last executing test programs:

4.284504372s ago: executing program 4 (id=8561):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0xae14400eccdb2c0e, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/37, 0x410200}], 0x1}}], 0x48}, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket(0x2b, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018010000ee20732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000001700000095000000000000009277cf8bddec288ede5a792ec3ace22a48ea2b6bffb55a0354c0b054ac1159e724130334fc212a2a9b3592da1b1dc3318e21232d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) (async, rerun: 32)
r3 = socket(0x11, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x3, r4, 0x1, 0x1, 0x6, @broadcast}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0xf, 0x9}, {0x0, 0x5}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x24040084) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) (async, rerun: 32)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007480), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000074c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030000000000000000000000270000000000", @ANYRES64=r9, @ANYRES8], 0x4c}, 0x1, 0x0, 0x0, 0x1051}, 0x0) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
accept4(r10, 0x0, 0x0, 0x0)

4.115601s ago: executing program 1 (id=8562):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c)
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000700))
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x81, 0x8, 0x1, 0x80, 0x0, 0x7ff]}, &(0x7f0000000080)=0x78)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f6e8c69c50000022", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000500070004000000080009000000000014002000fe880000000000000000000000000101050012000600000008000c000300000008001900ac1414bb"], 0x50}, 0x1, 0x620b}, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r8 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)="7d95254b098423ab13457f53c43d531678b2a8b54112bb410594321a26f774e79a13984a717d748c961a234ce3d0bfa6d6cacb0147b1bdf330c47c04f808b6ce5661d0533da3d2a4926a859d71715b4f281fdb6e9f09fac4e4c0ff9a2239017964884efb8eec9b5645a32a0e31c745ce1ec921cf54745f7648df8d1b69dad072d3606c59", 0x84}, {&(0x7f0000000500)="ac260e87dd482812bdb0ad2b53f45ae0af4495f0bdb794d6bbe0", 0x1a}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="6000000000000000030100000700000064c996c64b55b5f667f117c5a6f41b5666687e4699a7748314820caf1869b736f1bdc4862b2a7efb5f3aed8965d42ea44301efdd45b98d826a6088e24c6fa82fb1b2273ff0168d238accc0710b861024f55740000000"], 0x60}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032bbd7000fddbdf252100000009001f0070687930000000000c0005000200aaaaaaaaaaaa09001f0070687933000000000c00050000000000000000000a0001007770616e3400000009001ff1706879060000000005002000010000000c0005000203aaaaaaaaaaaa"], 0x70}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

4.083544408s ago: executing program 0 (id=8563):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004002b"], 0x24}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r8, 0x909, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000002c0)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000640), 0x4)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x844d}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c800}, 0x44000)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="280000000000000029000000370000008702000000000000c204000000060001000401080102000024000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=r3, @ANYBLOB="00000000300000000000000029000000360011000100000000000000c204000000040502010005021000c2040000007c00000000"], 0x80}, 0x40c0)

4.082485615s ago: executing program 2 (id=8564):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000dbc683cb52bac0157757584cd40c528d0f168c18b039a12284cdbf7b35d29fb9554722456f5d38f74c005cd562e39f0922653f39c631b314d9e61ac54212af4035d8332422f26920a5deabd188d95dd2e9a726711ec06b2ed2c6c7bab048257b2722e842d8cea31a75fb45288f841a534ad3c498", @ANYRES16=r1, @ANYBLOB="0100030000000000000001000000040007800c00020081000000000000000c0006000200000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)

3.893931488s ago: executing program 4 (id=8566):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
getsockopt(r5, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x94}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4)
r8 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f454be00c3bccb3926e9fc9b4693700ecd", 0x3d}], 0x1}}], 0x1, 0xc044)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipmr_newroute={0x34, 0x18, 0x2, 0x70bd29, 0x25dfdbfe, {0x80, 0x14, 0x10, 0xf6, 0x0, 0x0, 0x0, 0x2, 0x2200}, [@RTA_DST={0x8, 0x1, @multicast2}, @RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_GATEWAY={0x8, 0x5, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40015}, 0x10)

3.848392491s ago: executing program 2 (id=8567):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000b03"], 0x0, 0x5a}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10)

3.622223051s ago: executing program 3 (id=8568):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f00000003c0)=0x10)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x4}, 0x10)

3.273328735s ago: executing program 3 (id=8569):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20004880)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff80fe}, 0x50)
writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={<r5=>r2, 0x0, 0x3, 0x8000000000000001})
write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRES16=r2, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) (async)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20004880) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff80fe}, 0x50) (async)
writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r2, 0x0, 0x3, 0x8000000000000001}) (async)
write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRES16=r2, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)

3.272090265s ago: executing program 0 (id=8570):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000280)=0x2c) (async)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000280)=0x2c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)

2.985799299s ago: executing program 1 (id=8571):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200009db77822f9859d56d6094dff5e34ac020e9857ee01fe34dc07ab1b00"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x5c, &(0x7f0000000180)={@local, @empty, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x17, 0x4a, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, "039117cf94e2d0bb0e495995887ed9a40c204f8c6a1f7950c37b3e45a12bd12a039f2fcedf13012aac202f4b6bcf5fa7925aea5d4364"}}}}, 0x0)

2.786443067s ago: executing program 3 (id=8572):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
socket$kcm(0x2, 0x3, 0x2) (async)
socket$kcm(0x2, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, [@IFLA_PHYS_PORT_ID={0xd, 0x22, "6d6adcb2bb2384423f"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)

2.580761787s ago: executing program 2 (id=8573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x20}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b00010069ffffffffffffff7f00fe7f0600e4ac2a9af2756cd301000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b00010069ffffffffffffff7f00fe7f0600e4ac2a9af2756cd301000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async)
recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r1}, 0x10)

2.368404281s ago: executing program 4 (id=8574):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)

2.184511141s ago: executing program 1 (id=8575):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmmsg$inet(r0, &(0x7f00000015c0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000e80)="4953aa53828c5b3c577c4ca463081b2b013ecaf8952c04f429b0cf9e55ffa7bc77ee99e571bee22bb150f063a5b1760b47f773ec3bba0bf01bd7c7d8eb71cf07df83b8ed386b6ba648722ea9111de2ccf9994e1a04e2969f3c72404f62eac16d44c743a9c05eba38a3c9ace79c9ab0b9b2f29df6c6f87623ebee93c53c8b34fcc6cd970147466a30272f63bc2050e8aa4c2f648cc8fbac012fb1811c412aa7309a3145871b08647bf9e98b642bb6189759dd76750e0bd2feabc206103c7e24bf7b55db3ef3b78c6970d1c7ffd140e160410cdc", 0xd3}, {&(0x7f0000000f80)="132887cfa3e847366078524eb4d889b139799f3c96489fee2ce83ce88da890dc204c2423b928d3cca742b15be4c3ffbbd9ca286618f03041f8cd07f0bc6784278f0779c401f1889c2ba70d33d9d8d7b2f98ad3a675385e8101c696bc22e0692cba23e46727f689d6ef45366d6c3527b1a65c2ad4ce4380843cc4af8dfa77ad465b7d3587de05a7d7961129581cedcca77a6f027ef43e7398614029963298991cc2ee9c95", 0xa4}, {&(0x7f0000001040)="d98f945629531f1e76978747c52cfc1b6af02d522416b5da87a2a23c27f82f56be3cc8e3359674a1539ce78a535128c5", 0x30}], 0x3, &(0x7f00000010c0)}}, {{&(0x7f0000001100)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001140)="2c194f4dc4e00709b385fc4cba01be82888965158106b7db89d7f2b23d055cbe34840ab2114754766bb1d81b2efd65c8b40de67df78a768f59a37469d6364ab35028783cc5fa0f08ac48231423251d63c1f9773418e1b90cc6d620da324a696424040fc6061ab7c75cf17c0c9844ae3a5f5e", 0x72}, {&(0x7f00000011c0)="5a7700865b23031c2fcea5005c44ba856ed099917f8241f146944fc557861759e17d030883b2fa812b420ec202984ff451b11ad09ca320d21c493d1b55d82fc37ca4567b48733e8df921aca6e4d78cc9158ed92a66b25f0e9d186eea71d0b00b124f21452eea146bd1094c398b356231509b5638f3d85acaa3b4128777ad7d44afb53404cc60db41c7866b1b56f02e2162f7c1fd8ea0cad2aa1632a729df1de4c5274d74e4ad2bb076210e6b32d695790dcfb3878a06a4335a478766641f3cf799625cdbe6abc2", 0xc7}, {&(0x7f00000012c0)="1ce04c66c3f46c998162574e366fe673c8d810a3ce1804eec69516b8f4db23f65e44213b84111dd2", 0x28}, {&(0x7f0000001300)="5def7e1a929fc59d575d7adea46901d590b8a3e0e39d66479aef026fea5321d38046bc44029a4d430e9f9f486d8b735ba7e95ae177d648935e76d4c165a59210fc77fb72b4de3a6910cc29cc2964135b6f49950a7acb3ee1ec9552a3e5d1119f2cdb668383f79cec1b44f8fe3d407f8690872d511e9caaae215dab82bf957cc36371f37178e1e34ab48e7e1f1c42d1a8f5574e08164c74c7a143b0dc48d1f6f268f6573cf75ffbb0ac198141816d5985d566f7cfc58123d47b03339aa0aeef1720d424dfcddf4a33150b2cedaf23506f145af55c2051ef1c652530cde3f61aec7a8bac79fdc5591bd0d3f4bdf303", 0xee}, {&(0x7f0000001400)="33101659a0e1275e68ae1f0da24c916273f699a67ee7aa37bc8ac9f85b3512a19bf4dad9c624cf4f69a5ce550f1bd9f0bfb508a898aa4dc5917a78ff44f6953d567d07f853c2c580d399ae501ad4976fcb0e784439d0c0c777588dcd2b7bb3ea2fc264d7d9e3492f16e7e19385558f67078e4444da294656b3efc9a46c2d34a2480a34288453e0a6a0b2c898cebf02c881cdc2a1e3f3", 0x96}, {&(0x7f00000014c0)="3e2986c8182fbde49d357f3ae37c9aa8e03039eddf75c8c773974531a24df764c05433c4196931f5f078e99d44d23c762f0f1aabd40ce5e3040f3db0f3f385871582bbe5ddd92b8ca52e2c076a8095475cc744e71628c9defda96ea7c99c9aa9d4e501e7c37bc8bc5232e4191c4a4af235ec7ef092d70869de2749", 0x7b}], 0x6}}], 0x5, 0x240080e4)

1.954289488s ago: executing program 0 (id=8576):
recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/34, 0x22}, 0x8}, {{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/37, 0x25}, 0x7}, {{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/74, 0x4a}], 0x8, &(0x7f0000000800)=""/83, 0x53}, 0x2}, {{&(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/119, 0x77}, {&(0x7f0000000980)=""/6, 0x6}], 0x2, &(0x7f0000000a00)=""/96, 0x60}, 0x80000001}], 0x4, 0x40010040, &(0x7f0000000b80)={0x0, 0x3938700})
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000bc0)) (async)
r2 = accept$netrom(r0, &(0x7f0000000c00)={{}, [@remote, @remote, @null, @remote, @null, @remote, @rose, @default]}, &(0x7f0000000c80)=0x48)
setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000cc0)=0x29, 0x4)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00', 0x0, 0x10}, 0x18) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e40)={'syztnl2\x00', <r4=>0x0, 0x10, 0x8, 0x2, 0x80, {{0x24, 0x4, 0x2, 0x2f, 0x90, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x13, 0x72, [@loopback, @private=0xa010101, @empty, @broadcast]}, @end, @timestamp_prespec={0x44, 0x54, 0x78, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x6}, {@empty, 0x4506}, {@empty, 0x6}, {@remote, 0x7}, {@rand_addr=0x64010100}, {@broadcast, 0xff}, {@broadcast, 0x6}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x72, 0x3, 0x2, [{@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}}}) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@const={0x5, 0x0, 0x0, 0xa, 0x2}, @enum={0xb, 0x2, 0x0, 0x6, 0x4, [{0xa}, {0x9, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x61, 0x0, 0x61]}}, &(0x7f0000000fc0)=""/167, 0x47, 0xa7, 0x1, 0xfffffffd, 0x10000}, 0x28)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_tracing={0x1a, 0x20, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000001240)='GPL\x00', 0x4, 0x17, &(0x7f0000001280)=""/23, 0x41100, 0x4, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0xd, 0x8, 0x5}, 0x10, 0x1c885, 0xffffffffffffffff, 0x3, &(0x7f0000001340)=[r2, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001380)=[{0x3, 0x1, 0x4, 0x1}, {0x0, 0x5, 0x5, 0xa}, {0x1, 0x3, 0xf, 0x6}], 0x10, 0xf5fd}, 0x94) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x203c7f87, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x5, 0x101, 0xb658, 0x3, 0x40008, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000d80)=@raw=[@ldst={0x2, 0x3, 0x4, 0x5, 0xf, 0x8, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x99}, @alu={0x4, 0x0, 0x1, 0x6, 0x6, 0x0, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000dc0)='syzkaller\x00', 0x10000, 0xe, &(0x7f0000000e00)=""/14, 0x41100, 0x69, '\x00', r4, 0x17, r5, 0x8, &(0x7f00000010c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0xa, 0x2, 0x9}, 0x10, 0x1b648, r6, 0x0, &(0x7f0000001700)=[r7, r8, r9, r10], 0x0, 0x10, 0xfffffffa}, 0x94) (async)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x13, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r8}, @alu={0x7, 0x1, 0xb, 0x5, 0xa, 0xffffffffffffffc0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x98}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000018c0)='GPL\x00', 0x3, 0xfa, &(0x7f0000001900)=""/250, 0x40f00, 0x14, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000001a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x2, 0x8, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001a80)=[r9, r9, r7, r7, r7, r3, r10], &(0x7f0000001ac0)=[{0x1, 0x3, 0x4, 0x7}, {0x4, 0x1, 0xd, 0xc}, {0x0, 0x3, 0x100, 0x4}, {0x1, 0x5, 0xf, 0xa}, {0x4, 0x4, 0xa, 0xc}], 0x10, 0x7}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c00)={r11, r4, 0x25, 0x8, @val=@tcx={@void, @value=r6}}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000001c40)={0x1, 0x4e8b, 0x0, 0x7}, 0x8) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001cc0), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(r12, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r13, 0x2, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) (async)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000002080)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f0000001e40)={0x1cc, r14, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x124, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44014}, 0x40000) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000020c0)={r6, <r15=>0xffffffffffffffff}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002140)=@delqdisc={0x178, 0x25, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {0x0, 0x3}, {0xf, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x8, 0x5, 0x2, 0x1, 0x7fff, 0x4}}, {0xc, 0x2, [0x600, 0x4, 0xfff5, 0x1]}}, {{0x1c, 0x1, {0x2, 0x8, 0xfff, 0x8c, 0x0, 0x10001, 0x9, 0x7}}, {0x12, 0x2, [0x0, 0x9f0, 0x4, 0x1, 0x7f, 0x2000, 0x2]}}, {{0x1c, 0x1, {0x86, 0x2, 0x0, 0x4, 0x1, 0x80000001, 0x1000, 0x3}}, {0xa, 0x2, [0x7fff, 0xd, 0x4]}}, {{0x1c, 0x1, {0x9, 0x9, 0x5, 0x9, 0x0, 0x5a60, 0xe263, 0x4}}, {0xc, 0x2, [0x9, 0x6, 0xfe01, 0x2]}}, {{0x1c, 0x1, {0x9, 0x8, 0x20, 0x5a, 0x2, 0x6, 0x4a, 0x3}}, {0xa, 0x2, [0x3, 0x2, 0x8001]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc8a}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x40000}}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)
syz_emit_ethernet(0x25, &(0x7f0000002340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13fcec54e12a", @void, {@llc={0x4, {@snap={0x0, 0xaa, 's', "f9d39d", 0x8816, "86ca72f49fe7b5bdd04f90b60b17be"}}}}}, &(0x7f0000002380)={0x1, 0x3, [0xa2a, 0x18, 0xc1e, 0xa02]}) (async)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r1)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000002700)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002440)={0x240, r16, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x21e, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_a, @initial, {0x2, 0x2}}, 0x842, 0x54, @default, @val={0x1, 0x8, [{0x5}, {0x6c, 0x1}, {0x36, 0x1}, {0x60}, {0x1, 0x1}, {0x2}, {0x24}, {0x60, 0x1}]}, @void, [{0xdd, 0x24, "6b95348c5ad01f2ee09c9c258e3c859273e7dcce1748f04d8638576eb0cfca935a36d16d"}, {0xdd, 0x6c, "c559044b19418b299bdc8ae5bc855421e5035b33ec54c871b6552b48fce3de82ac1e1d626d79489bd30cc5d7f626405b8dfd7e3bb8ba94d319b724640f6d9c29588ab78876cf6628303107fdd60be3351c00ee740d2bd49e297e1240665826c51d7c347a8c4681bc826f64a2"}, {0xdd, 0x50, "a57b37ff3498450b17852d89dba9e7bc1bc145b0071d263abc5b260af5d2ee6043b2dc804de541286e52fa528f2a667007decc4ff433cce384cf58f0c9e4aa9ed2b7c8a489c4cf1c2f2852d242803d32"}, {0xdd, 0x4c, "32aaa921f9a48d1d00b1c44e8672dea2f7ab17e4fd12b74b861b518755d186128e5ee7d5a0e4346676acf24cf3d71b635d712e9aea04be224df9183238c0914d4c9abc414a307994427e7a05"}, {0xdd, 0x7d, "772f37e96a5b79562f254d96ec6ee7be0255bf3613f52d1120233507d75efb62900a2bd439c78dc81aade1b866eb3ef381c1543571917bedc92a9ce5706a4387d635e3285ab4cdeacc3319689421ca2496c1d6316de49cd453c1683769a9ddea09524a3575d2e460bdeec67ec1e3fc3fd7c88709e5382c2b173d8bad36"}, {0xdd, 0x30, "a416791218c34de8cbd69ea45139beaa2eefbf24f595d0ce9c47d4802331de7d65cb1ec677b47ad572702dbfe42b741b"}, {0xdd, 0xb, "fb2b2a07afb92ee1f19b3a"}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x90}, 0xc014) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20010, r6, 0x132c5000)
ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000002740)={'syzkaller0\x00', @ifru_names='netdevsim0\x00'}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a00)={r11, 0x0, 0x2c, 0x7f, &(0x7f0000002780)="2fba11bf5a01b0f67cf9005739c42bd82f04043b25d6239a983c288b2f9d8c214e25b48350aa75b1f09fbcb6", &(0x7f00000027c0)=""/127, 0x7fff, 0x0, 0x9c, 0xf5, &(0x7f0000002840)="bd4b15eb55fc076cbfc47e11a6f02595e5ecbe1c70fabd1281429eb852e34f7b4cf94a60bf78c62c8d487841f47ef0c9adaa878656be99a2fdebf894be4fe1dcae2da6e94f5ab2df5865483437e939158c3e7b8aa6ac1b3dc7fc0742b0343895d8c9adb7fbb0473cf8763607ec7b1d34922b058027742781e8c6d23830297294a7d3d7ce27f977aa9ffc661107c875ae60c3d9c7a88732da0cd3193d", &(0x7f0000002900)="b36ea4f9ffc8b7b453edcc9efae80f541d240ceda57a0e6dabfd4c66f68e21b814d725726e879f65931c4230b1ec0b0f5448fb83af12f1396f5bc9a5157e7c4ea90fae31c0e88610c594704f34b5ba19a1159e2fb36aa6ccc30bb8802eda7fcfc248dc0ea47409233f00c11f27f1bc1535a495aa104de6063341f98c0bdac09d064d4cd8fd0ff2bb1148f2d41aa61b0eec61bd638ee896aea955e7fd462cc0b20a3141cb51aaed7f6fd36bcf94681210491317d684d359adfd14cd372d94f4d800934d2178c97e75a347ac34336ec771c4420f319bc69fc6c14f113a84f0b852bbd8e465c32b5663e7a5de5ba307cd714715ca05b6", 0x2, 0x0, 0x4}, 0x50)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r15, &(0x7f0000002c00)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x8c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x8c}, 0x1, 0x0, 0x0, 0x94}, 0x8000)

1.889032235s ago: executing program 2 (id=8577):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x9)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003340), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f00000033c0)={0x68, r4, 0x52b9ada956aca011, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "00bbfb8608180ce4d3c9a4d3f77c6a6b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

1.86249262s ago: executing program 0 (id=8578):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}]}, &(0x7f0000000080)=0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x84de}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)

1.859902543s ago: executing program 1 (id=8579):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006002000800a000008002000", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 64)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
bind$inet(r1, 0x0, 0x0) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) (async)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
syz_emit_ethernet(0x117, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x2, 0x3, 0x109, 0x66, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @empty, {[@timestamp_addr={0x44, 0x14, 0x29, 0x1, 0x5, [{@multicast1, 0x9}, {@rand_addr=0x64010101, 0x2}]}, @rr={0x7, 0x7, 0x83, [@empty]}]}}, {0x4e20, 0x4e20, 0xd9, 0x0, @opaque="34eaef33f5d220ccac1d0f104a2c1def47019f7a674f3eac73e6bd5527b10446672a6f6860cb6d5485a79cdd05d3662400ca618cf300d2c4b90ada06dfc447edfd640132fde5172a4986e620d5cf972737a9f35b6e20467c8485d3e92bbca33089d246d6da51b554e09501d2c299651c1b8de5c8465ab57f375b2b89db027ac3985dd29e27724c5651df69686f210de25959ac4371c2360c57bf32f398ff814d822d9a953f4b4c04ffde50e1b03e4bc96d806b25e16f102cc1fd75b03b9071692e8ba5c7a68b8ce45092068981ec59c2e8"}}}}}, 0x0)

1.844119978s ago: executing program 3 (id=8580):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
socket$inet(0x2, 0x5, 0x1f43)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)

1.841430939s ago: executing program 4 (id=8581):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x7, &(0x7f0000000740)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) (async)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
recvmmsg(r5, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f0000001700)=""/161, 0xa1}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001980)=""/155, 0x9b}, {&(0x7f0000001600)=""/216, 0xd8}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001a40)=""/19, 0x13}, {&(0x7f0000001a80)=""/85, 0x55}], 0xd}, 0x81}], 0x4, 0x40012032, 0x0) (async)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) (async)
pipe(0x0) (async)
r6 = socket(0x14, 0x3, 0x2000004)
setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200101000000000000000000000000022b030000043500000a000200"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0x400)

1.636883343s ago: executing program 0 (id=8582):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0)

1.508132751s ago: executing program 2 (id=8583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@getstats={0x0, 0x5e, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x0)

1.506677531s ago: executing program 4 (id=8584):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltclass={0x5c, 0x29, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0x5}, {0xfff3, 0x9}, {0x1, 0xfff2}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0xb5}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xfff}}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}]}, 0x5c}}, 0x0)

1.334404497s ago: executing program 1 (id=8585):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0xb, 0xe361bcd883a26e46, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
pipe(&(0x7f0000001540)) (async)
pipe(&(0x7f0000001540))
recvmsg(r0, &(0x7f0000001740)={&(0x7f0000001400)=@nfc, 0x80, &(0x7f0000001640)=[{&(0x7f0000001480)=""/15, 0xf}], 0x1, &(0x7f0000001680)=""/143, 0x8f}, 0x40002041) (async)
recvmsg(r0, &(0x7f0000001740)={&(0x7f0000001400)=@nfc, 0x80, &(0x7f0000001640)=[{&(0x7f0000001480)=""/15, 0xf}], 0x1, &(0x7f0000001680)=""/143, 0x8f}, 0x40002041)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @ldst={0x3, 0x1, 0x6, 0x9, 0x7, 0xe, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x85}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0xa1, &(0x7f0000001280)=""/161, 0x40f00, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x0, 0x7, 0x3, 0xa8e2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r2}, &(0x7f0000000100), &(0x7f00000014c0)=r3}, 0x20)
recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0)

1.333780894s ago: executing program 3 (id=8586):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000280)="ab99d527121bbd82e81e80d4615cc1262d8a4627cc8f2293a40ab190d8ce9826ec6d8b0f45faa445d91744b59a57ab6da5bd33b89fe6b299b955738e4de16fb2231efd615ea43139fd0a4d34ee76bf9b", 0x50}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x7, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000aa, 0x0, 0x0, 0x0, 0xfeea, [0x1]}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000980)={'wpan1\x00'})
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf25200000001c002d800500010001000000080002000200000005000100010000001c002d80080003000300000008000200060000000800030005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080)

1.034976411s ago: executing program 2 (id=8587):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x20040084)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000100)) (async)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000100))
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001e0a05010000000000000000070000000900020073797a310000000053f0563973797a30000000003c00038038000080340001802d000100fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe600000014000000100a"], 0xec}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @local, 0xc8df}, 0x1c) (async)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @local, 0xc8df}, 0x1c)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) (async)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850)

915.000844ms ago: executing program 4 (id=8588):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x6, r4, 0x0, r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4)
sendto$unix(r5, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000080), 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0})
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x3c8, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xff], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@hbh={{0x48}, {0x1, 0x1, 0x0, [0x5, 0x5, 0x7, 0x5, 0xadb, 0x401, 0x7, 0x41, 0x0, 0x7f, 0x9, 0x2, 0x1, 0x2, 0x8001], 0x10}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x8, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8)
syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ff6c2fca06a9bd768d5f1", {"bea92e00ffffff1f5ed3b600fc1500", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="1000de8008200500600000004404000100"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

812.251458ms ago: executing program 1 (id=8589):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000c00000000000800edd11b77e8b494f8ab7ec0f18e019f3c2ab57779112185ace9084370d6ce0c8dd7f3fa5e58a49d22e070666fee7bd8d126", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xb, 0x6}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfffffffb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x8040)

649.731844ms ago: executing program 0 (id=8590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$unix(r1, 0x0, 0x20)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
readv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001540)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100cf074000000000000900000008000300", @ANYRES32=r8, @ANYBLOB="0500080002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x500, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94)

0s ago: executing program 3 (id=8591):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1d, 0x9d3f, 0x5a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x8001, @mcast1, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000080)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES16=r7, @ANYRES32=r8, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="64b2297cd10035c5940403e2fffffeffffff0000"], 0x64}, 0x1, 0x0, 0x0, 0x4048050}, 0x4000010)
sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @initdev={0xac, 0x1e, 0x4, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @empty}}}], 0x70}}], 0x1, 0xc0)
r9 = socket(0x2, 0x80000, 0x0)
setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xcd, 0x0, 0x5c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)

kernel console output (not intermixed with test programs):

sing attributes in process `syz.1.6576'.
[  896.143189][T30094] 8021q: adding VLAN 0 to HW filter on device team0
[  896.169992][T30726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6576'.
[  896.205304][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.212751][ T7065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  896.315664][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.323280][ T7065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  896.416629][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6579'.
[  896.454376][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6579'.
[  896.477731][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6579'.
[  896.526525][T30742] syzkaller0: entered promiscuous mode
[  896.534451][T30742] syzkaller0: entered allmulticast mode
[  896.762684][T30758] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  896.801706][T30758] tipc: Enabled bearer <udp:syz0>, priority 10
[  896.822374][T30762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6584'.
[  897.221069][T30094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  897.483352][T30094] veth0_vlan: entered promiscuous mode
[  897.517315][T30094] veth1_vlan: entered promiscuous mode
[  897.575981][T30094] veth0_macvtap: entered promiscuous mode
[  897.586911][T30094] veth1_macvtap: entered promiscuous mode
[  897.607150][T30094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  897.626640][T30094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  897.647924][ T7060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  897.658723][ T7060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  897.668686][ T7060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  897.685048][ T7060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  897.806409][T25788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  897.822825][T25788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  897.851897][T25788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  897.863083][T25788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  897.923343][T30797] netlink: 'syz.0.6439': attribute type 1 has an invalid length.
[  908.170341][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  919.783129][T30803] syzkaller0: entered promiscuous mode
[  919.789252][T30803] syzkaller0: entered allmulticast mode
[  919.924038][T30818] __nla_validate_parse: 4 callbacks suppressed
[  919.924064][T30818] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6599'.
[  920.007280][T30822] sctp: [Deprecated]: syz.2.6600 (pid 30822) Use of struct sctp_assoc_value in delayed_ack socket option.
[  920.007280][T30822] Use struct sctp_sack_info instead
[  920.053900][T30822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6600'.
[  920.323867][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'.
[  920.567303][T30847] netlink: 404 bytes leftover after parsing attributes in process `syz.0.6608'.
[  920.609275][T30847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6608'.
[  920.621899][T30847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6608'.
[  920.633329][T30847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6608'.
[  920.754912][T30854] net_ratelimit: 2 callbacks suppressed
[  920.754936][T30854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  920.833462][T30859] openvswitch: netlink: EtherType 50a is less than min 600
[  921.195700][T30879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6617'.
[  921.238230][T30884] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6618'.
[  921.683619][T30906] xt_hashlimit: size too large, truncated to 1048576
[  921.933648][T30913] –: renamed from vxcan1 (while UP)
[  922.039828][T30877] wg1 speed is unknown, defaulting to 1000
[  922.199462][T30931] netlink: 'syz.2.6626': attribute type 3 has an invalid length.
[  922.269961][T30916] syzkaller0: entered promiscuous mode
[  922.277904][T30916] syzkaller0: entered allmulticast mode
[  922.458599][T30936] xt_time: invalid argument - start or stop time greater than 23:59:59
[  922.680293][T30951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6629'.
[  926.357399][ T5830] Bluetooth: hci4: link tx timeout
[  926.363897][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  926.867292][ T5144] Bluetooth: hci4: link tx timeout
[  926.873030][ T5144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  926.880372][T30982] netlink: 'syz.3.6637': attribute type 1 has an invalid length.
[  926.894828][ T5144] Bluetooth: hci4: link tx timeout
[  926.895020][T30982] netlink: 'syz.3.6637': attribute type 2 has an invalid length.
[  926.912096][ T5144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  927.193654][ T5144] Bluetooth: hci4: link tx timeout
[  927.200890][ T5144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  927.260801][ T5144] Bluetooth: hci4: link tx timeout
[  927.266176][ T5144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  927.776317][T31019] 
s5ÿÿø: renamed from vlan1
[  928.333912][ T5144] Bluetooth: hci4: link tx timeout
[  928.339291][ T5144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  928.410729][ T5144] Bluetooth: hci4: command 0x0406 tx timeout
[  929.215954][T31082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  929.632546][T31093] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  929.642713][T27211] IPVS: starting estimator thread 0...
[  929.664761][T31094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  929.672406][T31094] IPv6: NLM_F_CREATE should be set when creating new route
[  929.679812][T31094] IPv6: NLM_F_CREATE should be set when creating new route
[  929.687185][T31094] IPv6: NLM_F_CREATE should be set when creating new route
[  929.718463][T31093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  929.755179][T31097] IPVS: using max 28 ests per chain, 67200 per kthread
[  929.851274][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6666'.
[  930.000762][T31108] netlink: 'syz.1.6668': attribute type 10 has an invalid length.
[  930.124628][T31113] Cannot find add_set index 2 as target
[  930.679419][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.710099][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.756734][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.781574][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.803623][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.825291][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.868574][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.879610][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.893441][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  930.963165][T31132] syzkaller0: entered promiscuous mode
[  930.973426][T31132] syzkaller0: entered allmulticast mode
[  931.737435][ T7055] dvmrp8: left allmulticast mode
[  931.986568][ T7055] bond9 (unregistering): (slave geneve4): Releasing active interface
[  932.280056][ T7055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  932.294985][ T7055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  932.305298][ T7055] bond0 (unregistering): Released all slaves
[  932.318730][ T7055] bond1 (unregistering): Released all slaves
[  932.339439][ T7055] bond2 (unregistering): (slave veth3): Releasing active interface
[  932.351378][ T7055] bond2 (unregistering): (slave veth5): Releasing active interface
[  932.361494][ T7055] bond2 (unregistering): Released all slaves
[  932.376201][ T7055] bond3 (unregistering): Released all slaves
[  932.403565][ T7055] bond4 (unregistering): Released all slaves
[  932.418498][ T7055] bond5 (unregistering): Released all slaves
[  932.438875][ T7055] bond6 (unregistering): Released all slaves
[  932.454439][ T7055] bond7 (unregistering): Released all slaves
[  932.468653][ T7055] bond8 (unregistering): Released all slaves
[  932.483259][ T7055] bond9 (unregistering): Released all slaves
[  932.514067][ T7055] bond10 (unregistering): Released all slaves
[  932.724588][ T7055] : left promiscuous mode
[  932.851149][ T7055] tipc: Left network mode
[  933.122332][T31115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  933.428148][T31172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  933.756193][T31182] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  933.756815][T31180] netlink: 'syz.0.6688': attribute type 6 has an invalid length.
[  933.828950][T31180] netlink: 'syz.0.6688': attribute type 5 has an invalid length.
[  933.912504][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_0
[  933.942665][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_1
[  934.784676][T31207] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  935.128538][T31189] syzkaller1: entered promiscuous mode
[  935.143870][T31189] syzkaller1: entered allmulticast mode
[  935.296982][T31221] __nla_validate_parse: 257 callbacks suppressed
[  935.297007][T31221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6697'.
[  935.305342][T31222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6698'.
[  935.708385][ T7055] IPVS: stop unused estimator thread 0...
[  935.789226][T31237] netlink: 'syz.2.6699': attribute type 19 has an invalid length.
[  935.831856][T31237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6699'.
[  935.898891][T31237] netlink: 'syz.2.6699': attribute type 19 has an invalid length.
[  935.979990][T31237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6699'.
[  936.116260][T31251] vlan2: entered promiscuous mode
[  936.134174][T31251] geneve1: entered promiscuous mode
[  936.153903][T31251] vlan2: entered allmulticast mode
[  936.166817][T31251] geneve1: entered allmulticast mode
[  936.437971][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6711'.
[  936.466375][T31258] netlink: 'syz.4.6711': attribute type 1 has an invalid length.
[  936.478184][T31259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6710'.
[  936.495373][T31258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6711'.
[  936.526078][T31261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6712'.
[  936.581326][T31259] netlink: 'syz.1.6710': attribute type 1 has an invalid length.
[  936.645505][T31259] syzkaller0: entered promiscuous mode
[  936.671282][T31259] syzkaller0: entered allmulticast mode
[  936.684733][T31259] netlink: 'syz.1.6710': attribute type 11 has an invalid length.
[  936.704984][T31259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6710'.
[  937.067927][T31278] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6718'.
[  937.111969][T31286] netlink: 'syz.3.6721': attribute type 1 has an invalid length.
[  937.114692][T31281] syzkaller1: entered promiscuous mode
[  937.143639][T31281] syzkaller1: entered allmulticast mode
[  937.293765][T31292] bond1: entered promiscuous mode
[  937.559542][T31309] bond1: entered promiscuous mode
[  937.565751][T31309] 8021q: adding VLAN 0 to HW filter on device bond1
[  937.626247][T31309] 8021q: adding VLAN 0 to HW filter on device bond1
[  937.647648][T31309] bond1: (slave sit1): The slave device specified does not support setting the MAC address
[  937.675599][T31309] bond1: (slave sit1): Error -95 calling set_mac_address
[  937.868723][T31325] syzkaller0: entered promiscuous mode
[  937.887247][T31325] syzkaller0: entered allmulticast mode
[  938.144875][T31338] netlink: 'syz.2.6733': attribute type 2 has an invalid length.
[  938.165961][T31338] netlink: 'syz.2.6733': attribute type 5 has an invalid length.
[  938.405926][T31346] syzkaller0: entered promiscuous mode
[  938.412647][T31346] syzkaller0: entered allmulticast mode
[  941.947206][T31364] batadv_slave_0: entered promiscuous mode
[  941.982984][T31364] batadv_slave_0: entered allmulticast mode
[  942.021575][T31364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  942.083815][T31368] pim6reg: entered allmulticast mode
[  942.367240][T27211] syz_tun: tun_net_xmit 86
[  942.387408][T31388] __nla_validate_parse: 8 callbacks suppressed
[  942.387432][T31388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6747'.
[  942.424051][T27211] syz_tun: tun_net_xmit 86
[  942.438897][T31397] netlink: 'syz.3.6747': attribute type 32 has an invalid length.
[  942.477040][T31397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6747'.
[  942.547833][T31402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6749'.
[  942.648968][T31397] bond4: option coupled_control: invalid value (192)
[  942.668020][T31408] xt_NFQUEUE: number of total queues is 0
[  942.681924][T31397] bond4 (unregistering): Released all slaves
[  942.708529][T31408] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6750'.
[  942.718671][    T9] IPVS: starting estimator thread 0...
[  942.832768][T31411] IPVS: using max 27 ests per chain, 64800 per kthread
[  943.093342][T31429] x_tables: duplicate underflow at hook 1
[  943.243405][T31428] syzkaller0: entered promiscuous mode
[  943.260982][T31428] syzkaller0: entered allmulticast mode
[  943.292495][T31442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6758'.
[  943.364836][T31446] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6757'.
[  944.010395][ T5830] Bluetooth: hci5: command 0x0406 tx timeout
[  947.374757][T31477] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0
[  950.366710][T31485] netlink: 'syz.1.6768': attribute type 10 has an invalid length.
[  950.428543][T31485] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  950.755517][T31509] syzkaller1: entered promiscuous mode
[  950.767259][T31509] syzkaller1: entered allmulticast mode
[  951.072806][T31519] lo: entered promiscuous mode
[  951.116630][T31519] tunl0: entered promiscuous mode
[  951.158049][T31519] gre0: entered promiscuous mode
[  951.196693][T31519] gretap0: entered promiscuous mode
[  951.241743][T31519] ip_vti0: entered promiscuous mode
[  951.298300][T31526] syzkaller0: entered promiscuous mode
[  951.321582][T31526] syzkaller0: entered allmulticast mode
[  951.525153][T31538] netlink: 'syz.1.6783': attribute type 11 has an invalid length.
[  951.556651][T31536] syzkaller0: entered promiscuous mode
[  951.572607][T31538] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6783'.
[  951.574589][T31536] syzkaller0: entered allmulticast mode
[  951.944774][T31549] syzkaller0: entered promiscuous mode
[  951.952480][T31549] syzkaller0: entered allmulticast mode
[  954.974231][T18568] IPVS: ip_vs_send_async error -101
[  955.316922][T31589] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6796'.
[  955.339432][T31590] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  955.858405][T31618] FAULT_INJECTION: forcing a failure.
[  955.858405][T31618] name failslab, interval 1, probability 0, space 0, times 0
[  955.871340][T31618] CPU: 0 UID: 0 PID: 31618 Comm: syz.4.6805 Not tainted syzkaller #0 PREEMPT(full) 
[  955.871369][T31618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  955.871383][T31618] Call Trace:
[  955.871393][T31618]  <TASK>
[  955.871402][T31618]  dump_stack_lvl+0xe8/0x150
[  955.871441][T31618]  should_fail_ex+0x412/0x560
[  955.871478][T31618]  should_failslab+0xa8/0x100
[  955.871499][T31618]  ? dst_alloc+0x105/0x170
[  955.871521][T31618]  kmem_cache_alloc_noprof+0x87/0x650
[  955.871550][T31618]  ? ip6_pol_route+0x160/0x13d0
[  955.871578][T31618]  ? __pfx_ip6_dst_gc+0x10/0x10
[  955.871601][T31618]  dst_alloc+0x105/0x170
[  955.871637][T31618]  ip6_pol_route+0xafb/0x13d0
[  955.871660][T31618]  ? ip6_pol_route+0x160/0x13d0
[  955.871689][T31618]  ? __pfx_ip6_pol_route+0x10/0x10
[  955.871712][T31618]  ? ip6t_do_table+0x1df/0x1560
[  955.871741][T31618]  ? __local_bh_enable_ip+0xd0/0x130
[  955.871769][T31618]  ? lockdep_hardirqs_on+0x7a/0x110
[  955.871795][T31618]  ? ip6t_do_table+0x1df/0x1560
[  955.871820][T31618]  ? ip6t_do_table+0x137d/0x1560
[  955.871849][T31618]  fib6_rule_lookup+0x556/0x730
[  955.871875][T31618]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  955.871900][T31618]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  955.871936][T31618]  ? ip6t_do_table+0x1df/0x1560
[  955.871973][T31618]  ip6_route_input+0x730/0xad0
[  955.872005][T31618]  ? __pfx_ip6_route_input+0x10/0x10
[  955.872044][T31618]  ? nf_nat_ipv6_in+0x203/0x2c0
[  955.872091][T31618]  ? ip6_rcv_finish_core+0x222/0x420
[  955.872125][T31618]  ip6_rcv_finish+0x141/0x280
[  955.872160][T31618]  NF_HOOK+0x336/0x3c0
[  955.872192][T31618]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  955.872221][T31618]  ? NF_HOOK+0x9e/0x3c0
[  955.872247][T31618]  ? __pfx_NF_HOOK+0x10/0x10
[  955.872274][T31618]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  955.872305][T31618]  ? netif_receive_skb+0x102/0xbf0
[  955.872331][T31618]  netif_receive_skb+0x278/0xbf0
[  955.872363][T31618]  ? __pfx_netif_receive_skb+0x10/0x10
[  955.872394][T31618]  ? tun_rx_batched+0x185/0x790
[  955.872422][T31618]  tun_rx_batched+0x1de/0x790
[  955.872446][T31618]  ? __build_skb+0x62/0x440
[  955.872477][T31618]  ? __pfx_tun_rx_batched+0x10/0x10
[  955.872501][T31618]  ? tun_get_user+0x26dc/0x3ed0
[  955.872527][T31618]  ? tun_get_user+0x26dc/0x3ed0
[  955.872551][T31618]  ? tun_get_user+0x23c7/0x3ed0
[  955.872575][T31618]  ? tun_get_user+0x23c7/0x3ed0
[  955.872597][T31618]  ? __local_bh_enable_ip+0xd0/0x130
[  955.872635][T31618]  ? tun_get_user+0x26dc/0x3ed0
[  955.872657][T31618]  tun_get_user+0x2aeb/0x3ed0
[  955.872703][T31618]  ? aa_file_perm+0x50e/0x15e0
[  955.872733][T31618]  ? __pfx_tun_get_user+0x10/0x10
[  955.872760][T31618]  ? __lock_acquire+0x6b5/0x2cf0
[  955.872803][T31618]  ? ref_tracker_alloc+0x35c/0x4c0
[  955.872841][T31618]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  955.872871][T31618]  ? tun_get+0x1c/0x2f0
[  955.872894][T31618]  ? tun_get+0x1c/0x2f0
[  955.872925][T31618]  ? tun_get+0x1c/0x2f0
[  955.872948][T31618]  ? tun_get+0x1c/0x2f0
[  955.872976][T31618]  tun_chr_write_iter+0x113/0x200
[  955.873028][T31618]  vfs_write+0x61d/0xb90
[  955.873069][T31618]  ? __pfx_vfs_write+0x10/0x10
[  955.873110][T31618]  ? __fget_files+0x2a/0x420
[  955.873146][T31618]  ksys_write+0x150/0x270
[  955.873178][T31618]  ? __pfx_ksys_write+0x10/0x10
[  955.873214][T31618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.873236][T31618]  do_syscall_64+0x15f/0xf80
[  955.873258][T31618]  ? trace_irq_disable+0x3b/0x140
[  955.873278][T31618]  ? clear_bhb_loop+0x40/0x90
[  955.873304][T31618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.873322][T31618] RIP: 0033:0x7f064955d04e
[  955.873344][T31618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  955.873362][T31618] RSP: 002b:00007f064a394fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  955.873384][T31618] RAX: ffffffffffffffda RBX: 00007f064a3956c0 RCX: 00007f064955d04e
[  955.873400][T31618] RDX: 0000000000000052 RSI: 00002000000004c0 RDI: 00000000000000c8
[  955.873414][T31618] RBP: 00007f064a395090 R08: 0000000000000000 R09: 0000000000000000
[  955.873427][T31618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  955.873440][T31618] R13: 00007f0649816128 R14: 00007f0649816090 R15: 00007ffdd9a1f678
[  955.873477][T31618]  </TASK>
[  956.345138][T31623] netlink: 408 bytes leftover after parsing attributes in process `syz.0.6809'.
[  956.396586][T31616] syzkaller0: entered promiscuous mode
[  956.404977][T31616] syzkaller0: entered allmulticast mode
[  956.650199][T31637] Bluetooth: hci1: too big key_count value 32778
[  959.657233][T31630] kthread_run failed with err -4
[  959.734400][T31642] netlink: 'syz.2.6814': attribute type 1 has an invalid length.
[  959.751048][T31642] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6814'.
[  959.783608][T31642] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6814'.
[  959.818145][T31646] netlink: 'syz.2.6814': attribute type 8 has an invalid length.
[  959.841362][T31642] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6814'.
[  959.891446][T31646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6814'.
[  959.980094][T31646] bond0: entered promiscuous mode
[  959.985662][T31646] bond_slave_0: entered promiscuous mode
[  959.999302][T31646] bond_slave_1: entered promiscuous mode
[  960.010421][T31646] gretap0: entered promiscuous mode
[  960.017021][T31646] ip6gretap0: entered promiscuous mode
[  960.025076][T31646] hsr1: entered promiscuous mode
[  960.276699][T31669] netlink: 'syz.1.6823': attribute type 10 has an invalid length.
[  960.311203][T31669] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.348814][T31669] bridge_slave_1: left allmulticast mode
[  960.372927][T31669] bridge_slave_1: left promiscuous mode
[  960.397247][T31669] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.515875][T31669] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  960.867646][T31693] netlink: 'syz.4.6830': attribute type 1 has an invalid length.
[  960.937366][T31693] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  961.433766][T31717] netlink: 'syz.2.6838': attribute type 5 has an invalid length.
[  961.475009][T31728] netlink: 'syz.1.6841': attribute type 1 has an invalid length.
[  961.497398][T31725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  961.514658][T31728] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6841'.
[  961.600060][T31724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6839'.
[  961.627600][T31724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6839'.
[  961.878361][T31734] syzkaller1: entered promiscuous mode
[  961.898838][T31734] syzkaller1: entered allmulticast mode
[  962.328164][T31754] netlink: 'syz.1.6848': attribute type 10 has an invalid length.
[  962.354792][T31754] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6848'.
[  962.375410][T31756] sctp: [Deprecated]: syz.4.6849 (pid 31756) Use of struct sctp_assoc_value in delayed_ack socket option.
[  962.375410][T31756] Use struct sctp_sack_info instead
[  962.836483][T31774] netlink: 'syz.1.6854': attribute type 5 has an invalid length.
[  963.944353][T31795] xt_l2tp: missing protocol rule (udp|l2tpip)
[  965.621536][T31763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  965.863075][T31809] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6864'.
[  965.876017][T31807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6866'.
[  965.916346][T31807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6866'.
[  965.945478][T31813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6867'.
[  965.976336][T31813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6867'.
[  966.038805][T31825] netlink: 'syz.0.6869': attribute type 1 has an invalid length.
[  966.206205][T31835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6871'.
[  966.271815][T31838] netlink: 'syz.2.6873': attribute type 16 has an invalid length.
[  966.309805][T31838] netlink: 'syz.2.6873': attribute type 17 has an invalid length.
[  966.741329][T31827] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.140563][T31827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  967.173220][T31827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  967.393126][T31827] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  967.647806][T31838] 8021q: adding VLAN 0 to HW filter on device bond0
[  967.652956][T31868] xt_hashlimit: size too large, truncated to 1048576
[  967.658029][T31838] 8021q: adding VLAN 0 to HW filter on device team0
[  967.677986][T31838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  967.710952][T31869] ksmbd: Unknown IPC event: 3, ignore.
[  967.790902][T31859] bridge0: port 3(syz_tun) entered blocking state
[  967.813818][T31859] bridge0: port 3(syz_tun) entered disabled state
[  967.843151][T31859] syz_tun: entered allmulticast mode
[  967.871774][T31859] syz_tun: entered promiscuous mode
[  967.877667][T31859] bridge0: port 3(syz_tun) entered blocking state
[  967.884588][T31859] bridge0: port 3(syz_tun) entered forwarding state
[  967.912589][ T7065] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  967.942629][ T7065] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  967.970339][ T7065] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  967.999833][ T7065] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  968.025425][T31879] netlink: 'syz.2.6882': attribute type 4 has an invalid length.
[  968.061392][ T7065] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  968.071140][ T7065] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  968.086624][T31879] syzkaller0: entered promiscuous mode
[  968.101161][T31879] syzkaller0: entered allmulticast mode
[  968.121198][ T7065] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  968.138765][ T7065] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  968.161667][T31879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6882'.
[  968.168190][T31895] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[  968.349322][T31908] netlink: 'syz.3.6888': attribute type 3 has an invalid length.
[  968.521824][T31912] 8021q: VLANs not supported on ip6_vti0
[  968.741109][T31923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6892'.
[  968.753522][T31925] openvswitch: netlink: Duplicate or invalid key (type 0).
[  968.773576][T31925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  968.825802][T31931] netlink: 640 bytes leftover after parsing attributes in process `syz.4.6893'.
[  968.854253][T31931] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  968.906214][T31921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6892'.
[  969.270516][T31951] vlan3: entered promiscuous mode
[  969.284379][T31951] bridge0: entered promiscuous mode
[  969.342802][ T7049] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  969.373282][ T7049] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  969.383928][ T7049] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  969.404840][ T7049] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  969.610544][ T5144] Bluetooth: hci2: command 0x0406 tx timeout
[  969.795897][T31982] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  969.891466][T31990] netlink: 'syz.0.6913': attribute type 1 has an invalid length.
[  969.911124][T31990] netlink: 'syz.0.6913': attribute type 1 has an invalid length.
[  969.951827][T31990] 8021q: adding VLAN 0 to HW filter on device bond2
[  969.974006][T31990] bond2: (slave veth0_to_bond): making interface the new active one
[  969.984021][T31990] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  970.027011][T31991] bond2: entered promiscuous mode
[  970.032829][T31991] veth0_to_bond: entered promiscuous mode
[  970.038959][T31991] bond2: entered allmulticast mode
[  970.045403][T31991] veth0_to_bond: entered allmulticast mode
[  970.493730][T32023] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  970.508391][T32023] bond3 (unregistering): Released all slaves
[  970.531863][T32025] openvswitch: netlink: Flow actions attr not present in new flow.
[  970.847972][T32043] E: renamed from dummy0 (while UP)
[  971.126627][T32055] sctp: [Deprecated]: syz.2.6935 (pid 32055) Use of int in max_burst socket option deprecated.
[  971.126627][T32055] Use struct sctp_assoc_value instead
[  971.205141][T32061] x_tables: duplicate underflow at hook 1
[  971.378988][T32072] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  971.667458][T32082] __nla_validate_parse: 10 callbacks suppressed
[  971.667481][T32082] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6942'.
[  971.862344][T32091] IPv6: addrconf: prefix option has invalid lifetime
[  971.886918][T32091] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.6945'.
[  971.899497][T32091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6945'.
[  971.915763][T32091] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6945'.
[  972.004393][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6947'.
[  972.062957][T32101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6949'.
[  972.088855][T32101] openvswitch: netlink: Unknown nsh attribute 0
[  972.135855][T32095] syzkaller0: entered promiscuous mode
[  972.141674][T32095] syzkaller0: entered allmulticast mode
[  972.153728][T32105] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6950'.
[  972.390441][T32114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6952'.
[  972.968200][T32128] "syz.2.6956" (32128) uses obsolete ecb(arc4) skcipher
[  972.987530][T32128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6956'.
[  975.495519][T32114] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  975.501435][T32131] kthread_run failed with err -4
[  976.073160][T32172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6967'.
[  976.497335][T32200] bridge0: port 2(veth0_to_bridge) entered blocking state
[  976.511829][T32200] bridge0: port 2(veth0_to_bridge) entered disabled state
[  976.519330][T32200] veth0_to_bridge: entered allmulticast mode
[  976.530902][T32200] veth0_to_bridge: entered promiscuous mode
[  976.538453][T32206] sctp: [Deprecated]: syz.0.6976 (pid 32206) Use of int in max_burst socket option deprecated.
[  976.538453][T32206] Use struct sctp_assoc_value instead
[  976.568072][ T7055] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  976.840485][T32220] netlink: 'syz.0.6981': attribute type 1 has an invalid length.
[  976.850269][T32220] __nla_validate_parse: 2 callbacks suppressed
[  976.850290][T32220] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6981'.
[  976.890264][T32229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6983'.
[  977.469178][T32258] netlink: 'syz.3.6989': attribute type 21 has an invalid length.
[  977.501201][T32258] netlink: 'syz.3.6989': attribute type 1 has an invalid length.
[  977.534186][T32258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6989'.
[  977.556186][T32258] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6989'.
[  977.785023][T32272] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6995'.
[  977.797994][T32274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6994'.
[  977.898317][T32280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6994'.
[  978.273646][T32294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7001'.
[  978.323041][T32302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7004'.
[  978.365338][T32294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7001'.
[  978.577092][T32305] netlink: 'syz.0.7005': attribute type 1 has an invalid length.
[  978.586400][T32305] netlink: 'syz.0.7005': attribute type 3 has an invalid length.
[  978.594542][T32305] NCSI netlink: No device for ifindex 813332851
[  978.822761][T32325] netlink: 'syz.0.7008': attribute type 1 has an invalid length.
[  978.994256][T32335] netlink: 'syz.2.7009': attribute type 1 has an invalid length.
[  979.066677][T32325] 8021q: adding VLAN 0 to HW filter on device bond3
[  979.347350][T32335] 8021q: adding VLAN 0 to HW filter on device bond3
[  979.389109][T32340] bond3: (slave ip6gretap1): making interface the new active one
[  979.402611][T32340] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  979.728059][T32371] netlink: 'syz.1.7018': attribute type 19 has an invalid length.
[  979.778402][T32370] bond2 (unregistering): Released all slaves
[  979.864181][T32372] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  980.138012][T32389] netlink: 'syz.1.7023': attribute type 1 has an invalid length.
[  980.334050][T32389] 8021q: adding VLAN 0 to HW filter on device bond2
[  980.466124][T32404] bond2: (slave bridge2): making interface the new active one
[  980.482058][T32404] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  981.006302][T32445] tap0: tun_chr_ioctl cmd 1075343108
[  981.053203][T32445] tap0: tun_chr_ioctl cmd 1074025672
[  981.063389][T32445] tap0: ignored: set checksum disabled
[  981.348320][T32469] openvswitch: netlink: Missing key (keys=40, expected=100)
[  981.572931][T32476] xt_hashlimit: size too large, truncated to 1048576
[  982.163324][T32493] SET target dimension over the limit!
[  982.297175][T32497] dvmrp9: entered allmulticast mode
[  982.367241][T32503] __nla_validate_parse: 15 callbacks suppressed
[  982.367263][T32503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7054'.
[  982.545222][T32511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7056'.
[  982.580790][T32518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7058'.
[  982.735837][T32520] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  982.807663][T32520] bond4: (slave lo): Enslaving as an active interface with an up link
[  982.842616][T32520] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  982.862449][T32529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7061'.
[  982.877504][T32528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  982.880881][T32529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7061'.
[  982.976105][T32531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7062'.
[  983.035119][T32531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7062'.
[  983.353082][T32555] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7069'.
[  983.363096][T32556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7069'.
[  983.373609][T32555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7069'.
[  983.846018][T32574] syzkaller0: entered promiscuous mode
[  983.869157][T32574] syzkaller0: entered allmulticast mode
[  984.026813][T32589] xt_hashlimit: size too large, truncated to 1048576
[  984.037936][T32587] syzkaller1: entered promiscuous mode
[  984.049801][T32587] syzkaller1: entered allmulticast mode
[  984.088299][T32587] netlink: 'syz.0.7077': attribute type 83 has an invalid length.
[  987.542555][T32602] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  987.546539][T32610] veth0: entered promiscuous mode
[  987.608732][T32611] veth0: left promiscuous mode
[  987.816458][T32624] team0 (unregistering): Port device team_slave_0 removed
[  987.859030][T32625] __nla_validate_parse: 1 callbacks suppressed
[  987.859050][T32625] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7088'.
[  987.876330][T32624] team0 (unregistering): Port device team_slave_1 removed
[  987.895868][T32624] team0 (unregistering): Port device E removed
[  987.915998][T32638] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7089'.
[  988.042743][T32642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7092'.
[  988.101609][T32642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7092'.
[  988.345294][T32649] bond4: option resend_igmp: invalid value (32767)
[  988.371792][T32649] bond4: option resend_igmp: allowed values 0 - 255
[  988.395895][T32657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7097'.
[  988.398078][T32649] bond4 (unregistering): Released all slaves
[  988.513610][T32657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  988.612249][T32657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  988.770437][T32664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7099'.
[  988.777107][T32663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7098'.
[  988.896107][T32666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7100'.
[  988.927973][T32652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7096'.
[  988.967190][T32663] netdevsim netdevsim0 
: renamed from netdevsim0 (while UP)
[  989.009217][T32676] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7103'.
[  990.017863][T32706] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  990.309610][T32689] lec:lec_atm_close: lec0: Shut down!
[  990.392717][T25788] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  991.470065][ T5818] lec:lec_start_xmit: lec0:No lecd attached
[  993.254443][T32720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  993.583502][  T336] __nla_validate_parse: 9 callbacks suppressed
[  993.583526][  T336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7134'.
[  994.279549][  T375] openvswitch: netlink: IPv4 tun info is not correct
[  994.759330][  T389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7145'.
[  994.939312][  T392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7146'.
[  994.953263][  T392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7146'.
[  994.985046][  T393] netlink: 'syz.4.7146': attribute type 1 has an invalid length.
[  995.006028][  T393] netlink: 'syz.4.7146': attribute type 1 has an invalid length.
[  995.115076][  T400] netlink: 'syz.3.7147': attribute type 39 has an invalid length.
[  995.422223][  T420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7154'.
[  995.523967][ T7055] tipc: Subscription rejected, illegal request
[  995.645238][  T434] netlink: 'syz.1.7159': attribute type 1 has an invalid length.
[  995.798458][  T444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7159'.
[  995.913786][  T440] bond3: (slave geneve2): making interface the new active one
[  995.929271][  T440] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  995.954405][  T444] 8021q: adding VLAN 0 to HW filter on device bond3
[  995.991533][T25788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  996.064769][T25788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  996.101072][T25788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  996.136213][T25788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  996.450633][  T470] : renamed from hsr0
[  996.587956][  T474] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.7169'.
[  996.664323][  T479] netlink: 'syz.0.7167': attribute type 25 has an invalid length.
[  996.764578][  T488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7172'.
[  996.854687][  T490] IPv6: NLM_F_CREATE should be specified when creating new route
[  996.969732][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms
[  996.980416][    C1] lec:lec_tx_timeout: lec0
[  996.985991][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  997.025548][  T502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  997.179476][  T515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7181'.
[  997.846159][  T536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7188'.
[  998.023370][  T543] netlink: 'syz.3.7191': attribute type 2 has an invalid length.
[  998.033502][  T543] netlink: 'syz.3.7191': attribute type 2 has an invalid length.
[  998.047124][  T543] netlink: 'syz.3.7191': attribute type 2 has an invalid length.
[  998.059524][  T543] netlink: 'syz.3.7191': attribute type 2 has an invalid length.
[  998.108750][  T543] netlink: 'syz.3.7191': attribute type 2 has an invalid length.
[  998.175299][  T548] syzkaller1: entered promiscuous mode
[  998.185845][  T548] syzkaller1: entered allmulticast mode
[  998.195719][  T552] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  998.206679][  T550] macvlan0: entered promiscuous mode
[  998.618271][  T578] geneve3: entered promiscuous mode
[  998.640932][ T1087] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 42253 - 0
[  998.642623][  T583] __nla_validate_parse: 2 callbacks suppressed
[  998.642641][  T583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7202'.
[  998.662050][ T1087] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 42253 - 0
[  998.687939][  T574] netlink: 396 bytes leftover after parsing attributes in process `syz.4.7202'.
[  998.693758][ T1087] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 42253 - 0
[  998.772095][  T588] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7206'.
[  998.774915][  T577] 8021q: adding VLAN 0 to HW filter on device bond5
[  998.789523][ T1087] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 42253 - 0
[  998.802383][  T589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7199'.
[  998.825646][  T591] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[  998.833081][  T582] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  998.846687][  T582] bond6 (unregistering): Released all slaves
[  998.928324][  T588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7206'.
[  998.951321][  T588] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  999.375794][  T611] syzkaller0: entered promiscuous mode
[  999.395964][  T611] syzkaller0: entered allmulticast mode
[ 1001.246991][ T5830] Bluetooth: hci4: link tx timeout
[ 1001.252801][ T5830] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1002.009834][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1002.017998][    C1] lec:lec_tx_timeout: lec0
[ 1002.023064][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1003.289977][ T5144] Bluetooth: hci4: command 0x0406 tx timeout
[ 1007.030044][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1007.038377][    C1] lec:lec_tx_timeout: lec0
[ 1007.043035][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1012.049796][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1012.057943][    C1] lec:lec_tx_timeout: lec0
[ 1012.062914][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1015.610532][T18568] IPVS: ip_vs_send_async error -101
[ 1017.069724][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1017.078249][    C1] lec:lec_tx_timeout: lec0
[ 1017.083456][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1022.090044][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1022.098222][    C1] lec:lec_tx_timeout: lec0
[ 1022.102929][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1027.109773][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1027.117924][    C1] lec:lec_tx_timeout: lec0
[ 1027.122776][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1032.129744][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1032.137818][    C1] lec:lec_tx_timeout: lec0
[ 1032.143067][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1037.150093][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1037.158159][    C1] lec:lec_tx_timeout: lec0
[ 1037.163060][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1042.169900][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1042.177964][    C1] lec:lec_tx_timeout: lec0
[ 1042.182777][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1047.189780][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1047.197840][    C1] lec:lec_tx_timeout: lec0
[ 1047.202783][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1053.289782][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6090 ms
[ 1053.297852][    C1] lec:lec_tx_timeout: lec0
[ 1053.302794][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1059.049764][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[ 1059.058732][    C1] lec:lec_tx_timeout: lec0
[ 1059.064332][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1060.389928][  T801] veth0_macvtap: entered allmulticast mode
[ 1060.435135][  T802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7216'.
[ 1060.485953][  T806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7218'.
[ 1060.628454][  T815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1060.735692][  T815] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 1060.832696][  T829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7226'.
[ 1060.855419][  T829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7226'.
[ 1060.883742][  T832] syz_tun: tun_net_xmit 42
[ 1060.918908][  T834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7226'.
[ 1060.943443][  T835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7227'.
[ 1061.052282][  T837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7228'.
[ 1061.706423][  T869] tipc: Started in network mode
[ 1061.724926][  T871] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7240'.
[ 1061.745458][  T869] tipc: Node identity ac14140f, cluster identity 4711
[ 1061.767282][  T869] tipc: New replicast peer: 255.255.255.255
[ 1061.780302][  T869] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1061.786722][  T873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7238'.
[ 1061.929807][    C0] syz_tun: tun_net_xmit 42
[ 1062.175968][  T894] delete_channel: no stack
[ 1062.242541][  T896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7245'.
[ 1062.563147][  T910] Cannot find add_set index 2 as target
[ 1062.679005][  T915] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1062.893508][  T937] validate_nla: 128 callbacks suppressed
[ 1062.893531][  T937] netlink: 'syz.2.7256': attribute type 2 has an invalid length.
[ 1062.900134][T16937] tipc: Node number set to 2886997007
[ 1062.921747][  T937] netlink: 'syz.2.7256': attribute type 1 has an invalid length.
[ 1062.969746][    C0] syz_tun: tun_net_xmit 42
[ 1063.328996][  T967] netlink: 'syz.2.7265': attribute type 38 has an invalid length.
[ 1063.643916][  T991] bridge0: port 4(syz_tun) entered blocking state
[ 1063.665505][  T991] bridge0: port 4(syz_tun) entered disabled state
[ 1063.681881][  T991] syz_tun: entered allmulticast mode
[ 1063.696486][  T991] syz_tun: entered promiscuous mode
[ 1063.704906][  T991] bridge0: port 4(syz_tun) entered blocking state
[ 1063.711541][  T991] bridge0: port 4(syz_tun) entered forwarding state
[ 1063.832086][ T1007] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 1063.866592][ T1007] netlink: 'syz.2.7280': attribute type 24 has an invalid length.
[ 1064.079668][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1064.087862][    C1] lec:lec_tx_timeout: lec0
[ 1064.093818][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1064.440946][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807c70b000: rx timeout, send abort
[ 1064.583008][ T1069] veth3: entered allmulticast mode
[ 1064.748394][ T1085] erspan0: mtu less than device minimum
[ 1064.941098][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032315400: rx timeout, send abort
[ 1064.950496][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807c70b000: abort rx timeout. Force session deactivation
[ 1065.423699][ T1118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1065.451934][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032315400: abort rx timeout. Force session deactivation
[ 1065.633624][ T1128] netlink: 'syz.2.7307': attribute type 4 has an invalid length.
[ 1065.683591][ T1128] netlink: 'syz.2.7307': attribute type 4 has an invalid length.
[ 1065.828438][ T1139] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1065.860601][ T1140] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003
[ 1065.879127][ T1142] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1066.221239][ T1153] __nla_validate_parse: 11 callbacks suppressed
[ 1066.221263][ T1153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7315'.
[ 1066.305705][ T1153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7315'.
[ 1066.332384][ T1156] netlink: 'syz.3.7316': attribute type 1 has an invalid length.
[ 1066.367784][ T1156] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7316'.
[ 1066.447371][ T1159] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7316'.
[ 1066.613573][ T1163] netlink: 'syz.0.7317': attribute type 4 has an invalid length.
[ 1067.339127][ T1199] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7324'.
[ 1067.409289][ T1205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7328'.
[ 1067.424247][ T1205] veth0_macvtap: left promiscuous mode
[ 1067.581989][ T1208] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1068.144594][ T1242] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7336'.
[ 1068.173569][ T1242] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7336'.
[ 1068.325738][ T1252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1068.488395][ T1267] netlink: 211920 bytes leftover after parsing attributes in process `syz.1.7344'.
[ 1068.506515][ T1269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7345'.
[ 1068.736315][ T1280] netlink: 'syz.0.7348': attribute type 9 has an invalid length.
[ 1069.109785][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1069.118065][    C1] lec:lec_tx_timeout: lec0
[ 1069.123160][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1069.191389][ T1304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1069.369224][ T1320] xt_nfacct: accounting object `syz1' does not exist
[ 1069.952470][ T1340] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1070.155813][ T1325] FAULT_INJECTION: forcing a failure.
[ 1070.155813][ T1325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1070.217902][ T1325] CPU: 0 UID: 0 PID: 1325 Comm: syz.0.7355 Not tainted syzkaller #0 PREEMPT(full) 
[ 1070.217933][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1070.217946][ T1325] Call Trace:
[ 1070.217955][ T1325]  <TASK>
[ 1070.217964][ T1325]  dump_stack_lvl+0xe8/0x150
[ 1070.218013][ T1325]  should_fail_ex+0x412/0x560
[ 1070.218048][ T1325]  _copy_from_user+0x2d/0xb0
[ 1070.218072][ T1325]  __sys_connect+0x156/0x450
[ 1070.218103][ T1325]  ? __pfx___sys_connect+0x10/0x10
[ 1070.218149][ T1325]  ? __pfx_ksys_write+0x10/0x10
[ 1070.218182][ T1325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1070.218204][ T1325]  __x64_sys_connect+0x7a/0x90
[ 1070.218232][ T1325]  do_syscall_64+0x15f/0xf80
[ 1070.218256][ T1325]  ? trace_irq_disable+0x3b/0x140
[ 1070.218285][ T1325]  ? clear_bhb_loop+0x40/0x90
[ 1070.218310][ T1325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1070.218331][ T1325] RIP: 0033:0x7f0bac19c819
[ 1070.218351][ T1325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1070.218369][ T1325] RSP: 002b:00007f0bad067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1070.218392][ T1325] RAX: ffffffffffffffda RBX: 00007f0bac415fa0 RCX: 00007f0bac19c819
[ 1070.218407][ T1325] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004
[ 1070.218420][ T1325] RBP: 00007f0bad067090 R08: 0000000000000000 R09: 0000000000000000
[ 1070.218433][ T1325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1070.218446][ T1325] R13: 00007f0bac416038 R14: 00007f0bac415fa0 R15: 00007ffe8c391fb8
[ 1070.218479][ T1325]  </TASK>
[ 1070.554296][ T1354] netlink: 'syz.3.7363': attribute type 1 has an invalid length.
[ 1070.836541][ T1364] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1071.384385][ T1351] bridge0: port 1(bridge_slave_0) entered learning state
[ 1071.585709][ T1385] syzkaller0: entered promiscuous mode
[ 1071.597266][ T1385] syzkaller0: entered allmulticast mode
[ 1071.643666][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.652448][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.659493][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.666369][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.673296][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.680221][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.687145][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.694030][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.700883][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.707706][ T1385] tc action pedit offset must be on 32 bit boundaries
[ 1071.714573][ T1385] 0: reclassify loop, rule prio 0, protocol 800
[ 1071.845035][ T1399] vlan2: entered promiscuous mode
[ 1071.896790][ T1399] bridge0: entered promiscuous mode
[ 1072.007050][ T1402] __nla_validate_parse: 7 callbacks suppressed
[ 1072.007073][ T1402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7376'.
[ 1072.151838][ T1408] x_tables: duplicate underflow at hook 1
[ 1072.937897][ T1440] macvlan0: left promiscuous mode
[ 1072.956439][ T1440] netlink: 'syz.4.7385': attribute type 2 has an invalid length.
[ 1072.966193][T23078] syz_tun: tun_net_xmit 86
[ 1072.971587][T23078] syz_tun: tun_net_xmit 86
[ 1072.979308][ T1438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7384'.
[ 1073.066173][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7386'.
[ 1073.734501][ T1482] netlink: 'syz.0.7395': attribute type 2 has an invalid length.
[ 1073.751124][ T1482] netlink: 'syz.0.7395': attribute type 3 has an invalid length.
[ 1073.776149][ T1482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7395'.
[ 1073.814119][ T1482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7395'.
[ 1074.129654][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1074.137797][    C1] lec:lec_tx_timeout: lec0
[ 1074.142632][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1074.856199][ T1541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7412'.
[ 1075.036683][ T1540] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1076.064619][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7418'.
[ 1076.073860][ T1578] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[ 1077.822135][ T1545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1078.130921][ T1592] veth0: entered promiscuous mode
[ 1078.171161][ T1597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7426'.
[ 1078.314716][ T1585] veth0: left promiscuous mode
[ 1078.614792][ T1623] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7432'.
[ 1078.644158][ T1622] syzkaller0: entered allmulticast mode
[ 1078.865044][ T1629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7432'.
[ 1078.900945][ T1629] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1078.912803][ T1635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7434'.
[ 1079.143782][ T1649] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7438'.
[ 1079.149665][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1079.161359][    C1] lec:lec_tx_timeout: lec0
[ 1079.166071][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1079.192094][ T1651] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[ 1079.300010][ T1656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7440'.
[ 1079.387973][ T1663] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7443'.
[ 1079.408295][   T29] audit: type=1800 audit(1776638005.104:6): pid=1659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7441" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1079 res=0 errno=0
[ 1079.428363][ T1663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7443'.
[ 1079.445694][ T1663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7443'.
[ 1079.470105][ T1671] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7443'.
[ 1079.650029][ T1681] netlink: 'syz.2.7446': attribute type 4 has an invalid length.
[ 1080.036672][ T1709] syz_tun: tun_net_xmit 126
[ 1080.098999][ T1719] syzkaller1: entered promiscuous mode
[ 1080.105282][ T1719] syzkaller1: entered allmulticast mode
[ 1080.848449][ T1760] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1080.867452][ T1760] bond4 (unregistering): Released all slaves
[ 1080.960781][ T1765] veth0: entered promiscuous mode
[ 1080.974820][ T1770] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1080.983136][ T1770] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1082.419073][ T1834] syz_tun: tun_net_xmit 42
[ 1082.704597][ T1854] macvlan0: entered promiscuous mode
[ 1082.737638][ T7065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1082.764288][ T7065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1082.938507][ T1870] netlink: Unknown conntrack attr (type=2304, max=9)
[ 1082.994091][ T1864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1083.222666][ T1885] syzkaller0: entered promiscuous mode
[ 1083.244702][ T1890] __nla_validate_parse: 17 callbacks suppressed
[ 1083.244722][ T1890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7503'.
[ 1083.262129][ T1885] syzkaller0: entered allmulticast mode
[ 1083.289317][ T1892] netlink: 'syz.4.7504': attribute type 1 has an invalid length.
[ 1083.304630][ T1892] netlink: 'syz.4.7504': attribute type 2 has an invalid length.
[ 1083.365102][ T1892] netlink: 'syz.4.7504': attribute type 1 has an invalid length.
[ 1083.395491][ T1892] netlink: 'syz.4.7504': attribute type 2 has an invalid length.
[ 1083.422277][ T1904] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1083.449746][    C1] syz_tun: tun_net_xmit 42
[ 1083.644003][ T1915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7507'.
[ 1083.755620][ T1915] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1083.767428][ T1915] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1083.781422][ T1915] gretap1: entered promiscuous mode
[ 1083.796095][ T1915] gretap1: entered allmulticast mode
[ 1083.820126][ T1919] tunl0: entered promiscuous mode
[ 1083.845310][ T1919] netlink: 'syz.4.7508': attribute type 3 has an invalid length.
[ 1083.855540][ T1933] netlink: 'syz.1.7511': attribute type 21 has an invalid length.
[ 1083.873971][ T1933] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7511'.
[ 1083.877921][ T1919] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7508'.
[ 1083.914178][ T1933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7511'.
[ 1084.039034][ T1936] team0: Port device gretap2 added
[ 1084.179690][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1084.187870][    C1] lec:lec_tx_timeout: lec0
[ 1084.193055][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1084.299850][ T1953] syzkaller0: entered promiscuous mode
[ 1084.311606][ T1953] syzkaller0: entered allmulticast mode
[ 1084.489863][    C1] syz_tun: tun_net_xmit 42
[ 1084.588439][ T1969] syzkaller1: entered promiscuous mode
[ 1084.595747][ T1969] syzkaller1: entered allmulticast mode
[ 1084.683629][ T1977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7525'.
[ 1085.387433][ T2008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7535'.
[ 1085.631515][ T2041] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[ 1085.738946][ T2051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1085.858976][ T2048] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1085.892359][ T2048] bond6: (slave lo): Enslaving as an active interface with an up link
[ 1085.901367][ T2048] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1086.033953][ T2062] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.046462][ T2062] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1086.053795][ T2062] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1086.119326][ T2063] sit1: entered promiscuous mode
[ 1086.141913][ T2063] sit1: entered allmulticast mode
[ 1086.382749][ T2079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7555'.
[ 1086.406432][ T2079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7555'.
[ 1086.560643][ T2084] netlink: 'syz.2.7557': attribute type 1 has an invalid length.
[ 1086.613993][ T2088] syzkaller0: entered promiscuous mode
[ 1086.619563][ T2088] syzkaller0: entered allmulticast mode
[ 1086.791056][ T2104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7562'.
[ 1087.027014][ T2118] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20004
[ 1090.016045][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[ 1090.024114][    C1] lec:lec_tx_timeout: lec0
[ 1090.028837][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1090.136839][ T2146] netlink: 'syz.2.7574': attribute type 10 has an invalid length.
[ 1090.187291][ T2150] xt_cgroup: path and classid specified
[ 1090.222108][ T2150] xt_cgroup: path and classid specified
[ 1090.258705][ T2150] xt_cgroup: path and classid specified
[ 1090.281212][ T2150] xt_cgroup: path and classid specified
[ 1090.503470][ T2163] syzkaller0: entered promiscuous mode
[ 1090.518129][ T2163] syzkaller0: entered allmulticast mode
[ 1090.960438][ T2195] xt_hashlimit: size too large, truncated to 1048576
[ 1091.751546][ T2221] __nla_validate_parse: 1 callbacks suppressed
[ 1091.751568][ T2221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7588'.
[ 1092.048086][ T2237] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7591'.
[ 1092.077819][ T2237] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7591'.
[ 1092.100611][ T2237] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7591'.
[ 1092.188298][ T2240] bridge_slave_1: entered allmulticast mode
[ 1092.203761][ T2246] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7595'.
[ 1092.283495][ T2248] netlink: 'syz.3.7594': attribute type 1 has an invalid length.
[ 1092.327153][ T2248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7594'.
[ 1092.352659][ T2248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7594'.
[ 1092.432135][ T2255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7597'.
[ 1092.673748][ T2274] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 1092.692630][ T2274] : renamed from hsr0 (while UP)
[ 1092.798319][ T2278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7604'.
[ 1092.814368][ T2280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7605'.
[ 1092.861067][ T2287] netlink: 'syz.2.7607': attribute type 3 has an invalid length.
[ 1092.912731][ T2278] hsr_slave_1 (unregistering): left promiscuous mode
[ 1093.027054][ T2298] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 1093.042678][ T2298] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1093.064884][ T2298] gretap2: entered promiscuous mode
[ 1093.078426][ T2298] gretap2: entered allmulticast mode
[ 1093.153463][ T2280] netlink: 'syz.3.7605': attribute type 5 has an invalid length.
[ 1093.464923][ T2322] ÿ
: renamed from veth1_macvtap
[ 1093.601861][ T2332] netlink: 'syz.3.7623': attribute type 9 has an invalid length.
[ 1094.124506][ T2371] netlink: 'syz.2.7630': attribute type 3 has an invalid length.
[ 1094.651771][ T2406] openvswitch: netlink: IPv4 frag type 128 is out of range max 2
[ 1094.846455][ T2418] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1094.871454][ T2419] netlink: 'syz.1.7644': attribute type 2 has an invalid length.
[ 1094.899661][ T2419] netlink: 'syz.1.7644': attribute type 11 has an invalid length.
[ 1094.978039][ T2426] syz_tun: tun_net_xmit 42
[ 1095.039711][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1095.047830][    C1] lec:lec_tx_timeout: lec0
[ 1095.053773][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1095.202378][ T2435] syzkaller1: entered promiscuous mode
[ 1095.230620][ T2435] syzkaller1: entered allmulticast mode
[ 1095.265408][ T2435] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[ 1096.009758][    C1] syz_tun: tun_net_xmit 42
[ 1096.238680][ T2530] sctp: [Deprecated]: syz.3.7669 (pid 2530) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1096.238680][ T2530] Use struct sctp_sack_info instead
[ 1096.568971][ T2550] vlan2: entered promiscuous mode
[ 1096.592823][ T2550] bridge0: entered promiscuous mode
[ 1096.662292][ T2550] SET target dimension over the limit!
[ 1096.671918][ T2555] netlink: 'syz.0.7676': attribute type 4 has an invalid length.
[ 1096.830254][ T2570] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1096.839001][ T2570] __nla_validate_parse: 7 callbacks suppressed
[ 1096.839022][ T2570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7678'.
[ 1096.983617][ T2578] bond7: Removing last arp target with arp_interval on
[ 1097.021646][ T2578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7680'.
[ 1097.049772][    C1] syz_tun: tun_net_xmit 42
[ 1097.118968][ T2587] netlink: 'syz.1.7681': attribute type 1 has an invalid length.
[ 1097.292857][    T9] IPVS: starting estimator thread 0...
[ 1097.325493][ T2597] netlink: 'syz.3.7684': attribute type 1 has an invalid length.
[ 1097.353450][ T2597] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7684'.
[ 1097.381934][ T2598] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1097.928436][ T2625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7690'.
[ 1097.936286][ T2627] x_tables: duplicate underflow at hook 2
[ 1100.069663][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1100.077744][    C1] lec:lec_tx_timeout: lec0
[ 1100.082623][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1100.506888][ T2601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1100.517635][ T2624] netlink: 'syz.3.7690': attribute type 11 has an invalid length.
[ 1100.527995][ T2624] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7690'.
[ 1100.739337][ T2662] syzkaller0: entered promiscuous mode
[ 1100.746809][ T2662] syzkaller0: entered allmulticast mode
[ 1100.967723][ T2679] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 1101.159033][ T2693] netlink: 'syz.1.7704': attribute type 1 has an invalid length.
[ 1101.176396][ T7075] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[ 1101.227148][ T2693] bond5: entered promiscuous mode
[ 1101.234319][ T2693] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1101.254213][ T2696] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1101.267964][ T2696] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[ 1101.278418][ T2696] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[ 1101.514047][ T2715] sctp: [Deprecated]: syz.2.7709 (pid 2715) Use of int in max_burst socket option.
[ 1101.514047][ T2715] Use struct sctp_assoc_value instead
[ 1103.665637][ T2658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1103.890149][ T2724] netlink: 'syz.0.7711': attribute type 9 has an invalid length.
[ 1104.455186][ T2775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7723'.
[ 1104.806303][ T2790] syz_tun: tun_net_xmit 42
[ 1104.822654][ T2797] netlink: 'syz.1.7729': attribute type 10 has an invalid length.
[ 1104.876705][ T2797] team0 (unregistering): Port device team_slave_0 removed
[ 1104.903105][ T2799] sctp: [Deprecated]: syz.1.7729 (pid 2799) Use of int in max_burst socket option.
[ 1104.903105][ T2799] Use struct sctp_assoc_value instead
[ 1104.904790][ T2797] team0 (unregistering): Port device team_slave_1 removed
[ 1104.954001][ T2797] team0 (unregistering): Port device gretap1 removed
[ 1105.089673][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1105.097799][    C1] lec:lec_tx_timeout: lec0
[ 1105.102624][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1105.394325][ T2828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1105.603471][ T2849] netlink: 'syz.3.7738': attribute type 1 has an invalid length.
[ 1105.629561][ T2849] netlink: 'syz.3.7738': attribute type 2 has an invalid length.
[ 1105.705740][ T2833] bond4: (slave lo): Releasing backup interface
[ 1105.760994][ T2833] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1105.828826][ T2833] syz_tun: left allmulticast mode
[ 1105.850052][    C1] syz_tun: tun_net_xmit 42
[ 1105.851957][ T2833] syz_tun: left promiscuous mode
[ 1105.885190][ T2833] bridge0: port 3(syz_tun) entered disabled state
[ 1105.963548][ T2833] bridge_slave_0: left allmulticast mode
[ 1105.982711][ T2833] bridge_slave_0: left promiscuous mode
[ 1106.003139][ T2833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.005026][ T2865] netlink: 'syz.4.7741': attribute type 1 has an invalid length.
[ 1106.099102][ T2870] netlink: 'syz.3.7742': attribute type 1 has an invalid length.
[ 1106.121176][ T2870] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7742'.
[ 1106.135869][ T2870] netlink: 658 bytes leftover after parsing attributes in process `syz.3.7742'.
[ 1106.147649][ T2870] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7742'.
[ 1106.197565][ T2833] bridge_slave_1: left allmulticast mode
[ 1106.203678][ T2833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.253812][ T2833] bond2: (slave veth0_to_bond): Releasing active interface
[ 1106.269816][ T2833] veth0_to_bond: left promiscuous mode
[ 1106.281576][ T2833] veth0_to_bond: left allmulticast mode
[ 1106.307995][ T2833] bond0: (slave bond_slave_0): Releasing backup interface
[ 1106.349025][ T2833] bond0: (slave bond_slave_1): Releasing backup interface
[ 1106.388514][ T2833] team0: Port device team_slave_0 removed
[ 1106.415590][ T2833] team0: Port device team_slave_1 removed
[ 1106.431323][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1106.457001][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1106.469040][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1106.478631][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.493889][ T2833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1106.516944][ T2865] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[ 1106.739149][ T2890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7745'.
[ 1106.889759][    C1] syz_tun: tun_net_xmit 42
[ 1107.044121][ T2906] openvswitch: netlink: IP tunnel dst address not specified
[ 1107.897621][ T2931] ±ÿÿÿÿa–ïD: renamed from lo
[ 1108.310473][ T2942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7760'.
[ 1108.419213][ T2957] "syz.1.7763" (2957) uses obsolete ecb(arc4) skcipher
[ 1108.485230][ T2957] "syz.1.7763" (2957) uses obsolete ecb(arc4) skcipher
[ 1108.689904][ T2970] x_tables: unsorted entry at hook 2
[ 1109.066406][ T2982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7770'.
[ 1109.149032][ T2988] netlink: 'syz.2.7772': attribute type 11 has an invalid length.
[ 1109.169303][ T2988] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7772'.
[ 1109.329408][ T2990] Cannot find del_set index 0 as target
[ 1110.109703][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1110.117958][    C1] lec:lec_tx_timeout: lec0
[ 1110.122836][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1110.215445][ T3024] netlink: 640 bytes leftover after parsing attributes in process `syz.1.7779'.
[ 1110.247636][ T3024] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1110.277526][ T3026] macvlan0: entered promiscuous mode
[ 1110.824065][ T3043] pim6reg527: entered allmulticast mode
[ 1111.604455][ T3071] netlink: 'syz.0.7791': attribute type 11 has an invalid length.
[ 1111.632058][ T3065] syzkaller1: entered promiscuous mode
[ 1111.642814][ T3065] syzkaller1: entered allmulticast mode
[ 1112.104978][ T3084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7794'.
[ 1112.319532][ T3093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7796'.
[ 1112.770252][ T5818] syz_tun: tun_net_xmit 90
[ 1113.221747][ T3128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7802'.
[ 1113.578525][ T3148] bridge3: entered allmulticast mode
[ 1113.769978][ T5818] syz_tun: tun_net_xmit 90
[ 1115.129769][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1115.137875][    C1] lec:lec_tx_timeout: lec0
[ 1115.142980][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1115.314903][ T3095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1115.326646][ T3126] netlink: 'syz.4.7804': attribute type 11 has an invalid length.
[ 1115.352508][ T3126] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.7804'.
[ 1115.615696][ T3158] veth0: entered promiscuous mode
[ 1115.647518][ T3164] syzkaller0: entered promiscuous mode
[ 1115.662840][ T3164] syzkaller0: entered allmulticast mode
[ 1115.801058][ T3159] veth0: left promiscuous mode
[ 1116.077137][ T3193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1116.173043][ T3196] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1116.701865][ T3224] netlink: 'syz.3.7827': attribute type 1 has an invalid length.
[ 1116.954319][ T3224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7827'.
[ 1117.040864][ T3232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7830'.
[ 1117.142107][ T3232] syzkaller0: entered promiscuous mode
[ 1117.153405][ T3232] syzkaller0: entered allmulticast mode
[ 1117.298379][ T3244] netlink: 'syz.1.7832': attribute type 2 has an invalid length.
[ 1117.311185][ T3243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7832'.
[ 1117.334246][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7832'.
[ 1117.624021][ T3250] syz_tun: tun_net_xmit 42
[ 1117.703583][ T3251] tipc: Failed to remove unknown binding: 66,1,1/68532174:2650640541/2650640543
[ 1117.733554][ T3251] tipc: Failed to remove unknown binding: 66,1,1/68532174:2650640541/2650640543
[ 1118.291656][ T3276] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.7843'.
[ 1118.324034][ T3283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7845'.
[ 1118.342117][ T3283] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 1118.649728][    C1] syz_tun: tun_net_xmit 42
[ 1119.034299][ T3309] netlink: 'syz.2.7853': attribute type 2 has an invalid length.
[ 1119.071713][ T3309] netlink: 'syz.2.7853': attribute type 2 has an invalid length.
[ 1119.106552][ T3309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7853'.
[ 1119.132078][ T3309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7853'.
[ 1119.151098][ T3309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7853'.
[ 1119.350484][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1119.384309][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1119.585224][ T3326] netlink: 'syz.0.7857': attribute type 3 has an invalid length.
[ 1119.689783][    C1] syz_tun: tun_net_xmit 42
[ 1119.754551][ T3333] sit0: entered promiscuous mode
[ 1119.787367][ T3333] netlink: 'syz.3.7860': attribute type 1 has an invalid length.
[ 1119.995759][ T3343] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 1120.123122][ T3352] netlink: 'syz.3.7867': attribute type 9 has an invalid length.
[ 1120.149701][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1120.157839][    C1] lec:lec_tx_timeout: lec0
[ 1120.162870][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1120.455845][ T3372] __nla_validate_parse: 4 callbacks suppressed
[ 1120.455864][ T3372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7870'.
[ 1120.485152][ T3376] syzkaller0: entered promiscuous mode
[ 1120.506169][ T3376] syzkaller0: entered allmulticast mode
[ 1120.582813][ T3385] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[ 1120.607320][ T3385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7874'.
[ 1120.686151][ T3388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7874'.
[ 1121.570001][ T3416] netlink: 'syz.2.7878': attribute type 12 has an invalid length.
[ 1121.590206][ T3418] openvswitch: netlink: ct_state flags 010000e0 unsupported
[ 1121.652306][ T3424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7880'.
[ 1121.653465][ T3421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7880'.
[ 1121.919444][ T3433] netlink: 'syz.0.7885': attribute type 39 has an invalid length.
[ 1121.944746][ T3436] netlink: 'syz.3.7883': attribute type 2 has an invalid length.
[ 1122.142296][ T3438] syzkaller0: entered promiscuous mode
[ 1122.153808][ T3438] syzkaller0: entered allmulticast mode
[ 1122.279946][ T3459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1122.666692][ T3473] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1122.828800][ T3479] netlink: 'syz.3.7897': attribute type 1 has an invalid length.
[ 1122.842938][ T3479] netlink: 'syz.3.7897': attribute type 2 has an invalid length.
[ 1125.177459][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1125.185599][    C1] lec:lec_tx_timeout: lec0
[ 1125.190322][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1125.582010][ T3478] bond0: entered promiscuous mode
[ 1125.588585][ T3478] batadv0: entered promiscuous mode
[ 1125.595392][ T3478] debugfs: 'hsr0' already exists in 'hsr'
[ 1125.601195][ T3478] Cannot create hsr debugfs directory
[ 1125.606693][ T3478] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1125.617552][ T3478] 8021q: adding VLAN 0 to HW filter on device hsr0
[ 1125.626942][ T3478] bond0: left promiscuous mode
[ 1125.633143][ T3478] batadv0: left promiscuous mode
[ 1125.767219][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7901'.
[ 1125.878520][ T3509] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7904'.
[ 1126.040142][ T3518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7906'.
[ 1126.631892][ T1087] dvmrp0: left allmulticast mode
[ 1127.024629][ T3561] "syz.2.7914" (3561) uses obsolete ecb(arc4) skcipher
[ 1127.538147][ T7053] syz_tun: tun_net_xmit 86
[ 1127.560216][ T1087] bond9 (unregistering): (slave gretap3): Releasing active interface
[ 1127.805722][ T1087] bridge0 (unregistering): left allmulticast mode
[ 1128.133609][ T1087] bond8 (unregistering): (slave bridge6): Releasing backup interface
[ 1128.316116][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1128.326379][ T1087] bond0 (unregistering): Released all slaves
[ 1128.337536][ T1087] bond1 (unregistering): Released all slaves
[ 1128.354541][ T1087] bond2 (unregistering): Released all slaves
[ 1128.373923][ T1087] bond3 (unregistering): Released all slaves
[ 1128.390124][ T1087] bond4 (unregistering): Released all slaves
[ 1128.407187][ T1087] bond5 (unregistering): Released all slaves
[ 1128.432504][ T1087] bond6 (unregistering): (slave batadv1): Releasing active interface
[ 1128.442103][ T1087] bond6 (unregistering): Released all slaves
[ 1128.457095][ T1087] bond7 (unregistering): Released all slaves
[ 1128.478056][ T1087] bond8 (unregistering): Released all slaves
[ 1128.494374][ T1087] bond9 (unregistering): Released all slaves
[ 1128.509467][ T1087] bond10 (unregistering): Released all slaves
[ 1128.539342][ T3579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7918'.
[ 1128.835086][ T3594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7922'.
[ 1128.974713][ T1087] tipc: Disabling bearer <eth:vlan0>
[ 1129.001322][ T1087] tipc: Left network mode
[ 1129.156366][ T1087] IPVS: stopping master sync thread 18568 ...
[ 1129.257374][ T3615] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7927'.
[ 1129.282952][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7927'.
[ 1130.681534][ T3649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7932'.
[ 1130.890393][ T3650] syzkaller0: entered promiscuous mode
[ 1130.911185][ T3650] syzkaller0: entered allmulticast mode
[ 1130.969606][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[ 1130.977708][    C1] lec:lec_tx_timeout: lec0
[ 1130.983235][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1131.331446][ T3661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7934'.
[ 1132.972724][ T3687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1134.575402][ T1087] hsr_slave_0: left promiscuous mode
[ 1134.581526][ T1087] hsr_slave_1: left promiscuous mode
[ 1134.587415][ T1087] batman_adv: batadv0: Removing interface: dummy0
[ 1134.865553][ T7075] smc: removing ib device syz0
[ 1135.147328][ T3659] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7934'.
[ 1135.157856][ T3660] netlink: 'syz.1.7934': attribute type 2 has an invalid length.
[ 1135.634542][ T3718] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7945'.
[ 1135.831325][ T3718] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1135.839194][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7949'.
[ 1135.892653][ T3726] netlink: 'syz.4.7948': attribute type 2 has an invalid length.
[ 1135.912484][ T3726] tipc: Started in network mode
[ 1135.922886][ T3725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7949'.
[ 1135.945900][ T3726] tipc: Node identity 340008, cluster identity 4711
[ 1135.989675][ T3726] tipc: Node number set to 3407880
[ 1136.009910][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[ 1136.018040][    C1] lec:lec_tx_timeout: lec0
[ 1136.023913][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1136.131511][ T3729] openvswitch: netlink: IP tunnel dst address not specified
[ 1136.390178][ T3729] syzkaller0: entered promiscuous mode
[ 1136.595962][ T3745] syzkaller0: entered promiscuous mode
[ 1136.604716][ T3745] syzkaller0: entered allmulticast mode
[ 1139.967531][ T3765] netlink: 596 bytes leftover after parsing attributes in process `syz.4.7956'.
[ 1140.055486][ T7055] tipc: Subscription rejected, illegal request
[ 1140.176388][ T3769] netlink: 'syz.0.7958': attribute type 1 has an invalid length.
[ 1141.046926][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1141.055013][    C1] lec:lec_tx_timeout: lec0
[ 1141.060350][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1142.654349][ T3765] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[ 1143.032907][ T1087] IPVS: stop unused estimator thread 0...
[ 1143.069367][ T3806] netlink: 'syz.0.7968': attribute type 39 has an invalid length.
[ 1143.077768][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7969'.
[ 1143.156276][ T3806] hsr_slave_1 (unregistering): left promiscuous mode
[ 1143.214596][ T3812] tipc: MTU too low for tipc bearer
[ 1143.216461][ T3818] netlink: 'syz.4.7972': attribute type 21 has an invalid length.
[ 1143.228848][ T3818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7972'.
[ 1143.242045][ T3812] xt_socket: unknown flags 0xe4
[ 1143.399796][ T3824] netlink: 'syz.1.7975': attribute type 4 has an invalid length.
[ 1143.426130][ T3829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7976'.
[ 1143.431286][ T3824] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7975'.
[ 1143.474572][ T3824] .`: renamed from bond0
[ 1143.727165][ T3845] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7982'.
[ 1143.755919][ T3847] netlink: 'syz.2.7981': attribute type 24 has an invalid length.
[ 1143.766928][ T3837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7979'.
[ 1143.802660][ T3836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1143.875685][ T3852] netlink: 'syz.4.7984': attribute type 1 has an invalid length.
[ 1143.893884][ T3852] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7984'.
[ 1143.914882][ T3852] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7984'.
[ 1143.952107][ T3852] netlink: 'syz.4.7984': attribute type 1 has an invalid length.
[ 1143.965486][ T3852] netlink: 634 bytes leftover after parsing attributes in process `syz.4.7984'.
[ 1144.268432][ T3876] syz.1.7989 uses old SIOCAX25GETINFO
[ 1144.276267][ T3876] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1144.358043][ T3880] netlink: 'syz.0.7991': attribute type 27 has an invalid length.
[ 1144.517722][ T3884] netlink: 'syz.3.7993': attribute type 1 has an invalid length.
[ 1144.620722][ T3895] tipc: New replicast peer: 172.20.20.187
[ 1144.627270][ T3895] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1144.788080][ T3901] : entered promiscuous mode
[ 1145.051308][ T3911] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[ 1145.072458][ T3911] bond8 (unregistering): Released all slaves
[ 1145.898482][ T3952] sctp: [Deprecated]: syz.3.8012 (pid 3952) Use of int in maxseg socket option.
[ 1145.898482][ T3952] Use struct sctp_assoc_value instead
[ 1146.069663][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1146.077780][    C1] lec:lec_tx_timeout: lec0
[ 1146.082950][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1146.117955][ T3964] nbd: must specify a size in bytes for the device
[ 1146.205271][ T3965] __nla_validate_parse: 5 callbacks suppressed
[ 1146.205294][ T3965] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8015'.
[ 1147.415959][ T4036] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1147.732823][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8042'.
[ 1148.305706][ T4072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8047'.
[ 1148.388567][ T4086] netlink: 'syz.1.8049': attribute type 1 has an invalid length.
[ 1148.403497][ T4086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8049'.
[ 1148.472221][ T4089] netlink: 'syz.1.8050': attribute type 1 has an invalid length.
[ 1148.482337][ T4089] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1148.501493][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1148.738381][ T4099] bridge5: entered promiscuous mode
[ 1148.759718][ T4099] bridge5: entered allmulticast mode
[ 1149.028722][ T4117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8057'.
[ 1149.551034][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8064'.
[ 1149.598361][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8064'.
[ 1150.277747][ T4167] bond8: Unable to set up delay as MII monitoring is disabled
[ 1150.288179][ T4167] bond8 (unregistering): Released all slaves
[ 1150.333598][ T4172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8072'.
[ 1150.427567][ T4177] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[ 1151.089963][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1151.098080][    C1] lec:lec_tx_timeout: lec0
[ 1151.103055][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1151.427801][ T4230] tunl0: Caught tx_queue_len zero misconfig
[ 1151.655085][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8087'.
[ 1151.672680][ T4251] netlink: 'syz.1.8090': attribute type 1 has an invalid length.
[ 1151.695289][ T4250] netlink: 'syz.0.8087': attribute type 30 has an invalid length.
[ 1151.718036][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8087'.
[ 1151.734499][ T4257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8092'.
[ 1151.744472][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1151.759285][ T4255] netlink: 'syz.0.8087': attribute type 30 has an invalid length.
[ 1151.761071][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8092'.
[ 1151.822584][ T4258] bond0: (slave geneve3): making interface the new active one
[ 1151.837493][ T4258] bond0: (slave geneve3): Enslaving as an active interface with an up link
[ 1151.868368][ T7053] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1151.877634][ T7053] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1152.006054][ T4263] netlink: 'syz.2.8093': attribute type 6 has an invalid length.
[ 1154.415615][ T4232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1154.720665][ T7053] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1154.730378][ T7053] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1154.740542][ T4267] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8094'.
[ 1155.114297][ T4293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1155.354901][ T4306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1155.397380][ T4312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8106'.
[ 1155.551821][ T4318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8108'.
[ 1155.645673][ T4327] openvswitch: netlink: Invalid MD length 0 for MD type 0
[ 1155.717303][ T4327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1155.912307][ T4332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1155.929687][ T4335] netdevsim netdevsim4: Direct firmware load for . failed with error -2
[ 1155.952964][ T4335] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[ 1156.102795][ T4346] netlink: 'syz.2.8115': attribute type 1 has an invalid length.
[ 1156.110793][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1156.110826][    C1] lec:lec_tx_timeout: lec0
[ 1156.119046][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1156.152505][ T4346] netlink: 'syz.2.8115': attribute type 4 has an invalid length.
[ 1156.170360][ T4346] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.8115'.
[ 1156.251180][ T4350] tap0: tun_chr_ioctl cmd 1074025676
[ 1156.263446][ T4350] tap0: owner set to 0
[ 1156.489259][ T4371] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8122'.
[ 1156.518812][ T4374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8123'.
[ 1156.536870][ T4375] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[ 1156.889472][ T4385] syzkaller0: entered promiscuous mode
[ 1156.901535][ T4385] syzkaller0: entered allmulticast mode
[ 1156.914074][ T4385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1156.924855][ T4384] tipc: Resetting bearer <eth:syzkaller0>
[ 1156.993598][ T4384] tipc: Disabling bearer <eth:syzkaller0>
[ 1157.617947][ T4424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8136'.
[ 1157.730720][ T4431] netlink: 'syz.1.8139': attribute type 1 has an invalid length.
[ 1157.753546][ T4431] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8139'.
[ 1157.836515][ T4431] veth0_to_bridge (unregistering): left allmulticast mode
[ 1157.845752][ T4431] veth0_to_bridge (unregistering): left promiscuous mode
[ 1157.855004][ T4431] bridge0: port 2(veth0_to_bridge) entered disabled state
[ 1157.877810][ T4431] bridge_slave_0 (unregistering): left allmulticast mode
[ 1157.887721][ T4431] bridge_slave_0 (unregistering): left promiscuous mode
[ 1157.897307][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1158.277753][ T4448] syzkaller0: entered promiscuous mode
[ 1158.296235][ T4448] syzkaller0: entered allmulticast mode
[ 1158.315458][ T4452] sit0: Caught tx_queue_len zero misconfig
[ 1158.384733][ T4454] netlink: 'syz.1.8145': attribute type 3 has an invalid length.
[ 1158.397637][ T4454] netlink: 'syz.1.8145': attribute type 1 has an invalid length.
[ 1158.412541][ T4454] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8145'.
[ 1158.423534][ T4450] xt_hl: Unknown Hop Limit match mode: 206
[ 1158.459475][ T4458] syzkaller0: entered promiscuous mode
[ 1158.466594][ T4458] syzkaller0: entered allmulticast mode
[ 1158.475453][ T4450] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1158.496199][ T4458] FAULT_INJECTION: forcing a failure.
[ 1158.496199][ T4458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1158.536557][ T4461] tc_dump_action: action bad kind
[ 1158.546455][ T4458] CPU: 0 UID: 0 PID: 4458 Comm: syz.4.8147 Not tainted syzkaller #0 PREEMPT(full) 
[ 1158.546486][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1158.546498][ T4458] Call Trace:
[ 1158.546507][ T4458]  <TASK>
[ 1158.546516][ T4458]  dump_stack_lvl+0xe8/0x150
[ 1158.546551][ T4458]  should_fail_ex+0x412/0x560
[ 1158.546587][ T4458]  _copy_from_user+0x2d/0xb0
[ 1158.546609][ T4458]  __copy_msghdr+0x3c5/0x5b0
[ 1158.546643][ T4458]  ___sys_sendmsg+0x213/0x360
[ 1158.546671][ T4458]  ? __lock_acquire+0x6b5/0x2cf0
[ 1158.546704][ T4458]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1158.546774][ T4458]  ? __fget_files+0x2a/0x420
[ 1158.546799][ T4458]  ? __fget_files+0x3a0/0x420
[ 1158.546836][ T4458]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1158.546871][ T4458]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1158.546914][ T4458]  ? __pfx_ksys_write+0x10/0x10
[ 1158.546953][ T4458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.546977][ T4458]  do_syscall_64+0x15f/0xf80
[ 1158.547005][ T4458]  ? clear_bhb_loop+0x40/0x90
[ 1158.547031][ T4458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.547051][ T4458] RIP: 0033:0x7f064959c819
[ 1158.547072][ T4458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1158.547089][ T4458] RSP: 002b:00007f064a3b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1158.547112][ T4458] RAX: ffffffffffffffda RBX: 00007f0649815fa0 RCX: 00007f064959c819
[ 1158.547128][ T4458] RDX: 0000000000008014 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1158.547141][ T4458] RBP: 00007f064a3b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1158.547154][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1158.547166][ T4458] R13: 00007f0649816038 R14: 00007f0649815fa0 R15: 00007ffdd9a1f678
[ 1158.547201][ T4458]  </TASK>
[ 1158.789687][ T4463] netem: change failed
[ 1158.902932][ T4465] syzkaller0: entered promiscuous mode
[ 1158.908561][ T4465] syzkaller0: entered allmulticast mode
[ 1159.119425][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8153'.
[ 1159.128825][ T4478] netlink: 'syz.2.8153': attribute type 8 has an invalid length.
[ 1159.306006][ T4486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8156'.
[ 1159.334580][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8156'.
[ 1159.356396][ T4489] vlan2: entered allmulticast mode
[ 1159.362518][ T4489] veth0_vlan: entered allmulticast mode
[ 1159.372022][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8156'.
[ 1159.396400][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8156'.
[ 1159.608798][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8163'.
[ 1159.617418][ T4495] syzkaller0: entered promiscuous mode
[ 1159.624343][ T4495] syzkaller0: entered allmulticast mode
[ 1159.637063][ T4500] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8160'.
[ 1161.119630][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1161.127860][    C1] lec:lec_tx_timeout: lec0
[ 1161.132739][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1163.004230][ T4541] netlink: 'syz.3.8172': attribute type 1 has an invalid length.
[ 1163.052544][ T4541] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1163.085701][ T4541] syz_tun: tun_net_xmit 42
[ 1163.121945][ T4545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1163.146492][ T4541] vlan3: entered promiscuous mode
[ 1163.161884][ T4541] bond9: entered promiscuous mode
[ 1163.168640][ T4553] __nla_validate_parse: 2 callbacks suppressed
[ 1163.168660][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8178'.
[ 1163.179235][ T4541] vlan3: entered allmulticast mode
[ 1163.194904][ T4541] bond9: entered allmulticast mode
[ 1163.204590][ T4545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8173'.
[ 1163.522439][ T4576] erspan0: entered promiscuous mode
[ 1163.540339][ T4576] erspan0: entered allmulticast mode
[ 1163.752325][ T4585] netlink: 'syz.3.8184': attribute type 1 has an invalid length.
[ 1163.775041][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8184'.
[ 1163.855829][ T4585] syzkaller0: entered promiscuous mode
[ 1163.881187][ T4585] syzkaller0: entered allmulticast mode
[ 1164.089699][    C1] syz_tun: tun_net_xmit 42
[ 1164.211845][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8193'.
[ 1164.212249][ T4606] netlink: 'syz.1.8191': attribute type 1 has an invalid length.
[ 1164.368117][ T4606] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1164.488913][ T4611] bond8: (slave veth3): Enslaving as an active interface with a down link
[ 1164.538801][ T4614] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1164.700692][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8197'.
[ 1164.938380][ T4624] ip6gretap0 (unregistering): left promiscuous mode
[ 1165.129945][    C1] syz_tun: tun_net_xmit 42
[ 1165.227344][ T4651] IPv4: Oversized IP packet from 127.202.26.0
[ 1165.239115][ T4652] IPv4: Oversized IP packet from 127.202.26.0
[ 1165.255546][ T4656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8203'.
[ 1165.284310][ T4658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8206'.
[ 1165.421793][ T4665] netlink: 'syz.0.8208': attribute type 1 has an invalid length.
[ 1165.430488][ T4665] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8208'.
[ 1165.810617][ T4678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8212'.
[ 1165.964108][ T4684] veth3: entered allmulticast mode
[ 1166.139659][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1166.147780][    C1] lec:lec_tx_timeout: lec0
[ 1166.152719][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1166.270944][ T4698] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8218'.
[ 1166.288761][ T4702] netlink: 'syz.4.8219': attribute type 2 has an invalid length.
[ 1166.404062][ T4711] syz_tun: tun_net_xmit 42
[ 1166.443614][ T4712] syz_tun: tun_net_xmit 42
[ 1167.449745][    C1] syz_tun: tun_net_xmit 42
[ 1167.454536][    C1] syz_tun: tun_net_xmit 42
[ 1167.518635][ T4771] syzkaller0: entered promiscuous mode
[ 1167.540976][ T4771] syzkaller0: entered allmulticast mode
[ 1167.648737][ T4780] netlink: 'syz.0.8241': attribute type 1 has an invalid length.
[ 1168.262802][ T4813] __nla_validate_parse: 4 callbacks suppressed
[ 1168.262826][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8254'.
[ 1168.454099][ T4813] bond10: entered promiscuous mode
[ 1168.471558][ T4813] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1168.489812][    C1] syz_tun: tun_net_xmit 42
[ 1168.494552][    C1] syz_tun: tun_net_xmit 42
[ 1168.502186][ T4817] veth0: entered promiscuous mode
[ 1168.713260][ T4845] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8261'.
[ 1168.726568][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8261'.
[ 1168.777785][ T4845] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1168.833723][ T4811] veth0: left promiscuous mode
[ 1168.902339][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8264'.
[ 1169.020955][ T4866] netlink: 'syz.3.8267': attribute type 18 has an invalid length.
[ 1169.064813][ T1087] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1169.097797][ T1087] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1169.124031][ T4868] netlink: 284 bytes leftover after parsing attributes in process `syz.4.8268'.
[ 1169.173597][ T1087] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1169.214943][ T1087] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1169.677963][ T4909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8277'.
[ 1170.007329][ T4921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8280'.
[ 1170.129827][ T4921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1170.396975][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8287'.
[ 1170.416547][ T4946] netlink: 'syz.2.8287': attribute type 3 has an invalid length.
[ 1170.428484][ T4947] x_tables: unsorted entry at hook 3
[ 1170.470215][ T4948] vlan1: entered allmulticast mode
[ 1170.489979][ T4948] bridge6: entered allmulticast mode
[ 1170.555924][ T4944] bridge6: port 1(bond5) entered blocking state
[ 1170.576920][ T4944] bridge6: port 1(bond5) entered disabled state
[ 1170.584045][ T4944] bond5: entered allmulticast mode
[ 1170.596018][ T4944] bond5: entered promiscuous mode
[ 1170.652119][ T4944] bridge6: port 2(bond6) entered blocking state
[ 1170.658708][ T4944] bridge6: port 2(bond6) entered disabled state
[ 1170.692631][ T4944] bond6: entered allmulticast mode
[ 1170.704691][ T4944] bond6: entered promiscuous mode
[ 1170.747638][ T4944] bridge6: port 3(bond7) entered blocking state
[ 1170.754411][ T4944] bridge6: port 3(bond7) entered disabled state
[ 1170.761663][ T4944] bond7: entered allmulticast mode
[ 1170.768878][ T4944] bond7: entered promiscuous mode
[ 1170.791418][ T4944] bridge6: port 4(bond8) entered blocking state
[ 1170.797840][ T4944] bridge6: port 4(bond8) entered disabled state
[ 1170.804542][ T4944] bond8: entered allmulticast mode
[ 1170.811499][ T4944] bond8: entered promiscuous mode
[ 1170.838271][ T4974] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8292'.
[ 1170.854735][ T4944] bridge6: port 5(bond9) entered blocking state
[ 1170.861565][ T4944] bridge6: port 5(bond9) entered disabled state
[ 1170.868183][ T4944] bond9: entered allmulticast mode
[ 1170.876814][ T4944] bond9: entered promiscuous mode
[ 1170.913861][ T4944] bridge6: port 6(bond10) entered blocking state
[ 1170.920774][ T4944] bridge6: port 6(bond10) entered disabled state
[ 1170.927404][ T4944] bond10: entered allmulticast mode
[ 1170.941250][ T4944] bond10: entered promiscuous mode
[ 1170.954113][ T4968] syzkaller1: entered promiscuous mode
[ 1170.960297][ T4968] syzkaller1: entered allmulticast mode
[ 1171.027824][ T4944] bridge6: port 7(bond11) entered blocking state
[ 1171.045553][ T4944] bridge6: port 7(bond11) entered disabled state
[ 1171.067551][ T4944] bond11: entered allmulticast mode
[ 1171.088408][ T4944] bond11: entered promiscuous mode
[ 1171.105437][ T4986] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8295'.
[ 1171.125177][ T4944] bridge6: port 8(bond12) entered blocking state
[ 1171.134016][ T4944] bridge6: port 8(bond12) entered disabled state
[ 1171.141002][ T4944] bond12: entered allmulticast mode
[ 1171.147907][ T4944] bond12: entered promiscuous mode
[ 1171.159595][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1171.167676][    C1] lec:lec_tx_timeout: lec0
[ 1171.172456][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1171.199507][ T4944] bridge6: port 9(bond13) entered blocking state
[ 1171.206305][ T4944] bridge6: port 9(bond13) entered disabled state
[ 1171.213947][ T4944] bond13: entered allmulticast mode
[ 1171.221848][ T4944] bond13: entered promiscuous mode
[ 1171.422117][ T5004] netlink: 'syz.3.8298': attribute type 5 has an invalid length.
[ 1171.623481][ T5012] netlink: 'syz.2.8300': attribute type 4 has an invalid length.
[ 1171.639209][ T5012] netlink: 'syz.2.8300': attribute type 4 has an invalid length.
[ 1171.695988][ T5014] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1172.968500][ T4923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1173.267309][ T5035] netlink: 'syz.2.8305': attribute type 3 has an invalid length.
[ 1173.494354][ T5049] "syz.3.8309" (5049) uses obsolete ecb(arc4) skcipher
[ 1173.716239][ T5063] __nla_validate_parse: 4 callbacks suppressed
[ 1173.716263][ T5063] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8314'.
[ 1173.779481][ T5070] syzkaller0: entered promiscuous mode
[ 1173.787575][ T5070] syzkaller0: entered allmulticast mode
[ 1174.137318][ T5088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8318'.
[ 1174.151338][ T5086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1174.175833][ T5489] veth0_vlan: left promiscuous mode
[ 1174.192497][ T5086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8319'.
[ 1174.228489][ T5489] veth0_vlan: entered promiscuous mode
[ 1174.234872][ T5086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8319'.
[ 1174.484928][ T5102] IPVS: length: 8 != 1152
[ 1174.611336][ T5114] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1174.877460][ T5125] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.8327'.
[ 1174.938003][   T29] audit: type=1804 audit(1776638100.634:7): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8327" name="/newroot/524/cgroup.controllers" dev="tmpfs" ino=2684 res=1 errno=0
[ 1174.997579][   T29] audit: type=1800 audit(1776638100.634:8): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8327" name="cgroup.controllers" dev="tmpfs" ino=2684 res=0 errno=0
[ 1175.087121][   T29] audit: type=1800 audit(1776638100.634:9): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8327" name="cgroup.controllers" dev="tmpfs" ino=2684 res=0 errno=0
[ 1175.772591][ T5193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1176.180016][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1176.188246][    C1] lec:lec_tx_timeout: lec0
[ 1176.193418][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1176.466175][ T5220] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8347'.
[ 1177.668336][ T5265] netlink: 'syz.0.8357': attribute type 3 has an invalid length.
[ 1177.900818][ T5280] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.8361'.
[ 1178.830492][ T5297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8365'.
[ 1178.864742][ T5300] netlink: 'syz.3.8366': attribute type 12 has an invalid length.
[ 1178.994151][ T5307] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8369'.
[ 1179.106276][ T5311] syzkaller0: entered promiscuous mode
[ 1179.114105][ T5311] syzkaller0: entered allmulticast mode
[ 1179.545262][ T5232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1179.554660][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8349'.
[ 1179.566103][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8349'.
[ 1179.772810][ T5322] netlink: zone id is out of range
[ 1179.789948][ T5326] netlink: 'syz.1.8374': attribute type 1 has an invalid length.
[ 1179.792552][ T5322] netlink: zone id is out of range
[ 1179.816750][ T5322] netlink: zone id is out of range
[ 1179.826915][ T5322] netlink: zone id is out of range
[ 1179.835461][ T5322] netlink: zone id is out of range
[ 1179.850902][ T5322] netlink: zone id is out of range
[ 1179.870354][ T5326] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1179.876025][ T5322] netlink: zone id is out of range
[ 1179.896172][ T5322] netlink: zone id is out of range
[ 1179.902734][ T5322] netlink: zone id is out of range
[ 1179.914408][ T5322] netlink: zone id is out of range
[ 1179.919812][ T5332] bond9: (slave geneve4): making interface the new active one
[ 1179.927912][ T5332] bond9: (slave geneve4): Enslaving as an active interface with an up link
[ 1179.939307][ T7053] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0
[ 1179.966855][ T7053] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0
[ 1179.978944][ T7053] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0
[ 1179.995303][ T5321] syzkaller0: entered promiscuous mode
[ 1180.018066][ T5321] syzkaller0: entered allmulticast mode
[ 1180.053832][ T5340] Cannot find set identified by id 65534 to match
[ 1180.072653][ T5326] netdevsim netdevsim1: Direct firmware load for .. @ failed with error -2
[ 1180.072776][ T5339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8378'.
[ 1180.099012][ T5326] netdevsim netdevsim1: Falling back to sysfs fallback for: .. @
[ 1180.100155][ T7053] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0
[ 1180.236957][ T5345] netlink: 'syz.4.8380': attribute type 10 has an invalid length.
[ 1180.263394][ T5345] bond0: (slave wlan1): Enslaving as an active interface with a down link
[ 1180.335495][ T5347] IPVS: set_ctl: invalid protocol: 98 172.20.20.54:20001
[ 1180.351539][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8382'.
[ 1180.373073][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8382'.
[ 1180.459102][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8385'.
[ 1180.530152][ T5361] bond11: entered promiscuous mode
[ 1180.537723][ T5361] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1180.576138][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8384'.
[ 1180.596199][ T5361] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1180.605573][ T5361] bond11: (slave sit2): The slave device specified does not support setting the MAC address
[ 1180.632673][ T5361] bond11: (slave sit2): Error -95 calling set_mac_address
[ 1181.297970][ T5392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8393'.
[ 1181.982590][ T5406] netlink: 'syz.4.8396': attribute type 1 has an invalid length.
[ 1182.009579][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[ 1182.017686][    C1] lec:lec_tx_timeout: lec0
[ 1182.022929][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1182.037300][ T5407] netlink: 'syz.4.8396': attribute type 1 has an invalid length.
[ 1182.299359][ T5422] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1182.365552][ T5419] syzkaller0: entered promiscuous mode
[ 1182.377043][ T5419] syzkaller0: entered allmulticast mode
[ 1182.427116][ T5427] netlink: 'syz.1.8405': attribute type 1 has an invalid length.
[ 1182.763735][ T5454] vlan2: entered allmulticast mode
[ 1182.782460][ T5454] bond0: entered allmulticast mode
[ 1182.821505][ T5454] geneve3: entered allmulticast mode
[ 1182.974789][T25787] wlan1: Trigger new scan to find an IBSS to join
[ 1183.156975][ T5475] netlink: 'syz.4.8413': attribute type 10 has an invalid length.
[ 1183.170122][ T5474] netlink: 'syz.4.8413': attribute type 10 has an invalid length.
[ 1184.148965][ T5526] lo: Caught tx_queue_len zero misconfig
[ 1184.366399][ T5540] __nla_validate_parse: 4 callbacks suppressed
[ 1184.366420][ T5540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8432'.
[ 1184.555052][ T5556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8436'.
[ 1184.616664][ T5560] netlink: 'syz.4.8438': attribute type 1 has an invalid length.
[ 1184.664311][ T5560] netlink: 146580 bytes leftover after parsing attributes in process `syz.4.8438'.
[ 1184.781107][ T5565] netlink: 'syz.1.8437': attribute type 1 has an invalid length.
[ 1184.837925][ T5565] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1184.848833][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8437'.
[ 1184.858745][ T5574] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[ 1184.879288][ T5574] bond10: entered allmulticast mode
[ 1184.929513][ T5562] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1185.165943][ T5582] syzkaller0: entered promiscuous mode
[ 1185.173177][ T5582] syzkaller0: entered allmulticast mode
[ 1185.696391][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8446'.
[ 1185.737610][ T5605] netlink: 'syz.3.8446': attribute type 4 has an invalid length.
[ 1185.766456][ T5605] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8446'.
[ 1186.144501][ T5622] net_ratelimit: 45 callbacks suppressed
[ 1186.144525][ T5622] netlink: get zone limit has 4 unknown bytes
[ 1186.558956][ T5642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8453'.
[ 1186.595093][ T5642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8453'.
[ 1186.918995][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8457'.
[ 1187.029585][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1187.037695][    C1] lec:lec_tx_timeout: lec0
[ 1187.042501][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1187.277407][ T5673] syzkaller1: entered promiscuous mode
[ 1187.314905][ T5673] syzkaller1: entered allmulticast mode
[ 1187.405057][ T5673] syzkaller0: entered promiscuous mode
[ 1187.447510][ T5673] syzkaller0: entered allmulticast mode
[ 1187.622984][ T5696] netlink: 'syz.4.8462': attribute type 4 has an invalid length.
[ 1187.813355][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8464'.
[ 1188.121647][ T5712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1188.247603][ T5715] netem: incorrect ge model size
[ 1188.304430][ T5715] netem: change failed
[ 1189.404906][ T5762] __nla_validate_parse: 2 callbacks suppressed
[ 1189.404930][ T5762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8476'.
[ 1189.442399][ T5762] geneve2: entered promiscuous mode
[ 1189.662157][ T5772] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8479'.
[ 1189.767613][ T5772] netlink: 'syz.4.8479': attribute type 21 has an invalid length.
[ 1189.804261][ T5772] syzkaller0: entered promiscuous mode
[ 1189.829790][ T5772] syzkaller0: entered allmulticast mode
[ 1190.082595][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8483'.
[ 1190.941497][ T5825] syzkaller0: entered promiscuous mode
[ 1190.954488][ T5825] syzkaller0: entered allmulticast mode
[ 1191.224529][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8496'.
[ 1191.345752][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8498'.
[ 1191.346772][ T5837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8495'.
[ 1192.049696][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1192.057806][    C1] lec:lec_tx_timeout: lec0
[ 1192.062848][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1192.112188][ T5863] openvswitch: netlink: Key 6 has unexpected len 16 expected 2
[ 1192.155667][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8506'.
[ 1192.174170][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8506'.
[ 1192.519158][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8514'.
[ 1192.682350][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8513'.
[ 1192.703337][ T5901] netlink: 'syz.1.8513': attribute type 1 has an invalid length.
[ 1192.714707][ T5901] netlink: 'syz.1.8513': attribute type 2 has an invalid length.
[ 1192.837246][ T5916] netlink: 'syz.2.8519': attribute type 1 has an invalid length.
[ 1192.951480][ T5916] bond14: entered promiscuous mode
[ 1192.966163][ T5916] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1193.014056][ T5918] bond14: (slave bridge7): making interface the new active one
[ 1193.026611][ T5918] bridge7: entered promiscuous mode
[ 1193.032902][ T5918] bond14: (slave bridge7): Enslaving as an active interface with an up link
[ 1193.250865][ T5936] netlink: 'syz.2.8524': attribute type 1 has an invalid length.
[ 1193.313920][ T5936] netlink: 'syz.2.8524': attribute type 1 has an invalid length.
[ 1193.345401][ T5936] netlink: 'syz.2.8524': attribute type 1 has an invalid length.
[ 1193.368666][ T5936] netlink: 'syz.2.8524': attribute type 1 has an invalid length.
[ 1193.413968][ T5943] bridge0: port 5(veth0_to_bridge) entered blocking state
[ 1193.449084][ T5943] bridge0: port 5(veth0_to_bridge) entered disabled state
[ 1193.501809][ T5943] veth0_to_bridge: entered allmulticast mode
[ 1193.535452][ T5943] veth0_to_bridge: entered promiscuous mode
[ 1193.581591][ T5943] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1193.640038][ T5943] bridge0: port 5(veth0_to_bridge) entered blocking state
[ 1193.647379][ T5943] bridge0: port 5(veth0_to_bridge) entered forwarding state
[ 1193.825088][ T5951] syzkaller0: entered promiscuous mode
[ 1193.845062][ T5951] syzkaller0: entered allmulticast mode
[ 1193.878423][ T5963] netlink: 'syz.4.8530': attribute type 1 has an invalid length.
[ 1193.911997][ T5949] syzkaller0: entered promiscuous mode
[ 1193.917639][ T5949] syzkaller0: entered allmulticast mode
[ 1195.549407][ T6002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1197.069603][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1197.077752][    C1] lec:lec_tx_timeout: lec0
[ 1197.082891][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1197.574556][ T6010] netlink: 'syz.0.8542': attribute type 4 has an invalid length.
[ 1197.875443][ T6044] macsec1: entered promiscuous mode
[ 1197.941640][ T6052] nbd: must specify a size in bytes for the device
[ 1197.964811][ T6052] __nla_validate_parse: 7 callbacks suppressed
[ 1197.964831][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8553'.
[ 1198.535610][ T6067] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
[ 1198.555506][ T6066] netlink: 'syz.2.8557': attribute type 1 has an invalid length.
[ 1198.631786][ T6069] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[ 1198.702539][ T6069] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1198.719849][ T6069] gretap4: entered promiscuous mode
[ 1198.749455][ T6069] gretap4: entered allmulticast mode
[ 1198.949072][ T6066] bond15: (slave vxcan2): The slave device specified does not support setting the MAC address
[ 1199.008461][ T6066] bond15: (slave vxcan2): Setting fail_over_mac to active for active-backup mode
[ 1199.084902][ T6066] bond15: (slave vxcan2): making interface the new active one
[ 1199.125691][ T6066] bond15: (slave vxcan2): Enslaving as an active interface with an up link
[ 1199.201473][ T6073] bond15: (slave vxcan4): The slave device specified does not support setting the MAC address
[ 1199.238482][ T6073] bond15: (slave vxcan4): Enslaving as a backup interface with an up link
[ 1200.151275][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8566'.
[ 1201.098331][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8573'.
[ 1201.126330][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8573'.
[ 1201.288891][ T6123] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[ 1202.089712][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1202.097909][    C1] lec:lec_tx_timeout: lec0
[ 1202.102700][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1202.305209][ T6171] bond8: option all_slaves_active: invalid value (222)
[ 1202.447682][ T6171] bond8 (unregistering): Released all slaves
[ 1202.506674][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8585'.
[ 1202.556151][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8585'.
[ 1202.691830][ T6187] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8587'.
[ 1202.931713][ T6194] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8589'.
[ 1203.129439][ T6194] bond12 (unregistering): Released all slaves
[ 1203.408992][ T6207] xt_hashlimit: size too large, truncated to 1048576
[ 1207.113149][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1207.121254][    C1] lec:lec_tx_timeout: lec0
[ 1207.159945][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1212.185554][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1212.193662][    C1] lec:lec_tx_timeout: lec0
[ 1212.235526][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1218.016732][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[ 1218.024865][    C1] lec:lec_tx_timeout: lec0
[ 1218.067716][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1218.779567][    C0] sched: DL replenish lagged too much
[ 1223.099385][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[ 1223.107495][    C1] lec:lec_tx_timeout: lec0
[ 1223.151323][    C1] lec:lec_start_xmit: lec0:No lecd attached
[ 1228.159587][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1228.167769][    C1] lec:lec_tx_timeout: lec0
[ 1244.494392][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[ 1250.018321][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms
[ 1250.026463][    C1] lec:lec_tx_timeout: lec0
[ 1302.608367][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[ 1305.468277][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.481403][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.495703][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.508695][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.522982][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.535881][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.550261][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.563307][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.577569][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1305.590634][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1308.010300][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms
[ 1308.018387][    C1] lec:lec_tx_timeout: lec0
[ 1309.239494][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1309.246509][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6207/1:b..l P6210/1:b..l
[ 1309.256052][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=231205, q=2329 ncpus=2)
[ 1309.263970][    C0] task:syz.4.8588      state:R  running task     stack:21856 pid:6210  tgid:6191  ppid:29432  task_flags:0x400040 flags:0x00080002
[ 1309.278839][    C0] Call Trace:
[ 1309.282158][    C0]  <TASK>
[ 1309.285126][    C0]  __schedule+0x17b4/0x5680
[ 1309.289675][    C0]  ? stack_depot_save_flags+0x33/0x810
[ 1309.295175][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[ 1309.301275][    C0]  ? kasan_save_track+0x4f/0x80
[ 1309.306163][    C0]  ? kasan_save_track+0x3e/0x80
[ 1309.311049][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[ 1309.316105][    C0]  ? build_skb+0x23/0x250
[ 1309.320468][    C0]  ? tun_get_user+0x1e07/0x3ed0
[ 1309.325353][    C0]  ? vfs_write+0x61d/0xb90
[ 1309.329832][    C0]  ? netif_receive_skb+0x102/0xbf0
[ 1309.334975][    C0]  ? __pfx___schedule+0x10/0x10
[ 1309.339870][    C0]  ? netif_receive_skb+0x102/0xbf0
[ 1309.345028][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1309.349829][    C0]  ? netif_receive_skb+0x38b/0xbf0
[ 1309.354977][    C0]  ? preempt_schedule_thunk+0x16/0x30
[ 1309.360386][    C0]  preempt_schedule_common+0x82/0xd0
[ 1309.365704][    C0]  ? tun_rx_batched+0x185/0x790
[ 1309.370599][    C0]  preempt_schedule_thunk+0x16/0x30
[ 1309.375835][    C0]  __local_bh_enable_ip+0xe1/0x130
[ 1309.380987][    C0]  ? tun_rx_batched+0x185/0x790
[ 1309.385874][    C0]  tun_rx_batched+0x617/0x790
[ 1309.390585][    C0]  ? __build_skb+0x62/0x440
[ 1309.395133][    C0]  ? __pfx_tun_rx_batched+0x10/0x10
[ 1309.400359][    C0]  ? tun_get_user+0x26dc/0x3ed0
[ 1309.405242][    C0]  ? tun_get_user+0x26dc/0x3ed0
[ 1309.410124][    C0]  ? tun_get_user+0x23c7/0x3ed0
[ 1309.415004][    C0]  ? tun_get_user+0x23c7/0x3ed0
[ 1309.419889][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[ 1309.425221][    C0]  ? tun_get_user+0x26dc/0x3ed0
[ 1309.430101][    C0]  tun_get_user+0x2aeb/0x3ed0
[ 1309.434941][    C0]  ? aa_file_perm+0x50e/0x15e0
[ 1309.439746][    C0]  ? __pfx_tun_get_user+0x10/0x10
[ 1309.444810][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1309.449837][    C0]  ? ref_tracker_alloc+0x35c/0x4c0
[ 1309.455084][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1309.460591][    C0]  ? tun_get+0x1c/0x2f0
[ 1309.464817][    C0]  ? tun_get+0x1c/0x2f0
[ 1309.469011][    C0]  ? tun_get+0x1c/0x2f0
[ 1309.473202][    C0]  ? tun_get+0x1c/0x2f0
[ 1309.477400][    C0]  tun_chr_write_iter+0x113/0x200
[ 1309.482461][    C0]  vfs_write+0x61d/0xb90
[ 1309.486767][    C0]  ? __pfx_vfs_write+0x10/0x10
[ 1309.491581][    C0]  ? __fget_files+0x2a/0x420
[ 1309.496220][    C0]  ksys_write+0x150/0x270
[ 1309.500594][    C0]  ? __pfx_ksys_write+0x10/0x10
[ 1309.505567][    C0]  ? __pfx_kcov_ioctl+0x10/0x10
[ 1309.510546][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1309.516645][    C0]  do_syscall_64+0x15f/0xf80
[ 1309.521272][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1309.526330][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1309.531041][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1309.536963][    C0] RIP: 0033:0x7f064955d04e
[ 1309.541598][    C0] RSP: 002b:00007f06473f3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1309.550143][    C0] RAX: ffffffffffffffda RBX: 00007f06473f46c0 RCX: 00007f064955d04e
[ 1309.558231][    C0] RDX: 000000000000009a RSI: 0000200000000040 RDI: 00000000000000c8
[ 1309.566233][    C0] RBP: 00007f0649632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1309.574322][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1309.582332][    C0] R13: 00007f0649816308 R14: 00007f0649816270 R15: 00007ffdd9a1f678
[ 1309.590357][    C0]  </TASK>
[ 1309.593408][    C0] task:syz.4.8588      state:R  running task     stack:25144 pid:6207  tgid:6191  ppid:29432  task_flags:0x400140 flags:0x00080002
[ 1309.606940][    C0] Call Trace:
[ 1309.610253][    C0]  <TASK>
[ 1309.613213][    C0]  __schedule+0x17b4/0x5680
[ 1309.617776][    C0]  ? __pfx___schedule+0x10/0x10
[ 1309.622657][    C0]  ? lock_acquire+0x106/0x350
[ 1309.627393][    C0]  ? __pfx___schedule+0x10/0x10
[ 1309.632296][    C0]  preempt_schedule_irq+0x4d/0xa0
[ 1309.637353][    C0]  irqentry_exit+0x14f/0x730
[ 1309.641981][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1309.647054][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1309.653069][    C0] RIP: 0010:unwind_next_frame+0x1d3/0x2550
[ 1309.658904][    C0] Code: 8b 27 48 83 f3 01 48 c7 c2 20 a5 c9 8b 49 29 dc 0f 84 b2 02 00 00 49 81 fc 00 00 00 81 0f 92 c0 49 81 fc a8 db b6 8b 0f 93 c1 <08> c1 0f 85 05 01 00 00 48 c7 c0 00 00 00 81 4d 89 e7 49 29 c7 49
[ 1309.678555][    C0] RSP: 0018:ffffc90003976a78 EFLAGS: 00000297
[ 1309.684661][    C0] RAX: 1ffff9200072ed00 RBX: 0000000000000001 RCX: 0000000080000000
[ 1309.692840][    C0] RDX: ffffffff8bc9a520 RSI: ffffffff8c27efe0 RDI: ffffffff8c27efa0
[ 1309.700846][    C0] RBP: dffffc0000000000 R08: ffffffff81766536 R09: ffffffff8e95d020
[ 1309.708845][    C0] R10: ffffc90003976b98 R11: ffffffff81b0a9b0 R12: ffffffff821f3f17
[ 1309.716850][    C0] R13: 1ffff9200072ed69 R14: ffffc90003976b48 R15: ffffc90003976b90
[ 1309.724866][    C0]  ? __get_vm_area_node+0x1f7/0x300
[ 1309.730120][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1309.736337][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1309.741498][    C0]  ? unwind_next_frame+0xd5/0x2550
[ 1309.746650][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1309.751794][    C0]  ? __get_vm_area_node+0x1f8/0x300
[ 1309.757136][    C0]  ? __get_vm_area_node+0x1f8/0x300
[ 1309.762407][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1309.768598][    C0]  arch_stack_walk+0x11b/0x150
[ 1309.773408][    C0]  ? __get_vm_area_node+0x1f8/0x300
[ 1309.778653][    C0]  stack_trace_save+0xa9/0x100
[ 1309.783450][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1309.788867][    C0]  save_stack+0x122/0x230
[ 1309.793239][    C0]  ? __pfx_save_stack+0x10/0x10
[ 1309.798121][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1309.803099][    C0]  ? post_alloc_hook+0x231/0x280
[ 1309.808077][    C0]  ? get_page_from_freelist+0x24dc/0x2580
[ 1309.813826][    C0]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[ 1309.819837][    C0]  ? alloc_pages_bulk_noprof+0x558/0x700
[ 1309.825495][    C0]  ? __kasan_populate_vmalloc+0xc1/0x1d0
[ 1309.831162][    C0]  ? alloc_vmap_area+0xd47/0x1480
[ 1309.836280][    C0]  ? __get_vm_area_node+0x1f8/0x300
[ 1309.841536][    C0]  __set_page_owner+0x8d/0x4c0
[ 1309.846346][    C0]  ? __pfx___set_page_owner+0x10/0x10
[ 1309.851815][    C0]  ? seqcount_lockdep_reader_access+0x89/0xc0
[ 1309.857929][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1309.863162][    C0]  ? bad_range+0x8b/0x2c0
[ 1309.867972][    C0]  post_alloc_hook+0x231/0x280
[ 1309.872865][    C0]  get_page_from_freelist+0x24dc/0x2580
[ 1309.878459][    C0]  ? fs_reclaim_acquire+0x7c/0x100
[ 1309.883621][    C0]  ? prepare_alloc_pages+0x22a/0x650
[ 1309.888945][    C0]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1309.894787][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1309.901151][    C0]  ? __pfx_policy_nodemask+0x10/0x10
[ 1309.906487][    C0]  alloc_pages_bulk_noprof+0x558/0x700
[ 1309.911983][    C0]  ? alloc_pages_noprof+0xbd/0x1a0
[ 1309.917130][    C0]  __kasan_populate_vmalloc+0xc1/0x1d0
[ 1309.922655][    C0]  alloc_vmap_area+0xd47/0x1480
[ 1309.927611][    C0]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1309.932956][    C0]  ? __kasan_kmalloc+0x93/0xb0
[ 1309.937776][    C0]  ? __get_vm_area_node+0x13f/0x300
[ 1309.943015][    C0]  ? __kmalloc_cache_node_noprof+0x248/0x6b0
[ 1309.949044][    C0]  ? htable_create+0x101/0x7a0
[ 1309.953868][    C0]  __get_vm_area_node+0x1f8/0x300
[ 1309.958960][    C0]  __vmalloc_node_range_noprof+0x372/0x1730
[ 1309.964916][    C0]  ? htable_create+0x101/0x7a0
[ 1309.969729][    C0]  ? __asan_memset+0x22/0x50
[ 1309.974378][    C0]  ? trace_contention_end+0x3d/0x140
[ 1309.979715][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1309.986094][    C0]  ? alloc_pages_mpol+0x3cd/0x4a0
[ 1309.991185][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1309.996086][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1310.001074][    C0]  __kvmalloc_node_noprof+0x5ba/0x8a0
[ 1310.006487][    C0]  ? htable_create+0x101/0x7a0
[ 1310.011392][    C0]  ? hashlimit_pernet+0x23/0x240
[ 1310.016360][    C0]  ? htable_create+0x101/0x7a0
[ 1310.021166][    C0]  ? hashlimit_pernet+0x23/0x240
[ 1310.026223][    C0]  ? hashlimit_pernet+0x23/0x240
[ 1310.031289][    C0]  htable_create+0x101/0x7a0
[ 1310.036010][    C0]  hashlimit_mt_check_common+0x719/0xa10
[ 1310.041695][    C0]  xt_check_match+0x4f1/0xc50
[ 1310.046413][    C0]  ? __pfx_xt_check_match+0x10/0x10
[ 1310.051669][    C0]  ? xt_find_match+0x20c/0x260
[ 1310.056742][    C0]  translate_table+0x1547/0x20b0
[ 1310.061740][    C0]  ? __pfx_translate_table+0x10/0x10
[ 1310.067064][    C0]  ? __might_fault+0xaf/0x130
[ 1310.071778][    C0]  ? __might_fault+0xaf/0x130
[ 1310.076508][    C0]  ? _copy_from_user+0x94/0xb0
[ 1310.081310][    C0]  do_ip6t_set_ctl+0x9fe/0xe10
[ 1310.086112][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1310.090925][    C0]  ? trace_contention_end+0x3d/0x140
[ 1310.096241][    C0]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[ 1310.101580][    C0]  ? __pfx___mutex_lock+0x10/0x10
[ 1310.106645][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1310.112670][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1310.117660][    C0]  nf_setsockopt+0x26f/0x290
[ 1310.122296][    C0]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1310.128229][    C0]  do_sock_setsockopt+0x17c/0x1b0
[ 1310.133299][    C0]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1310.138577][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1310.144688][    C0]  do_syscall_64+0x15f/0xf80
[ 1310.149397][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1310.154557][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1310.159442][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1310.165374][    C0] RIP: 0033:0x7f064959c819
[ 1310.169821][    C0] RSP: 002b:00007f064a374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1310.178270][    C0] RAX: ffffffffffffffda RBX: 00007f0649816180 RCX: 00007f064959c819
[ 1310.186357][    C0] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c
[ 1310.194357][    C0] RBP: 00007f0649632c91 R08: 00000000000004f8 R09: 0000000000000000
[ 1310.202440][    C0] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000000
[ 1310.210439][    C0] R13: 00007f0649816218 R14: 00007f0649816180 R15: 00007ffdd9a1f678
[ 1310.218644][    C0]  </TASK>
[ 1310.221692][    C0] rcu: rcu_preempt kthread starved for 729 jiffies! g231205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1310.232827][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1310.242829][    C0] rcu: RCU grace-period kthread stack dump:
[ 1310.248742][    C0] task:rcu_preempt     state:R  running task     stack:27528 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1310.262541][    C0] Call Trace:
[ 1310.265853][    C0]  <TASK>
[ 1310.268815][    C0]  __schedule+0x17b4/0x5680
[ 1310.273350][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1310.278360][    C0]  ? __pfx___schedule+0x10/0x10
[ 1310.283258][    C0]  ? schedule+0x90/0x360
[ 1310.287541][    C0]  schedule+0x164/0x360
[ 1310.291731][    C0]  schedule_timeout+0x158/0x2c0
[ 1310.296614][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1310.302015][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1310.307334][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1310.313184][    C0]  ? prepare_to_swait_event+0x340/0x370
[ 1310.318771][    C0]  rcu_gp_fqs_loop+0x312/0x11d0
[ 1310.323654][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1310.328889][    C0]  ? rcu_gp_init+0x1315/0x15b0
[ 1310.333688][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1310.339963][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1310.345280][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1310.350514][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1310.356362][    C0]  rcu_gp_kthread+0x9e/0x2b0
[ 1310.361003][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1310.366237][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1310.372075][    C0]  ? __kthread_parkme+0x7a/0x1f0
[ 1310.377055][    C0]  ? __kthread_parkme+0x19c/0x1f0
[ 1310.382117][    C0]  kthread+0x388/0x470
[ 1310.386225][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1310.391452][    C0]  ? __pfx_kthread+0x10/0x10
[ 1310.396070][    C0]  ret_from_fork+0x514/0xb70
[ 1310.400785][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1310.405929][    C0]  ? __switch_to+0xc79/0x1410
[ 1310.410639][    C0]  ? __pfx_kthread+0x10/0x10
[ 1310.415261][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1310.420080][    C0]  </TASK>
[ 1310.423132][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1310.429486][    C0] CPU: 0 UID: 0 PID: 33 Comm: kcompactd0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1310.438612][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1310.448696][    C0] RIP: 0010:pie_calculate_probability+0x45d/0x7e0
[ 1310.455159][    C0] Code: 84 e8 74 3f e8 d4 45 0d f8 48 8b 44 24 20 42 80 3c 20 00 74 08 4c 89 f7 e8 f0 12 79 f8 49 8b 1e 48 89 d8 48 c1 e8 06 48 29 c3 <48> 8b 44 24 20 42 80 3c 20 00 74 08 4c 89 f7 e8 bf 13 79 f8 49 89
[ 1310.474792][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00000246
[ 1310.480895][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888020695c40
[ 1310.488895][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1310.496893][    C0] RBP: ffff8880b392e708 R08: 0000000000000003 R09: 0000000000000004
[ 1310.504980][    C0] R10: dffffc0000000000 R11: fffff52000000f70 R12: dffffc0000000000
[ 1310.512978][    C0] R13: 0000000000000001 R14: ffff8880b392e720 R15: 0000000000000000
[ 1310.521158][    C0] FS:  0000000000000000(0000) GS:ffff888125245000(0000) knlGS:0000000000000000
[ 1310.530125][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1310.536831][    C0] CR2: 00007fe84a62bc94 CR3: 000000003e5d2000 CR4: 00000000003526f0
[ 1310.544925][    C0] Call Trace:
[ 1310.548229][    C0]  <IRQ>
[ 1310.551113][    C0]  fq_pie_timer+0x288/0x5b0
[ 1310.555669][    C0]  ? fq_pie_timer+0x4d/0x5b0
[ 1310.560296][    C0]  call_timer_fn+0x192/0x5e0
[ 1310.564941][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[ 1310.570001][    C0]  ? call_timer_fn+0xd4/0x5e0
[ 1310.574721][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1310.579882][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1310.585117][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[ 1310.590207][    C0]  __run_timer_base+0x652/0x8b0
[ 1310.595101][    C0]  ? ktime_get+0x45/0x220
[ 1310.599478][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1310.604903][    C0]  run_timer_softirq+0xb7/0x170
[ 1310.609784][    C0]  handle_softirqs+0x22a/0x840
[ 1310.614582][    C0]  ? __irq_exit_rcu+0xca/0x220
[ 1310.619389][    C0]  __irq_exit_rcu+0xca/0x220
[ 1310.624018][    C0]  irq_exit_rcu+0x9/0x30
[ 1310.628294][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1310.633963][    C0]  </IRQ>
[ 1310.636913][    C0]  <TASK>
[ 1310.639866][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1310.645870][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 1310.652317][    C0] Code: f7 e8 0d 6c ec f5 f7 c3 00 02 00 00 74 05 e8 10 88 17 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> a4 fd dd f5 65 8b 05 9d 00 88 07 85 c0 74 18 5b 41 5e e9 41 48
[ 1310.671955][    C0] RSP: 0018:ffffc90000a979a8 EFLAGS: 00000206
[ 1310.678091][    C0] RAX: 0000000000000006 RBX: 0000000000000296 RCX: 0000000080000001
[ 1310.686105][    C0] RDX: 0000000000000000 RSI: ffffffff8dfb649f RDI: 0000000000000001
[ 1310.694112][    C0] RBP: 0000000000000000 R08: ffffffff903215b7 R09: 1ffffffff20642b6
[ 1310.702118][    C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffffffff81b28b80
[ 1310.710211][    C0] R13: ffffc90000a97a40 R14: ffffffff9a6ef930 R15: ffffc90000a97a40
[ 1310.718221][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1310.723562][    C0]  timer_init_key_on_stack+0x3c/0x110
[ 1310.729061][    C0]  schedule_timeout+0x146/0x2c0
[ 1310.733945][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1310.739443][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1310.745290][    C0]  ? prepare_to_wait_event+0x436/0x480
[ 1310.750863][    C0]  kcompactd+0x416/0x12e0
[ 1310.755257][    C0]  ? __pfx_kcompactd+0x10/0x10
[ 1310.760079][    C0]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1310.765768][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1310.771830][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1310.776972][    C0]  ? lock_acquire+0x106/0x350
[ 1310.781694][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1310.787800][    C0]  ? __kthread_parkme+0x7a/0x1f0
[ 1310.792785][    C0]  kthread+0x388/0x470
[ 1310.796881][    C0]  ? __pfx_kcompactd+0x10/0x10
[ 1310.801683][    C0]  ? __pfx_kthread+0x10/0x10
[ 1310.806314][    C0]  ret_from_fork+0x514/0xb70
[ 1310.810949][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1310.816096][    C0]  ? __switch_to+0xc79/0x1410
[ 1310.820820][    C0]  ? __pfx_kthread+0x10/0x10
[ 1310.825470][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1310.830297][    C0]  </TASK>
[ 1310.836655][    C0] net_ratelimit: 2096 callbacks suppressed
[ 1310.836676][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.855593][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.869995][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.882980][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.897391][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.910619][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.924905][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.937991][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.952238][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1310.965334][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.840324][    C0] net_ratelimit: 2616 callbacks suppressed
[ 1315.840350][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.859270][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.873735][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.886780][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.901098][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.914102][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.928333][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.941424][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.955812][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1315.968820][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)