3 has an invalid length.
[  426.733203][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  426.748213][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  426.757675][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  426.770734][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  426.778687][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  426.976483][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  426.985374][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  427.000009][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  427.016727][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  427.026745][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  427.035623][T17262] netlink: 'syz.1.2850': attribute type 1 has an invalid length.
[  427.460922][ T5631] syz_tun (unregistering): left promiscuous mode
[  427.503381][ T5631] syz_tun (unregistering): left allmulticast mode
[  427.537714][ T5631] team0: Port device syz_tun removed
[  427.683992][T17287] netlink: 'syz.2.2856': attribute type 1 has an invalid length.
[  428.037332][T17297] syzkaller0: entered promiscuous mode
[  428.052342][T17297] syzkaller0: entered allmulticast mode
[  429.135069][ T5646] Bluetooth: hci5: command tx timeout
[  430.334860][T17312] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  430.504611][T17249] virt_wifi0 speed is unknown, defaulting to 1000
[  430.514822][T17318] __nla_validate_parse: 7 callbacks suppressed
[  430.514842][T17318] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2863'.
[  430.881843][T17333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.896914][ T7305] bond3: (slave batadv0): link status up again after 0 ms
[  430.934320][   T66] bond3: (slave batadv0): link status up again after 0 ms
[  430.974261][   T66] bond3: (slave batadv0): link status up again after 0 ms
[  431.004280][   T66] bond3: (slave batadv0): link status up again after 0 ms
[  431.035059][T10611] bond3: (slave batadv0): link status up again after 0 ms
[  431.079472][T17333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  431.090128][   T66] bond3: (slave batadv0): link status up again after 0 ms
[  431.104285][T17333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  431.135040][T10611] bond3: (slave batadv0): link status up again after 0 ms
[  431.156476][ T7303] bond3: (slave batadv0): link status up again after 0 ms
[  431.174390][T17333] veth1_vlan: left promiscuous mode
[  431.181609][T17333] veth0_vlan: left promiscuous mode
[  431.195291][ T7303] bond3: (slave batadv0): link status up again after 0 ms
[  431.203763][T17333] veth0_vlan: entered promiscuous mode
[  431.214244][ T5646] Bluetooth: hci5: command tx timeout
[  431.222353][T17333] veth1_vlan: entered promiscuous mode
[  431.230212][ T7303] bond3: (slave batadv0): link status up again after 0 ms
[  431.270201][T17333] veth1_macvtap: left promiscuous mode
[  431.316703][T17333] veth0_macvtap: left promiscuous mode
[  431.338975][T17333] veth0_macvtap: entered promiscuous mode
[  431.358806][T17333] veth1_macvtap: entered promiscuous mode
[  431.379893][T17333] 8021q: adding VLAN 0 to HW filter on device batadv1
[  431.411269][T17333] 8021q: adding VLAN 0 to HW filter on device bond4
[  431.421522][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.428751][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.512466][T17351] syz_tun: entered allmulticast mode
[  431.755560][T17365] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  431.880542][T17365] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2875'.
[  431.902317][T17365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2875'.
[  432.263185][T17397] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2884'.
[  432.341736][T17400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2885'.
[  432.462951][ T7303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.503199][ T7303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.539536][T17409] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2887'.
[  432.673824][T17249] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.694876][T17249] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.705893][T17249] bridge_slave_0: entered allmulticast mode
[  432.722416][T17249] bridge_slave_0: entered promiscuous mode
[  432.743452][T17409] syzkaller0: entered promiscuous mode
[  432.749312][T17409] syzkaller0: entered allmulticast mode
[  432.759865][T17249] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.778054][T17249] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.796866][T17249] bridge_slave_1: entered allmulticast mode
[  432.811923][T17249] bridge_slave_1: entered promiscuous mode
[  432.989060][T17249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  433.032812][T17249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  433.200757][T17249] team0: Port device team_slave_0 added
[  433.248658][T17249] team0: Port device team_slave_1 added
[  433.302953][ T5646] Bluetooth: hci5: command tx timeout
[  433.319728][T17249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.326961][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.355286][T17249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.368736][T17249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.376068][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.402530][T17249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.569473][T17249] hsr_slave_0: entered promiscuous mode
[  433.588083][T17249] hsr_slave_1: entered promiscuous mode
[  433.612725][T17249] debugfs: 'hsr0' already exists in 'hsr'
[  433.627771][T17249] Cannot create hsr debugfs directory
[  434.466675][T17473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2907'.
[  434.488349][T17473] netlink: 'syz.3.2907': attribute type 1 has an invalid length.
[  434.603659][T17485] xt_TPROXY: Can be used only with -p tcp or -p udp
[  434.640624][T17480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2909'.
[  434.805770][T17496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2913'.
[  434.827305][T17496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2913'.
[  434.849751][T17497] netlink: 'syz.2.2914': attribute type 2 has an invalid length.
[  435.027472][T17511] netlink: 'syz.3.2916': attribute type 10 has an invalid length.
[  435.268267][T17522] tipc: New replicast peer: 255.255.255.255
[  435.275693][T17522] tipc: Enabled bearer <udp:syz2>, priority 10
[  435.340699][T17523] netlink: 'syz.2.2921': attribute type 1 has an invalid length.
[  435.364307][ T5646] Bluetooth: hci5: command tx timeout
[  435.375269][T17249] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  435.393271][T17249] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  435.402219][T17249] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  435.421642][T17249] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  435.468814][T17529] xt_TPROXY: Can be used only with -p tcp or -p udp
[  435.489127][T17523] bond14: entered promiscuous mode
[  435.495264][T17523] 8021q: adding VLAN 0 to HW filter on device bond14
[  435.508802][T17249] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  435.521032][T17249] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  435.529606][T17249] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  435.542853][T17249] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  435.553615][T17524] bond14: entered allmulticast mode
[  435.609821][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.627389][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.772992][T17249] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.816405][T17249] 8021q: adding VLAN 0 to HW filter on device team0
[  435.844910][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.852160][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.886386][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.893643][ T7305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.964739][ T7303] net_ratelimit: 47 callbacks suppressed
[  435.964760][ T7303] bond3: (slave batadv0): failed to get link speed/duplex
[  436.117188][ T7303] bond3: (slave batadv0): failed to get link speed/duplex
[  436.183474][T17551] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  436.206556][T17553] __nla_validate_parse: 5 callbacks suppressed
[  436.206577][T17553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2929'.
[  436.264475][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  436.394589][   T66] bond3: (slave batadv0): failed to get link speed/duplex
[  436.467946][T17564] xt_TPROXY: Can be used only with -p tcp or -p udp
[  436.508477][T17568] netlink: 'syz.0.2934': attribute type 1 has an invalid length.
[  436.522857][T17569] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2935'.
[  436.584827][ T7303] bond3: (slave batadv0): failed to get link speed/duplex
[  436.682818][T17568] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2934'.
[  436.701952][T17571] bond15: (slave bridge8): making interface the new active one
[  436.712993][T17571] bond15: (slave bridge8): Enslaving as an active interface with an up link
[  436.727846][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  436.754217][T17568] bond15: entered promiscuous mode
[  436.775856][T17568] bridge8: entered promiscuous mode
[  436.791952][T17568] bond15: entered allmulticast mode
[  436.807530][T17583] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  436.817723][T17568] bridge8: entered allmulticast mode
[  436.838438][T17568] 8021q: adding VLAN 0 to HW filter on device bond15
[  436.934830][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  436.948482][T17577] virt_wifi0 speed is unknown, defaulting to 1000
[  437.083418][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  437.210960][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  437.451503][T17249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.075834][T17620] netlink: 'syz.0.2945': attribute type 4 has an invalid length.
[  438.082564][T17249] veth0_vlan: entered promiscuous mode
[  438.085221][T17620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2945'.
[  438.233362][T17620] xt_TPROXY: Can be used only with -p tcp or -p udp
[  438.265606][T17249] veth1_vlan: entered promiscuous mode
[  438.381058][T17249] veth0_macvtap: entered promiscuous mode
[  438.394904][T17249] veth1_macvtap: entered promiscuous mode
[  438.496245][T17249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.530766][T17249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.605335][   T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.614486][   T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.624979][   T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.638569][   T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.866119][T17637] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2949'.
[  438.950756][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.971452][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.051670][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.076096][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.462712][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2955'.
[  439.539745][T17656] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2955'.
[  439.620218][T17654] hsr_slave_1 (unregistering): left promiscuous mode
[  440.114203][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  440.128449][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  440.140232][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  440.160749][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  440.170813][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  440.503852][T17698] netlink: 'syz.2.2963': attribute type 1 has an invalid length.
[  440.531874][T17698] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2963'.
[  440.836992][T17703] tc_dump_action: action bad kind
[  441.140188][T17713] netlink: 'syz.3.2967': attribute type 1 has an invalid length.
[  441.151806][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2967'.
[  441.152772][T17716] netlink: 'syz.4.2969': attribute type 1 has an invalid length.
[  441.179418][T17709] macsec4: entered allmulticast mode
[  441.185955][T17709] bond0: entered allmulticast mode
[  441.192086][T17709] 8021q: adding VLAN 0 to HW filter on device macsec4
[  441.200295][T17709] bond0: left allmulticast mode
[  441.339450][ T7305] net_ratelimit: 25 callbacks suppressed
[  441.339474][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  441.521872][ T7303] veth7: left allmulticast mode
[  441.554288][ T7303] veth7: left promiscuous mode
[  441.573418][ T7303] bridge2: port 3(veth7) entered disabled state
[  441.602276][ T7303] veth5: left allmulticast mode
[  441.608474][ T7303] veth5: left promiscuous mode
[  441.613705][ T7303] bridge2: port 1(veth5) entered disabled state
[  441.662876][ T7303] bridge0: left allmulticast mode
[  441.686890][   T91] wlan1: Trigger new scan to find an IBSS to join
[  442.248551][ T5646] Bluetooth: hci3: command tx timeout
[  442.343414][ T7303] bond6 (unregistering): (slave geneve2): Releasing active interface
[  442.445923][ T7303] bond8 (unregistering): (slave bridge4): Releasing backup interface
[  442.483598][ T7303] bond15 (unregistering): (slave bridge8): Releasing active interface
[  442.492368][ T7303] bridge8 (unregistering): left promiscuous mode
[  442.498970][ T7303] bridge8 (unregistering): left allmulticast mode
[  442.512745][ T7303] bond0 (unregistering): Released all slaves
[  442.534125][ T7303] bond1 (unregistering): Released all slaves
[  442.551635][ T7303] bond2 (unregistering): Released all slaves
[  442.572192][ T7303] bond3 (unregistering): Released all slaves
[  442.596819][ T7303] bond4 (unregistering): Released all slaves
[  442.619708][ T7303] bond5 (unregistering): (slave veth11): Releasing active interface
[  442.635737][ T7303] bond5 (unregistering): (slave veth13): Releasing active interface
[  442.648109][ T7303] bond5 (unregistering): Released all slaves
[  442.664502][ T7303] bond6 (unregistering): Released all slaves
[  442.680905][ T7303] bond7 (unregistering): Released all slaves
[  442.704707][ T7303] bond8 (unregistering): (slave veth15): Releasing backup interface
[  442.716871][ T7303] bond8 (unregistering): Released all slaves
[  442.741147][ T7303] bond9 (unregistering): Released all slaves
[  442.759537][ T7303] bond10 (unregistering): Released all slaves
[  442.776583][ T7303] bond11 (unregistering): Released all slaves
[  442.793803][ T7303] bond12 (unregistering): (slave lo): Releasing backup interface
[  442.812608][ T7303] bond12 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  442.827291][ T7303] bond12 (unregistering): Released all slaves
[  442.843653][ T7303] bond13 (unregistering): Released all slaves
[  442.860082][ T7303] bond14 (unregistering): Released all slaves
[  442.893567][ T7303] bond15 (unregistering): Released all slaves
[  442.982547][T17680] virt_wifi0 speed is unknown, defaulting to 1000
[  442.992117][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  443.268262][ T7303] hmac(sha224): left promiscuous mode
[  443.403707][T17775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2982'.
[  443.530010][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  443.558506][ T7303] hmó3)ó
€: left promiscuous mode
[  443.663355][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  443.709713][ T7303] tipc: Left network mode
[  443.935020][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  443.948917][T17789] netlink: 'syz.2.2985': attribute type 12 has an invalid length.
[  444.052146][T17789] netlink: 'syz.2.2985': attribute type 7 has an invalid length.
[  444.128996][T17792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  444.204259][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  444.213300][T17796] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2988'.
[  444.326386][ T5646] Bluetooth: hci3: command tx timeout
[  444.368993][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'.
[  444.409741][T17812] FAULT_INJECTION: forcing a failure.
[  444.409741][T17812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  444.450829][T17812] CPU: 0 UID: 0 PID: 17812 Comm: syz.3.2991 Not tainted syzkaller #0 PREEMPT(full) 
[  444.450860][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  444.450875][T17812] Call Trace:
[  444.450883][T17812]  <TASK>
[  444.450892][T17812]  dump_stack_lvl+0xe8/0x150
[  444.450925][T17812]  should_fail_ex+0x40c/0x560
[  444.450966][T17812]  _copy_to_user+0x31/0xb0
[  444.450995][T17812]  simple_read_from_buffer+0xe1/0x170
[  444.451030][T17812]  proc_fail_nth_read+0x1bb/0x230
[  444.451063][T17812]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  444.451095][T17812]  ? rw_verify_area+0x24a/0x4c0
[  444.451133][T17812]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  444.451161][T17812]  vfs_read+0x213/0xa80
[  444.451197][T17812]  ? x25_bind+0x36e/0x450
[  444.451356][T17812]  ? __pfx_vfs_read+0x10/0x10
[  444.451385][T17812]  ? x25_bind+0x36e/0x450
[  444.451410][T17812]  ? __local_bh_enable_ip+0xd0/0x130
[  444.451441][T17812]  ? x25_bind+0x378/0x450
[  444.451472][T17812]  ? __sys_bind+0x306/0x410
[  444.451507][T17812]  ? __pfx___sys_bind+0x10/0x10
[  444.451545][T17812]  ksys_read+0x150/0x270
[  444.451580][T17812]  ? __pfx_ksys_read+0x10/0x10
[  444.451622][T17812]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.451647][T17812]  do_syscall_64+0x174/0x580
[  444.451674][T17812]  ? trace_irq_disable+0x3b/0x140
[  444.451706][T17812]  ? clear_bhb_loop+0x40/0x90
[  444.451734][T17812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.451756][T17812] RIP: 0033:0x7fdd7e35d68e
[  444.451778][T17812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  444.451797][T17812] RSP: 002b:00007fdd7c5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  444.451820][T17812] RAX: ffffffffffffffda RBX: 00007fdd7c5f66c0 RCX: 00007fdd7e35d68e
[  444.451836][T17812] RDX: 000000000000000f RSI: 00007fdd7c5f60a0 RDI: 0000000000000004
[  444.451850][T17812] RBP: 00007fdd7c5f6090 R08: 0000000000000000 R09: 0000000000000000
[  444.451863][T17812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.451876][T17812] R13: 00007fdd7e616038 R14: 00007fdd7e615fa0 R15: 00007ffcc0cb1a38
[  444.451911][T17812]  </TASK>
[  444.453667][T17816] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2992'.
[  444.694219][   T66] bond3: (slave batadv0): failed to get link speed/duplex
[  444.726322][   T91] wlan1: Trigger new scan to find an IBSS to join
[  444.916026][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  445.050385][T17826] bond1: option downdelay: invalid value (18446744073709551613)
[  445.088692][T17826] bond1: option downdelay: allowed values 0 - 2147483647
[  445.129118][T17826] bond1 (unregistering): Released all slaves
[  445.262682][T17838] netlink: 'syz.1.2997': attribute type 11 has an invalid length.
[  445.307789][T17826] bond1: option downdelay: invalid value (18446744073709551613)
[  445.315956][T17826] bond1: option downdelay: allowed values 0 - 2147483647
[  445.326961][T17826] bond1 (unregistering): Released all slaves
[  445.351869][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13
[  445.444491][   T91] bond3: (slave batadv0): failed to get link speed/duplex
[  445.511223][T17826] bond1: option downdelay: invalid value (18446744073709551613)
[  445.519234][T17826] bond1: option downdelay: allowed values 0 - 2147483647
[  445.530598][T17826] bond1 (unregistering): Released all slaves
[  445.688317][T17826] bond1: option downdelay: invalid value (18446744073709551613)
[  445.697179][T17826] bond1: option downdelay: allowed values 0 - 2147483647
[  445.706783][T17826] bond1 (unregistering): Released all slaves
[  445.987816][T17680] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.011295][T17680] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.034643][T17680] bridge_slave_0: entered allmulticast mode
[  446.049723][T17680] bridge_slave_0: entered promiscuous mode
[  446.078980][T17855] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3001'.
[  446.138912][T17856] syzkaller1: entered promiscuous mode
[  446.153687][T17856] syzkaller1: entered allmulticast mode
[  446.193192][T17680] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.213698][T17680] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.249046][T17680] bridge_slave_1: entered allmulticast mode
[  446.280013][T17680] bridge_slave_1: entered promiscuous mode
[  446.382176][T17867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3002'.
[  446.404980][ T5646] Bluetooth: hci3: command tx timeout
[  446.505458][T17680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.645378][T17680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.857504][   T91] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.917604][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14
[  446.981738][T17680] team0: Port device team_slave_0 added
[  446.998928][T17680] team0: Port device team_slave_1 added
[  447.237482][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'.
[  447.269114][T17680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.279165][T17680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.309088][T17680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.326167][   T91] net_ratelimit: 3 callbacks suppressed
[  447.326188][   T91] bond3: (slave batadv0): failed to get link speed/duplex
[  447.354010][T17680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.380017][T17680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.417188][T17680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.685851][   T66] wlan1: Trigger new scan to find an IBSS to join
[  447.722843][T17680] hsr_slave_0: entered promiscuous mode
[  447.736105][T17913] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3013'.
[  447.752180][T17680] hsr_slave_1: entered promiscuous mode
[  447.768662][T17680] debugfs: 'hsr0' already exists in 'hsr'
[  447.784786][T17680] Cannot create hsr debugfs directory
[  447.796919][T17915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3013'.
[  447.917703][ T7303] hsr_slave_0: left promiscuous mode
[  447.938889][ T7303] hsr_slave_1: left promiscuous mode
[  447.977524][ T7303] veth1_macvtap: left promiscuous mode
[  448.002622][ T7303] veth1_vlan: left promiscuous mode
[  448.027324][ T7303] veth0_vlan: left promiscuous mode
[  448.055149][T17923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3015'.
[  448.245095][T17928] netlink: 'syz.4.3016': attribute type 10 has an invalid length.
[  448.484852][ T5646] Bluetooth: hci3: command tx timeout
[  448.636000][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.866731][T17928] team0 (unregistering): Port device team_slave_0 removed
[  448.889253][T17928] team0 (unregistering): Port device team_slave_1 removed
[  448.953923][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15
[  449.055016][   T91] bond3: (slave batadv0): failed to get link speed/duplex
[  449.254220][T17947] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3021'.
[  449.544969][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  449.799285][ T7303] IPVS: stop unused estimator thread 0...
[  449.829223][   T66] bond3: (slave batadv0): failed to get link speed/duplex
[  449.926207][T17980] netlink: 840 bytes leftover after parsing attributes in process `syz.1.3027'.
[  450.112555][T17954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3023'.
[  450.144334][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  450.309398][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  450.482946][T17998] xt_hashlimit: size too large, truncated to 1048576
[  450.554815][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  450.674744][   T66] bond3: (slave batadv0): failed to get link speed/duplex
[  450.847877][T18012] tipc: Started in network mode
[  450.874461][T18012] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  450.924996][T18012] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000
[  450.942985][T18012] tipc: Enabled bearer <udp:syz0>, priority 10
[  451.119352][ T7303] bond3: (slave batadv0): failed to get link speed/duplex
[  451.294595][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  451.345398][T17680] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  451.518850][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  451.549633][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'.
[  451.678518][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3035'.
[  451.709276][T18032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3036'.
[  451.732487][T18022] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  451.754932][T18022] bond8 (unregistering): Released all slaves
[  451.787470][T17680] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  451.841705][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  451.990832][T17680] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  452.061429][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  452.073934][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'.
[  452.106646][T16365] tipc: Node number set to 1
[  452.119143][T17680] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  452.157095][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  452.374358][ T7312] net_ratelimit: 5 callbacks suppressed
[  452.374379][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  452.551341][ T7312] bond3: (slave batadv0): failed to get link speed/duplex
[  452.580366][T18078] xt_TPROXY: Can be used only with -p tcp or -p udp
[  452.797252][T18082] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  452.820047][T18082] gretap1: entered allmulticast mode
[  452.845518][T18086] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.853233][T18086] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.863066][T18086] bridge0: entered allmulticast mode
[  452.905602][T18091] bridge_slave_1: left allmulticast mode
[  452.919540][T18091] bridge_slave_1: left promiscuous mode
[  452.934938][T18091] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.994506][T18091] bridge_slave_0: left allmulticast mode
[  453.004880][T18091] bridge_slave_0: left promiscuous mode
[  453.010789][T18091] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.068808][T18090] xt_NFQUEUE: number of total queues is 0
[  453.085491][   T12] bond3: (slave batadv0): failed to get link speed/duplex
[  453.161044][T17680] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.235605][ T3389] bond3: (slave batadv0): failed to get link speed/duplex
[  453.270273][T17680] 8021q: adding VLAN 0 to HW filter on device team0
[  453.295961][ T3389] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.303165][ T3389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.343960][ T3389] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.351210][ T3389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.666220][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  453.899367][T18137] xt_TPROXY: Can be used only with -p tcp or -p udp
[  454.455919][ T7303] bond3: (slave batadv0): failed to get link speed/duplex
[  454.514753][T18162] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3060'.
[  454.594197][ T7303] bond3: (slave batadv0): failed to get link speed/duplex
[  454.618664][T18167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3061'.
[  454.728015][ T7303] bond3: (slave batadv0): failed to get link speed/duplex
[  454.780778][T18171] netlink: 'syz.4.3063': attribute type 1 has an invalid length.
[  454.813079][T18171] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3063'.
[  454.866525][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  455.004311][ T7305] bond3: (slave batadv0): failed to get link speed/duplex
[  455.012532][T18181] xt_TPROXY: Can be used only with -p tcp or -p udp
[  455.415544][T18201] netlink: 'syz.1.3070': attribute type 10 has an invalid length.
[  455.443942][T18201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3070'.
[  455.468202][T18204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3071'.
[  455.526817][T18201] 
[  455.529215][T18201] ============================================
[  455.535398][T18201] WARNING: possible recursive locking detected
[  455.541593][T18201] syzkaller #0 Not tainted
[  455.546069][T18201] --------------------------------------------
[  455.552255][T18201] syz.1.3070/18201 is trying to acquire lock:
[  455.558351][T18201] ffff888079ea6e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250
[  455.569660][T18201] 
[  455.569660][T18201] but task is already holding lock:
[  455.577055][T18201] ffff888079ea6e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670
[  455.586887][T18201] and the lock comparison function returns 0:
[  455.592973][T18201] 
[  455.592973][T18201] other info that might help us debug this:
[  455.601056][T18201]  Possible unsafe locking scenario:
[  455.601056][T18201] 
[  455.608523][T18201]        CPU0
[  455.611818][T18201]        ----
[  455.615107][T18201]   lock(&dev_instance_lock_key#3);
[  455.620340][T18201]   lock(&dev_instance_lock_key#3);
[  455.625581][T18201] 
[  455.625581][T18201]  *** DEADLOCK ***
[  455.625581][T18201] 
[  455.633757][T18201]  May be due to missing lock nesting notation
[  455.633757][T18201] 
[  455.642098][T18201] 2 locks held by syz.1.3070/18201:
[  455.647316][T18201]  #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x6a7/0xb20
[  455.656318][T18201]  #1: ffff888079ea6e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670
[  455.666450][T18201] 
[  455.666450][T18201] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  455.672357][T18201] CPU: 0 UID: 0 PID: 18201 Comm: syz.1.3070 Not tainted syzkaller #0 PREEMPT(full) 
[  455.672379][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  455.672391][T18201] Call Trace:
[  455.672400][T18201]  <TASK>
[  455.672408][T18201]  dump_stack_lvl+0xe8/0x150
[  455.672431][T18201]  print_deadlock_bug+0x279/0x290
[  455.672455][T18201]  __lock_acquire+0x24bf/0x2cd0
[  455.672477][T18201]  ? net_generic+0x1e/0x240
[  455.672563][T18201]  ? ib_device_get_by_netdev+0x81/0x4f0
[  455.672676][T18201]  ? __ethtool_get_link_ksettings+0x109/0x250
[  455.672700][T18201]  lock_acquire+0x106/0x350
[  455.672718][T18201]  ? __ethtool_get_link_ksettings+0x109/0x250
[  455.672747][T18201]  __mutex_lock+0x19d/0x1590
[  455.672769][T18201]  ? __ethtool_get_link_ksettings+0x109/0x250
[  455.672793][T18201]  ? __pfx_hsr_netdev_notify+0x10/0x10
[  455.672865][T18201]  ? udp_tunnel_nic_netdevice_event+0x1a1/0x1850
[  455.672942][T18201]  ? ip6_route_dev_notify+0x9a/0x5b0
[  455.673022][T18201]  ? __ethtool_get_link_ksettings+0x109/0x250
[  455.673046][T18201]  ? __pfx___mutex_lock+0x10/0x10
[  455.673070][T18201]  ? netdev_lower_state_changed+0xc4/0x140
[  455.673114][T18201]  ? __pfx_netdev_lower_state_changed+0x10/0x10
[  455.673130][T18201]  ? do_raw_spin_lock+0x12b/0x2f0
[  455.673158][T18201]  __ethtool_get_link_ksettings+0x109/0x250
[  455.673183][T18201]  __team_port_change_send+0x245/0x560
[  455.673204][T18201]  ? ip_mc_up+0x1c0/0x2e0
[  455.673222][T18201]  ? __pfx___team_port_change_send+0x10/0x10
[  455.673241][T18201]  ? bond_netdev_event+0xe3/0xf80
[  455.673318][T18201]  ? __asan_memset+0x22/0x50
[  455.673341][T18201]  ? macvtap_device_event+0xd1/0x400
[  455.673386][T18201]  team_port_change_check+0x82/0x1d0
[  455.673409][T18201]  team_device_event+0x487/0x570
[  455.673431][T18201]  notifier_call_chain+0x1a5/0x3d0
[  455.673457][T18201]  __dev_notify_flags+0x1aa/0x310
[  455.673475][T18201]  ? __pfx___dev_notify_flags+0x10/0x10
[  455.673490][T18201]  ? __dev_change_flags+0x5f1/0x820
[  455.673509][T18201]  ? __pfx___dev_change_flags+0x10/0x10
[  455.673529][T18201]  netif_change_flags+0xde/0x1b0
[  455.673568][T18201]  dev_change_flags+0x128/0x260
[  455.673598][T18201]  vlan_device_event+0x1b4e/0x1f00
[  455.673662][T18201]  ? packet_notifier+0xf1b/0xf70
[  455.673705][T18201]  ? br_device_event+0x282/0x9c0
[  455.673747][T18201]  ? __pfx_phonet_device_notify+0x10/0x10
[  455.673789][T18201]  ? __pfx_vlan_device_event+0x10/0x10
[  455.673808][T18201]  ? bcm_notifier+0xa9/0x890
[  455.673845][T18201]  ? raw_notifier+0x9d/0x7d0
[  455.673871][T18201]  ? cgw_notifier+0x314/0x380
[  455.673889][T18201]  notifier_call_chain+0x1a5/0x3d0
[  455.673915][T18201]  __dev_notify_flags+0x1aa/0x310
[  455.673932][T18201]  ? __pfx___dev_notify_flags+0x10/0x10
[  455.673947][T18201]  ? __dev_change_flags+0x64b/0x820
[  455.673966][T18201]  ? __pfx___dev_change_flags+0x10/0x10
[  455.673987][T18201]  netif_change_flags+0xde/0x1b0
[  455.674005][T18201]  do_setlink+0xdd6/0x4670
[  455.674028][T18201]  ? __lock_acquire+0x683/0x2cd0
[  455.674047][T18201]  ? __pfx_do_setlink+0x10/0x10
[  455.674067][T18201]  ? __lock_acquire+0x683/0x2cd0
[  455.674091][T18201]  ? ktime_get+0x45/0x220
[  455.674118][T18201]  ? do_raw_spin_lock+0x12b/0x2f0
[  455.674152][T18201]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  455.674196][T18201]  ? lockdep_hardirqs_on+0x7a/0x110
[  455.674216][T18201]  ? __mutex_lock+0x10ab/0x1590
[  455.674238][T18201]  ? __mutex_lock+0x5c5/0x1590
[  455.674266][T18201]  ? rtnl_setlink+0x6a7/0xb20
[  455.674282][T18201]  ? __pfx___mutex_lock+0x10/0x10
[  455.674306][T18201]  ? ns_capable+0x89/0xe0
[  455.674326][T18201]  rtnl_setlink+0x77d/0xb20
[  455.674343][T18201]  ? __pfx_rtnl_setlink+0x10/0x10
[  455.674362][T18201]  ? __lock_acquire+0x683/0x2cd0
[  455.674411][T18201]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  455.674471][T18201]  ? __pfx_rtnl_setlink+0x10/0x10
[  455.674486][T18201]  rtnetlink_rcv_msg+0x802/0xc00
[  455.674512][T18201]  ? kasan_save_track+0x3e/0x80
[  455.674538][T18201]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  455.674565][T18201]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  455.674593][T18201]  ? __lock_acquire+0x683/0x2cd0
[  455.674615][T18201]  netlink_rcv_skb+0x226/0x4a0
[  455.674666][T18201]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  455.674694][T18201]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  455.674723][T18201]  ? netlink_deliver_tap+0x2e/0x1b0
[  455.674741][T18201]  ? netlink_deliver_tap+0x2e/0x1b0
[  455.674764][T18201]  netlink_unicast+0x7bb/0x940
[  455.674796][T18201]  netlink_sendmsg+0x813/0xb40
[  455.674819][T18201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.674840][T18201]  ? aa_sock_msg_perm+0xf1/0x1b0
[  455.674895][T18201]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  455.674919][T18201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.674939][T18201]  ____sys_sendmsg+0x9b9/0xa20
[  455.674958][T18201]  ? __might_fault+0xaf/0x130
[  455.674983][T18201]  ? __pfx_____sys_sendmsg+0x10/0x10
[  455.675004][T18201]  ? import_iovec+0x73/0xa0
[  455.675049][T18201]  ___sys_sendmsg+0x2a5/0x360
[  455.675070][T18201]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.675091][T18201]  ? futex_wake+0x4d7/0x5b0
[  455.675132][T18201]  ? file_init_path+0x43c/0x5a0
[  455.675157][T18201]  __x64_sys_sendmsg+0x1bd/0x2a0
[  455.675177][T18201]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  455.675199][T18201]  ? rcu_is_watching+0x15/0xb0
[  455.675223][T18201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.675241][T18201]  do_syscall_64+0x174/0x580
[  455.675266][T18201]  ? trace_irq_disable+0x3b/0x140
[  455.675292][T18201]  ? clear_bhb_loop+0x40/0x90
[  455.675312][T18201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.675330][T18201] RIP: 0033:0x7f50af59ce59
[  455.675349][T18201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.675364][T18201] RSP: 002b:00007f50b0467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.675384][T18201] RAX: ffffffffffffffda RBX: 00007f50af815fa0 RCX: 00007f50af59ce59
[  455.675397][T18201] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  455.675409][T18201] RBP: 00007f50af632d6f R08: 0000000000000000 R09: 0000000000000000
[  455.675419][T18201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.675430][T18201] R13: 00007f50af816038 R14: 00007f50af815fa0 R15: 00007ffee67f33e8
[  455.675451][T18201]  </TASK>