last executing test programs:

23.395691967s ago: executing program 3 (id=3132):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'syztnl0\x00', <r4=>0x0, 0x8, 0x80, 0x3, 0xf7, {{0xf, 0x4, 0x0, 0x1d, 0x3c, 0x64, 0x0, 0x0, 0xb6f40025662466a3, 0x0, @empty, @loopback, {[@rr={0x7, 0x1f, 0xab, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @loopback, @empty, @local]}, @timestamp={0x44, 0x8, 0xe4, 0x0, 0xa, [0x200]}]}}}}})
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000002c0), &(0x7f00000004c0)=0xc)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="08000000655102003c00128008000100677265003000028006001800070000000500090003000000050009007f00000004001200060003005bf46b0984ae020000000600b9cda3e903b7a511b85b63d5204bf42233bac1c1f749d8acfc5a99fa2d4f5fc0da601c7f4c4f9465a99554e79afa2af8da39a45f5abe5563e255e08fd092334f80fe74bc08508d3fbb9ee40417d354046b635fab8314bb065c206dc0eb7efbdd0fe6ff07951555e2be85f60ced304d7e5f0a21b591b34146dccc3e5acc32a9af197309f4fc6c7978494448b59f7ee8d959f80c136a1785d7e8dde588621a64536e9231371bf65727"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

23.072192372s ago: executing program 3 (id=3135):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000085ff0000000000730133000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

22.942470678s ago: executing program 3 (id=3136):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x1100, {}, [@common=@addrtype={{0x30}, {0x687, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)

22.671812409s ago: executing program 3 (id=3139):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000500"/28], 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x25, 0x301, 0x670bd24, 0x5dfdbfc, {0x15}, [@typed={0x4, 0x163}]}, 0x18}, 0x1, 0x0, 0x0, 0x40009060}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.401236207s ago: executing program 3 (id=3147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=<r3=>0x0)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, r3, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) (async)
close(r2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xff}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8001}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0)

19.120500181s ago: executing program 3 (id=3151):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0xf4, r4, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x2, 0x70bd2b, 0x3, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x72}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000050)

9.031471577s ago: executing program 4 (id=3201):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677bdfb1914b421322ef4e955bc5147abd6102bd0a10ee2e48b60974cdd83be5c49500f9b91f88934faad163a176b3a9e397069e026a81e8dc2d094d1ccf11663075c478f859ad127e9b4e7a57fb3b687a7028a38d612c45d10ae18ea4e356730bd5f16d03bd49200bb34d64d2a7b86ba5aef9f82143803c2eff377d13191b2201bbdcd953a6f40365c42d1dba0dbd4f199ab5447ff3d4a43c90cb5cebf0b33851e3e7e1d8fc9c23470ed8b99af94d0e2fa928c92ad57b8a411d39e08d6a347154ba5714dae3e3e5f6f2e634006b9bed44a08df2050dd90a4fab00e368fe552ebd1c3ec9884f7ced36521d94cb7462c54e1e6150445d75535d7777cdd4bd21cbebe7aa6c97866613122b8b938fc003f4e9196f75611c7c16e2354554fce9d84c21b7c1adcfdb51a1e3df4d167ca6c934564fef3929531eb1cc3ce256fb03fced3d8838def483c40a0d60b346848e8ce72ca24d3bbd9938ec7ae7be11631bccb7627edd71f7d0d4328d7dd1d264ae863bd7e272976ac6c56d3cce490e8863bfd04e3a100d02a589d2632ab53a3131a5e7770f33cd51ddc49374db0b9b9bb32fd4f5e41ca242a04f54cca872d1bbfe8c791d04ddec5b2974622f5fab7dc51888c804d84f360788a4102fe183976bc88ccf9f6640370aac22aef9c6817376031d9750943d8f71dadf79ee97f922cdf352353f67dc8caaaac0d995fde8723ec54021840fe07d7cdb5cf9cc0e1e7081366deff4c2347554fb2bdd5a5f04b9a42fbf8fb3a1f4a95692dc658f5c8ba3d2660538462b78bbf67870cfea19ba5d3ac585c20e16c64d44e929375705272072f3914ac5427e8f527b3f5e60440cdf319947f3620c53df87ffad5bdcc97d1ad678958a18653be882e6ff1ce896f29fab9f934ad1d8db2bb7f35a14180e31ea843b0ca26855d81278848e66006c77d10a4298d55d3c872b27feef422fc3556396d61baa441e87aa036fe5215eae3716b51171984e0f72e0a9a54980167dc47d247e832d76fdd0717a87c5d30f675e97b187eb8d8a7b4094ddfeaf887227e43c803352373206d9bd83457f1c0abaf3e412802ca4192748b48947ce07e86db6826b8cd46fcaacd80b52f8669d1605eeabdab5a8c2aa4bd60e5838e021d041930525401c04304194f9b6309c2b10903ff4a22794c35485f5000a7365a62208ae85d29d8ad3e070670aabba3c86afced2fcdd93bf7c3170af1616b88f528aecd89ca0348d310dd281b5fb04169091221d7903afc4b741da130bc3d388e3fb35ad6e4574d4ea9ac012047fd5a52651fb642ced81284a2ba034cd963c8e9cc7b3b3fc5f9629c478aa7844c55feb692aeed5b97f638e7e2822907f7bd8a1729e30819bc53c4d497ac1a6dda76e13864e5f8b4ce0e34ed267870bd217035a28fec5a28fc8566f629cbd489171a29224637dc37fefb007481b4fa81c5dd39a4bc47c8cafe29ff949a8f613a4ddfdaafd6793ea7b9bf355d8471ae3e093f708957e9a9d5a7466854728ea82e0bb7ae6dae852b5090843d76d986dd005d495aa8bc209b20de8f45dd42a31129fabcb4cfaa30a7aed4b12be0fe2c0ede3e608b30895cd3e54324b83b43f66e504124195e9b18fa57ccb60c341d2017bd847d869a5ec1cc5efe008e70be2ba95098334a372fcb593e833ca36e301610e56eea80dfc2b781bd7207fcbee8da9308648d59befe0d493e495a78a8cd1cc8aff4472bbc833a708ab3115eda7e3640a12667bf58a0990cf2c3a59871e2155ed5dd101822b94804a0f87ed86b72840998356a66a5a947596acd2602ccc9f24e9709060e4c1e7b8e159560b5b4c66a3f9ac8b43f4f8fafc9342c0533747581ad7bd49277dc07b2c110ff91f21cbd6188c5d6759ca18fcdd314ee25ff410c3687e60df6a025901cc8e353c5b7b0974722a544b53b1b446b6edc48d149877fb72e59be779d33467598de6791f8188bbbbcb3fdb4ca5c90e8379180adb0d2dff15743d3cf263652b4495cbbce864f38267fb3108e40379362c10681774cc3c90d8bba07de8dbc67aab3b6585be9e1753686cba112a2ebccafe74f96be0fcfd5f3cc0463ed72726dbb970331823d8985e528286035a024cea50210b5bf6cc2f81f76fcee5ee5ef0c0b6ff14a10f4321df335a6c337628d426f9ad3890b037b1575c0d30c0e542310d4871f543fb25a5761769afcf7bca0fb0bc7160bde589846ff62375852db693297b97587e0d9db109fff87e2b5cadcc200678f2f348f18852e1eaa361c182c8dd9e6dfaa551c291cd0cfaef02718e66d6c44c7ee644a397591c8e8828e59f7631d265cf64875d416d0f17c39892773bc752d529dacef7c9a39e9b5f36e4e22464acdeed7f8f23361782f62fb822cd4cb7e04e9e0e9455fd61526dcfc7b270c682e839f85c7549f66da377666cc9e27ed1f598867844ce80d8404c53c2c433c38a0952a745ee943b634541d288d4c1d8b581353c93dc64ab9ad92bca5e6d00ef69b04001144301aee91700f20289615ba6539e33dfd8f24483ed8a48144073534c42d1cdb75c9ec45b88e355055bd52305a12c079ccd88f7710117ae218b43fdb6b868a375ab8c6de8790989f07ab8bf24f8a7d2b1052cbe07f65dc980ae88424c6a16ffdf79ff1ac8ec64414acc1c173e734b3f5bd11d61b5b77c8a50e733761eb81ea38942910a3a53c91acb1cde9973c41426239bcfb65c45cc61ea1553f267d861ce48fb9acde12ffc03b900fcdf0295fac14c739fe79f96e2d69abb7bce1946168bf98a9ec96f8ba7b8237967b67c70adc70cf5ec4569533e5fdf3ffe4ad85fdc11a5f9cd893ca47f279f688e414703215c83521b9451d8837dc5ec3aec1d4a4cf224f8d0e612950b33af62e6361b79185876e1809287a5b87edadd4fdc07e2b924f27def45adefa89b7343fc3e52c13c3caeb35afe011bcf212d2d82b0dc76d4452a7465e649f4871b0824d72e4ed8c4c39941da0d645748ee784f6b7875240d49e1f4270bf162629140a882af3bf9a3a6b0172b5777d61c24268cfd295fb0698e3b817694791f664c061bf6e4329018dc8812c600015ec84f4881b008140a1c9233c14dd8b654c4f8be97e173f9dfca54173a84edafccd35dc53bc9d97d70909f130e046df39986e5472921529366c4fdcf9d21f7e6fd13cf9ec2ef9888e240114f6a375a548016d6f1577bc69cad88b6e09dc37028d803b50b828df2ed26f1a1eca689331747083ba09239f2cd6be85b867af531398065d2e61f28691f557275cdbfd7ed35ff0b2548bd5c20d19f693168c0fec785f9436b5fa6068647a569812a42efbe4342ed58f6ee05373112b368218f20ffc074bee688091440de8fd9d9079af0c425654a4a78d9ab11cc1457ed21d439abf97baa77d1b4fccff20cc75a034edc86df5a2c2280fcb003ca8bb7055bc378e89691cd88d74919ad9c9b338d87157fae7a0ae7b9c90041d501bcddcd98607f54ce141d44a646d92ede0fdfaace16554dd9130d1d2ae152084dc9b0eb713170ba247024d7cc7b9f3f0bb10a4d3f61a85b4ab018dfec7d5c625d9d0864ad1e21939f21e200ec4449e29ffe7cd1b27a6ba5a025dcbdb608619088e8e73d148b8d28caf91da3f71c605238e3f6e2e5254465bde138884b4ed6a5d9cc1c7f6bba054141735eeb654608357faeb10e2b354a3b6b0421e2d3ede84e8a6902ecd446d74097c6c0b34430db23827e05d861f2763295cba86d486f402fbaf6e750ba872d7769dee32528c7b5b2f486384a6b1119e79aa1171dbacef24f902e49750e5e4cdea1af7c594f02ac8c7a9fd0e27ac1aac2dc1eadd6adaf776885615fcdcf6123e406c2f95f093479b7f90e05bfc2c06b71b631a55eed29f6152781b68fc1f96ecc23f63834aa270bb1b8b657ec6ce7c5e9da8bbc2af3c25fd2d0238e92600561a9b913ff60619d85706d79303c25faf7d7e8631aa098ceb842c16a52930b36681a727383a2f880e2df001888fb4c19f981c250de65cc186ff4b8fde1c67f061c2b63d1b0d74b3be65f871ade6beaa21459c2574a5042e00da4e2086492acefa572136fba2d6561e0d6747b0bee935d7aee889f0260457d23a98e6bd98c525724afb2fa9d8f8d71d85f852d6cb51092", 0xbd1}, {0x0}, {0x0}], 0x5) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="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", 0x4d9}], 0x1}, 0x4040004)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async)
close(0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) (async)
sendmmsg$inet(r4, &(0x7f00000001c0)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280", @ANYRES16=r5, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010) (async)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) (async)
accept(r7, 0x0, 0x0)

8.733202547s ago: executing program 4 (id=3205):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000000), 0x75)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000940)={r1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}]}, 0x1c}}, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000)
sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x24004980}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01022bbd7000fbdbdf255c00000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040)

7.807998614s ago: executing program 0 (id=3206):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
getsockopt(r0, 0x1, 0x45, &(0x7f00000000c0)=""/159, &(0x7f0000000280)=0x9f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911016000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_emit_ethernet(0x54, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffff2300810006003db2fec7421bd68a930d8d152e54c96a41666bc08ff55e3a935f611d60a78615de116edf9d2af494ec0a04471e632325ebeca84670ff71e9da0fbaedb1c0416e00000000000000000000a5339eaf20ec81ee56af66b618534bbffeb1113e6f47b50c537aef33cf1b45ebc4bc902b7591d7b06cf1ce25aa7d6b3b716f875c36d2cdec5fea1f3f27afe89404b3dac81af878e279b03722490653cdbcafbbdeb7700fc14634516cbcbb895cb8d972c22336f1965a522f037fc9c1de7453"], &(0x7f0000000500)={0x1, 0x3, [0x937, 0xc54, 0x1e5, 0xb3f]})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000300060000000000020000000000010038000000000000000200010000000000ffffffff7fffffff030005000000000002000000ac1414aa0000000000000000020008"], 0x60}, 0x1, 0x7}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202200, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000440)={0xa, &(0x7f00000003c0)=[{0x378, 0x80, 0xc0, 0x4}, {0x1ff, 0x9, 0xc, 0x3}, {0x7ff, 0x8, 0x2, 0x5}, {0x7, 0xe6, 0x3, 0x1}, {0xb21, 0x7, 0x6, 0x37}, {0xa, 0x8, 0x60, 0x3}, {0xf072, 0xf, 0x7, 0x1ff}, {0x7, 0xc, 0x1, 0x4}, {0x2, 0x3, 0xf, 0x7}, {0x0, 0x7f, 0xf}]})

7.699153799s ago: executing program 0 (id=3207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080504"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x87, &(0x7f0000000f40), &(0x7f0000000f80)="3ac1fc818d5a4ddd356a7f8bc6bc26f6da723e6050d2502259501e6051e95b2c072c9d17173353c9813332797681e9a774f523fc6b0eb310a16d0febde70d804541d872af2e04a2519746a28b818c680eaf361ceba6c939cb765e067d8990225efa37c81b0df75618baa51522b599f5409a4af71965792d1bf1fac0c4476d2619288cb043c3dff", 0x1, 0x0, 0x1}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="00012dbd7000fcdbdf250900000008000400ff03000008000300020000000800030005000000080002000500000008000200020000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000000000000753"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf2516000000c53a0300", @ANYRES32=r3, @ANYBLOB="0a001a000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x800)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r10, 0x1)
recvmmsg(r10, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
recvmsg(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)

5.352500889s ago: executing program 4 (id=3211):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x8000003, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}}}}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x464, 0x30, 0x9, 0x0, 0x0, {}, [{0x450, 0x1, [@m_police={0x44c, 0x12, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xd92, 0x2, 0x10, 0x4, 0x7, 0x3, 0x2, 0x9, 0x800, 0x4b, 0x2, 0x2, 0x3732, 0x5, 0x8, 0x1, 0x7, 0x3, 0x5, 0x2f, 0x10001, 0x8001, 0x18, 0x7ff, 0xfffffff6, 0x0, 0x2, 0x6, 0x9, 0x22, 0x7, 0x3, 0x2, 0x772, 0x5, 0x9, 0x5bd6, 0x8, 0x80000001, 0xf510, 0x8, 0x8001, 0x20a3, 0xfffffff7, 0x4a7a0308, 0x2, 0x9, 0xa, 0x2, 0x4, 0x8, 0x4, 0xe46, 0x1ff, 0x1, 0x4, 0x700000, 0x2, 0x4, 0x0, 0x6, 0x7, 0xffff4633, 0xfffffff7, 0xfd3, 0x6661e60f, 0x9b, 0x1, 0x5, 0x3, 0x5, 0x100, 0x7, 0x8, 0x1, 0x200, 0x1010, 0x7, 0x3a, 0x8, 0x8000, 0x1, 0x5, 0x4, 0x400, 0xfd, 0x4, 0x0, 0x66f, 0x5, 0x2, 0x4, 0x60, 0x3de5, 0x79ab, 0x6, 0x7, 0x9, 0xfffffabf, 0x8, 0x6, 0x10001, 0x10000, 0x45d, 0x8000, 0x9, 0x5, 0x1, 0x1000, 0x8000, 0x33, 0x46, 0x4, 0x9, 0xffffffff, 0x4, 0x6, 0x3943, 0x8, 0x6, 0x8, 0x7, 0x1, 0x5, 0xe, 0x6, 0x8, 0x7, 0xd3, 0x1, 0x2, 0x100, 0x5, 0x9, 0x5, 0x8, 0x5, 0x8, 0xffffffff, 0x3, 0xa1, 0xb, 0x4, 0x7ff, 0xfffffff5, 0x0, 0x3, 0x3, 0x8, 0x81, 0x4, 0x9, 0x67, 0x3, 0x7fff, 0x100, 0xfff, 0x4, 0xffffffff, 0x8fd, 0x10fd, 0x0, 0x800, 0xffff746d, 0x2c, 0x4, 0x1, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x800, 0x1, 0x3, 0x5, 0xf, 0x65e35740, 0xa, 0x970d, 0x80000000, 0x7f, 0x4, 0x2, 0x8000, 0x0, 0x7, 0xf8, 0x2c5, 0xf9, 0x0, 0x7, 0x9, 0xffffe3cd, 0x1, 0x5, 0x2, 0x69, 0xca, 0xd85a, 0x5161, 0xfffffff8, 0x10, 0x8, 0x7fffffff, 0xeaf, 0xffffffff, 0x2, 0x8, 0x2, 0x5, 0xfff, 0x1, 0x8, 0x7ff, 0x0, 0x1, 0x1, 0x3, 0x5fc, 0x7, 0x6, 0x5, 0x1, 0xa97, 0x7, 0xaa7a, 0x80000001, 0x6, 0x0, 0x25, 0x600, 0x0, 0x4, 0x2, 0x25a2, 0x5, 0x8, 0x9, 0x6, 0x8, 0x7, 0x9, 0x800, 0x5, 0xa27, 0x2, 0x7, 0x6, 0x100000, 0x3000, 0x40, 0x80, 0x7, 0x2, 0x10, 0x11]}]]}, {0x19, 0x6, "c0f435ef9ea2860528340f90efb01d5279247d1c10"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x464}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r6)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r7, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0xffffffff000)
recvmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x3)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r9, 0x1, 0x70bd2c, 0xffffffbe, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056)

4.940599502s ago: executing program 2 (id=3212):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf251500000018000180140002006772657461703000000000000000000063cfa3c929a509e2c915ded4595e4f18096bf82ee65e0cb1a385fab95569224859f859171d05dae4e38bdea74919ad6463463fc0ab5cbc3654c3b487d3361a1446489055cccf5d27a4a3d5000ccb67355a74c617376c20a38bd95e5484c9cc57e19059f8adeb75698995ba84aedbaed4ad53e0dc77ccc9c6ae9032c9a8bbdc6befa6f784e227d4d51539495171b44a673577c738"], 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x8040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) (async)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10008000}, 0x20040894)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8831760780000100", @ANYRES16=r2, @ANYBLOB="000228bd7000fddbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="0c006e80040002000400010011000700c50338178234e4f7f87ebf286100000008003700000000000500080004000000080037000100000008006e800400020008003700010000000a00060008021100000000000800090005ac0f000500080001000000"], 0x80}, 0x1, 0x0, 0x0, 0x4008004}, 0x20044810) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000000)=0x9a8, 0x4) (async)
connect$inet(r6, &(0x7f0000000640)={0x2, 0x4e22, @multicast1}, 0x10)
getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000002500)=""/4096, &(0x7f0000003500)=0x1000)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async)
shutdown(r1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x2000000) (async)
setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0)
pwritev(r8, 0x0, 0x0, 0xe5, 0x1)
recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000024c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002480)={&(0x7f0000000f40)={0x188, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0xc, 0xde, 0x0, 0x0, @u64=0xf}, @typed={0xa, 0x13d, 0x0, 0x0, @str='wlan1\x00'}, @generic="5cb7f73eec584e3a34f52517a5582c8b9285c4fe99f8a7549339cdad6c1d366c090d852dd564bc6551f6a31c77110e226017d24ac44c3ea5247bd296fa7c433414a39e64aac31ddc7532a0686766b181e53f4a41e2c01705d27b497b02d51748f24e30c6a4a564e873fff26a8e8efaaef6e7a948cd8d775e3140ea19043e9315f3d5f5ee454d", @generic="514996d760d0b2ea7c02318265dddabee8cbe7aa53a907231be5e1cbfbd822c728", @typed={0xa9, 0xed, 0x0, 0x0, @binary="19afcee8ebcf3135d49da4baeef2140056454c7a52531258fd3f934eb1a56248d173f55efd070626ea0aea01462139cab54df0cd2208a6047dddb212b136ecf7c9672cbe0ac461c2a7194344cd40bc6f00f4662b10778cba554179918fe211781bbab2e740a96591f5405defea508b94485ecab34e95160e9e4310e06b91f9dece608e1f5059bf99ec29ee909d314c8a7c4fbf6b49af8edf3516f6a5ccaefd0a9960ec46ff"}, @nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0x8f}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000001080104000000000000000500000834000480080003400000007d0800064000000da3080005400000000e080001400000000708000540000000090800024000000008050003002d00000000"], 0x50}, 0x1, 0x0, 0x0, 0x40045}, 0x4000001)

4.742717157s ago: executing program 1 (id=3214):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4066, 0xfe2}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0)
close(r2)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}, {{&(0x7f0000000100)=@nl, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000480)=""/90}, {&(0x7f0000000600)=""/83}, {&(0x7f0000000740)=""/140}, {&(0x7f0000000800)=""/91}, {&(0x7f0000000ac0)=""/68}, {&(0x7f0000000900)=""/40}, {&(0x7f0000000940)=""/107}, {&(0x7f00000009c0)=""/194}, {&(0x7f0000001ec0)=""/183}], 0x0, &(0x7f0000000c80)=""/229}, 0x1}], 0x1ae, 0x10002, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r8, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x30000000, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40048)

4.740249318s ago: executing program 2 (id=3215):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000180), 0x1000000000000343)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0xf, 0x12)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'fo\x00', 0x11, 0x10000004, 0x8}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000540)={0x7, [0x1000, 0x6, 0x5, 0x0, 0x3, 0x3, 0x9]}, &(0x7f0000000600)=0x12)
r4 = socket(0x400000000010, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r6, r5, &(0x7f0000000080)=0x1, 0x5)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
sendfile(r4, r8, 0x0, 0x9cba)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a5002000", @ANYRES16=r9, @ANYBLOB="20002abd7000fcdbdf254b0000000c009900000000004f0000000500f600020000000a00f5005050505050500000080077000600000048002d801d00000037bcbab4ebaaa234e69f687566d883d52ca57da1933c4a083f000000220000009f5d7692411a1495f705a033f688d4d1303418a2e32bdaffaf73436933510000"], 0x84}, 0x1, 0x0, 0x0, 0x240008d0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000100000085100000fcffffff8510"], &(0x7f0000000000)='GPL\x00', 0x7, 0xdd, &(0x7f0000000200)=""/221, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)

4.407511324s ago: executing program 0 (id=3216):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$kcm(0xa, 0x1, 0x106)
socket$inet6(0xa, 0x3, 0x1) (async)
r3 = socket$inet6(0xa, 0x3, 0x1)
r4 = socket$inet(0x2, 0x4000000000000001, 0x100)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) (async)
sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
socket$kcm(0x10, 0x2, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2], 0xfc}}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000400000e00000010000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r10, 0x0, 0x0}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r10, 0x0, 0x0}, 0x10)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)

3.993977521s ago: executing program 0 (id=3217):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x373}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x6, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYBLOB="c9f3dbbea3fc7a52316ebe9988e06d7d9eb33dec2eabec6575456cbffe476813b9f0a434ead9d63335b25e901545e6ea4bd453ecff72f6b0fc635ed44f8c516c9b5a6b9e3d3656af323feb6738d7d0f8170c958fde01046c8fbadc3f35c92dfc3b082fb14320bc3555e561d225b9bed4a4a57676766cf6beb72014d63b998b48144113a01ffb608907bdb6c6c51e105c94066294a19d0e1155cabc4a167f913b6a4de6d268aea91e2eb1b947822c00", @ANYBLOB="d099bf0fcc20a53b5e57768749971c8710d075aefb656352d125864a37e61e061138b4aa62d4dce9218fc420872c7b98b4a62994218e6bd74f938f1a95a0cb9499f9e4cf077af1535a3e08f18ce1dcd17a52a47a6c963921b27925873f592bb118cd6e000b3786404d97b748f306f01deb665cc513728bf94eb48b0584a8acc7b778dadfd4977fd840ccef26a8c3de1b668f2e394d8783f9d073f590d0ffb97bddfafe8d69494b106b4ea563b09844e69c1c2a28c6d48633ac0012e6d142a1730f8b539085d6a51ef60b89e161e76d355a72a3211b712b14ca8e"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x3a0af83a)
shutdown(r5, 0x1)
listen(r5, 0x28)
poll(&(0x7f0000000080)=[{r5, 0x408}], 0x1, 0x40000400)
shutdown(r5, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r4, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001940)={r0, 0x0, 0x10001, 0x7})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r6}, &(0x7f0000001a00), &(0x7f0000001a40)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001ac0), 0x4)

3.806377031s ago: executing program 2 (id=3218):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703020086dd14000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5)

3.369736828s ago: executing program 1 (id=3219):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r1=>0x0}) (rerun: 64)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f927bd7040010000000f08000008000300", @ANYRES32=r1, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x73)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async)
socket(0x10, 0x3, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r6=>0x0}) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async, rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async, rerun: 64)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async)
socket$inet6(0xa, 0x3, 0x5)
r12 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020400) (async)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r14, 0x2, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)

3.350384021s ago: executing program 4 (id=3220):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94)
clock_gettime(0x3, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000540)="8cc5a877977c8e1ab624fcd14491", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)

3.06286005s ago: executing program 1 (id=3221):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {0x2f00}, [@common=@addrtype={{0x30}, {0x687, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)

3.059664945s ago: executing program 0 (id=3222):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
unshare(0x10000200)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000080}, 0x42)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0)

2.972415746s ago: executing program 4 (id=3223):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x85}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090)
sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000080), 0xc, &(0x7f0000000940)={&(0x7f0000000780)=@bridge_newneigh={0x50, 0x1c, 0x1, 0x0, 0x0, {}, [@NDA_FLAGS_EXT={0x8}, @NDA_IFINDEX={0x8}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_PROTOCOL={0x5, 0xc, 0x5}, @NDA_NH_ID={0x8, 0xd, 0x7}]}, 0x50}}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000040)=[0x5, 0x8])
unshare(0x8040480)
setsockopt(r3, 0xff, 0x25, &(0x7f0000002d80)="f0c46000", 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000079120100000000009500"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

2.870262348s ago: executing program 1 (id=3224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=0x0, @ANYBLOB="090001"], 0x38}}, 0x40000)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100ce12423da88f00"/22, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="e411000901"], 0x48}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x1e, 0x4, 0x0)
unshare(0x2c020400)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0xfd9)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5}, 0x8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

1.109322902s ago: executing program 4 (id=3225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080504"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x87, &(0x7f0000000f40), &(0x7f0000000f80)="3ac1fc818d5a4ddd356a7f8bc6bc26f6da723e6050d2502259501e6051e95b2c072c9d17173353c9813332797681e9a774f523fc6b0eb310a16d0febde70d804541d872af2e04a2519746a28b818c680eaf361ceba6c939cb765e067d8990225efa37c81b0df75618baa51522b599f5409a4af71965792d1bf1fac0c4476d2619288cb043c3dff", 0x1, 0x0, 0x1}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="00012dbd7000fcdbdf250900000008000400ff03000008000300020000000800030005000000080002000500000008000200020000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000000000000753"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf2516000000c53a0300", @ANYRES32=r3, @ANYBLOB="0a001a000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x800)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r10, 0x1)
recvmmsg(r10, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
recvmsg(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)

1.006254732s ago: executing program 1 (id=3226):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x2f5}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x6, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYBLOB="c9f3dbbea3fc7a52316ebe9988e06d7d9eb33dec2eabec6575456cbffe476813b9f0a434ead9d63335b25e901545e6ea4bd453ecff72f6b0fc635ed44f8c516c9b5a6b9e3d3656af323feb6738d7d0f8170c958fde01046c8fbadc3f35c92dfc3b082fb14320bc3555e561d225b9bed4a4a57676766cf6beb72014d63b998b48144113a01ffb608907bdb6c6c51e105c94066294a19d0e1155cabc4a167f913b6a4de6d268aea91e2eb1b947822c00", @ANYBLOB="d099bf0fcc20a53b5e57768749971c8710d075aefb656352d125864a37e61e061138b4aa62d4dce9218fc420872c7b98b4a62994218e6bd74f938f1a95a0cb9499f9e4cf077af1535a3e08f18ce1dcd17a52a47a6c963921b27925873f592bb118cd6e000b3786404d97b748f306f01deb665cc513728bf94eb48b0584a8acc7b778dadfd4977fd840ccef26a8c3de1b668f2e394d8783f9d073f590d0ffb97bddfafe8d69494b106b4ea563b09844e69c1c2a28c6d48633ac0012e6d142a1730f8b539085d6a51ef60b89e161e76d355a72a3211b712b14ca8e"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x3a0af83a)
shutdown(r5, 0x1)
listen(r5, 0x28)
poll(&(0x7f0000000080)=[{r5, 0x408}], 0x1, 0x40000400)
shutdown(r5, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r4, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001940)={r0, 0x0, 0x10001, 0x7})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r6}, &(0x7f0000001a00), &(0x7f0000001a40)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001ac0), 0x4)

1.00134525s ago: executing program 2 (id=3227):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000d18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

857.634496ms ago: executing program 2 (id=3228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000", @ANYRESHEX=r8], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32)
sendmmsg(r11, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r12)
sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x2)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB="f4ce036eb89d02f62c4e48e53ddec5d128f313a96716cce5342c4cb659a78ffdc71014787dc2e59cfa9743b90d152365086f3fa133050212ecbfeee78b979a15eda6fdcfd0084fd6685a32a6a4df196fe5e3fc95d2bb14524dec7f598b588eac0d1941d655e859c81a34db5b11c235a001872d80eef918becd04543bc050f25e19a954a25d8ebb3260d2432a425447823a760f45e331d53d27c3caae991c7563c263cd45f1fc6398ac8b671a61be33609426e1284bb53bda5670334997d1e15cb95b6b783c8c4d8e46ca67e2b3ff9559e659be71ca92d6567d8434f4d36508e60a886a19648a5f46f1176fbdc28c192c00"/254, @ANYRES64=0x0], 0xa)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006c000100279d7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fc0000339c280000140045"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r16], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0)

250.620997ms ago: executing program 2 (id=3229):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r5, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000000300)=""/152, 0x98}, {0x0}], 0x2}}], 0x3, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{&(0x7f0000000200)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x0, &(0x7f0000005380)=[{&(0x7f0000001440)="c2ef05784bbc74cc53e231c66860c4ed4843dbf0deb86443de1334c7d364700eeb2544e4ef2ca8521c351c51d3"}, {&(0x7f0000001480)="ab7356d9cb13a66a6af56245725e9b59a6d507df57c4018f4af0238472e1a7df92c2bf72fbc5511ff3be9698d4314757f60046aba6bf8a4ff0f45485babe13c6509d89c843992553740a778ca29ebba622c017eab2704462ea6ff973175717ea0756a64792a2344d3b878222e2df0a497d64357314222cfdf17ca2c344f4545d88f3ee55f56feefb584277a908ddfe5aabd5eb0930fcb460419c334cbef2eb601e940ca5d81aa614ff147af7525f37d2fff7c33e7e4cb991659b16c906514b0481a911f8f6c990c2710b8086f4c66094"}, {&(0x7f0000001580)="6a91ad7337e5140f539494c4ec60e9a5a33150130f0bf537632aecc9c76ee22fe227bc9a8769d690caa070fc17ba2c0820031b4216be6744815c5e84efee96e816c3f0a00afed559ba1d133065671ec8b92f511f779f000c4e5a21728fe9f7f871cc2d866c70923f7e894148d3e170cec2da0f6bd173d0084edb06e348f2c7e43bf98210aa1b65e69833b96817264c58c3b6935b51819d81d38dae50a42ddbd38fd4a84d5f"}, {&(0x7f0000004100)="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"}, {&(0x7f0000005100)="70866dbb2d54da7e35e2dbdcef6e662e6a663fcc8c3fa026433c16b9ae3a1e67ba65e088a60def1654fb267050eb3a5d71fb2cc339d25d207b6473a367ad8e143acf8c5862a6fd7651eecdaa2340217b1d46b385c21e1560aab7cfb455d2b745b3a22ab11d1e12d3f270b94fda5c56e938b94025baed25464032"}, {&(0x7f0000005180)="00274f5217e3471a2db5efc2b4db6e881e5be2dd73"}, {&(0x7f00000051c0)="75335413e5"}, {&(0x7f0000005200)="57da3081100b0ae0bd3f017d07c68364279129348a180e0724ffb4069ac4bd98be58bf481ffadea8eb94f38769570bb9326cbf89d3ddbcf0825b1f90bf52d208a1888f89606fe4bcdc86ff253097d99df8e0817dfeb05de06bd19e70181dad66c2b003d009c994e84d50153166295c0585da40febfa1b2ff2eda78bec3546d6b7f9b54ecda"}, {&(0x7f00000052c0)="2d4662d60e68cd338476fef24a649b6e069b5b3693839b3973fd0a5050d2753d4d3e384e9a197e2e4fd87f80f00e0bb695cfe3c823ea6cfb7fc1cf11db7c6ed833e82ced490c1718c494ab61e8b7fc19fed7222b702f7329acb550bd9b281eb02667d68bdc55b551f8d938440df3d5bf053be8e2ab157030e3666315a1249b05e5cf19e104ea6af224f9fc339f23ad8b17a0de525106796f32718a1dd7e0"}], 0x0, &(0x7f0000005440)}}], 0x0, 0x24048044)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x7d4165c9)
listen(r4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x4a7, 0x4, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85, 0x8000}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1066, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x100c4041}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
setsockopt$inet6_int(r6, 0x29, 0xa, &(0x7f0000000100)=0x59, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

77.423313ms ago: executing program 1 (id=3230):
socket$inet_tcp(0x2, 0x1, 0x0)
getuid()
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80000)
splice(r1, &(0x7f00000001c0)=0x2, r2, &(0x7f00000003c0)=0x6d4, 0x3636, 0x7)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0xc4}}, 0x8000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x2, 0x0, 0x2, 0x80}, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000010c0)={r5, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000001180)=0x84)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc31fe0863365904)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x2, 0x3, 0xff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080)
sendmsg$rds(r6, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x4000050}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r6, &(0x7f0000000900)={&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f00000006c0)=""/225, 0xe1}], 0x3, &(0x7f0000000800)=""/211, 0xd3}, 0x12020)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48130000090601020000001797d8090002007274200007800c000180080001a099b2d1041a1740e000000208200a400000000205000300020000000900020073797a3100004e00c172c6fc5ae3868e878c9f3e907777ed24a133fcfafb77e6c1d637b0de50b6e93d2901a2790c72a25910c9abf68aaa1e1d5d680d979d882cba44fd7e6396ea9588ecd0998a2300133c5fce25452663"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

0s ago: executing program 0 (id=3231):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x373}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x6, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYBLOB="c9f3dbbea3fc7a52316ebe9988e06d7d9eb33dec2eabec6575456cbffe476813b9f0a434ead9d63335b25e901545e6ea4bd453ecff72f6b0fc635ed44f8c516c9b5a6b9e3d3656af323feb6738d7d0f8170c958fde01046c8fbadc3f35c92dfc3b082fb14320bc3555e561d225b9bed4a4a57676766cf6beb72014d63b998b48144113a01ffb608907bdb6c6c51e105c94066294a19d0e1155cabc4a167f913b6a4de6d268aea91e2eb1b947822c00", @ANYBLOB="d099bf0fcc20a53b5e57768749971c8710d075aefb656352d125864a37e61e061138b4aa62d4dce9218fc420872c7b98b4a62994218e6bd74f938f1a95a0cb9499f9e4cf077af1535a3e08f18ce1dcd17a52a47a6c963921b27925873f592bb118cd6e000b3786404d97b748f306f01deb665cc513728bf94eb48b0584a8acc7b778dadfd4977fd840ccef26a8c3de1b668f2e394d8783f9d073f590d0ffb97bddfafe8d69494b106b4ea563b09844e69c1c2a28c6d48633ac0012e6d142a1730f8b539085d6a51ef60b89e161e76d355a72a3211b712b14ca8e"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x3a0af83a)
shutdown(r5, 0x1)
listen(r5, 0x28)
poll(&(0x7f0000000080)=[{r5, 0x408}], 0x1, 0x40000400)
shutdown(r5, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r4, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001940)={r0, 0x0, 0x10001, 0x7})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r6}, &(0x7f0000001a00), &(0x7f0000001a40)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001ac0), 0x4)

kernel console output (not intermixed with test programs):

er <eth:syzkaller0>
[  264.297964][T12514] tipc: Disabling bearer <eth:syzkaller0>
[  264.380354][T12518] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1915'.
[  264.505773][T12524] x_tables: duplicate underflow at hook 2
[  264.577393][T12526] ipvlan1: entered allmulticast mode
[  264.601661][T12526] erspan0: entered allmulticast mode
[  264.628494][T12526] batman_adv: batadv0: Adding interface: ipvlan1
[  264.650440][T12526] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.700003][T12526] batman_adv: batadv0: Interface activated: ipvlan1
[  264.757626][T12541] dvmrp0: left allmulticast mode
[  264.858596][T12549] IPVS: set_ctl: invalid protocol: 29 172.30.0.4:20003
[  264.964644][T12554] xfrm1: entered allmulticast mode
[  265.171497][T12568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.203454][T12568] tipc: Resetting bearer <eth:syzkaller0>
[  265.215217][T12567] tipc: Disabling bearer <eth:syzkaller0>
[  265.306297][T12576] netlink: 'syz.3.1928': attribute type 1 has an invalid length.
[  265.425229][T12576] bond2: entered promiscuous mode
[  265.439721][T12576] 8021q: adding VLAN 0 to HW filter on device bond2
[  265.983046][T12612] netlink: 'syz.4.1941': attribute type 13 has an invalid length.
[  266.017658][T12612] netlink: 'syz.4.1941': attribute type 17 has an invalid length.
[  266.061620][T12619] netlink: 'syz.3.1942': attribute type 10 has an invalid length.
[  266.215914][T12612] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.253462][T12612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.348798][T12633] netlink: 'syz.1.1948': attribute type 4 has an invalid length.
[  266.411252][T12612] veth1_vlan: left promiscuous mode
[  266.418332][T12612] veth0_vlan: left promiscuous mode
[  266.426024][T12612] veth0_vlan: entered promiscuous mode
[  266.442092][T12612] veth1_vlan: entered promiscuous mode
[  266.453002][T12612] veth1_macvtap: left promiscuous mode
[  266.461076][T12612] veth0_macvtap: left promiscuous mode
[  266.467355][T12612] veth0_macvtap: entered promiscuous mode
[  266.482750][T12612] veth1_macvtap: entered promiscuous mode
[  266.491487][T12612] geneve1: left promiscuous mode
[  266.497637][T12612] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  266.515002][T12619] geneve1: entered promiscuous mode
[  266.535231][T12619] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  266.693263][T12636] netlink: 'syz.2.1945': attribute type 12 has an invalid length.
[  266.706383][   T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.724049][   T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.753168][   T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.776306][   T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.878579][T12648] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  267.246030][T12668] vlan2: entered allmulticast mode
[  267.251373][T12668] macvtap0: entered allmulticast mode
[  267.257249][T12668] veth0_macvtap: entered allmulticast mode
[  267.320752][T12648] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma?
[  267.374582][T12673] __nla_validate_parse: 7 callbacks suppressed
[  267.374600][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'.
[  267.407471][T12673] netlink: 'syz.2.1959': attribute type 9 has an invalid length.
[  267.473187][ T7690] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.494319][ T7690] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  267.528625][ T7690] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.548394][ T7690] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.753489][T12683] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1962'.
[  267.851120][T12686] syzkaller0: entered promiscuous mode
[  267.858165][T12686] syzkaller0: entered allmulticast mode
[  268.108528][T12703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1968'.
[  268.127563][T12705] Bluetooth: MGMT ver 1.23
[  268.134006][T12705] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  268.145507][T12705] netlink: 'syz.4.1970': attribute type 1 has an invalid length.
[  268.699197][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1975'.
[  269.219582][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1977'.
[  269.289874][T12735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1977'.
[  271.114238][T12726] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1976'.
[  271.278302][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  271.605067][T12760] 8021q: VLANs not supported on ip6tnl0
[  271.760654][T12779] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1992'.
[  271.773406][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.794422][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.876484][T12786] xt_hashlimit: size too large, truncated to 1048576
[  271.919992][T12788] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  271.946645][T12777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1991'.
[  271.973537][T12792] xt_TPROXY: Can be used only with -p tcp or -p udp
[  272.143384][T12800] block nbd0: not configured, cannot reconfigure
[  272.152580][T12801] validate_nla: 2 callbacks suppressed
[  272.152598][T12801] netlink: 'syz.4.1997': attribute type 4 has an invalid length.
[  272.206980][T12800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.646726][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'.
[  272.904241][T12830] netlink: 'syz.1.2004': attribute type 8 has an invalid length.
[  272.966766][T12833] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2005'.
[  273.036434][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2006'.
[  273.109893][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'.
[  273.216661][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'.
[  273.232758][T12845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2010'.
[  273.438035][T12852] macsec2: entered promiscuous mode
[  273.543379][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'.
[  273.555962][ T5749] IPVS: starting estimator thread 0...
[  273.650545][T12859] IPVS: using max 42 ests per chain, 100800 per kthread
[  273.959914][T12879] netlink: 'syz.4.2019': attribute type 2 has an invalid length.
[  274.039481][T12879] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2019'.
[  274.186807][T12884] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2021'.
[  274.526440][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2024'.
[  274.555442][T12897] lo speed is unknown, defaulting to 1000
[  274.659006][   T48] wlan1: Trigger new scan to find an IBSS to join
[  275.366961][T12925] bond2: entered promiscuous mode
[  275.384317][T12925] bond2: entered allmulticast mode
[  275.391712][T12925] 8021q: adding VLAN 0 to HW filter on device bond2
[  275.704234][   T57] wlan1: Trigger new scan to find an IBSS to join
[  275.797763][T12947] x_tables: duplicate underflow at hook 1
[  276.316549][T12986] xt_TPROXY: Can be used only with -p tcp or -p udp
[  277.709022][  T130] wlan1: Trigger new scan to find an IBSS to join
[  278.579284][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  278.659282][ T7690] wlan1: Trigger new scan to find an IBSS to join
[  279.273035][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.540921][ T7690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.780421][T13068] __nla_validate_parse: 10 callbacks suppressed
[  279.780441][T13068] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2075'.
[  280.121163][T13094] netlink: 'syz.4.2083': attribute type 3 has an invalid length.
[  280.157936][T13092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.199522][T13092] tipc: Resetting bearer <eth:syzkaller0>
[  280.223325][T13091] tipc: Disabling bearer <eth:syzkaller0>
[  280.355964][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'.
[  280.379198][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'.
[  280.721727][T13128] xt_hashlimit: size too large, truncated to 1048576
[  280.748807][T13128] xt_hashlimit: max too large, truncated to 1048576
[  281.004941][T13132] bond3: entered promiscuous mode
[  281.034330][T13132] 8021q: adding VLAN 0 to HW filter on device bond3
[  281.112547][T13137] bridge0: port 1(batadv1) entered blocking state
[  281.153982][T13137] bridge0: port 1(batadv1) entered disabled state
[  281.180149][T13137] batadv1: entered allmulticast mode
[  281.201558][T13137] batadv1: entered promiscuous mode
[  281.226095][T13134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.254839][T13138] syzkaller0: entered promiscuous mode
[  281.276741][T13138] syzkaller0: entered allmulticast mode
[  281.357350][T13134] tipc: Resetting bearer <eth:syzkaller0>
[  281.408619][T13152] IPVS: Scheduler module ip_vs_ not found
[  281.420880][T13133] tipc: Resetting bearer <eth:syzkaller0>
[  281.524441][T13133] tipc: Disabling bearer <eth:syzkaller0>
[  281.579151][ T7690] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  281.589206][ T7690] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  281.711798][T13163] nbd1: detected capacity change from 0 to 63
[  281.725901][T13168] block nbd1: NBD_DISCONNECT
[  281.763954][T13168] block nbd1: Disconnected due to user request.
[  281.794426][T13168] block nbd1: shutting down sockets
[  281.824946][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.834214][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  281.845498][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.854610][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  281.862462][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.871543][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  281.879376][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.888416][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  281.906023][ T5627] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.917099][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'.
[  281.954809][ T5627] Buffer I/O error on dev nbd1, logical block 0, async page read
[  281.969606][ T5627] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  281.991211][ T5627] Buffer I/O error on dev nbd1, logical block 1, async page read
[  282.009215][ T5627] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  282.042574][ T5627] Buffer I/O error on dev nbd1, logical block 2, async page read
[  282.088787][ T5627] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  282.131122][ T5627] Buffer I/O error on dev nbd1, logical block 3, async page read
[  282.149141][ T5627] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  282.170404][ T5627] Buffer I/O error on dev nbd1, logical block 0, async page read
[  282.188854][ T5627] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  282.204777][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2112'.
[  282.211016][ T5627] Buffer I/O error on dev nbd1, logical block 1, async page read
[  282.256828][ T5627] ldm_validate_partition_table(): Disk read failed.
[  282.274167][T13198] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  282.278527][ T5627] Dev nbd1: unable to read RDB block 0
[  282.299984][ T5627]  nbd1: unable to read partition table
[  282.307550][T13198] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  282.318527][T13198] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  282.333863][ T5627] ldm_validate_partition_table(): Disk read failed.
[  282.362380][ T5627] Dev nbd1: unable to read RDB block 0
[  282.372039][ T5627]  nbd1: unable to read partition table
[  282.466633][T13206] x_tables: ip_tables: osf match: only valid for protocol 6
[  282.806066][T13221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.819243][T13222] xt_TPROXY: Can be used only with -p tcp or -p udp
[  282.846890][T13219] tipc: Resetting bearer <eth:syzkaller0>
[  282.876264][T13218] tipc: Disabling bearer <eth:syzkaller0>
[  282.881926][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2116'.
[  282.909595][T13224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2116'.
[  282.954193][T13229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2117'.
[  283.028031][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2119'.
[  283.066375][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'.
[  283.139491][T13238] hsr_slave_0: left promiscuous mode
[  283.174640][T13238] hsr_slave_1: left promiscuous mode
[  283.224681][T13240] can: request_module (can-proto-0) failed.
[  283.374101][T13244] batman_adv: batadv0: Adding interface: dummy0
[  283.399307][T13244] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  283.457120][T13244] batman_adv: batadv0: Interface activated: dummy0
[  283.525348][T13248] batadv0: mtu less than device minimum
[  283.538252][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.550781][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.563056][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.574296][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.585335][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.596345][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.607382][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.618624][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.629854][T13248] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  283.851401][T13266] xt_TPROXY: Can be used only with -p tcp or -p udp
[  283.868838][T13267] pim6reg: entered allmulticast mode
[  284.113306][T13275] xt_hashlimit: size too large, truncated to 1048576
[  284.515388][T13300] xt_hashlimit: size too large, truncated to 1048576
[  284.849172][T13313] __nla_validate_parse: 12 callbacks suppressed
[  284.849191][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'.
[  284.913121][T13318] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2145'.
[  284.937265][T13320] xt_hashlimit: size too large, truncated to 1048576
[  284.939654][T13317] vlan2: entered promiscuous mode
[  284.950894][T13317] hsr0: entered promiscuous mode
[  284.956171][T13317] vlan2: entered allmulticast mode
[  284.961990][T13317] hsr0: entered allmulticast mode
[  284.967116][T13317] hsr_slave_0: entered allmulticast mode
[  285.285214][T13331] syzkaller0: entered promiscuous mode
[  285.298691][T13336] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2151'.
[  285.300200][T13331] syzkaller0: entered allmulticast mode
[  285.405690][T13338] netlink: 'syz.3.2150': attribute type 1 has an invalid length.
[  285.415447][T13338] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2150'.
[  285.564082][T13351] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000
[  285.737543][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'.
[  285.816794][T13359] bond0: Error: Cannot enslave bond to itself.
[  285.818077][T13366] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2158'.
[  285.835597][T13364] netlink: 'syz.3.2159': attribute type 32 has an invalid length.
[  285.852882][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'.
[  285.895314][T13361] netlink: 'syz.3.2159': attribute type 5 has an invalid length.
[  285.927136][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'.
[  285.951946][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'.
[  285.971198][T13364] bond3: Setting coupled_control to off (0)
[  286.042156][T13374] xt_l2tp: invalid flags combination: 8
[  286.056823][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'.
[  286.127067][T13378] syzkaller0: entered promiscuous mode
[  286.140570][T13378] syzkaller0: entered allmulticast mode
[  286.267846][T13384] hsr_slave_0: left promiscuous mode
[  286.281452][T13384] hsr_slave_1: left promiscuous mode
[  286.554854][T13411] xt_NFQUEUE: number of total queues is 0
[  286.689910][T13421] netlink: 'syz.0.2175': attribute type 4 has an invalid length.
[  286.709688][T13421] netlink: 'syz.0.2175': attribute type 4 has an invalid length.
[  286.864523][T13427] ip6gre2: entered promiscuous mode
[  286.879231][T13427] ip6gre2: entered allmulticast mode
[  287.094095][T13446] xt_hashlimit: size too large, truncated to 1048576
[  287.101419][T13433] syzkaller0: entered promiscuous mode
[  287.107050][T13433] syzkaller0: entered allmulticast mode
[  287.601568][T13453] Cannot find del_set index 14804 as target
[  287.881785][T13475] xt_hashlimit: size too large, truncated to 1048576
[  287.886911][T13476] xt_hashlimit: size too large, truncated to 1048576
[  287.895360][T13475] xt_hashlimit: max too large, truncated to 1048576
[  287.895870][T13476] xt_hashlimit: max too large, truncated to 1048576
[  288.967217][T13474] xfrm0: entered allmulticast mode
[  289.464260][T13512] xt_TPROXY: Can be used only with -p tcp or -p udp
[  289.504971][T13519] xt_hashlimit: size too large, truncated to 1048576
[  289.586475][T13523] FAULT_INJECTION: forcing a failure.
[  289.586475][T13523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.641542][T13523] CPU: 0 UID: 0 PID: 13523 Comm: syz.0.2201 Not tainted syzkaller #0 PREEMPT(full) 
[  289.641567][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  289.641578][T13523] Call Trace:
[  289.641585][T13523]  <TASK>
[  289.641594][T13523]  dump_stack_lvl+0xe8/0x150
[  289.641621][T13523]  should_fail_ex+0x40c/0x560
[  289.641653][T13523]  _copy_from_user+0x2d/0xb0
[  289.641675][T13523]  kstrtouint_from_user+0xd6/0x180
[  289.641704][T13523]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  289.641745][T13523]  proc_fail_nth_write+0x8e/0x210
[  289.641768][T13523]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  289.641796][T13523]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  289.641817][T13523]  vfs_write+0x296/0xba0
[  289.641850][T13523]  ? __pfx_vfs_write+0x10/0x10
[  289.641877][T13523]  ? __fget_files+0x2a/0x420
[  289.641909][T13523]  ? __fget_files+0x3a2/0x420
[  289.641928][T13523]  ? __fget_files+0x2a/0x420
[  289.641958][T13523]  ksys_write+0x150/0x270
[  289.641985][T13523]  ? __pfx_ksys_write+0x10/0x10
[  289.642017][T13523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.642037][T13523]  do_syscall_64+0x174/0x580
[  289.642056][T13523]  ? trace_irq_disable+0x3b/0x140
[  289.642082][T13523]  ? clear_bhb_loop+0x40/0x90
[  289.642104][T13523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.642122][T13523] RIP: 0033:0x7f3f0915d68e
[  289.642139][T13523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  289.642153][T13523] RSP: 002b:00007f3f09fedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  289.642172][T13523] RAX: ffffffffffffffda RBX: 00007f3f09fee6c0 RCX: 00007f3f0915d68e
[  289.642186][T13523] RDX: 0000000000000001 RSI: 00007f3f09fee0a0 RDI: 0000000000000005
[  289.642197][T13523] RBP: 00007f3f09fee090 R08: 0000000000000000 R09: 0000000000000000
[  289.642208][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.642219][T13523] R13: 00007f3f09416128 R14: 00007f3f09416090 R15: 00007ffffb1ff738
[  289.642249][T13523]  </TASK>
[  289.910638][T13536] netlink: 'syz.3.2204': attribute type 1 has an invalid length.
[  289.929684][T13536] __nla_validate_parse: 9 callbacks suppressed
[  289.929700][T13536] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2204'.
[  289.958621][T13535] : entered promiscuous mode
[  290.111613][T13544] x_tables: duplicate underflow at hook 1
[  290.225623][T13556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2211'.
[  290.307178][T13562] net_ratelimit: 11 callbacks suppressed
[  290.307195][T13562] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  290.498393][T13573] lo speed is unknown, defaulting to 1000
[  290.605753][T13583] netlink: 'syz.0.2220': attribute type 1 has an invalid length.
[  290.630134][T13583] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2220'.
[  291.018752][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'.
[  291.053639][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'.
[  291.193522][T13609] xt_TPROXY: Can be used only with -p tcp or -p udp
[  291.242216][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'.
[  291.507351][T13626] veth0_to_team: entered promiscuous mode
[  291.560757][T13626] veth0_to_team: left promiscuous mode
[  291.566535][T13630] x_tables: duplicate underflow at hook 1
[  291.757587][ T5640] block nbd0: Receive control failed (result -32)
[  291.777650][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'.
[  291.823381][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2237'.
[  291.847925][T13617] 8021q: adding VLAN 0 to HW filter on device bond4
[  292.086916][T13651] netlink: 'syz.4.2241': attribute type 1 has an invalid length.
[  292.134937][T13651] bond5: entered promiscuous mode
[  292.147572][T13651] bond5: entered allmulticast mode
[  292.156485][T13651] 8021q: adding VLAN 0 to HW filter on device bond5
[  292.196443][T13651] bridge6: entered promiscuous mode
[  292.202095][T13651] bridge6: entered allmulticast mode
[  292.208133][T13651] bond5: (slave bridge6): Enslaving as a backup interface with an up link
[  292.249766][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  292.261747][T13651] bridge7: entered promiscuous mode
[  292.267821][T13651] bridge7: entered allmulticast mode
[  292.292863][T13651] bond5: (slave bridge7): Enslaving as a backup interface with a down link
[  292.336051][T13656] xt_TPROXY: Can be used only with -p tcp or -p udp
[  292.360900][T13658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.378039][T13660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2244'.
[  292.384571][T13658] tipc: Resetting bearer <eth:syzkaller0>
[  292.410233][  T134] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  292.431383][T13660] IPv6: sit1: Disabled Multicast RS
[  292.441795][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2246'.
[  292.453525][T13660] sit1: entered allmulticast mode
[  292.464186][T13657] tipc: Disabling bearer <eth:syzkaller0>
[  292.585411][T13664] syzkaller0: entered promiscuous mode
[  292.595370][T13664] syzkaller0: entered allmulticast mode
[  292.754835][   T29] audit: type=1800 audit(1781562829.558:6): pid=13677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2220 res=0 errno=0
[  294.562248][T13710] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  294.665831][T13710] batman_adv: batadv0: Interface deactivated: ipvlan1
[  294.696139][T13710] batadv0: mtu less than device minimum
[  294.721170][T13710] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  294.733857][T13710] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  294.745487][T13710] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  294.757214][T13710] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  294.768861][T13710] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  294.805989][T13710] batman_adv: batadv0: Removing interface: ipvlan1
[  294.826611][T13710] batman_adv: batadv0: Interface deactivated: dummy0
[  294.833862][T13710] batman_adv: batadv0: Removing interface: dummy0
[  294.931054][T13719] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.978091][T13719] vlan0: left promiscuous mode
[  295.023673][T13719] ip6gretap0: entered promiscuous mode
[  295.058631][T13719] bond1: left promiscuous mode
[  295.072508][T13719] veth5: left promiscuous mode
[  295.086296][T13719] 8021q: adding VLAN 0 to HW filter on device bond2
[  295.098474][ T5749] IPVS: starting estimator thread 0...
[  295.109962][T13719] geneve2: left promiscuous mode
[  295.115353][T13723] netlink: 'syz.3.2260': attribute type 1 has an invalid length.
[  295.130032][T13723] __nla_validate_parse: 2 callbacks suppressed
[  295.130046][T13723] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2260'.
[  295.229975][T13731] IPVS: using max 30 ests per chain, 72000 per kthread
[  295.369549][T13739] netlink: 'syz.3.2265': attribute type 13 has an invalid length.
[  295.457414][T13742] xt_hashlimit: size too large, truncated to 1048576
[  295.506204][T13745] syzkaller0: entered promiscuous mode
[  295.515880][T13745] syzkaller0: entered allmulticast mode
[  295.528096][T13745] FAULT_INJECTION: forcing a failure.
[  295.528096][T13745] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.549292][T13745] CPU: 0 UID: 0 PID: 13745 Comm: syz.4.2267 Not tainted syzkaller #0 PREEMPT(full) 
[  295.549315][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  295.549325][T13745] Call Trace:
[  295.549332][T13745]  <TASK>
[  295.549340][T13745]  dump_stack_lvl+0xe8/0x150
[  295.549365][T13745]  should_fail_ex+0x40c/0x560
[  295.549397][T13745]  _copy_from_iter+0x3b0/0x1660
[  295.549427][T13745]  ? __pfx__copy_from_iter+0x10/0x10
[  295.549449][T13745]  ? dev_get_by_index+0x22/0x2d0
[  295.549469][T13745]  ? dev_get_by_index+0x22/0x2d0
[  295.549496][T13745]  packet_sendmsg+0x2f1d/0x5040
[  295.549520][T13745]  ? __lock_acquire+0x683/0x2cd0
[  295.549542][T13745]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  295.549568][T13745]  ? __lock_acquire+0x683/0x2cd0
[  295.549598][T13745]  ? unwind_next_frame+0x8f/0x2550
[  295.549630][T13745]  ? __pfx_packet_sendmsg+0x10/0x10
[  295.549647][T13745]  ? aa_sk_perm+0x6d5/0x900
[  295.549674][T13745]  ? __pfx_aa_sk_perm+0x10/0x10
[  295.549693][T13745]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  295.549731][T13745]  ? aa_sock_msg_perm+0xf1/0x1b0
[  295.549754][T13745]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  295.549773][T13745]  ? __pfx_packet_sendmsg+0x10/0x10
[  295.549792][T13745]  ____sys_sendmsg+0x9b9/0xa20
[  295.549817][T13745]  ? __pfx_____sys_sendmsg+0x10/0x10
[  295.549842][T13745]  ? import_iovec+0x73/0xa0
[  295.549863][T13745]  ___sys_sendmsg+0x2a5/0x360
[  295.549879][T13745]  ? __lock_acquire+0x683/0x2cd0
[  295.549899][T13745]  ? __pfx____sys_sendmsg+0x10/0x10
[  295.549945][T13745]  ? __fget_files+0x2a/0x420
[  295.549963][T13745]  ? __fget_files+0x3a2/0x420
[  295.549990][T13745]  __x64_sys_sendmsg+0x1bd/0x2a0
[  295.550009][T13745]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  295.550034][T13745]  ? __pfx_ksys_write+0x10/0x10
[  295.550064][T13745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.550081][T13745]  do_syscall_64+0x174/0x580
[  295.550098][T13745]  ? trace_irq_disable+0x3b/0x140
[  295.550121][T13745]  ? clear_bhb_loop+0x40/0x90
[  295.550140][T13745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.550155][T13745] RIP: 0033:0x7fd030f9ce59
[  295.550172][T13745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.550186][T13745] RSP: 002b:00007fd031eaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.550202][T13745] RAX: ffffffffffffffda RBX: 00007fd031215fa0 RCX: 00007fd030f9ce59
[  295.550214][T13745] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000009
[  295.550223][T13745] RBP: 00007fd031eaa090 R08: 0000000000000000 R09: 0000000000000000
[  295.550232][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.550241][T13745] R13: 00007fd031216038 R14: 00007fd031215fa0 R15: 00007fffd34d6478
[  295.550266][T13745]  </TASK>
[  296.257035][T13758] xt_hashlimit: size too large, truncated to 1048576
[  296.283326][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2271'.
[  296.319631][T13760] nbd: must specify a size in bytes for the device
[  296.507929][T13768] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2274'.
[  296.672404][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'.
[  296.878729][T13788] netlink: 'syz.1.2281': attribute type 1 has an invalid length.
[  296.890759][T13790] xt_hashlimit: size too large, truncated to 1048576
[  296.897650][T13788] net_ratelimit: 15 callbacks suppressed
[  296.897664][T13788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.930974][T13781] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  296.956064][T13781] 8021q: adding VLAN 0 to HW filter on device bond3
[  296.969756][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  297.069997][T13786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2279'.
[  297.193357][T13800] xt_bpf: check failed: parse error
[  297.231574][T13801] lo speed is unknown, defaulting to 1000
[  297.277072][T13805] bond0: Caught tx_queue_len zero misconfig
[  297.355760][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'.
[  297.450699][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'.
[  297.495640][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'.
[  297.620184][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  297.648242][T13818] netlink: 'syz.4.2291': attribute type 10 has an invalid length.
[  297.656371][T13818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2291'.
[  297.722318][T13818] team0: Port device geneve1 added
[  297.727513][T13820] xt_hashlimit: size too large, truncated to 1048576
[  297.834276][T13826] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2293'.
[  297.906887][T13830] xt_hashlimit: size too large, truncated to 1048576
[  298.155720][T13843] pim6reg1: entered promiscuous mode
[  298.210668][T13843] pim6reg1: entered allmulticast mode
[  298.367137][T13848] netlink: 'syz.3.2297': attribute type 11 has an invalid length.
[  298.522616][T13853] syzkaller0: entered promiscuous mode
[  298.540088][T13853] syzkaller0: entered allmulticast mode
[  298.653309][T13863] raw_sendmsg: syz.2.2302 forgot to set AF_INET. Fix it!
[  299.056671][T13877] netlink: 'syz.3.2309': attribute type 4 has an invalid length.
[  299.079400][T13879] x_tables: duplicate underflow at hook 1
[  299.332744][T13889] netlink: 'syz.2.2313': attribute type 1 has an invalid length.
[  299.653062][T13909] bridge0: port 3(vlan3) entered blocking state
[  299.680980][T13909] bridge0: port 3(vlan3) entered disabled state
[  299.697948][T13909] vlan3: entered allmulticast mode
[  299.711257][T13909] dummy0: entered allmulticast mode
[  299.724652][T13909] vlan3: entered promiscuous mode
[  299.732121][T13909] dummy0: entered promiscuous mode
[  299.979345][T13923] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old?
[  300.595079][T13943] __nla_validate_parse: 15 callbacks suppressed
[  300.595098][T13943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2324'.
[  301.117392][T13970] xt_hashlimit: size too large, truncated to 1048576
[  301.123608][T13972] netlink: 'syz.1.2330': attribute type 1 has an invalid length.
[  301.211125][T13972] bond7: entered promiscuous mode
[  301.228050][T13972] 8021q: adding VLAN 0 to HW filter on device bond7
[  301.297254][T13977] (: left allmulticast mode
[  301.307948][T13977] (: left promiscuous mode
[  301.315394][T13977] bridge0: port 1(() entered disabled state
[  301.353930][T13977] bridge_slave_1: left allmulticast mode
[  301.363503][T13977] bridge_slave_1: left promiscuous mode
[  301.382938][T13977] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.415524][T13977] bond0: (slave bond_slave_0): Releasing backup interface
[  301.470442][T13977] bond0: (slave bond_slave_1): Releasing backup interface
[  301.552800][T13977] team0: Port device team_slave_0 removed
[  301.593847][T13977] team0: Port device team_slave_1 removed
[  301.626747][T13977] bond1: (slave veth5): Releasing backup interface
[  301.664933][T13977] bond3: (slave geneve3): Releasing active interface
[  301.684647][T13977] bond5: (slave bond6): Releasing backup interface
[  301.691742][T13977] bond5: (slave bond6): the permanent HWaddr of slave - 86:95:65:68:68:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  301.710610][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  301.725509][T13977] bond5: (slave gretap2): making interface the new active one
[  301.750910][T13977] bond5: (slave gretap2): Releasing backup interface
[  301.811523][T13972] macvtap1: entered allmulticast mode
[  301.819168][ T5728] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  301.937493][T13987] macvtap2: entered allmulticast mode
[  302.055578][T13988] bond7: (slave bridge5): making interface the new active one
[  302.078767][T13988] bridge5: entered promiscuous mode
[  302.094022][T13988] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  302.117840][T13999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.141670][T14011] tipc: Resetting bearer <eth:syzkaller0>
[  302.199613][T13994] tipc: Disabling bearer <eth:syzkaller0>
[  302.552255][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'.
[  302.572149][T14036] "syz.1.2339" (14036) uses obsolete ecb(arc4) skcipher
[  302.742135][T14054] xt_hashlimit: size too large, truncated to 1048576
[  302.767332][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2343'.
[  302.830726][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2345'.
[  303.154571][T14076] netlink: 'syz.2.2349': attribute type 1 has an invalid length.
[  303.363878][T14090] netlink: 'syz.2.2353': attribute type 1 has an invalid length.
[  303.399184][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'.
[  303.547024][T14090] 8021q: adding VLAN 0 to HW filter on device bond5
[  303.653458][T14099] bond5: (slave gretap1): making interface the new active one
[  303.679707][T14099] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  303.904187][T14109] netlink: 'syz.2.2355': attribute type 10 has an invalid length.
[  303.930242][T14109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2355'.
[  303.990122][T14109] team0: Device geneve1 is of different type
[  304.025927][T14109] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  304.223401][T14123] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2358'.
[  304.316930][T14129] netlink: 'syz.0.2361': attribute type 1 has an invalid length.
[  304.383723][T14133] xt_hashlimit: size too large, truncated to 1048576
[  304.387762][T14129] 8021q: adding VLAN 0 to HW filter on device bond3
[  304.410035][T14137] bond3: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  304.464007][T14137] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  304.492519][T14129] bond3: (slave ip6gretap1): making interface the new active one
[  304.502537][T14129] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  304.517160][T14143] sctp: [Deprecated]: syz.2.2364 (pid 14143) Use of int in maxseg socket option.
[  304.517160][T14143] Use struct sctp_assoc_value instead
[  304.716418][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'.
[  304.743549][T14156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2368'.
[  304.766583][T14157] x_tables: duplicate underflow at hook 1
[  304.936559][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'.
[  305.410915][T14192] netlink: 'syz.3.2377': attribute type 1 has an invalid length.
[  305.444927][T14197] x_tables: duplicate underflow at hook 3
[  305.721113][T14218] __nla_validate_parse: 2 callbacks suppressed
[  305.721132][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'.
[  305.765111][T14209] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  305.948662][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'.
[  305.990503][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2375'.
[  306.056234][T14223] sch_tbf: burst 88 is lower than device veth11 mtu (1514) !
[  306.225632][T14233] syzkaller0: entered promiscuous mode
[  306.255978][T14233] syzkaller0: entered allmulticast mode
[  306.276586][T14237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2384'.
[  306.337319][T14240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2385'.
[  306.355977][T14240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2385'.
[  306.548059][T14248] lo: Caught tx_queue_len zero misconfig
[  306.749559][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.759992][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'.
[  306.787297][T14262] netlink: 'syz.2.2389': attribute type 1 has an invalid length.
[  306.940115][T14262] 8021q: adding VLAN 0 to HW filter on device bond6
[  307.036130][T14271] veth0_macvtap: left promiscuous mode
[  307.081490][T14271] macvtap0: entered allmulticast mode
[  307.123584][T14289] x_tables: duplicate underflow at hook 2
[  307.221933][T14293] netlink: 'syz.2.2396': attribute type 1 has an invalid length.
[  307.236078][T14293] netlink: 'syz.2.2396': attribute type 2 has an invalid length.
[  307.417837][T14306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.430965][T14304] syzkaller0: entered promiscuous mode
[  307.449281][T14304] syzkaller0: entered allmulticast mode
[  307.458169][T14306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.642997][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2398'.
[  307.877487][T14333] xt_TPROXY: Can be used only with -p tcp or -p udp
[  308.221357][T14348] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.228628][T14348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.272099][T14348] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.279355][T14348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.322336][T14348] macvtap0: left allmulticast mode
[  308.337316][T14348] geneve1: left promiscuous mode
[  308.348359][T14348] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  308.377289][T14348] batadv1: left promiscuous mode
[  308.384042][T14348] batadv1: left allmulticast mode
[  308.390598][T14348] batadv2: left promiscuous mode
[  308.395664][T14348] batadv2: left allmulticast mode
[  308.404354][T14348] ip6gre1: left promiscuous mode
[  308.409875][T14348] ip6gre1: left allmulticast mode
[  308.415928][T14348] bridge2: left allmulticast mode
[  308.422744][T14348] vlan2: left promiscuous mode
[  308.427782][T14348] bond_slave_1: left promiscuous mode
[  308.435484][T14348] bond2: left promiscuous mode
[  308.441087][T10750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  308.472709][T14348] sit1: left allmulticast mode
[  308.660173][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.931012][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'.
[  309.029243][T10750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  309.056291][T14394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2415'.
[  309.299737][  T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.791792][T14405] netlink: 'syz.0.2418': attribute type 1 has an invalid length.
[  309.814512][T14405] 8021q: adding VLAN 0 to HW filter on device bond4
[  309.841196][T14405] bond4: (slave veth7): Enslaving as an active interface with a down link
[  309.863125][T14405] 8021q: adding VLAN 0 to HW filter on device batadv2
[  309.873616][T14405] bond4: (slave batadv2): making interface the new active one
[  309.882211][T14405] batadv2: entered promiscuous mode
[  309.887725][T14405] bond4: (slave batadv2): Enslaving as an active interface with an up link
[  309.939907][ T7690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.948726][  T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.051915][T14411] syzkaller0: entered promiscuous mode
[  310.057475][T14411] syzkaller0: entered allmulticast mode
[  310.212621][T14293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.546864][T14423] veth0_to_team: entered promiscuous mode
[  310.567127][T14423] veth0_to_team: left promiscuous mode
[  310.586097][T14427] netlink: 'syz.0.2425': attribute type 1 has an invalid length.
[  310.704709][T14427] gretap1: entered allmulticast mode
[  310.720149][T14427] bond5: (slave gretap1): making interface the new active one
[  310.728635][T14427] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  310.784996][T14435] __nla_validate_parse: 2 callbacks suppressed
[  310.785014][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2426'.
[  311.212918][T14464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2436'.
[  311.222684][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.234764][T14464] netlink: 'syz.4.2436': attribute type 1 has an invalid length.
[  311.317984][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'.
[  311.437976][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2440'.
[  311.481685][T14477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2441'.
[  311.495503][T14479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.854927][T14497] xt_hashlimit: size too large, truncated to 1048576
[  311.859205][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  312.083278][T14493] ipip1: entered promiscuous mode
[  312.089481][T14493] ipip1: entered allmulticast mode
[  312.204345][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'.
[  312.221884][T14501] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  312.261748][T14501] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2443'.
[  312.289785][T14501] nftables ruleset with unbound chain
[  312.308671][T14501] block nbd1: Unsupported socket: should be TCP or UNIX.
[  312.403865][T14506] pim6reg: entered allmulticast mode
[  312.432285][T14506] pim6reg: left allmulticast mode
[  312.537788][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'.
[  312.721287][T14519] syzkaller1: entered promiscuous mode
[  312.749142][T14519] syzkaller1: entered allmulticast mode
[  312.788126][T14519] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2450'.
[  312.811029][T14519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  312.976930][T14531] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2454'.
[  313.136694][T14537] ip6gre2: entered promiscuous mode
[  313.156943][T14537] ip6gre2: entered allmulticast mode
[  313.179646][T14538] hmac(sha2: entered promiscuous mode
[  313.214790][T14538] netlink: 'syz.2.2456': attribute type 11 has an invalid length.
[  313.280702][T14548] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  313.773070][T14584] x_tables: duplicate underflow at hook 3
[  314.265236][T14612] bond6: entered promiscuous mode
[  314.278700][T14612] bond6: entered allmulticast mode
[  314.725372][T14656] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  314.955465][   T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  314.986980][  T997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  315.141569][T14679] netlink: 'syz.1.2500': attribute type 6 has an invalid length.
[  315.152357][  T997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  315.406657][T14690] xt_CT: No such helper "syz0"
[  315.502686][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.530657][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.561797][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.638355][T14711] pim6reg: entered allmulticast mode
[  315.645820][T14711] pim6reg: left allmulticast mode
[  315.812304][T14716] syzkaller0: entered promiscuous mode
[  315.824943][T14716] syzkaller0: entered allmulticast mode
[  316.061872][   T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  316.079675][   T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  316.203088][T14724] xt_hashlimit: size too large, truncated to 1048576
[  316.743801][T14740] __nla_validate_parse: 8 callbacks suppressed
[  316.743819][T14740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2518'.
[  316.983721][ T5749] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  317.438022][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'.
[  317.455592][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'.
[  317.546663][T14767] veth13: entered promiscuous mode
[  317.563823][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2521'.
[  317.676393][T14775] openvswitch: netlink: Unknown key attributes 2
[  317.724534][T14777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2525'.
[  317.749279][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  317.754828][T14777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2525'.
[  318.596311][T14813] netlink: 'syz.2.2532': attribute type 1 has an invalid length.
[  318.614423][T14813] netlink: 'syz.2.2532': attribute type 2 has an invalid length.
[  318.641170][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'.
[  318.697451][T14817] x_tables: duplicate underflow at hook 1
[  318.826953][T14819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2536'.
[  318.903682][T14823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2538'.
[  319.498097][T14834] netlink: 'syz.3.2541': attribute type 2 has an invalid length.
[  319.532671][T14834] tipc: Trying to set illegal importance in message
[  319.859153][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  320.279281][T14855] xt_TPROXY: Can be used only with -p tcp or -p udp
[  321.121182][   T57] batadv2: left promiscuous mode
[  321.313938][T14901] lo speed is unknown, defaulting to 1000
[  321.516478][T14920] xt_hashlimit: size too large, truncated to 1048576
[  321.570147][T14924] FAULT_INJECTION: forcing a failure.
[  321.570147][T14924] name failslab, interval 1, probability 0, space 0, times 0
[  321.669978][T14924] CPU: 1 UID: 0 PID: 14924 Comm: syz.3.2563 Not tainted syzkaller #0 PREEMPT(full) 
[  321.670003][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  321.670027][T14924] Call Trace:
[  321.670034][T14924]  <TASK>
[  321.670051][T14924]  dump_stack_lvl+0xe8/0x150
[  321.670077][T14924]  should_fail_ex+0x40c/0x560
[  321.670109][T14924]  should_failslab+0xa8/0x100
[  321.670137][T14924]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  321.670171][T14924]  ? __alloc_skb+0x1d7/0x7a0
[  321.670195][T14924]  ? __local_bh_enable_ip+0xd0/0x130
[  321.670218][T14924]  __alloc_skb+0x1d7/0x7a0
[  321.670246][T14924]  __ip6_append_data+0x2ea3/0x4080
[  321.670290][T14924]  ? __pfx_raw6_getfrag+0x10/0x10
[  321.670338][T14924]  ? __pfx___ip6_append_data+0x10/0x10
[  321.670361][T14924]  ? ip6_setup_cork+0x547/0xf60
[  321.670383][T14924]  ? ip6_append_data+0x1a6/0x270
[  321.670411][T14924]  ip6_append_data+0x108/0x270
[  321.670435][T14924]  ? __pfx_raw6_getfrag+0x10/0x10
[  321.670462][T14924]  rawv6_sendmsg+0x1298/0x18c0
[  321.670500][T14924]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  321.670537][T14924]  ? aa_sk_perm+0x6d5/0x900
[  321.670569][T14924]  ? __pfx_aa_sk_perm+0x10/0x10
[  321.670595][T14924]  ? sock_rps_record_flow+0x19/0x350
[  321.670622][T14924]  ? inet_sendmsg+0x298/0x320
[  321.670645][T14924]  ? __pfx_inet_sendmsg+0x10/0x10
[  321.670670][T14924]  ____sys_sendmsg+0x853/0xa20
[  321.670687][T14924]  ? __might_fault+0xaf/0x130
[  321.670714][T14924]  ? __pfx_____sys_sendmsg+0x10/0x10
[  321.670740][T14924]  ? import_iovec+0x73/0xa0
[  321.670764][T14924]  ___sys_sendmsg+0x2a5/0x360
[  321.670781][T14924]  ? __lock_acquire+0x683/0x2cd0
[  321.670804][T14924]  ? __pfx____sys_sendmsg+0x10/0x10
[  321.670858][T14924]  ? __fget_files+0x2a/0x420
[  321.670878][T14924]  ? __fget_files+0x3a2/0x420
[  321.670909][T14924]  __x64_sys_sendmsg+0x1bd/0x2a0
[  321.670930][T14924]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  321.670959][T14924]  ? __pfx_ksys_write+0x10/0x10
[  321.670992][T14924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.671010][T14924]  do_syscall_64+0x174/0x580
[  321.671030][T14924]  ? trace_irq_disable+0x3b/0x140
[  321.671054][T14924]  ? clear_bhb_loop+0x40/0x90
[  321.671077][T14924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.671095][T14924] RIP: 0033:0x7feabed9ce59
[  321.671112][T14924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.671127][T14924] RSP: 002b:00007feabfc53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  321.671146][T14924] RAX: ffffffffffffffda RBX: 00007feabf016090 RCX: 00007feabed9ce59
[  321.671166][T14924] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004
[  321.671178][T14924] RBP: 00007feabfc53090 R08: 0000000000000000 R09: 0000000000000000
[  321.671188][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.671198][T14924] R13: 00007feabf016128 R14: 00007feabf016090 R15: 00007ffca8c34ee8
[  321.671229][T14924]  </TASK>
[  322.531594][T14954] __nla_validate_parse: 7 callbacks suppressed
[  322.531614][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'.
[  322.815054][T14953] lo speed is unknown, defaulting to 1000
[  322.913462][T14977] xt_TPROXY: Can be used only with -p tcp or -p udp
[  323.288843][T14989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2580'.
[  323.609472][T15020] xt_hashlimit: size too large, truncated to 1048576
[  323.674452][T15024] x_tables: ip_tables: icmp match: only valid for protocol 1
[  323.869968][T15033] x_tables: duplicate underflow at hook 1
[  324.117316][T15040] netlink: 'syz.0.2597': attribute type 29 has an invalid length.
[  324.144492][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'.
[  324.321720][T15051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2601'.
[  324.332512][T15058] xt_hashlimit: size too large, truncated to 1048576
[  324.346554][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'.
[  324.523939][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2604'.
[  324.619533][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'.
[  324.661606][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'.
[  324.868755][T15085] syzkaller0: entered promiscuous mode
[  324.874451][T15085] syzkaller0: entered allmulticast mode
[  324.892881][T15088] xt_CT: You must specify a L4 protocol and not use inversions on it
[  325.009473][T15094] x_tables: duplicate underflow at hook 1
[  325.773206][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'.
[  327.592621][T15096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.669303][T15084] tipc: Resetting bearer <eth:syzkaller0>
[  327.720618][T15084] tipc: Disabling bearer <eth:syzkaller0>
[  327.765800][T15106] netlink: 'syz.0.2616': attribute type 3 has an invalid length.
[  327.800402][T15104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2614'.
[  327.859082][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  327.920545][T15117] netlink: 'syz.4.2620': attribute type 2 has an invalid length.
[  328.045100][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2620'.
[  328.381459][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2626'.
[  328.435008][T15141] xt_hashlimit: size too large, truncated to 1048576
[  328.446735][T15143] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  328.464035][T15143] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  328.481257][T15139] x_tables: duplicate underflow at hook 1
[  328.491167][T15143] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  328.817321][T15158] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  328.931107][T15155] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  328.979616][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2630'.
[  329.332203][T15181] x_tables: duplicate underflow at hook 1
[  329.377206][T15184] syzkaller0: entered promiscuous mode
[  329.400519][T15184] syzkaller0: entered allmulticast mode
[  329.506709][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2640'.
[  329.522506][T15190] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2640'.
[  329.549392][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2640'.
[  329.577326][T15197] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2640'.
[  329.721216][T15202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2644'.
[  330.018233][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'.
[  330.061780][T15219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.263401][T15207] IPVS: length: 35 != 24
[  330.443891][T15224] bond8: invalid ARP target 0.0.0.0 specified for addition
[  330.512429][T15224] bond8: option arp_ip_target: invalid value (0)
[  330.573543][T15224] bond8 (unregistering): Released all slaves
[  330.676284][T15232] x_tables: duplicate underflow at hook 1
[  330.849337][T15238] syzkaller0: entered promiscuous mode
[  330.862295][T15238] syzkaller0: entered allmulticast mode
[  330.954806][T15240] bond8 (unregistering): Released all slaves
[  331.038829][T15247] xt_hashlimit: size too large, truncated to 1048576
[  331.335711][T15255] veth0: entered promiscuous mode
[  331.366189][T15257] xt_TPROXY: Can be used only with -p tcp or -p udp
[  331.507007][T15266] xt_hashlimit: size too large, truncated to 1048576
[  331.554861][T15264] gtp2: entered promiscuous mode
[  331.570241][T15269] x_tables: duplicate underflow at hook 1
[  331.935750][T15285] syzkaller0: entered promiscuous mode
[  331.941700][T15285] syzkaller0: entered allmulticast mode
[  332.108618][T15254] veth0: left promiscuous mode
[  332.250384][T15304] geneve4: entered promiscuous mode
[  332.269924][T15304] geneve4: entered allmulticast mode
[  332.426222][T15314] syzkaller0: entered promiscuous mode
[  332.431926][T15314] syzkaller0: entered allmulticast mode
[  332.810362][T15329] vlan4: entered promiscuous mode
[  332.823718][T15329] bridge0: entered promiscuous mode
[  333.020144][T15342] xt_TPROXY: Can be used only with -p tcp or -p udp
[  333.446426][T15367] __nla_validate_parse: 13 callbacks suppressed
[  333.446445][T15367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2700'.
[  333.516555][T15373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2702'.
[  333.821147][T15391] bond7: entered allmulticast mode
[  333.902502][T15394] macvlan3: entered promiscuous mode
[  333.924114][T15394] macvlan3: entered allmulticast mode
[  334.116311][T15416] xt_hashlimit: size too large, truncated to 1048576
[  334.124530][   T48] nci: nci_rsp_packet: unknown rsp opcode 0x509
[  334.240405][T15421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2714'.
[  334.282738][T15421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2714'.
[  334.410770][T15425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2716'.
[  334.527270][T15438] ip6erspan0: entered allmulticast mode
[  334.748287][T15442] x_tables: duplicate underflow at hook 1
[  334.834594][T15444] lo speed is unknown, defaulting to 1000
[  335.414215][T15458] netlink: 'syz.2.2724': attribute type 1 has an invalid length.
[  335.452851][T15458] bond8: (slave dummy0): making interface the new active one
[  335.464191][T15458] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  335.474984][T15458] bond8: entered promiscuous mode
[  335.480198][T15458] dummy0: entered promiscuous mode
[  335.726891][T15458] bond8: (slave dummy0): Releasing active interface
[  335.734119][T15458] dummy0: left promiscuous mode
[  335.758409][   T24] IPVS: starting estimator thread 0...
[  335.804185][T15458] team0: Port device wg0 removed
[  335.869448][T15465] IPVS: using max 29 ests per chain, 69600 per kthread
[  336.017169][T15458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  336.041948][   T42] lo speed is unknown, defaulting to 1000
[  336.054422][   T42] syz2: Port: 1 Link DOWN
[  336.082938][T15457] bond8: left promiscuous mode
[  336.192487][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'.
[  336.206428][T15469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2727'.
[  336.323050][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'.
[  336.371022][T15475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'.
[  336.627309][T15485] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2732'.
[  336.845037][T15397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  336.859465][T15470] netlink: 'syz.3.2726': attribute type 1 has an invalid length.
[  337.232265][T15492] bond8: Removing last ns target with arp_interval on
[  337.743732][T15544] netlink: 'syz.1.2747': attribute type 2 has an invalid length.
[  337.901832][T15551] netlink: 'syz.0.2749': attribute type 89 has an invalid length.
[  337.902014][T15552] bond0: option arp_all_targets: invalid value (8)
[  338.058354][T15566] netlink: 'syz.2.2756': attribute type 10 has an invalid length.
[  338.079241][T15566] netlink: 'syz.2.2756': attribute type 10 has an invalid length.
[  338.682403][T15601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.690698][T15606] __nla_validate_parse: 13 callbacks suppressed
[  338.690715][T15606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2763'.
[  338.706760][T15601] syzkaller0: entered promiscuous mode
[  338.725729][T15601] syzkaller0: entered allmulticast mode
[  338.753458][T15601] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2765'.
[  338.766549][T15601] tipc: Resetting bearer <eth:syzkaller0>
[  338.783840][T15598] tipc: Resetting bearer <eth:syzkaller0>
[  338.826924][T15598] tipc: Disabling bearer <eth:syzkaller0>
[  339.065109][T15615] bond7 (unregistering): Released all slaves
[  339.077511][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'.
[  339.133477][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'.
[  339.197037][T15628] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20002
[  339.397885][T15633] siw: device registration error -23
[  339.491464][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2775'.
[  339.863199][T15671] xt_hashlimit: size too large, truncated to 1048576
[  339.903439][T15674] netlink: 'syz.2.2781': attribute type 1 has an invalid length.
[  339.934522][T15674] netlink: 'syz.2.2781': attribute type 2 has an invalid length.
[  339.955225][T15674] netlink: 'syz.2.2781': attribute type 1 has an invalid length.
[  339.982920][T15674] netlink: 'syz.2.2781': attribute type 3 has an invalid length.
[  340.008198][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'.
[  340.311306][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2791'.
[  340.520782][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2794'.
[  340.593150][T15717] xt_hashlimit: max too large, truncated to 1048576
[  340.619872][T15717] xt_bpf: check failed: parse error
[  340.868627][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2801'.
[  340.882770][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.904463][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.933417][T15734] syzkaller0: entered promiscuous mode
[  340.950816][T15734] syzkaller0: entered allmulticast mode
[  341.207486][T15751] syzkaller0: entered promiscuous mode
[  341.221420][T15751] syzkaller0: entered allmulticast mode
[  341.281796][T15756] pim6reg0: tun_chr_ioctl cmd 1074025675
[  341.287654][T15756] pim6reg0: persist disabled
[  341.610413][T15775] netlink: 'syz.4.2817': attribute type 19 has an invalid length.
[  341.627534][T15775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2817'.
[  341.916732][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  341.934429][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  341.949141][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  341.963055][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  341.975569][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  342.035909][T15789] netlink: 'syz.1.2821': attribute type 12 has an invalid length.
[  342.418821][T15799] veth0_to_team: entered promiscuous mode
[  342.433014][T15799] veth0_to_team: left promiscuous mode
[  342.527100][  T134] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.584650][  T134] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.777967][  T134] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.812254][  T134] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.896374][T15812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.951768][  T134] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.984725][  T134] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.036516][T15811] FAULT_INJECTION: forcing a failure.
[  343.036516][T15811] name failslab, interval 1, probability 0, space 0, times 0
[  343.086649][T15811] CPU: 1 UID: 0 PID: 15811 Comm: syz.1.2825 Not tainted syzkaller #0 PREEMPT(full) 
[  343.086676][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  343.086687][T15811] Call Trace:
[  343.086694][T15811]  <TASK>
[  343.086701][T15811]  dump_stack_lvl+0xe8/0x150
[  343.086727][T15811]  should_fail_ex+0x40c/0x560
[  343.086759][T15811]  should_failslab+0xa8/0x100
[  343.086787][T15811]  __kmalloc_noprof+0xe8/0x750
[  343.086810][T15811]  ? __pfx_dynamic_dname+0x10/0x10
[  343.086827][T15811]  ? tomoyo_encode+0x2ad/0x570
[  343.086857][T15811]  tomoyo_encode+0x2ad/0x570
[  343.086888][T15811]  tomoyo_realpath_from_path+0x5fa/0x640
[  343.086923][T15811]  ? tomoyo_path_number_perm+0x219/0x5f0
[  343.086946][T15811]  tomoyo_path_number_perm+0x246/0x5f0
[  343.086972][T15811]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  343.087001][T15811]  ? __lock_acquire+0x683/0x2cd0
[  343.087036][T15811]  ? hook_file_ioctl+0x1f0/0x5c0
[  343.087078][T15811]  ? __fget_files+0x2a/0x420
[  343.087103][T15811]  ? __fget_files+0x2a/0x420
[  343.087123][T15811]  ? __fget_files+0x3a2/0x420
[  343.087142][T15811]  ? __fget_files+0x2a/0x420
[  343.087166][T15811]  security_file_ioctl+0xc3/0x2a0
[  343.087191][T15811]  __se_sys_ioctl+0x47/0x170
[  343.087215][T15811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.087235][T15811]  do_syscall_64+0x174/0x580
[  343.087257][T15811]  ? clear_bhb_loop+0x40/0x90
[  343.087279][T15811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.087296][T15811] RIP: 0033:0x7f5812f9ce59
[  343.087312][T15811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  343.087325][T15811] RSP: 002b:00007f58111f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  343.087343][T15811] RAX: ffffffffffffffda RBX: 00007f5813215fa0 RCX: 00007f5812f9ce59
[  343.087355][T15811] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005
[  343.087366][T15811] RBP: 00007f58111f6090 R08: 0000000000000000 R09: 0000000000000000
[  343.087376][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  343.087386][T15811] R13: 00007f5813216038 R14: 00007f5813215fa0 R15: 00007ffecc9c6d98
[  343.087414][T15811]  </TASK>
[  343.088725][T15783] lo speed is unknown, defaulting to 1000
[  343.192639][T15811] ERROR: Out of memory at tomoyo_realpath_from_path.
[  343.219327][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  343.258007][T15811] tipc: Resetting bearer <eth:syzkaller0>
[  343.395732][  T134] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.410839][  T134] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.498009][T15810] tipc: Disabling bearer <eth:syzkaller0>
[  343.722974][T15841] netlink: 'syz.3.2835': attribute type 1 has an invalid length.
[  344.020075][ T5645] Bluetooth: hci5: command tx timeout
[  344.317979][  T134] ip6_vti0: left allmulticast mode
[  344.485825][T15884] nbd: must specify at least one socket
[  344.501205][T15884] block nbd0: NBD_DISCONNECT
[  344.506006][T15884] block nbd0: Send disconnect failed -32
[  344.512272][T15884] block nbd0: shutting down sockets
[  344.916355][  T134] bond5 (unregistering): (slave gretap1): Releasing active interface
[  345.015904][  T134] bond0 (unregistering): (slave veth5): Releasing backup interface
[  345.029058][  T134] veth5: left promiscuous mode
[  345.038065][  T134] bond0 (unregistering): Released all slaves
[  345.051513][  T134] bond1 (unregistering): Released all slaves
[  345.065594][  T134] bond2 (unregistering): Released all slaves
[  345.079038][  T134] bond3 (unregistering): Released all slaves
[  345.093611][  T134] bond4 (unregistering): Released all slaves
[  345.109612][  T134] bond5 (unregistering): Released all slaves
[  345.126278][  T134] bond6 (unregistering): Released all slaves
[  345.142485][  T134] bond7 (unregistering): Released all slaves
[  345.176453][  T134] bond8 (unregistering): Released all slaves
[  345.193770][T15879] 8021q: VLANs not supported on ipvlan0
[  345.199841][T15883] tunl0: Caught tx_queue_len zero misconfig
[  345.206307][T15883] __nla_validate_parse: 1 callbacks suppressed
[  345.206323][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2842'.
[  345.322581][T15884] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.352257][T15884] 8021q: adding VLAN 0 to HW filter on device team0
[  345.407412][T15884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.420956][T15884] veth1_vlan: left promiscuous mode
[  345.427683][T15884] veth0_vlan: left promiscuous mode
[  345.434237][T15884] veth0_vlan: entered promiscuous mode
[  345.442012][T15884] veth1_vlan: entered promiscuous mode
[  345.451444][T15884] veth1_macvtap: left promiscuous mode
[  345.457758][T15884] veth0_macvtap: left promiscuous mode
[  345.465077][T15884] veth0_macvtap: entered promiscuous mode
[  345.472487][T15884] veth1_macvtap: entered promiscuous mode
[  345.483985][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  345.492676][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  345.501673][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  345.510138][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  345.520799][T15884] 8021q: adding VLAN 0 to HW filter on device bond1
[  345.528383][T15884] 8021q: adding VLAN 0 to HW filter on device bond2
[  345.548600][T15884] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  345.558258][T15884] batadv0: left promiscuous mode
[  345.564879][T15884] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  345.581789][T15891] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.628362][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[  345.663461][  T134] hmó3)ó: left promiscuous mode
[  345.727358][ T7690] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  345.743545][ T7690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.753809][ T7690] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  345.762998][ T7690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.774729][T15891] tipc: Disabling bearer <eth:syzkaller0>
[  345.800160][  T134] hmac(sha2: left promiscuous mode
[  345.818286][ T7690] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  345.828507][ T7690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.852008][ T7690] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  345.880751][ T7690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.893912][T15915] x_tables: duplicate underflow at hook 3
[  345.916854][   T13] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  345.944874][   T13] bond2: (slave veth3): making interface the new active one
[  345.955573][   T13] bond2: active interface up!
[  345.961602][  T134] tipc: Left network mode
[  345.999758][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'.
[  346.061482][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'.
[  346.100443][ T5645] Bluetooth: hci5: command tx timeout
[  346.471411][T15783] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.486490][T15783] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.505111][T15783] bridge_slave_0: entered allmulticast mode
[  346.530316][T15783] bridge_slave_0: entered promiscuous mode
[  346.622021][T15783] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.639611][T15783] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.663650][T15783] bridge_slave_1: entered allmulticast mode
[  346.672427][T15783] bridge_slave_1: entered promiscuous mode
[  346.777509][T15953] 8021q: adding VLAN 0 to HW filter on device bond1
[  346.784353][T15964] xt_hashlimit: size too large, truncated to 1048576
[  346.796825][T15953] 8021q: adding VLAN 0 to HW filter on device bond2
[  346.806786][T15953] 8021q: adding VLAN 0 to HW filter on device bond3
[  346.817973][T15953] 8021q: adding VLAN 0 to HW filter on device eth0
[  346.827792][T15953] 8021q: adding VLAN 0 to HW filter on device eth1
[  346.838618][T15953] 8021q: adding VLAN 0 to HW filter on device eth2
[  346.850149][T15953] 8021q: adding VLAN 0 to HW filter on device eth3
[  346.860800][T15953] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  347.004301][T15783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.107614][T15783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.155493][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[  347.192546][T15977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2858'.
[  347.203878][T15978] netlink: 207 bytes leftover after parsing attributes in process `syz.1.2859'.
[  347.213657][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2859'.
[  347.230497][T15978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2859'.
[  347.255425][T15783] team0: Port device team_slave_0 added
[  347.285268][T15783] team0: Port device team_slave_1 added
[  347.382006][T15783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.392913][T15783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.419538][T15783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.443094][T15783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.456552][T15783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.487108][T15783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.506910][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'.
[  347.527324][  T134] hsr_slave_0: left promiscuous mode
[  347.534066][  T134] hsr_slave_1: left promiscuous mode
[  347.543856][  T134] veth1_macvtap: left promiscuous mode
[  347.550359][  T134] veth0_macvtap: left promiscuous mode
[  347.555950][  T134] veth1_vlan: left promiscuous mode
[  347.563110][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'.
[  347.563775][  T134] veth0_vlan: left promiscuous mode
[  347.639903][T15988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2860'.
[  347.699130][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  348.025069][ T7690] smbdirect: ib_dev[syz2] removed
[  348.166569][T15783] hsr_slave_0: entered promiscuous mode
[  348.179620][ T5645] Bluetooth: hci5: command tx timeout
[  348.187535][T15783] hsr_slave_1: entered promiscuous mode
[  348.195548][T15783] debugfs: 'hsr0' already exists in 'hsr'
[  348.201424][T15783] Cannot create hsr debugfs directory
[  348.282080][T16000] netlink: 'syz.1.2865': attribute type 10 has an invalid length.
[  348.340111][T16000] team0: Port device geneve1 added
[  348.524061][  T134] IPVS: stop unused estimator thread 0...
[  348.613821][T16010] syzkaller0: entered promiscuous mode
[  348.619848][T16010] syzkaller0: entered allmulticast mode
[  349.565808][T15952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  349.601138][T15783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  349.649371][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  349.683726][T15783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  349.731447][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  349.753865][T15783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  349.778737][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  349.800752][T15783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  349.849981][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  350.241481][T16050] __nla_validate_parse: 5 callbacks suppressed
[  350.241500][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2875'.
[  350.259719][ T5645] Bluetooth: hci5: command tx timeout
[  350.405419][T15783] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.486923][T15783] 8021q: adding VLAN 0 to HW filter on device team0
[  350.533692][  T134] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.540901][  T134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.566061][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.573265][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.573616][T16062] xt_hashlimit: size too large, truncated to 1048576
[  350.590362][T16059] block nbd0: server does not support multiple connections per device.
[  350.619968][T16059] block nbd0: shutting down sockets
[  350.923063][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'.
[  351.074370][T16072] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  351.326005][T16072] bond8 (unregistering): Released all slaves
[  351.600366][T16099] IPVS: stopping master sync thread 10010 ...
[  351.661073][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2883'.
[  351.694411][T16101] FAULT_INJECTION: forcing a failure.
[  351.694411][T16101] name failslab, interval 1, probability 0, space 0, times 0
[  351.708557][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.0.2883 Not tainted syzkaller #0 PREEMPT(full) 
[  351.708579][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  351.708589][T16101] Call Trace:
[  351.708595][T16101]  <TASK>
[  351.708601][T16101]  dump_stack_lvl+0xe8/0x150
[  351.708627][T16101]  should_fail_ex+0x40c/0x560
[  351.708656][T16101]  should_failslab+0xa8/0x100
[  351.708681][T16101]  ? skb_clone+0x212/0x3a0
[  351.708699][T16101]  kmem_cache_alloc_noprof+0x87/0x650
[  351.708721][T16101]  ? dev_queue_xmit_nit+0x2d/0xac0
[  351.708750][T16101]  skb_clone+0x212/0x3a0
[  351.708765][T16101]  ? dev_queue_xmit_nit+0x25c/0xac0
[  351.708792][T16101]  dev_queue_xmit_nit+0x28d/0xac0
[  351.708817][T16101]  ? dev_queue_xmit_nit+0x2d/0xac0
[  351.708853][T16101]  dev_hard_start_xmit+0x1c1/0x830
[  351.708886][T16101]  __dev_queue_xmit+0x1435/0x37f0
[  351.708904][T16101]  ? ____sys_sendmsg+0x9b9/0xa20
[  351.708919][T16101]  ? ___sys_sendmsg+0x2a5/0x360
[  351.708946][T16101]  ? __dev_queue_xmit+0x29b/0x37f0
[  351.708974][T16101]  ? __pfx___dev_queue_xmit+0x10/0x10
[  351.709003][T16101]  ? __copy_skb_header+0xa3/0x4a0
[  351.709031][T16101]  ? __skb_clone+0x449/0x6c0
[  351.709054][T16101]  ? skb_clone+0x246/0x3a0
[  351.709075][T16101]  __netlink_deliver_tap+0x5b4/0x860
[  351.709104][T16101]  ? netlink_deliver_tap+0x2e/0x1b0
[  351.709125][T16101]  netlink_deliver_tap+0x19c/0x1b0
[  351.709144][T16101]  netlink_unicast+0x77f/0x940
[  351.709180][T16101]  netlink_sendmsg+0x813/0xb40
[  351.709207][T16101]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.709229][T16101]  ? aa_sock_msg_perm+0xf1/0x1b0
[  351.709255][T16101]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.709276][T16101]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.709297][T16101]  ____sys_sendmsg+0x9b9/0xa20
[  351.709314][T16101]  ? __might_fault+0xaf/0x130
[  351.709343][T16101]  ? __pfx_____sys_sendmsg+0x10/0x10
[  351.709371][T16101]  ? import_iovec+0x73/0xa0
[  351.709394][T16101]  ___sys_sendmsg+0x2a5/0x360
[  351.709410][T16101]  ? __lock_acquire+0x683/0x2cd0
[  351.709430][T16101]  ? __pfx____sys_sendmsg+0x10/0x10
[  351.709493][T16101]  ? __fget_files+0x2a/0x420
[  351.709512][T16101]  ? __fget_files+0x3a2/0x420
[  351.709541][T16101]  __x64_sys_sendmsg+0x1bd/0x2a0
[  351.709561][T16101]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  351.709587][T16101]  ? __pfx_ksys_write+0x10/0x10
[  351.709620][T16101]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.709640][T16101]  do_syscall_64+0x174/0x580
[  351.709660][T16101]  ? trace_irq_disable+0x3b/0x140
[  351.709685][T16101]  ? clear_bhb_loop+0x40/0x90
[  351.709707][T16101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.709725][T16101] RIP: 0033:0x7f3f0919ce59
[  351.709741][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.709756][T16101] RSP: 002b:00007f3f0a00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.709776][T16101] RAX: ffffffffffffffda RBX: 00007f3f09415fa0 RCX: 00007f3f0919ce59
[  351.709789][T16101] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000f
[  351.709800][T16101] RBP: 00007f3f0a00f090 R08: 0000000000000000 R09: 0000000000000000
[  351.709811][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.709821][T16101] R13: 00007f3f09416038 R14: 00007f3f09415fa0 R15: 00007ffffb1ff738
[  351.709853][T16101]  </TASK>
[  352.044719][T16101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2883'.
[  352.231959][T16108] veth1: entered promiscuous mode
[  352.240738][T16108] vlan5: entered promiscuous mode
[  352.288364][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2886'.
[  352.354005][T16110] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2886'.
[  352.374108][T16118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.436491][T16122] netlink: 'syz.4.2888': attribute type 83 has an invalid length.
[  352.488076][T16124] tipc: Resetting bearer <eth:syzkaller0>
[  352.595225][T16127] xt_hashlimit: size too large, truncated to 1048576
[  353.016454][T15783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.069306][T16153] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2892'.
[  353.141261][T16117] tipc: Disabling bearer <eth:syzkaller0>
[  353.193977][T15783] veth0_vlan: entered promiscuous mode
[  353.352252][T15783] veth1_vlan: entered promiscuous mode
[  353.492494][T16168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2896'.
[  353.744871][T16170] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  353.788490][T16170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.907430][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2897'.
[  353.952663][T16167] netlink: 1544 bytes leftover after parsing attributes in process `syz.1.2895'.
[  354.060850][T15783] veth0_macvtap: entered promiscuous mode
[  354.145643][T15783] veth1_macvtap: entered promiscuous mode
[  354.189615][T16189] FAULT_INJECTION: forcing a failure.
[  354.189615][T16189] name failslab, interval 1, probability 0, space 0, times 0
[  354.208092][T15783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.217407][T16189] CPU: 0 UID: 0 PID: 16189 Comm: syz.0.2900 Not tainted syzkaller #0 PREEMPT(full) 
[  354.217429][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  354.217438][T16189] Call Trace:
[  354.217444][T16189]  <TASK>
[  354.217450][T16189]  dump_stack_lvl+0xe8/0x150
[  354.217474][T16189]  should_fail_ex+0x40c/0x560
[  354.217503][T16189]  should_failslab+0xa8/0x100
[  354.217527][T16189]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  354.217550][T16189]  ? __alloc_skb+0x1d7/0x7a0
[  354.217571][T16189]  ? __local_bh_enable_ip+0xd0/0x130
[  354.217590][T16189]  __alloc_skb+0x1d7/0x7a0
[  354.217615][T16189]  netlink_dump+0x1e7/0xee0
[  354.217631][T16189]  ? __netlink_lookup+0xc6/0x8b0
[  354.217656][T16189]  ? __pfx_netlink_dump+0x10/0x10
[  354.217681][T16189]  ? netlink_lookup+0x30/0x200
[  354.217695][T16189]  ? netlink_lookup+0x30/0x200
[  354.217715][T16189]  __netlink_dump_start+0x589/0x7b0
[  354.217737][T16189]  xfrm_user_rcv_msg+0x903/0xf30
[  354.217765][T16189]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  354.217818][T16189]  ? __mutex_trylock_common+0x15f/0x270
[  354.217841][T16189]  ? __pfx_xfrm_dump_sa+0x10/0x10
[  354.217861][T16189]  ? __pfx_xfrm_dump_sa_done+0x10/0x10
[  354.217884][T16189]  ? rcu_is_watching+0x15/0xb0
[  354.217904][T16189]  ? trace_contention_end+0x3d/0x140
[  354.217933][T16189]  netlink_rcv_skb+0x226/0x4a0
[  354.217953][T16189]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  354.217979][T16189]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.218012][T16189]  ? netlink_deliver_tap+0x2e/0x1b0
[  354.218029][T16189]  ? netlink_deliver_tap+0x2e/0x1b0
[  354.218049][T16189]  xfrm_netlink_rcv+0x79/0x90
[  354.218074][T16189]  netlink_unicast+0x7bb/0x940
[  354.218108][T16189]  netlink_sendmsg+0x813/0xb40
[  354.218136][T16189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.218168][T16189]  ? aa_sock_msg_perm+0xf1/0x1b0
[  354.218195][T16189]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.218216][T16189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.218237][T16189]  ____sys_sendmsg+0x9b9/0xa20
[  354.218256][T16189]  ? __might_fault+0xaf/0x130
[  354.218283][T16189]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.218310][T16189]  ? import_iovec+0x73/0xa0
[  354.218334][T16189]  ___sys_sendmsg+0x2a5/0x360
[  354.218351][T16189]  ? __lock_acquire+0x683/0x2cd0
[  354.218373][T16189]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.218422][T16189]  ? __fget_files+0x2a/0x420
[  354.218442][T16189]  ? __fget_files+0x3a2/0x420
[  354.218474][T16189]  __x64_sys_sendmsg+0x1bd/0x2a0
[  354.218495][T16189]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.218523][T16189]  ? __pfx_ksys_write+0x10/0x10
[  354.218556][T16189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.218576][T16189]  do_syscall_64+0x174/0x580
[  354.218595][T16189]  ? trace_irq_disable+0x3b/0x140
[  354.218620][T16189]  ? clear_bhb_loop+0x40/0x90
[  354.218641][T16189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.218659][T16189] RIP: 0033:0x7f3f0919ce59
[  354.218676][T16189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.218692][T16189] RSP: 002b:00007f3f0a00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.218710][T16189] RAX: ffffffffffffffda RBX: 00007f3f09415fa0 RCX: 00007f3f0919ce59
[  354.218724][T16189] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000f
[  354.218735][T16189] RBP: 00007f3f0a00f090 R08: 0000000000000000 R09: 0000000000000000
[  354.218746][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.218755][T16189] R13: 00007f3f09416038 R14: 00007f3f09415fa0 R15: 00007ffffb1ff738
[  354.218785][T16189]  </TASK>
[  354.859351][T15783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.957840][   T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.014336][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.056210][   T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.088764][   T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.114069][T16212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.255030][T16210] tipc: Disabling bearer <eth:syzkaller0>
[  355.314774][ T7690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.343489][ T7690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.451453][ T7690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.477725][ T7690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.537974][T16235] __nla_validate_parse: 4 callbacks suppressed
[  355.537990][T16235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'.
[  355.591909][T16236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2908'.
[  355.758230][T16246] tipc: Started in network mode
[  355.773223][T16246] tipc: Node identity 7a29fe427adf, cluster identity 4711
[  355.780829][T16249] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2911'.
[  355.806493][T16246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.859777][T16249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'.
[  356.119632][T16260] tipc: Resetting bearer <eth:syzkaller0>
[  356.140884][T16271] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2916'.
[  356.205468][T16242] tipc: Disabling bearer <eth:syzkaller0>
[  356.412926][T16281] syzkaller0: entered promiscuous mode
[  356.418500][T16281] syzkaller0: entered allmulticast mode
[  356.523235][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2919'.
[  356.776478][T16300] veth0_to_team: entered promiscuous mode
[  356.787264][T16300] veth0_to_team: left promiscuous mode
[  356.825080][T16302] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2925'.
[  357.105708][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2931'.
[  357.133583][T16320] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2929'.
[  357.148796][T16317] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2931'.
[  357.265541][T16326] syz_tun: entered allmulticast mode
[  357.387055][T16326] syz_tun (unregistering): left allmulticast mode
[  357.533807][T16339] veth0_to_team: entered promiscuous mode
[  357.564194][T16339] veth0_to_team: left promiscuous mode
[  357.605239][T16338] vlan2: entered promiscuous mode
[  357.623859][T16338] bond_slave_1: entered promiscuous mode
[  357.782674][T16345] netlink: 'syz.1.2941': attribute type 11 has an invalid length.
[  357.924120][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  357.946139][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  357.956111][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  357.965775][T16345] bridge8: entered allmulticast mode
[  357.975011][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  357.982896][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  358.086068][T16359] team0: Caught tx_queue_len zero misconfig
[  358.128809][T16362] netlink: 'syz.4.2944': attribute type 1 has an invalid length.
[  358.317043][T16370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.368013][T16370] syzkaller0: mtu less than device minimum
[  358.430118][T16368] tipc: Disabling bearer <eth:syzkaller0>
[  358.465468][T16377] veth0_to_team: entered promiscuous mode
[  358.474608][T16377] veth0_to_team: left promiscuous mode
[  358.509440][T16375] syzkaller0: entered promiscuous mode
[  358.522823][T16375] syzkaller0: entered allmulticast mode
[  358.970062][T16395] batadv_slave_0: Caught tx_queue_len zero misconfig
[  359.564487][T16416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.631753][T16414] tipc: Resetting bearer <eth:syzkaller0>
[  359.638626][T16351] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.647024][T16351] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.654527][T16351] bridge_slave_0: entered allmulticast mode
[  359.672967][T16351] bridge_slave_0: entered promiscuous mode
[  359.703762][T16413] tipc: Disabling bearer <eth:syzkaller0>
[  359.717982][T16421] veth0_to_team: entered promiscuous mode
[  359.725137][T16421] veth0_to_team: left promiscuous mode
[  359.735031][T16351] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.742520][T16351] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.750221][T16351] bridge_slave_1: entered allmulticast mode
[  359.767903][T16351] bridge_slave_1: entered promiscuous mode
[  359.878619][T16351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.901432][T16351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.019031][ T5640] Bluetooth: hci3: command tx timeout
[  360.032204][T16423] syzkaller0: entered promiscuous mode
[  360.037700][T16423] syzkaller0: entered allmulticast mode
[  360.053105][T16351] team0: Port device team_slave_0 added
[  360.067614][T16351] team0: Port device team_slave_1 added
[  361.813261][T16439] veth0_to_hsr: entered promiscuous mode
[  361.822092][T16439] veth0_to_hsr: left promiscuous mode
[  361.867127][T16351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.883983][T16351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  361.915419][T16351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.930072][T16351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.937067][T16351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  361.963677][T16351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.994803][T16451] __nla_validate_parse: 11 callbacks suppressed
[  361.994821][T16451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2972'.
[  362.098944][ T5640] Bluetooth: hci3: command tx timeout
[  362.134616][T16351] hsr_slave_0: entered promiscuous mode
[  362.142739][T16351] hsr_slave_1: entered promiscuous mode
[  362.149611][T16351] debugfs: 'hsr0' already exists in 'hsr'
[  362.156578][T16351] Cannot create hsr debugfs directory
[  362.180554][T16457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2975'.
[  362.182346][T16455] veth0_to_team: entered promiscuous mode
[  362.260916][T16455] veth0_to_team: left promiscuous mode
[  362.540134][T16458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.657584][T16468] tipc: Resetting bearer <eth:syzkaller0>
[  362.741649][T16452] tipc: Disabling bearer <eth:syzkaller0>
[  362.820758][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'.
[  363.156697][T16492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2984'.
[  363.371082][T16495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2985'.
[  363.435984][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'.
[  363.445356][T16504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2987'.
[  363.593070][T16505] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2986'.
[  363.768734][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'.
[  363.792100][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'.
[  363.903614][T16524] netlink: 'syz.3.2994': attribute type 1 has an invalid length.
[  364.179116][ T5640] Bluetooth: hci3: command tx timeout
[  364.291587][T16525] syzkaller0: entered promiscuous mode
[  364.301011][T16525] syzkaller0: entered allmulticast mode
[  364.384552][T16545] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  364.402121][T16351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.414190][T16351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.482977][T16576] x_tables: duplicate underflow at hook 1
[  366.261976][ T5640] Bluetooth: hci3: command tx timeout
[  366.440567][T16542] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  366.463972][T16351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.474504][T16351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.624598][T16351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.678049][T16351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.707506][T16585] netlink: 'syz.4.3007': attribute type 5 has an invalid length.
[  366.780315][T16588] netlink: 'syz.2.3008': attribute type 7 has an invalid length.
[  366.862762][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  366.877643][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  366.988639][T16351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  367.020930][T16598] __nla_validate_parse: 79 callbacks suppressed
[  367.020948][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'.
[  367.037802][T16351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.075064][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  367.110448][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  367.408208][T16613] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  367.412064][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3013'.
[  367.452481][T16613] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3012'.
[  367.526075][T16616] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  367.572949][T16616] bond9 (unregistering): Released all slaves
[  367.669382][T16627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3017'.
[  367.867973][T16351] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  368.026291][T16351] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  368.049942][T16351] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  368.066584][T16351] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  368.106753][T16351] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  368.122145][T16351] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  368.149461][T16351] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  368.184882][T16351] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  368.341209][T16351] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.363515][T16646] netlink: 'syz.4.3019': attribute type 1 has an invalid length.
[  368.369425][T16351] 8021q: adding VLAN 0 to HW filter on device team0
[  368.425450][T16646] 8021q: adding VLAN 0 to HW filter on device bond7
[  368.465008][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.472243][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.534421][T16646] bond7: (slave ip6gretap1): making interface the new active one
[  368.551076][T16646] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  368.573254][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.580483][ T7695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.715219][T16662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  368.921519][T16672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3027'.
[  368.985841][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'.
[  369.666740][T16351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.705488][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'.
[  369.711662][  T134] wlan1: Trigger new scan to find an IBSS to join
[  369.769495][T16351] veth0_vlan: entered promiscuous mode
[  369.806447][T16351] veth1_vlan: entered promiscuous mode
[  369.828046][T16714] 8021q: VLANs not supported on vxcan0
[  369.868403][T16351] veth0_macvtap: entered promiscuous mode
[  369.889772][T16351] veth1_macvtap: entered promiscuous mode
[  369.943399][T16351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.962857][T16351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.987261][  T134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.015342][  T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.028008][  T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.044341][  T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.076498][T16723] veth0_to_team: entered promiscuous mode
[  370.086061][T16723] veth0_to_team: left promiscuous mode
[  370.116867][T16726] syzkaller0: entered promiscuous mode
[  370.122777][T16726] syzkaller0: entered allmulticast mode
[  370.300277][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.317794][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.425275][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.445935][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.563845][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'.
[  370.612721][  T130] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  370.748722][T16745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2939'.
[  370.847181][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3052'.
[  371.051946][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.064151][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.072666][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  371.084023][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.091881][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.352526][T16759] veth0_to_team: entered promiscuous mode
[  371.370907][T16759] veth0_to_team: left promiscuous mode
[  371.517523][T16762] netlink: 'syz.2.3055': attribute type 2 has an invalid length.
[  371.550102][T16762] netlink: 'syz.2.3055': attribute type 9 has an invalid length.
[  371.553676][T16765] netlink: 'syz.3.3056': attribute type 4 has an invalid length.
[  372.113053][T16798] __nla_validate_parse: 3 callbacks suppressed
[  372.113070][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'.
[  372.148282][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3067'.
[  372.227175][T16804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3067'.
[  372.395998][ T7695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.407095][ T7695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.503853][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'.
[  372.571096][ T7695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.598076][ T7695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.712342][T16824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3072'.
[  372.751335][T16823] syzkaller1: entered promiscuous mode
[  372.756877][T16823] syzkaller1: entered allmulticast mode
[  372.805530][ T7695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.831142][ T7695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.973919][T16830] bond0: (slave vlan3): Enslaving as an active interface with an up link
[  373.046012][   T42] dummy0: entered promiscuous mode
[  373.140096][ T5645] Bluetooth: hci0: command tx timeout
[  373.184507][ T7695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.208985][ T7695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.087186][T16866] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  374.262917][T16869] syzkaller0: entered promiscuous mode
[  374.282409][T16869] syzkaller0: entered allmulticast mode
[  374.516175][T16869] bridge11: entered allmulticast mode
[  374.795741][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  374.884304][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  374.991506][ T7695] pim6reg: left allmulticast mode
[  375.221767][ T5645] Bluetooth: hci0: command tx timeout
[  375.874038][ T7695] team0: Port device geneve1 removed
[  375.972393][ T7695] bond7 (unregistering): (slave bridge5): Releasing backup interface
[  375.981277][ T7695] bridge5 (unregistering): left promiscuous mode
[  376.037805][ T7695] bond0 (unregistering): Released all slaves
[  376.068017][ T7695] bond1 (unregistering): Released all slaves
[  376.106927][ T7695] bond2 (unregistering): Released all slaves
[  376.135924][ T7695] bond3 (unregistering): Released all slaves
[  376.160257][ T7695] bond4 (unregistering): Released all slaves
[  376.186126][ T7695] bond5 (unregistering): Released all slaves
[  376.208737][ T7695] bond6 (unregistering): Released all slaves
[  376.255849][ T7695] bond7 (unregistering): Released all slaves
[  376.278430][ T7695] bond8 (unregistering): Released all slaves
[  376.317270][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  376.336168][T16884] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  376.351090][  T997] tipc: Node number set to 16186946
[  376.382199][T16884] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  376.411382][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[  376.412811][T16884] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  376.484659][T16752] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.497891][T16752] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.507379][T16752] bridge_slave_0: entered allmulticast mode
[  376.516140][T16752] bridge_slave_0: entered promiscuous mode
[  376.559628][T16884] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  376.569381][ T7695] 5nè‹Ò: left promiscuous mode
[  376.691397][T16752] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.719811][T16752] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.734488][T16752] bridge_slave_1: entered allmulticast mode
[  376.758240][T16752] bridge_slave_1: entered promiscuous mode
[  376.815887][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  376.816008][ T7695] : left promiscuous mode
[  376.921707][T16752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.947018][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  376.955704][ T7695] tipc: Left network mode
[  376.982529][T16752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.997543][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'.
[  377.023874][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  377.114556][T16752] team0: Port device team_slave_0 added
[  377.122555][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3099'.
[  377.131643][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  377.186495][ T7695] IPVS: stopping backup sync thread 14656 ...
[  377.208454][T16752] team0: Port device team_slave_1 added
[  377.220436][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  377.299229][ T5645] Bluetooth: hci0: command tx timeout
[  377.408528][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3101'.
[  377.437689][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  377.556237][T16884] virt_wifi0 speed is unknown, defaulting to 1000
[  377.573931][T16752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.606656][T16752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.697548][T16977] IPv6: NLM_F_CREATE should be specified when creating new route
[  377.720615][T16752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.749818][T16752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.770915][T16752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.865864][T16752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.263558][T17003] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3110'.
[  378.278285][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3111'.
[  378.286028][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[  378.317115][T16752] hsr_slave_0: entered promiscuous mode
[  378.343769][T16752] hsr_slave_1: entered promiscuous mode
[  378.355859][T16752] debugfs: 'hsr0' already exists in 'hsr'
[  378.361690][T16752] Cannot create hsr debugfs directory
[  378.443430][ T7695] veth0_macvtap: left allmulticast mode
[  378.459152][ T7695] veth0_macvtap: left promiscuous mode
[  378.468500][ T7695] veth1_vlan: left promiscuous mode
[  378.475068][ T7695] veth0_vlan: left promiscuous mode
[  378.487211][T17011] netlink: 'syz.4.3113': attribute type 3 has an invalid length.
[  378.982028][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3115'.
[  379.387760][ T5645] Bluetooth: hci0: command tx timeout
[  380.034938][T17044] netlink: 'syz.4.3121': attribute type 1 has an invalid length.
[  380.101013][T17045] netlink: 'syz.2.3119': attribute type 89 has an invalid length.
[  380.165335][T17048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'.
[  380.433750][T17048] 8021q: adding VLAN 0 to HW filter on device bond8
[  380.673752][T17066] 8021q: adding VLAN 0 to HW filter on device bond8
[  380.734084][T17066] bond8: (slave geneve3): making interface the new active one
[  380.764256][T17066] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  380.787937][ T7695] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  380.816658][ T7695] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  380.830420][ T7695] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  380.981940][ T7695] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  381.118727][T17076] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3125'.
[  381.220245][T17081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3125'.
[  382.132415][T16752] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  382.192147][T16752] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  382.220348][T16752] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  382.254812][T16752] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  382.283159][T16752] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  382.315965][T16752] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  382.357987][T16752] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  382.375278][T16752] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  382.393392][T17118] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3132'.
[  382.400852][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'.
[  382.633190][T17131] netlink: 'syz.4.3134': attribute type 1 has an invalid length.
[  382.761103][T17131] bond9: entered promiscuous mode
[  382.779748][T17131] 8021q: adding VLAN 0 to HW filter on device bond9
[  382.827630][T17129] syzkaller0: entered promiscuous mode
[  382.856417][T17129] syzkaller0: entered allmulticast mode
[  382.968126][T16752] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.286242][T16752] 8021q: adding VLAN 0 to HW filter on device team0
[  383.338734][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.345959][ T7695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.396560][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.403788][ T7695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.417638][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3141'.
[  383.472643][T17190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3144'.
[  383.591557][T17188] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  383.685069][T17193] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[  383.706634][T17193] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode
[  384.264245][T16752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.316785][T16752] veth0_vlan: entered promiscuous mode
[  384.334581][T16752] veth1_vlan: entered promiscuous mode
[  384.376550][T16752] veth0_macvtap: entered promiscuous mode
[  384.386942][T16752] veth1_macvtap: entered promiscuous mode
[  384.410973][T16752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.435712][T16752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.454425][   T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.472537][   T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.504117][   T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.513264][   T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.042574][T17161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  386.054223][T17185] netlink: 'syz.0.3143': attribute type 1 has an invalid length.
[  386.187023][ T7695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.215182][ T7695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.348066][ T7695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.372938][ T7695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.540421][T17249] syzkaller0: entered promiscuous mode
[  386.556123][T17249] syzkaller0: entered allmulticast mode
[  387.098015][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  387.116290][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  387.129911][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  387.143388][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  387.151116][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  387.518095][ T7690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.607968][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3157'.
[  387.647305][ T7690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.836045][T17294] pimreg: entered allmulticast mode
[  387.942756][ T7690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.045977][T17308] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3162'.
[  388.128845][ T7690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.306931][T17267] virt_wifi0 speed is unknown, defaulting to 1000
[  388.611678][T17330] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3169'.
[  388.623883][T17328] Cannot find add_set index 0 as target
[  389.219799][ T5640] Bluetooth: hci4: command tx timeout
[  389.501471][ T7690] vlan3: left allmulticast mode
[  389.514957][ T7690] dummy0: left allmulticast mode
[  389.531653][ T7690] vlan3: left promiscuous mode
[  389.542180][ T7690] dummy0: left promiscuous mode
[  389.556020][ T7690] bridge0: port 3(vlan3) entered disabled state
[  389.612167][ T7690] bridge_slave_1: left allmulticast mode
[  389.647728][ T7690] bridge_slave_1: left promiscuous mode
[  389.669785][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.720755][ T7690] bridge_slave_0: left allmulticast mode
[  389.737848][ T7690] bridge_slave_0: left promiscuous mode
[  389.756367][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.072375][T17374] Cannot find add_set index 0 as target
[  390.823464][T17396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3181'.
[  390.973296][T17396] sctp: [Deprecated]: syz.4.3181 (pid 17396) Use of int in max_burst socket option.
[  390.973296][T17396] Use struct sctp_assoc_value instead
[  391.241698][ T7690] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  391.301478][ T5640] Bluetooth: hci4: command tx timeout
[  391.497044][ T7690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.517075][ T7690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.532305][ T7690] bond0 (unregistering): Released all slaves
[  391.554762][ T7690] bond1 (unregistering): Released all slaves
[  391.567942][ T7690] bond2 (unregistering): Released all slaves
[  391.581661][ T7690] bond3 (unregistering): Released all slaves
[  391.594827][ T7690] bond4 (unregistering): Released all slaves
[  391.656892][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[  391.679374][T17267] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.696924][T17267] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.704829][T17267] bridge_slave_0: entered allmulticast mode
[  391.712816][T17267] bridge_slave_0: entered promiscuous mode
[  391.721662][T17267] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.732231][T17267] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.739856][T17267] bridge_slave_1: entered allmulticast mode
[  391.747668][T17267] bridge_slave_1: entered promiscuous mode
[  391.906841][ T7690] hmó3)ó
€: left promiscuous mode
[  391.957318][T17267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.103489][T17408] syzkaller0: entered promiscuous mode
[  392.109567][T17408] syzkaller0: entered allmulticast mode
[  392.126053][T17267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.192354][ T7690] tipc: Disabling bearer <udp:syz2>
[  392.208094][ T7690] tipc: Left network mode
[  393.063498][T17448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3191'.
[  393.379019][ T5640] Bluetooth: hci4: command tx timeout
[  394.873559][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[  394.907932][T17267] team0: Port device team_slave_0 added
[  394.964685][T17267] team0: Port device team_slave_1 added
[  395.156356][T17267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.173918][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.243508][T17267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.339959][T17267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.376078][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.444006][T17267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.459009][ T5640] Bluetooth: hci4: command tx timeout
[  396.452972][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'.
[  396.470563][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3
[  396.663665][T17267] hsr_slave_0: entered promiscuous mode
[  396.686015][T17267] hsr_slave_1: entered promiscuous mode
[  396.700080][T17267] debugfs: 'hsr0' already exists in 'hsr'
[  396.712885][T17267] Cannot create hsr debugfs directory
[  396.912273][T17521] syzkaller0: entered promiscuous mode
[  396.936192][T17521] syzkaller0: entered allmulticast mode
[  397.020273][   T29] audit: type=1804 audit(1781562933.828:7): pid=17541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3204" name="/newroot/33/cgroup.controllers" dev="tmpfs" ino=190 res=1 errno=0
[  397.072745][   T29] audit: type=1800 audit(1781562933.828:8): pid=17541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3204" name="cgroup.controllers" dev="tmpfs" ino=190 res=0 errno=0
[  397.562935][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'.
[  397.796577][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'.
[  398.334067][T17565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3207'.
[  399.577261][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4
[  399.814003][T17571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3209'.
[  400.193621][T17571] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.201333][T17571] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.377254][T17571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.393207][T17571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.466302][T17571] tipc: Resetting bearer <eth:macvlan1>
[  400.683587][  T140] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.705438][  T140] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  400.729056][  T140] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.739792][  T140] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  400.837749][ T7690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.867901][ T7690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.918425][ T7690] veth0_to_team: left promiscuous mode
[  400.934426][ T7690] veth1_macvtap: left promiscuous mode
[  400.946334][ T7690] veth1_vlan: left promiscuous mode
[  400.961407][ T7690] veth0_vlan: left promiscuous mode
[  400.999422][ T5749] IPVS: starting estimator thread 0...
[  401.014573][T17606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'.
[  401.022490][T17604] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  401.099427][T17605] IPVS: using max 29 ests per chain, 69600 per kthread
[  401.263705][T17610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'.
[  401.305534][T10750] IPVS: starting estimator thread 0...
[  401.338234][T17611] xt_hashlimit: size too large, truncated to 1048576
[  401.361883][T17612] xt_hashlimit: size too large, truncated to 1048576
[  401.409102][T17614] IPVS: using max 32 ests per chain, 76800 per kthread
[  401.715916][ T7690] team0 (unregistering): Port device team_slave_1 removed
[  401.747132][ T7690] team0 (unregistering): Port device team_slave_0 removed
[  401.986533][  T140] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.013013][  T140] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.034391][  T140] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.065827][  T140] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.295260][T17636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3219'.
[  402.454909][T17624] syzkaller0: entered promiscuous mode
[  402.460583][T17624] syzkaller0: entered allmulticast mode
[  402.778054][T17651] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3222'.
[  404.485868][ T7690] IPVS: stop unused estimator thread 0...
[  404.723267][T17654] virt_wifi0 speed is unknown, defaulting to 1000
[  404.906614][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3228'.
[  404.993513][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3228'.
[  405.165791][T17688] vlan4: entered allmulticast mode
[  405.173687][T17688] bridge3: entered allmulticast mode
[  405.200605][T17688] bridge3: port 1(erspan0) entered blocking state
[  405.225367][T17688] bridge3: port 1(erspan0) entered disabled state
[  405.247230][T17688] erspan0: entered allmulticast mode
[  405.261367][T17688] erspan0: entered promiscuous mode
[  405.322145][T17693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3225'.
[  405.590384][T17267] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  405.628034][T17267] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  405.645752][T17267] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  405.653253][T17701] netlink: 'syz.2.3229': attribute type 16 has an invalid length.
[  405.670803][T17267] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  405.689020][T17701] netlink: 'syz.2.3229': attribute type 17 has an invalid length.
[  405.689255][T17267] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  405.744125][T17267] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  405.818399][T17701] bridge3: port 1(erspan0) entered blocking state
[  405.825055][T17701] bridge3: port 1(erspan0) entered forwarding state
[  405.916913][T17701] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.946577][T17701] 8021q: adding VLAN 0 to HW filter on device team0
[  405.971299][T17701] 
[  405.973654][T17701] ============================================
[  405.979802][T17701] WARNING: possible recursive locking detected
[  405.985964][T17701] syzkaller #0 Not tainted
[  405.990379][T17701] --------------------------------------------
[  405.996521][T17701] syz.2.3229/17701 is trying to acquire lock:
[  406.002590][T17701] ffff888052ccce18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250
[  406.013770][T17701] 
[  406.013770][T17701] but task is already holding lock:
[  406.021131][T17701] ffff888052ccce18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670
[  406.030818][T17701] and the lock comparison function returns 0:
[  406.036886][T17701] 
[  406.036886][T17701] other info that might help us debug this:
[  406.044940][T17701]  Possible unsafe locking scenario:
[  406.044940][T17701] 
[  406.052385][T17701]        CPU0
[  406.055663][T17701]        ----
[  406.058947][T17701]   lock(&dev_instance_lock_key#3);
[  406.064163][T17701]   lock(&dev_instance_lock_key#3);
[  406.069376][T17701] 
[  406.069376][T17701]  *** DEADLOCK ***
[  406.069376][T17701] 
[  406.077517][T17701]  May be due to missing lock nesting notation
[  406.077517][T17701] 
[  406.085832][T17701] 2 locks held by syz.2.3229/17701:
[  406.091024][T17701]  #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  406.100126][T17701]  #1: ffff888052ccce18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670
[  406.110248][T17701] 
[  406.110248][T17701] stack backtrace:
[  406.116148][T17701] CPU: 1 UID: 0 PID: 17701 Comm: syz.2.3229 Not tainted syzkaller #0 PREEMPT(full) 
[  406.116167][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  406.116180][T17701] Call Trace:
[  406.116187][T17701]  <TASK>
[  406.116197][T17701]  dump_stack_lvl+0xe8/0x150
[  406.116218][T17701]  print_deadlock_bug+0x279/0x290
[  406.116239][T17701]  __lock_acquire+0x24bf/0x2cd0
[  406.116255][T17701]  ? __lock_acquire+0x683/0x2cd0
[  406.116269][T17701]  ? rtnl_newlink+0x148e/0x1bd0
[  406.116292][T17701]  ? rtnetlink_rcv_msg+0x802/0xc00
[  406.116313][T17701]  ? netlink_rcv_skb+0x226/0x4a0
[  406.116327][T17701]  ? netlink_unicast+0x7bb/0x940
[  406.116348][T17701]  ? netlink_sendmsg+0x813/0xb40
[  406.116363][T17701]  ? ____sys_sendmsg+0x9b9/0xa20
[  406.116377][T17701]  ? ___sys_sendmsg+0x2a5/0x360
[  406.116390][T17701]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  406.116404][T17701]  ? do_syscall_64+0x174/0x580
[  406.116421][T17701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.116441][T17701]  ? __ethtool_get_link_ksettings+0x109/0x250
[  406.116462][T17701]  lock_acquire+0x106/0x350
[  406.116475][T17701]  ? __ethtool_get_link_ksettings+0x109/0x250
[  406.116499][T17701]  __mutex_lock+0x19d/0x1590
[  406.116516][T17701]  ? __ethtool_get_link_ksettings+0x109/0x250
[  406.116536][T17701]  ? lockdep_hardirqs_on+0x7a/0x110
[  406.116552][T17701]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  406.116567][T17701]  ? __wake_up_common_lock+0x195/0x1f0
[  406.116590][T17701]  ? __ethtool_get_link_ksettings+0x109/0x250
[  406.116609][T17701]  ? __pfx___mutex_lock+0x10/0x10
[  406.116628][T17701]  ? igmp_group_added+0x238/0x910
[  406.116644][T17701]  ? igmpv3_del_delrec+0x204/0x710
[  406.116661][T17701]  __ethtool_get_link_ksettings+0x109/0x250
[  406.116681][T17701]  bond_netdev_event+0x643/0xf80
[  406.116704][T17701]  ? __pfx_bond_netdev_event+0x10/0x10
[  406.116727][T17701]  ? ipmr_device_event+0x1f6/0x220
[  406.116749][T17701]  notifier_call_chain+0x1a5/0x3d0
[  406.116770][T17701]  __dev_notify_flags+0x1aa/0x310
[  406.116786][T17701]  ? __pfx___dev_notify_flags+0x10/0x10
[  406.116798][T17701]  ? __dev_change_flags+0x5f1/0x820
[  406.116814][T17701]  ? __pfx___dev_change_flags+0x10/0x10
[  406.116832][T17701]  netif_change_flags+0xde/0x1b0
[  406.116847][T17701]  dev_change_flags+0x128/0x260
[  406.116870][T17701]  vlan_device_event+0x1b4e/0x1f00
[  406.116888][T17701]  ? packet_notifier+0xf1b/0xf70
[  406.116903][T17701]  ? br_device_event+0x282/0x9c0
[  406.116918][T17701]  ? __pfx_phonet_device_notify+0x10/0x10
[  406.116934][T17701]  ? __pfx_vlan_device_event+0x10/0x10
[  406.116950][T17701]  ? bcm_notifier+0xa9/0x890
[  406.116963][T17701]  ? raw_notifier+0x9d/0x7d0
[  406.116983][T17701]  ? cgw_notifier+0x314/0x380
[  406.116999][T17701]  notifier_call_chain+0x1a5/0x3d0
[  406.117024][T17701]  __dev_notify_flags+0x1aa/0x310
[  406.117039][T17701]  ? __pfx___dev_notify_flags+0x10/0x10
[  406.117052][T17701]  ? __dev_change_flags+0x5f1/0x820
[  406.117068][T17701]  ? __pfx___dev_change_flags+0x10/0x10
[  406.117083][T17701]  ? __local_bh_enable_ip+0xd0/0x130
[  406.117099][T17701]  netif_change_flags+0xde/0x1b0
[  406.117114][T17701]  do_setlink+0xdd6/0x4670
[  406.117133][T17701]  ? __lock_acquire+0x683/0x2cd0
[  406.117148][T17701]  ? __pfx_do_setlink+0x10/0x10
[  406.117162][T17701]  ? __lock_acquire+0x683/0x2cd0
[  406.117180][T17701]  ? lockdep_hardirqs_on+0x7a/0x110
[  406.117198][T17701]  ? do_raw_spin_lock+0x12b/0x2f0
[  406.117223][T17701]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  406.117238][T17701]  ? lockdep_hardirqs_on+0x7a/0x110
[  406.117254][T17701]  ? __mutex_lock+0x10ab/0x1590
[  406.117289][T17701]  ? __mutex_lock+0x5c5/0x1590
[  406.117307][T17701]  ? rtnl_newlink+0x8a3/0x1bd0
[  406.117328][T17701]  ? __pfx___mutex_lock+0x10/0x10
[  406.117348][T17701]  ? ns_capable+0x89/0xe0
[  406.117362][T17701]  ? rtnl_link_get_net_capable+0xd3/0x310
[  406.117379][T17701]  rtnl_newlink+0x148e/0x1bd0
[  406.117404][T17701]  ? __pfx_rtnl_newlink+0x10/0x10
[  406.117428][T17701]  ? __lock_acquire+0x683/0x2cd0
[  406.117445][T17701]  ? __lock_acquire+0x683/0x2cd0
[  406.117461][T17701]  ? is_bpf_text_address+0x26/0x2b0
[  406.117478][T17701]  ? unwind_next_frame+0x8f/0x2550
[  406.117498][T17701]  ? is_bpf_text_address+0x26/0x2b0
[  406.117517][T17701]  ? __lock_acquire+0x683/0x2cd0
[  406.117534][T17701]  ? kernel_text_address+0xa5/0xe0
[  406.117556][T17701]  ? __kernel_text_address+0xd/0x30
[  406.117575][T17701]  ? unwind_get_return_address+0x4d/0x90
[  406.117592][T17701]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  406.117614][T17701]  ? arch_stack_walk+0xfb/0x150
[  406.117634][T17701]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  406.117656][T17701]  ? __pfx_rtnl_newlink+0x10/0x10
[  406.117681][T17701]  ? __pfx_rtnl_newlink+0x10/0x10
[  406.117702][T17701]  rtnetlink_rcv_msg+0x802/0xc00
[  406.117724][T17701]  ? kasan_save_track+0x3e/0x80
[  406.117745][T17701]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  406.117766][T17701]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  406.117788][T17701]  ? __lock_acquire+0x683/0x2cd0
[  406.117806][T17701]  netlink_rcv_skb+0x226/0x4a0
[  406.117821][T17701]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  406.117844][T17701]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  406.117863][T17701]  ? netlink_deliver_tap+0x2e/0x1b0
[  406.117878][T17701]  ? netlink_deliver_tap+0x2e/0x1b0
[  406.117895][T17701]  netlink_unicast+0x7bb/0x940
[  406.117920][T17701]  netlink_sendmsg+0x813/0xb40
[  406.117939][T17701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.117956][T17701]  ? aa_sock_msg_perm+0xf1/0x1b0
[  406.117977][T17701]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  406.117996][T17701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.118012][T17701]  ____sys_sendmsg+0x9b9/0xa20
[  406.118033][T17701]  ? __might_fault+0xaf/0x130
[  406.118053][T17701]  ? __pfx_____sys_sendmsg+0x10/0x10
[  406.118071][T17701]  ? import_iovec+0x73/0xa0
[  406.118089][T17701]  ___sys_sendmsg+0x2a5/0x360
[  406.118103][T17701]  ? __lock_acquire+0x683/0x2cd0
[  406.118119][T17701]  ? __pfx____sys_sendmsg+0x10/0x10
[  406.118136][T17701]  ? futex_wake+0x4d7/0x5b0
[  406.118164][T17701]  ? __fget_files+0x2a/0x420
[  406.118181][T17701]  ? __fget_files+0x3a2/0x420
[  406.118202][T17701]  __x64_sys_sendmsg+0x1bd/0x2a0
[  406.118218][T17701]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  406.118236][T17701]  ? rcu_is_watching+0x15/0xb0
[  406.118256][T17701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.118270][T17701]  do_syscall_64+0x174/0x580
[  406.118286][T17701]  ? trace_irq_disable+0x3b/0x140
[  406.118307][T17701]  ? clear_bhb_loop+0x40/0x90
[  406.118323][T17701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.118338][T17701] RIP: 0033:0x7fe97499ce59
[  406.118353][T17701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.118367][T17701] RSP: 002b:00007fe975850028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  406.118384][T17701] RAX: ffffffffffffffda RBX: 00007fe974c16090 RCX: 00007fe97499ce59
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  406.118395][T17701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  406.118405][T17701] RBP: 00007fe974a32d6f R08: 0000000000000000 R09: 0000000000000000
[  406.118415][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  406.118424][T17701] R13: 00007fe974c16128 R14: 00007fe974c16090 R15: 00007ffce0392468
[  406.118441][T17701]  </TASK>