last executing test programs:

4.24210177s ago: executing program 3 (id=3425):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000008400)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async)
sendto$inet6(r0, &(0x7f0000000280)='\\', 0x1, 0x20008091, &(0x7f000005ffe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) (async, rerun: 32)
recvmmsg(r0, &(0x7f0000008240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/19, 0x13}, 0x9}], 0x1, 0x40000000, 0x0) (rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x1e8, 0x1398, 0x1398, 0x1e8, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [0xffffff00, 0xff, 0x0, 0xff], [0xff, 0xff0000ff, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'vlan1\x00', {0xff}, {}, 0x21, 0x81, 0x5, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x5, 0x1}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x6, 0x7, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.274290944s ago: executing program 3 (id=3438):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket(0x1, 0x1, 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) (async)
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11}}, @RTA_DST={0x8, 0x1, @multicast2}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

2.92759827s ago: executing program 3 (id=3443):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0x7, 0xb}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x108, 0x9, 0x3d, 0x15, 0x80, @multicast}, 0x10)

2.749596803s ago: executing program 3 (id=3445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8bba6de92f04f3a2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008044}, 0x8010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000c0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x338, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ID={0x25, 0x3, "61960213f572ecedfc325d2cffd306d1bc1bfbf3498f3af8f10b81b5e9d9a1b131"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8c47}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa24}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4954}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5db}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ffeeba8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x31c07ce9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x73c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1}]}]}]}, 0x338}}, 0x20044005)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xc, [@float={0xd, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x4, 0x3}]}, @enum={0xc, 0x6, 0x0, 0x6, 0x4, [{0xc, 0x9}, {0x5, 0x1}, {0x10, 0x9}, {0xe, 0x80000000}, {0xa, 0x5}, {0x7, 0x7}]}]}, {0x0, [0x2e, 0x61, 0x0, 0x61, 0x30, 0x30, 0x0, 0x61, 0x5f, 0x61]}}, &(0x7f0000000780)=""/227, 0x88, 0xe3, 0x1, 0x8}, 0x28)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000008c0)={<r7=>0x0, 0x7, 0x80}, &(0x7f0000000900)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000940)={r7, 0x3, 0x17, "d4a7f0ae9ace9dd758c89851d22992231c6c951010c03f"}, 0x1f)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000980)=[{}, {}, {}], &(0x7f00000009c0)=0x18)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000a00), 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a40)={r7, 0x3, 0x8, [0x5, 0x1, 0x800, 0x2, 0x2, 0x200, 0x8, 0x5]}, &(0x7f0000000a80)=0x18)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r9, &(0x7f0000000ac0)={0x2, 0x4e23, @remote}, 0x10)
getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000b00)=""/154, &(0x7f0000000bc0)=0x9a)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000c00)={0x80000006})
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast2}, 0x0, 0x3, 0x3, 0x2}}, 0x26)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6, 0x38}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x5, 0x0, r12, 0x3, '\x00', 0x0, r5, 0x1, 0x4, 0x3}, 0x50)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbc2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8a6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008040)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000e40), &(0x7f0000000e80)=0x4)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, 0x0, 0x5269369fc56a0343, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.690030093s ago: executing program 4 (id=3447):
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
splice(r0, 0x0, r3, 0x0, 0x80, 0x8)
write$cgroup_devices(r3, 0x0, 0x9)
write(r1, 0x0, 0x0)

2.586318803s ago: executing program 0 (id=3448):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x9}, 0x1c)
socket$l2tp6(0xa, 0x2, 0x73)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000180)=0x6, 0x4)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x802)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="2e00000009000000000000000500000081114801010400009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x0)
setsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000200)="a9a8492e1d6473b5b114", 0xa)

2.560097125s ago: executing program 3 (id=3449):
socket(0x400000000010, 0x3, 0x0)
unshare(0x20400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xfffffffffffffd66, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x30, 0x9, 0x6, 0xfffff02c}]})
getsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, &(0x7f0000000300))
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'ip6erspan0\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe)
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

2.416746155s ago: executing program 4 (id=3450):
unshare(0x24020400)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000fcffee0100000000000000000a000000613c31ab3bf04e90e222afa9ecd4f9d114000500000000000000000000dff49e62000001"], 0x30}, 0x1, 0x11}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0)
sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000700)=@in={0x2, 0x4e1d, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="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", 0x628}], 0x1, 0x0, 0x0, 0x24040100}, 0x4000050)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x102, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2.240235241s ago: executing program 4 (id=3452):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10)
recvmmsg(r3, &(0x7f0000000280)=[{{&(0x7f0000000180)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000d40)=""/4096}, {&(0x7f0000001d40)=""/4096}, {&(0x7f0000000300)=""/91}, {&(0x7f0000000380)=""/96}, {&(0x7f0000002d40)=""/4096}, {&(0x7f0000000080)=""/63}]}, 0x8000}, {{&(0x7f0000000400)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000680)=""/36, 0xfffffd3f}, {&(0x7f0000000a40)=""/178, 0xb2}, {&(0x7f0000000940)=""/79, 0x4f}], 0x6, &(0x7f0000000c40)=""/240, 0xf0}, 0xfffff800}], 0x2, 0x12000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket(0xf, 0x80805, 0x9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000000c0))
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000894)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
close(0x4)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.069476129s ago: executing program 2 (id=3453):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80), 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="7fc9", 0x2}], 0x1, 0x0, 0x53}}], 0x2, 0x8000)

1.870844088s ago: executing program 2 (id=3455):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000000000000000000a184e81300000000000061"], 0x0, 0x43}, 0x28)
r0 = socket(0x1, 0x803, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x7ff}, {{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680})
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=<r3=>0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000600)=0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000003700010a0000200017ecbc2780000000ca5d49689058a02161b09b20dd97dab1b1968c6316f8c9b235e988476594f396c5f00ee2e02c787f91349792853c797d12d916b21099071f3e4fc0f6974d"], 0x14}}, 0x8054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r3, @ANYRESOCT=r2, @ANYRES64=r4], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2})
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

1.641360335s ago: executing program 0 (id=3456):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r3, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x29, 0x0, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)

1.373665068s ago: executing program 1 (id=3457):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x48010000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3fd}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x33, 0x0, @val=@iter={&(0x7f00000000c0)=@cgroup={0x3, r3, 0xb}, 0x10}}, 0x20)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x41}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r6, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)

1.304340238s ago: executing program 2 (id=3458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50)
sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
socket$tipc(0x1e, 0x2, 0x0) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10)
bind$tipc(r3, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10)
bind$tipc(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000300)="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", 0x1b3}, {0x0}], 0x3}, 0x0)
clock_gettime(0x2, 0x0) (async)
clock_gettime(0x2, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) (async)
write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="b65344da5ef1ffa5dde6972fde1c032e4c809156b7dc7532f4c865c564a990fa523f3de3734ea034dc2662650e9f0c1e665f71dec9166cba68a2532345dcaa55dda4d8c2d8ca6a82d47adc2ee1c3238520b1597dc0369b9d58009d2590dcd67a9f33baea4ddcd83a039ef3ae27935f099de070384082af25eae9d35673b49b78f13d9ee0388392bc7dfd92d0669eef9f2a5196a31612de37df1f7fda7b3565e5d9d0dbab869f7b197514cc35ae7e5c456ad716e9d35eaccf52f7adcc2d9f738943af458a22d3f8fcf4eef8a106d37b5f89354a1760851618684bdcde84"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.113675867s ago: executing program 1 (id=3459):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000001) (async)
listen(r1, 0x6)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000400)) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r4=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r5=>0x0}) (async)
r6 = accept4(r2, &(0x7f00000002c0)=@nl, &(0x7f00000001c0)=0x80, 0xc00)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff}) (async)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x7}}, 0x10) (async)
bind$tipc(r8, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0xffff, 0xffff}, {0x7}}}, 0x24}}, 0x4004800) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x10)

941.854ms ago: executing program 2 (id=3460):
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
splice(r0, 0x0, r3, 0x0, 0x80, 0x8)
write$cgroup_devices(r3, 0x0, 0x9)
write(r1, 0x0, 0x0)

938.279386ms ago: executing program 0 (id=3461):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)

885.029131ms ago: executing program 1 (id=3462):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)

789.744343ms ago: executing program 4 (id=3463):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a40000002000010027bd7000fbdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050016005e00000014000100ff010000000000000000000000000001140003007663"], 0xa4}, 0x1, 0x0, 0x0, 0x4040860}, 0x0)

789.345909ms ago: executing program 3 (id=3464):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x5)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r3, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000700)={'bond0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003000), r6)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x28008800)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100029bd7000fbffffff25000000050029000100000005002e000000000008002c000300000008002c00430500000c002d000202aaaaaaaaaaaa05002e0048000000050029000100000005002b0003000000050029000000000008000200", @ANYRES32=r10, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20008800}, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r12 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r12, 0x1, 0x34, &(0x7f0000000040)=r11, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@deltaction={0x110, 0x31, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5c86}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40045}, 0x4804)

766.007972ms ago: executing program 2 (id=3465):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfffd, 0xb, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0xfffffcba)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r0, 0x8b2c, &(0x7f0000000040))
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000fc0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034084000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a830a1620ba", 0xd8}], 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "366b05fe1266b8b19991db0200ffec372cafc1df0245ab3b6985427e0df015f0", "0fc33a4d85d71ece7fffad34ad89ccd7007af6bdbf59b7fbc3ee5881ae2e44f9", "130f276f3aaf877c4a679ad956fe38f42c9bb2159d66f04ce855466aea72bef2", "674189c6aaec459be43951c5552dffcac9ba0d20ced78e67ab670889ca9c438c", "7b15237201a742c8a21a314350593cada4c072ee3a6dd53712b4e5ba6ecdc708", "4af16c3c7fa25f5a01138170", 0xffff, 0x7, 0xbc6, 0x9, 0xffe000}})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000d14010029bd7000fbdbdf25080001000000000008003e0004000000381c8020b911de9925a8a09b7e872e400f9bac69fe1532886ec5e9175f8410def16576ec798539f1"], 0x20}, 0x1, 0x0, 0x0, 0x36b3c6ffafb53114}, 0x20040000)

750.837411ms ago: executing program 0 (id=3466):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

621.748513ms ago: executing program 4 (id=3467):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1cb2a6740b000103f2e5b791b107202ceebed5aef42187dbdf2505000000080099000a010102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4018}, 0x0)
write(r2, &(0x7f0000000000)="2e000400", 0x4)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fe, 0xffffffffffffffff}, 0x3d)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="81b641f1f3843704b6", 0x9}], 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r4, 0x72e, 0x9, 0x6})
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x3, {0x2, 0xff, 0x1}, {0x1, 0x0, 0x2}, 0x0, 0x1}, {0x3, 0x1, {0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}, 0x0, 0x1}], 0x40)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0x0, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

526.048249ms ago: executing program 2 (id=3468):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd27157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x4}], 0x1, 0x40800)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000300)=""/92, 0x20000253}], 0x2, 0x0, 0x15}, 0x2000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b6e65745f70726972202b63707520396e65f45f7072696f202d726c696d6974202b626c6b696f20"], 0x28)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, r4, 0x2000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r7, 0xd371f000)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r6, 0x12574000)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000b, 0x12, r8, 0xa6d63000)
r9 = socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x13, r9, 0x9d535000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket(0x10, 0x3, 0x0)

456.242119ms ago: executing program 1 (id=3469):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000040))

346.275452ms ago: executing program 0 (id=3470):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000780)={0x0, 0x1, 0x40}, 0xc)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socketpair(0x1, 0x3, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001a40)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@gre={{0x9, 0x4, 0x2, 0x3e, 0xfc0, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@generic={0x4a, 0xd, "d00c5260f734819495ddb9"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "de5856ecfb8ad953a5806d25c74b1077bc5c433cb4a71368465594877bc7a6da60313fe53dc92a58233a64d55ea4df636019a64b00cc41add0705653be07616312be4a5a3fceb96f0d6a92161e852acf234cc8c380d2eb1d56fb4ddf0960aa5bb70ff0076ff4bc8a70c6660145036675d660d7497e3d74e95b3210684369d3a0f68a372cf8493170801a7c6db3ffc6d7caa713e4c6e4d59921931a3f5e517265302a5c7e720a6dc6a10d56cd0c9a6794e14e6c43c4e4b6785e298afde9e07bdf2e0410b497db43064328159a3cd227a5206008a1e296ef6cbac7c02f41a9a74da18c5917fd7d4798dad30a9c772c0ac88341018ef7a637ec1ec0d58365e0eb208cb365df1c8386978324156b566dace69ee51155746bc8c607d829fd2299221cf7a003df96b7c006477c37f928ed10f03894efd7b4f4618eb6541f4f3f1ce9b54b6e8dc515cf6769879f151d63d8c27abd739ec8006e77d45cd6a07ab838ae6e3b423a37028f8b26248636acab40a15f85266848434b04bb6d36e0732666ced916d76998ab48adef8a97d779ef4fc5fa338e556e4571fe5a36ba0345ffef7a626cf08d35dc149bace760f138562796f2731dfc04f9ab0b70e821c33b7acd0cc7fda2b308bdc322a96fcdf9677f7f33ad5b426f05910c0f849e9ff1efd7e02465df8779e3feea4efed6320dea28b2c742d813ab038d8f9dc059ca26bc326dbb8afe8cc3f87690bcbc4612c63b21a6884a11ea70b7ea0b4940d0c7d55ba8a70ca37e40ec52cfcf49384bb9e3a2b627db2ecd6df5e7f608cdc4b382bc9e93fec704919de0a645ff453cb2bdae7260ab2c87d7b036e0642cbbe6bfcc63a267a5bfa1d313609a53dac21c55cafb67c5c9af6aca7f7eefde15f8d17cb90eb173521b0190c50ca5126ea428f5d10b3e1706c92ef2bd226965edf67d5fe0eb958050b3d8b87ee9943dffe10cc4c8d122ca2abe9eae35b30d08c732f1a83440fa9801834d0164256bf9b6357b374f23093fe142e327d5ec314531ac7ddb80363dd052202a37936e684ec37d909e1b0da5ef9db7ee0cf26b40c8d3846f92f0716b3b9a17f86d34911e0dfb553eceaf97335799019dd86acf88dc2d081be6d110af1b9d86b74f219f07922e118c68e561112dcf4c2d0386e1cfe9be3c03000ce8244c5e747dba2684f2643da1a797bd1f34ca9ec64a45922bd74c7ceb63fc884114524bccb83a3c8f5263ebc43e0ad538b910138c5d86e469d4051ba1c9f57ec81e01e8e6a60ace5e15a69f1c3f4eb3b2369f84435495809cc09a74fc5a7c14214b5b00bb159d7f823838cc567e1d74fd4e6e43cb704c5747ea03b4d33ee26443895a7898fae0e96db69d93ee5778dee1eb3a3960097469ad68b7fe72a3b118c2496f0dba59ba906d977af3213615b3f9258d964d53b88c01b4d94d1eb34aa2600c94690024de9a28475564806bd08329c892d18d8b1569398bc9196c3d5f91ea12006361ff3f8c738c4bffd678e9df38902f4e4ae1f9be273114a1b2b02c5ad538f251352bb47d6ae0ba37bc12350df611d714a14c90652a128101fefa71be7a52a18628c5d6098aa26809383276c2c362bbdb96dea3abf37a5dac2c9406e030e0601cb70a9e733738a44e54ed82d9217e45dd16b31300b5551e7363cfc20b5245356788d4f17526e1bfdfb0ae182a8781f7878892c5d35fe765f4b3164a811764f42de49e84adf19ac5c5d12808decc095209e3637a5fd84bcc95656a108790543d553af1cf810fbfd75b266775bd56d950393cac16ddfad3847171801700497976406e06d2a1213fb4bb59e27c1cc42b365308af5a92a8300f875629a0107dc1c9161f8eef3ad43241fe94a48d829b29f3434789d42cbeb9bef87cb2f81f1d09e24f798275682776f4913151cc39ffc4d6aa40411e1fbd32b43fa74e03a77831abef0c0f812284370dd73fcca909f1d1eca3230130a69167cf71241e038772de004192e50042b286a96f39947a67f15dafad4aba91804320f7e05254f96bfe6dddb95bd1da97f21a93bf1afb8ce13f1de3fcb2ce661d4d735eab43ad36593edacdc340c3cf5526c3d32933beec823a2778808b6b83ed81f7b6668ec7a7d0fccdf238afee31d8747eebe8d5b41dc2bd30d880a9d0716b41a934d3b6a27c9608b2da0c4ed92b9915339fdaef8ef5144fb7bd41b1bb5d1a8b25f488f93c47c0a51ea4cf4de899c74945c4fddfce0881fcb8fb2a2094f89ca38b30b3a246bc4fcc0a37ad9d021a42c338addf2f9165f145aa9f30a3310f771d00c312457cf32c45932ed7ce1edc4666139634ab78d12c6f0b03387a2278bbad4d507a159f5e941bf2344da3638da433dd66a6e90dfe3b17a12d4b238ca42773c6275b2065ef50a0e4afe5d8fe37fc60fe58b4f38761ef7cd5827f06eb3704a9741b91b98cb90634e1a30cc189d7f1bfb57c97ddb96ffabcf9b663a1e36ec3d0836fffbd399e1d639b442f8b2adfba2626450a5310a1c84f42ab08ecc3eee72e92f14eb897bf7008f29761559b46974d0188e582cecd0417ff3a629f14ad8b817b2753f13a0f0d7944e5a1e035684fb551eac6b1011a14c9f8288732c748711315db2a67ef5698d6390e361bef15075c7ae7561b170313281d437359b3df141547aa1e604692af6bbceb0e3676d331b6d1bc1df5c299b8587ce7368729b18477769bec5d4b884fee392123c76a5d4dedef4ce51fa222f9be0f367bd7778f4b5df1d5e258e12d1c44faf1a7cd98f5cb9d685859acec9eee14778eef27f71df52f143d0002f62fda2128c48e8e880ebb3cb74c5b5e6396abd82085c60df12f69588f26a1b5e140e2d9bc3b4848a126214979f3a99438a1907a13488eea1caa22db1e06985e4c7c9f352dfb06dac65ae101c1520c4a4479ff8decee492fbcb8930babadcb92b9270bdfe4c37a266e6ad34e55a45a11ddbc4a34f1c5710d6322ea466bb7788d58d216e2bb31d77563a0bceffefeb0df85b113c8afbab8068d5a57b0914e9df998ad0bc50229924d854df548b52299ad565ae26728fe9cc993905f56aa5ab5593d823fd7fc4b341f20f0fac93c737abb66cd8408e96341b7c00701d91ea3ee2cdbf1ef04f5bcd37df1b952840ad10574bdd373c7e42a94d9dc0f12cc617b9dd6a019e482434e5d0e033d8408c649e878d4239fe524613fb10643bc088d3262fabdf7b29d0c6e282a9a956246be350fafb41d588407085ed5edc99ae771d5130f838842742af8218d22190b2034d2fa20c03cf974b7ac02f211cb04561c530b99034bade030f8b0d206ad784987428a8502b3e4059548645e94323a57be556294affa1fe67921509bec1e49108c760b892e2022588dc41d9b644acf4fe14db6489ef5ba06601010534c25a8593976d16cc69dc50bff65c8a6fa11ce70700814d3bd63d4274ccaded132e245b040700bb774524b37ff837dfc67910410a467db6911fea4be16207f31cdc8647bc075bf052fee1a0c486916865d06cf9a2f29324b076d3f30b2f2600aac0dc6e4887e716070597160697ad686bf87b5fba3b3a734012411d8074729a90e5431ab547251041db7b6c1d388459fb9e6f3541ca18df1dcd0625275aed5f6cab9660240cb8200ad729db902191f19ab17481f5d34d5f14f9b5d2139463a8b00cc07bca277b26e30af23ce65f706a2017005086f28f86cc6e48da140de900684b57bb34a68e99a353f75322f080c6d450ff9671724d55706ce564f54939ee4f5454b90a1ee97fbc19d83a6f5a940cc0ce030540604088a94d27caace7a8b3710ce602314ca1af2900898c6ecbed742f41c29b168b9fe64898b340769d7f9e19d2381020f5546611b25c75379cf260d8b2478f5ca5e6e58b33bb41d36dab69cd3534e84bdc8d788a6ead4672e4ebcf49b0c64713e3dd8afe2af306dac9e99f677ba51f16f1d6f0d01862cfb3c49ffe9b10f2d504f429e2df60cbbab7ea60637590c6bfe2521164bc45097467d0a87b206dd85c77edea2221992f4e1085f272256301f0e6946ada914ee81828278f741cebcd495ef05726f66e24c303d8d21a13864b6c43e7fd7ad891e6994a99fb47ed01e9ded895e776d2377b3a02b51962e8651302e3a11449594ff430efc5785afaffa9b68e4ad889b476f7eb39fa57c46798529b797918a0b3e78d812f233d820694b251f79775fc9ecb0ee11e73c59c4603e2db52773432d85ace4c1cb86725d2c6c736350c69de457d52c276489237332347db26b9bca35f57846b382fe81b0ada2c4bf8dd19b95eb7a1121320d20eed7e0bda5e24af54c012ee730f12a9b00887bcbf6584a86800ba644431bbc7accb1158bedc50e48ce1b11190314942d643e28a69a28586d1eb804804a38de1534c0cdc10e46f03e127c8bf35e5bdee5e7aa0b2bc3c1107aaece26c788caab2206950068280741098f271ca420b9832ddb872bb8d265cc71b47deb71de437e957e373621ddb80b5f25e0c131b5b94a6a4145cf708e620f029331f1207c5536e2867cb7b73ee0961cb84a6a3ee3aba5487db67e8e99e08ffd50f0cb1919f1833a5dd6e5ff70876211950962e31d1af3aa9fd359a644d9fccb49fbdbfb38556a6a68a278fd1552e8c15f82da7c21d0a4552f54628884b774255e077222152e0e35927e0ec6d98aa7c32c9d8340fddf094f140b0092265ee0ae7ed735355008ea0b38240a7dda4b9faca1a6d3f9be1242c906f12a0a564c3466fb09cf2e4fdecb3101b78dac6363ffe013088c6bae99f4d2b041243eff4c1e9f20c2adf99ffcf4d55ca2fbfd9ae1301d7c34fb2203d2c995d416c350b76ba66e009ce2c822c7bfba86e7f32adef47c1736051531eee9ca309c5bbdfea0bb5b2d79b7d5a23915e16cc07165dddad40fb91782b274a3f54d78b142504ca7435306829b979b7b71cc4780e26d43cc18b83d866e5960c2b8a5010a7c74d288cfffd0350cbc020e6eb02230f00387e0551e925f483eeaf790db1a1a633ee0e1c2db8308cf018e1bc74cebcfb57d1a1f15417f64d6e0851549062f9fdda42d3f50e970b0dc8c95283a39ceaf5338b6b999a10e332abbf701d77b4837a4976ecea0e9840477d2fa5e4835b6fb3b6fdd76f1166a5c735083b14d5f7bdfa47b4c3935ff95cb8e19ae9dbcb9e3aa91ffc92049416ba04ea9deeac997f55dd76ef156e568b12922793e3ec04d9647e9a2b016c5b3748a11b5e6ddb7f524f9af8e8e5236619ad03a855f6a"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x40, 0x2, 0x0, 0x0, 0x1, 0x4}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x3, 0x1, 0x0, 0x1, 0x5, 0x4}, 0x2, {0x9, 0x8, 0x2, 0x7, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "f1522524c89b57d29527f0e7e203bb0b43f0b24349413fdec9665acfcf68d935e813c7e84a2fda04201d728132ed6bc19e0d5a9f2cd60c821827986fe06033f6441a7439b3d41d5029af96be80faf8300d9a206d62539cc283cf08536bac87b9978e8267dc6601f67c26b5b830ae7db0045cc8e1b4d54e6173aa0ef6abff6f1d6488f5add73c475039a8b920a80be00234f4ff3fd2ce7ecce1f912da248ec9a9d226f252a6152b377bc92b600b169d033a4cf7881d2f63a752fb4d2f08de25eca7d1cbe390bb5e9f74931b67dbac3b4ccb44331cf4a7acb3d14c073ecb"}}}}}, 0xfce)

305.365108ms ago: executing program 1 (id=3471):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{r0, &(0x7f0000000280)='\x00', 0x200, &(0x7f00000002c0)={@align=0xe, {0x2, 0x7, 0x2, 0x5}}, 0x1, &(0x7f0000000300), &(0x7f0000000440)=0x7f}, {[0x9, 0x5615, 0x3, 0x8]}, 0x9, 0xd8, &(0x7f0000000480)=""/216})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240), 0x0, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
ioctl$sock_ifreq(r0, 0x8937, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044804)
syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb8900180000fe880000000000000000000000000001fc0200000000000000000000000000005c0200000000000004"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000180)=""/77, &(0x7f0000000080)=0x4d)
recvmsg$unix(r4, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000130001000000000000e2ffffff0000021139673eae27ebf1f009dbefc63598ac86f95ddaa4bd96105f776f66949538ea99ed41c531600ed6d0050c5fe3b29f2c579497d3ce9dbcbe2347e6461e5de88ea3462dfc54155498f441ef22689197cbda5b93c7c2cde3a561d01a80573bade14e894971f2260915a0e0e562de267594d68bca359e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="14eb47f9baec7e78ef30"], 0x3c}, 0x1, 0x0, 0x0, 0x18880}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'wg1\x00'})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'wg2\x00'})

273.557573ms ago: executing program 4 (id=3472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
r1 = socket(0x10, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', <r4=>r3, 0x29, 0x1, 0x53, 0x1000004, 0x0, @local, @mcast2={0xff, 0x5}, 0x10, 0x8, 0xe3e1, 0xcfe}})
recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000a40)=""/238, 0xee}, {&(0x7f0000001380)=""/4097, 0x1001}, {&(0x7f0000000880)=""/254, 0xfe}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2120, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000140)="24000000010006", 0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@union={0xdc, 0x6, 0x0, 0x5, 0x1, 0x5, [{0x9, 0x0, 0x2}, {0x1}, {0x8, 0x5, 0x40}, {0x1, 0x2, 0xd}, {0x7, 0x3, 0x8}, {0x9, 0x4, 0x1}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x2}]}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x9e}, 0x28)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x9}, 0x8)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x1, 0xfffffff8, 0x4}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
connect$can_bcm(r1, &(0x7f0000000440)={0x1d, r4}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}}}}]}, 0x38}}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x4)

29.85024ms ago: executing program 1 (id=3473):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x14, r2, 0xd}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff11d788b30ef2b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f0000000780)="427449fe2897ff2d31a79c31468f3474bfba5e8b5248f24721d5da921684ae81df6ce5c2a438bec3512f08b85fd1fe0a36638cadb0c12cce9009c67d079d62b29223e517895c2513990da07a7925460e8f346b311f3b62538b5d7be03c998796199269323122b82035608384cd8a77518e72e5ffa19aeaaa8713e4c03123cf4dc9a69ec06ecd5304fca5e5b120212f2710ce8696af3dec976aea81fb73386033bb7790afc27bdf7e7e067f1745cd6c9e12d72725d1585b3a565db7685bc8a01bc86ff60a25fa1136067ef552c4fb1b", 0xcf}, {&(0x7f0000000880)="8568cd41d0c8a7f10def4b042c23f004460c1eedd1b1087b84a62affd4ab37e9b79d663e63927568b835702181f5d082246bfb6bbe0f387373cbb241407f7bba0863b4decc956236cf2eb8111ee0941b0332d93f73859a2da61208914d9eda3701d6522a573ab10d92bfea98f17afb17c4504604ef65fc9341d2da7f046ab84bfb3b9e8a41ca3fef4dc01b2f1e39357e337a2a0b67bd5270fc8819da82185d1241441a79be4028581e2e33f6d10a596d261953308f769025346afe68961f937cbe70c99fbcce0bd66c7239a786dc77ff7a62c797d0eb4b9608d5bf40efc5e19d755b94bf9c29df", 0xe7}, {&(0x7f0000000c40)="6ad84a0beca61953479d93776519fd63938fbbe27dc1b67e52b110557498f8c223f01d3844f2a636fb51faf3f7c869ca131ed0278bf03e839b57acbac4a014df5cdf13f940a39ca21fb365f5289fc2392f35b7f738165ee6721aaa23d5b453158f4b9f41d71f6890b610a9fb84625b94e0916d623eb098fbde5466014ac44e86702bc91646896bc447c8ab7b64887e99e3021172b084469ebac050a7", 0x9c}], 0x5}, 0x4)

0s ago: executing program 0 (id=3474):
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x76, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061186d000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000e80)={0x2d8, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf918}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1569}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x95}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x717d}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xebe}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfafa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20008810}, 0x48040) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(0x0, r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="7961fd4ca8be1960ab31fd2d00000000520e0fa5eb753c94e7d5f3c6159c22f1e9bd06f7090946913ebf4e27bcf6c899df0ad29f48807fde98fdbc977f066b17aef8beef158519c3f5a3d9a02124a424c9bc269b91ef92c74e42fdaecbff802dc516e49765c94066f766ba5f840680e7330317781b93ea631b64434396553f7ea78383bd77eadae314193da2e8455945b674a3d54bec557ce442d5879b2737b422861c4ec012a280e230dfcb87da65cd8109f5739063a7c1d98f819a12d349e88ee26f660aca411e3a06"], 0x20}}, 0x4000054)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6}]}, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r7, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r2, 0x0, 0x80) (async, rerun: 64)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (rerun: 64)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x4a}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x423}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x51a}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02f400000400000008000000012274401e1c9b92c39a5a72800374a4dafe08297e6cfe21b5edfb33011870588d11b57d5b513860394ae509a813d39af30687065db8f242f1a347c8a99377c9b5da100557f16fb8a5e216acffdca1e5788b53a281eb48e1eadaf30671533c78976cfe4bfc20feffc035751230cc39f12764c0c5791ac6a7ab4317871f0e1ffcb6192510085f4d262f615b7f529e52accfa92775f61a34c6d8678549cf5808c14af311365300"/206, @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="010000000100"/28], 0x50)

kernel console output (not intermixed with test programs):

1.042297][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1773'.
[  321.694864][T12842] xt_hashlimit: overflow, try lower: 18446744073709551615/0
[  321.884609][T12850] bridge_slave_1: left allmulticast mode
[  321.904798][T12850] bridge_slave_1: left promiscuous mode
[  321.917791][T12850] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.938199][T12850] bridge_slave_0: left allmulticast mode
[  321.943911][T12850] bridge_slave_0: left promiscuous mode
[  321.985614][T12850] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.629303][T12893] syzkaller0: entered promiscuous mode
[  322.634993][T12893] syzkaller0: entered allmulticast mode
[  325.120104][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  325.128203][    C0] lec:lec_tx_timeout: lec0
[  325.133087][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  325.160290][T12941] __nla_validate_parse: 5 callbacks suppressed
[  325.160306][T12941] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1801'.
[  325.468754][T12975] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  325.482398][T12982] lo speed is unknown, defaulting to 1000
[  325.805029][T13002] validate_nla: 1 callbacks suppressed
[  325.805048][T13002] netlink: 'syz.0.1815': attribute type 3 has an invalid length.
[  325.933473][T12987] lo speed is unknown, defaulting to 1000
[  326.071862][T13007] netlink: 'syz.4.1817': attribute type 1 has an invalid length.
[  326.079953][T13007] netlink: 'syz.4.1817': attribute type 2 has an invalid length.
[  326.740030][T13028] lo speed is unknown, defaulting to 1000
[  327.166582][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'.
[  327.218936][T13057] tls: option downdelay: invalid value (18446744073709547007)
[  327.226576][T13057] tls: option downdelay: allowed values 0 - 2147483647
[  327.235811][T13057] tls (unregistering): Released all slaves
[  327.365895][T13061] 8021q: adding VLAN 0 to HW filter on device bond8
[  327.686177][T13075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1836'.
[  328.291475][T13092] x_tables: ip_tables: ah match: only valid for protocol 51
[  328.316623][T13088] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1838'.
[  328.359082][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1838'.
[  328.389876][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1838'.
[  328.410950][T13088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1838'.
[  328.576887][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'.
[  328.683990][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'.
[  328.693232][T13105] openvswitch: netlink: Flow key attr not present in new flow.
[  328.703273][T13105] sctp: [Deprecated]: syz.0.1845 (pid 13105) Use of int in maxseg socket option.
[  328.703273][T13105] Use struct sctp_assoc_value instead
[  328.720236][T13113] netlink: 'syz.1.1846': attribute type 2 has an invalid length.
[  328.776779][T13117] netlink: 'syz.4.1848': attribute type 1 has an invalid length.
[  328.829980][T13117] netlink: 'syz.4.1848': attribute type 2 has an invalid length.
[  328.926800][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1849'.
[  328.949765][T13127] netlink: 'syz.2.1852': attribute type 1 has an invalid length.
[  329.035740][T13127] 8021q: adding VLAN 0 to HW filter on device bond6
[  329.130639][T13129] lo speed is unknown, defaulting to 1000
[  329.953793][T13190] netlink: 'syz.3.1863': attribute type 1 has an invalid length.
[  330.035873][T13182] lo speed is unknown, defaulting to 1000
[  330.147927][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  330.156074][    C0] lec:lec_tx_timeout: lec0
[  330.160806][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  330.308803][   T29] audit: type=1800 audit(1774182478.800:4): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1864" name="cgroup.controllers" dev="tmpfs" ino=1844 res=0 errno=0
[  331.472115][T13217] bond7: entered allmulticast mode
[  331.518484][T13217] 8021q: adding VLAN 0 to HW filter on device bond7
[  332.129177][T13242] IPVS: set_ctl: invalid protocol: 50 172.20.20.63:20004
[  332.539977][T13254] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.560054][T13254] __nla_validate_parse: 2 callbacks suppressed
[  332.560072][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'.
[  332.589598][T13256] bridge0: entered allmulticast mode
[  333.118433][T13274] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  333.148933][T13273] lo speed is unknown, defaulting to 1000
[  333.571277][T13288] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  333.647986][T13290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1890'.
[  333.751089][T13296] netlink: 'syz.2.1891': attribute type 2 has an invalid length.
[  333.830559][T13296] hmac(sha224): entered promiscuous mode
[  334.067790][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'.
[  334.143279][T13313] netlink: 'syz.1.1896': attribute type 39 has an invalid length.
[  334.183940][T13303] lo speed is unknown, defaulting to 1000
[  334.234894][T13317] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  334.479558][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'.
[  335.084512][T13343] lo speed is unknown, defaulting to 1000
[  335.167944][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  335.176112][    C0] lec:lec_tx_timeout: lec0
[  335.180867][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  335.500417][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1909'.
[  335.703100][T13370] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1910'.
[  336.000996][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'.
[  336.027095][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'.
[  336.080781][T13391] FAULT_INJECTION: forcing a failure.
[  336.080781][T13391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  336.108978][T13391] CPU: 0 UID: 0 PID: 13391 Comm: syz.3.1916 Not tainted syzkaller #0 PREEMPT(full) 
[  336.109009][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  336.109028][T13391] Call Trace:
[  336.109036][T13391]  <TASK>
[  336.109046][T13391]  dump_stack_lvl+0xe8/0x150
[  336.109084][T13391]  should_fail_ex+0x412/0x560
[  336.109122][T13391]  _copy_to_user+0x31/0xb0
[  336.109150][T13391]  simple_read_from_buffer+0xe1/0x170
[  336.109186][T13391]  proc_fail_nth_read+0x1bb/0x230
[  336.109222][T13391]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  336.109257][T13391]  ? rw_verify_area+0x2a6/0x4d0
[  336.109280][T13391]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  336.109313][T13391]  vfs_read+0x20c/0xa70
[  336.109335][T13391]  ? fdget_pos+0x246/0x320
[  336.109360][T13391]  ? __pfx___mutex_lock+0x10/0x10
[  336.109386][T13391]  ? __pfx_vfs_read+0x10/0x10
[  336.109410][T13391]  ? __fget_files+0x2a/0x420
[  336.109446][T13391]  ? __fget_files+0x3a0/0x420
[  336.109477][T13391]  ? __fget_files+0x2a/0x420
[  336.109519][T13391]  ksys_read+0x150/0x270
[  336.109545][T13391]  ? __pfx_ksys_read+0x10/0x10
[  336.109579][T13391]  do_syscall_64+0x14d/0xf80
[  336.109602][T13391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.109623][T13391]  ? clear_bhb_loop+0x40/0x90
[  336.109655][T13391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.109675][T13391] RIP: 0033:0x7ff7b8d5cfce
[  336.109694][T13391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  336.109711][T13391] RSP: 002b:00007ff7b9d13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  336.109732][T13391] RAX: ffffffffffffffda RBX: 00007ff7b9d146c0 RCX: 00007ff7b8d5cfce
[  336.109746][T13391] RDX: 000000000000000f RSI: 00007ff7b9d140a0 RDI: 0000000000000008
[  336.109758][T13391] RBP: 00007ff7b9d14090 R08: 0000000000000000 R09: 0000000000000000
[  336.109770][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.109781][T13391] R13: 00007ff7b9016038 R14: 00007ff7b9015fa0 R15: 00007ffd638e6408
[  336.109813][T13391]  </TASK>
[  336.323688][T13367] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  336.348405][T13367] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  336.437848][T13397] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1921'.
[  336.448211][T13397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1921'.
[  336.516698][T13367] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  336.526216][T13367] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  336.573132][T13367] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  336.585737][T13367] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  336.632825][T13367] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  336.639045][T13367] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  336.672605][T13405] team0: entered promiscuous mode
[  336.677680][T13405] team_slave_1: entered promiscuous mode
[  336.684041][T13405] geneve0: entered promiscuous mode
[  336.692404][T13405] 8021q: adding VLAN 0 to HW filter on device team0
[  337.109215][T13422] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) !
[  337.150333][T13425] netlink: 'syz.2.1929': attribute type 23 has an invalid length.
[  337.307462][T13439] SET target dimension over the limit!
[  337.579782][T13452] __nla_validate_parse: 4 callbacks suppressed
[  337.579801][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'.
[  337.836285][T13468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1937'.
[  337.895543][T13470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1938'.
[  337.928072][T13468] lo speed is unknown, defaulting to 1000
[  338.130480][T13486] ip6tnl4: entered promiscuous mode
[  338.813071][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'.
[  338.891567][T13512] lo speed is unknown, defaulting to 1000
[  339.055215][T13537] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1957'.
[  339.399973][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'.
[  339.593773][T13554] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1963'.
[  339.602965][T13554] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1963'.
[  339.612181][T13554] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1963'.
[  340.694751][T13611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1981'.
[  340.737461][T13613] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  340.803663][T13612] lo speed is unknown, defaulting to 1000
[  340.894894][T13619] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[  340.911214][T13619] netlink: 'syz.2.1983': attribute type 2 has an invalid length.
[  340.942275][T13617] delete_channel: no stack
[  341.524157][T13649] 8021q: adding VLAN 0 to HW filter on device bond9
[  341.557970][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6380 ms
[  341.566082][    C0] lec:lec_tx_timeout: lec0
[  341.571096][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  342.374573][T13685] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  342.557664][T13691] netlink: 'syz.0.2003': attribute type 1 has an invalid length.
[  342.574075][T13692] ipvlan2: entered allmulticast mode
[  342.580023][T13692] batadv_slave_1: entered allmulticast mode
[  342.805996][T13701] __nla_validate_parse: 7 callbacks suppressed
[  342.806015][T13701] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2006'.
[  343.002710][T13714] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.031483][T13714] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  343.050997][T13714] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  343.126291][T13714] syzkaller0: mtu less than device minimum
[  343.304104][T13721] lo speed is unknown, defaulting to 1000
[  343.625500][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'.
[  343.696675][T13734] macvtap1: entered promiscuous mode
[  343.715332][T13734] veth1_to_hsr: entered promiscuous mode
[  343.724138][T13734] macvtap1: entered allmulticast mode
[  343.729958][T13734] veth1_to_hsr: entered allmulticast mode
[  343.751255][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'.
[  343.913374][T13744] netlink: 'syz.3.2019': attribute type 21 has an invalid length.
[  343.913374][T13743] netlink: 'syz.3.2019': attribute type 21 has an invalid length.
[  343.913401][T13743] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2019'.
[  343.966944][T13744] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2019'.
[  344.276755][T13748] netlink: 'syz.2.2021': attribute type 27 has an invalid length.
[  344.289088][T13748] bond4: left promiscuous mode
[  344.293902][T13748] bridge2: left promiscuous mode
[  344.321298][T13748] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  344.339860][T13748] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  344.361428][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'.
[  344.380884][T13748] bond7: left allmulticast mode
[  344.388374][T13748] ipvlan2: left allmulticast mode
[  344.403916][T13748] batadv_slave_1: left allmulticast mode
[  344.415077][T13748] veth1_to_hsr: left allmulticast mode
[  344.427551][T13748] veth1_to_hsr: left promiscuous mode
[  344.439881][T13748] macvtap1: left promiscuous mode
[  344.447973][T13748] macvtap1: left allmulticast mode
[  344.565724][T13758] netlink: 'syz.4.2022': attribute type 21 has an invalid length.
[  344.598139][T13758] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2022'.
[  344.649423][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'.
[  344.878670][T13775] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  344.919403][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'.
[  345.390858][T13797] netlink: 'syz.2.2032': attribute type 1 has an invalid length.
[  345.591626][T13805] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  345.610546][T13807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2035'.
[  345.765209][T13817] geneve2: entered promiscuous mode
[  345.771745][T13817] geneve2: entered allmulticast mode
[  345.782309][   T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  345.803415][   T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  345.827995][T13819] netlink: 'syz.4.2040': attribute type 1 has an invalid length.
[  345.860284][   T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  345.931168][T13819] bond8: entered promiscuous mode
[  345.936804][T13819] 8021q: adding VLAN 0 to HW filter on device bond8
[  345.944537][   T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  346.152214][T13848] batman_adv: batadv0: Removing interface: gretap2
[  346.422347][T13862] bond0: ARP target 170.170.170.170 is already present
[  346.430431][T13862] bond0: option arp_ip_target: invalid value (2863311530)
[  346.637641][T13873] bond5: (slave lo): Releasing backup interface
[  346.649389][T13873] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  346.711711][T13873] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  346.733829][T13876] team0: No ports can be present during mode change
[  346.903958][T13888] netlink: 'syz.1.2058': attribute type 11 has an invalid length.
[  346.928320][T13888] netlink: 'syz.1.2058': attribute type 4 has an invalid length.
[  346.990162][T13886] lo speed is unknown, defaulting to 1000
[  347.317891][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  347.325963][    C0] lec:lec_tx_timeout: lec0
[  347.330720][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  347.497613][T13903] lo speed is unknown, defaulting to 1000
[  347.857131][T13889] bridge4: port 1(geneve3) entered blocking state
[  347.864217][T13889] bridge4: port 1(geneve3) entered disabled state
[  347.876986][T13889] geneve3: entered allmulticast mode
[  347.885106][T13889] geneve3: entered promiscuous mode
[  348.843354][T13941] xt_TCPMSS: Only works on TCP SYN packets
[  348.878905][T13939] lo speed is unknown, defaulting to 1000
[  349.088473][T13942] syzkaller1: entered promiscuous mode
[  349.094135][T13942] syzkaller1: entered allmulticast mode
[  349.135053][T13947] netlink: 'syz.0.2073': attribute type 5 has an invalid length.
[  349.562832][T13964] __nla_validate_parse: 6 callbacks suppressed
[  349.562854][T13964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2078'.
[  349.579507][T13964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2078'.
[  349.588767][T13964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2078'.
[  349.605746][T13964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2078'.
[  350.256173][T13990] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2086'.
[  350.488234][T13979] lo speed is unknown, defaulting to 1000
[  350.488252][  T134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.537198][  T134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.564467][  T134] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.597673][  T134] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.734035][T14011] netlink: 'syz.1.2091': attribute type 1 has an invalid length.
[  350.994326][T14012] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  351.059313][T14012] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  351.106452][T14012] bond11: (slave ip6gre2): making interface the new active one
[  351.129936][T14012] bond11: (slave ip6gre2): Enslaving as an active interface with an up link
[  351.487040][T14031] lo speed is unknown, defaulting to 1000
[  351.715804][T14045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2098'.
[  351.736762][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'.
[  351.809925][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'.
[  351.829566][T14050] openvswitch: netlink: Flow actions attr not present in new flow.
[  351.832690][T14051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'.
[  352.040586][T14055] sctp: [Deprecated]: syz.2.2100 (pid 14055) Use of int in max_burst socket option.
[  352.040586][T14055] Use struct sctp_assoc_value instead
[  352.503027][T14079] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2105'.
[  353.077982][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  353.086069][    C0] lec:lec_tx_timeout: lec0
[  353.090829][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  353.718434][T14131] lo speed is unknown, defaulting to 1000
[  354.113879][T14162] team0 (unregistering): Port device team_slave_0 removed
[  354.135883][T14162] team0 (unregistering): Port device team_slave_1 removed
[  354.384716][T14154] lo speed is unknown, defaulting to 1000
[  354.801752][T14196] tipc: New replicast peer: 255.255.255.255
[  354.811115][T14196] tipc: Enabled bearer <udp:syz1>, priority 26
[  354.817589][T14198] netlink: 'syz.2.2136': attribute type 1 has an invalid length.
[  354.828804][T14198] __nla_validate_parse: 6 callbacks suppressed
[  354.828850][T14198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2136'.
[  355.022422][T14205] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2139'.
[  355.541438][T14206] lo speed is unknown, defaulting to 1000
[  355.732234][T14207] syzkaller1: entered promiscuous mode
[  355.737813][T14207] syzkaller1: entered allmulticast mode
[  355.975484][T14235] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  355.988441][ T9218] tipc: Node number set to 287582406
[  356.113346][T14241] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  356.124051][T14241] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2149'.
[  356.166453][T14237] lo speed is unknown, defaulting to 1000
[  357.605161][T14281] sch_fq: defrate 4294967293 ignored.
[  357.634135][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2159'.
[  357.751641][T14283] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2160'.
[  358.029813][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'.
[  358.097902][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  358.106000][    C0] lec:lec_tx_timeout: lec0
[  358.110697][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  358.263348][T14310] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2170'.
[  358.327321][T14310] netlink: 'syz.3.2170': attribute type 7 has an invalid length.
[  358.347489][T14310] netlink: 'syz.3.2170': attribute type 8 has an invalid length.
[  358.443112][T14317] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  358.494104][T14323] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2175'.
[  358.562923][T14319] team0: Port device dummy0 removed
[  358.571287][T14330] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2176'.
[  358.707744][T14335] gre0: entered promiscuous mode
[  358.714013][T14335] gre0: entered allmulticast mode
[  358.765848][T14344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2182'.
[  358.844580][T14347] netlink: 'syz.4.2179': attribute type 61 has an invalid length.
[  359.066797][T14353] netlink: 'syz.0.2183': attribute type 83 has an invalid length.
[  359.383722][T14358] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  359.419396][T14358] bond7 (unregistering): Released all slaves
[  359.535040][T14362] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  359.542632][T14362] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  359.850139][T14397] netlink: 'syz.0.2197': attribute type 30 has an invalid length.
[  359.972001][T14403] __nla_validate_parse: 7 callbacks suppressed
[  359.972020][T14403] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2199'.
[  360.152859][T14410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2202'.
[  360.232943][T14423] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2204'.
[  360.351898][T14426] lo speed is unknown, defaulting to 1000
[  360.378595][T14433] netlink: 'syz.4.2205': attribute type 29 has an invalid length.
[  360.403322][T14427] netlink: 'syz.4.2205': attribute type 29 has an invalid length.
[  360.420335][T14427] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2205'.
[  361.280150][T14471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2219'.
[  361.331152][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2219'.
[  361.340906][T14468] netlink: 'syz.0.2218': attribute type 1 has an invalid length.
[  361.370714][T14468] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2218'.
[  361.420318][T14472] bond0: entered promiscuous mode
[  361.425422][T14472] batadv_slave_0: entered promiscuous mode
[  361.469805][T14472] bond0: left promiscuous mode
[  361.483582][T14472] batadv_slave_0: left promiscuous mode
[  361.738576][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'.
[  361.739665][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'.
[  361.768686][T14479] netlink: 'syz.3.2220': attribute type 30 has an invalid length.
[  361.771622][T14480] netlink: 'syz.3.2220': attribute type 30 has an invalid length.
[  361.851871][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'.
[  361.868013][T14475] lo speed is unknown, defaulting to 1000
[  361.878811][ T6228] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.898085][T14479] netlink: 'syz.3.2220': attribute type 30 has an invalid length.
[  361.907606][ T6228] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.993277][T14480] netlink: 'syz.3.2220': attribute type 30 has an invalid length.
[  362.019612][ T6228] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  362.029032][ T6228] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  362.159440][   T29] audit: type=1800 audit(1774182510.650:5): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2226" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2218 res=0 errno=0
[  362.335232][T14493] xt_CT: You must specify a L4 protocol and not use inversions on it
[  362.546217][T14510] netlink: 'syz.4.2229': attribute type 1 has an invalid length.
[  363.020516][T14538] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  363.069798][T14510] bond9: option updelay: invalid value (18446744072924056005)
[  363.077335][T14510] bond9: option updelay: allowed values 0 - 2147483647
[  363.112454][T14510] bond9 (unregistering): Released all slaves
[  363.118597][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  363.118627][    C0] lec:lec_tx_timeout: lec0
[  363.131288][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  363.388620][T14564] netlink: 'syz.0.2240': attribute type 10 has an invalid length.
[  363.906763][ T9232] IPVS: starting estimator thread 0...
[  363.982831][T14590] block nbd1: NBD_DISCONNECT
[  364.018293][T14595] IPVS: using max 25 ests per chain, 60000 per kthread
[  364.168453][T14609] block nbd0: Unsupported socket: should be TCP or UNIX.
[  364.333765][T14618] lo speed is unknown, defaulting to 1000
[  364.633734][T14636] netlink: 'syz.4.2261': attribute type 11 has an invalid length.
[  365.088482][T14664] __nla_validate_parse: 8 callbacks suppressed
[  365.088503][T14664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2269'.
[  365.145536][T14668] lo speed is unknown, defaulting to 1000
[  365.160917][T14666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2269'.
[  365.178583][T14670] xt_hashlimit: size too large, truncated to 1048576
[  365.238402][T14675] xt_bpf: check failed: parse error
[  365.333900][T14679] validate_nla: 3 callbacks suppressed
[  365.333920][T14679] netlink: 'syz.0.2272': attribute type 10 has an invalid length.
[  365.394256][T14666] bridge_slave_0: left allmulticast mode
[  365.431691][T14681] netlink: 'syz.0.2272': attribute type 10 has an invalid length.
[  365.448649][T14666] bridge_slave_0: left promiscuous mode
[  365.454777][T14666] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.475109][T14666] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  365.494659][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'.
[  365.508871][T14664] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  365.672788][T14679] team0: Port device dummy0 added
[  365.778902][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2274'.
[  365.803062][T14681] team0: Port device dummy0 removed
[  365.832140][T14681] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  366.260149][T14711] xt_l2tp: missing protocol rule (udp|l2tpip)
[  366.330108][T14715] netlink: 'syz.2.2280': attribute type 11 has an invalid length.
[  366.338445][T14715] netlink: 'syz.2.2280': attribute type 4 has an invalid length.
[  366.346204][T14715] netlink: 199780 bytes leftover after parsing attributes in process `syz.2.2280'.
[  366.438739][ T9249] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  366.588859][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2283'.
[  366.692862][T14725] 8021q: adding VLAN 0 to HW filter on device bond7
[  366.761299][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2282'.
[  366.864952][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  366.977426][ T9249] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  367.085982][T14753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.125629][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'.
[  367.135315][T14756] netlink: 'syz.1.2290': attribute type 26 has an invalid length.
[  367.178182][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'.
[  367.471368][T14770] IPVS: length: 211 != 24
[  367.585146][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2295'.
[  367.598200][T14776] netlink: 'syz.3.2295': attribute type 39 has an invalid length.
[  367.888896][  T134] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  367.903052][  T134] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  368.138165][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  368.146242][    C0] lec:lec_tx_timeout: lec0
[  368.151151][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  368.190195][ T9218] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  368.583999][T14829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.596054][T14828] tipc: Disabling bearer <eth:syzkaller0>
[  368.639242][T14832] lo speed is unknown, defaulting to 1000
[  368.816404][T14842] netlink: 'syz.3.2312': attribute type 1 has an invalid length.
[  368.861102][T14842] 8021q: adding VLAN 0 to HW filter on device bond8
[  368.938687][T14842] bond8: (slave geneve2): making interface the new active one
[  369.002891][T14842] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  369.013335][  T991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.055989][  T991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.077505][  T991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.096623][  T991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.128747][T14851] netlink: 'syz.4.2316': attribute type 58 has an invalid length.
[  369.543398][T14866] netlink: 'syz.3.2323': attribute type 1 has an invalid length.
[  369.568697][T14866] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  369.671771][T14874] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  370.164118][T14896] __nla_validate_parse: 5 callbacks suppressed
[  370.164139][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'.
[  370.244172][T14876] netlink: 'syz.3.2325': attribute type 5 has an invalid length.
[  370.273948][T14904] lo speed is unknown, defaulting to 1000
[  370.904309][T14920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2334'.
[  370.926996][T14920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2334'.
[  370.950829][T14920] syzkaller0: entered promiscuous mode
[  370.956487][T14920] syzkaller0: entered allmulticast mode
[  371.525730][T14956] tap0: tun_chr_ioctl cmd 1074025677
[  371.535824][T14956] tap0: linktype set to 769
[  371.798368][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  371.809270][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'.
[  371.892583][T14976] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  371.946533][T14979] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001
[  371.987104][T14979] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2345'.
[  372.068324][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'.
[  372.173373][T14984] ip6gretap0 (unregistering): left promiscuous mode
[  372.809022][T15028] tun0: tun_chr_ioctl cmd 1074025677
[  372.818143][T15028] tun0: linktype set to 27
[  372.826181][T15030] bridge0: left allmulticast mode
[  372.891208][T15033] lo speed is unknown, defaulting to 1000
[  372.900661][T15039] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2363'.
[  373.158070][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  373.166154][    C0] lec:lec_tx_timeout: lec0
[  373.172635][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  373.233378][  T134] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.243019][  T134] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.254925][  T134] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.276301][  T134] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.303973][  T134] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.327233][  T134] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.349616][  T134] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.375940][  T134] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  373.474015][T15038] lo speed is unknown, defaulting to 1000
[  373.656342][T15060] IPVS: sh: FWM 3 0x00000003 - no destination available
[  373.896298][T15058] lo speed is unknown, defaulting to 1000
[  374.672570][T15086] sctp: [Deprecated]: syz.4.2372 (pid 15086) Use of int in max_burst socket option deprecated.
[  374.672570][T15086] Use struct sctp_assoc_value instead
[  374.808764][T15093] netlink: 'syz.2.2374': attribute type 4 has an invalid length.
[  374.831269][T15091] netlink: 'syz.2.2374': attribute type 4 has an invalid length.
[  375.478731][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2379'.
[  375.518053][T15110] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2380'.
[  375.544883][T15110] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  375.902554][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'.
[  375.928812][T15134] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  376.665685][T15170] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  376.749392][T15174] netlink: 'syz.0.2395': attribute type 58 has an invalid length.
[  376.793514][T15177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2397'.
[  376.803276][T15177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2397'.
[  376.875947][T15181] netlink: 'syz.2.2396': attribute type 10 has an invalid length.
[  377.076464][T15187] nbd: socks must be embedded in a SOCK_ITEM attr
[  377.377005][T15200] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.809694][T15229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2409'.
[  377.819467][T15229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2409'.
[  377.831028][T15229] syzkaller0: entered promiscuous mode
[  377.836528][T15229] syzkaller0: entered allmulticast mode
[  378.121151][T15235] wg1: entered promiscuous mode
[  378.126238][T15235] wg1: entered allmulticast mode
[  378.380879][T15241] lo speed is unknown, defaulting to 1000
[  378.791506][T15254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2418'.
[  378.842016][T15257] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2420'.
[  378.862005][T15257] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2420'.
[  378.997882][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[  379.005964][    C0] lec:lec_tx_timeout: lec0
[  379.011116][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  379.541537][T15288] netlink: 'syz.0.2426': attribute type 8 has an invalid length.
[  379.622398][T15288] bond0: entered promiscuous mode
[  379.639471][T15288] bond_slave_0: entered promiscuous mode
[  379.656474][T15288] bond_slave_1: entered promiscuous mode
[  379.669344][T15288] batadv0: entered promiscuous mode
[  379.685131][T15288] dummy0: entered promiscuous mode
[  379.702180][T15288] veth0_to_bridge: entered promiscuous mode
[  379.729361][T15288] hsr0: entered promiscuous mode
[  379.927200][T15294] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  379.958031][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  379.997028][T15298] lo speed is unknown, defaulting to 1000
[  380.486312][T15307] lo speed is unknown, defaulting to 1000
[  380.686911][T15321] x_tables: duplicate underflow at hook 1
[  380.846864][T15328] __nla_validate_parse: 7 callbacks suppressed
[  380.846886][T15328] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2436'.
[  380.901205][T15329] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2437'.
[  381.863977][T15330] lo speed is unknown, defaulting to 1000
[  382.253095][T15353] lo speed is unknown, defaulting to 1000
[  382.774115][T15363] x_tables: duplicate underflow at hook 1
[  382.954502][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'.
[  382.991953][T15369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2446'.
[  383.054492][T15376] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  383.136506][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2449'.
[  383.148649][T15370] lo speed is unknown, defaulting to 1000
[  383.598859][T15404] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2453'.
[  383.838250][T15417] netlink: 'syz.1.2457': attribute type 10 has an invalid length.
[  383.898240][ T9218] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  383.917426][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2457'.
[  383.935113][T15417] bridge0: entered promiscuous mode
[  383.941266][T15417] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  383.988204][T15418] bridge_slave_1: left allmulticast mode
[  383.994015][T15418] bridge_slave_1: left promiscuous mode
[  384.000021][T15418] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.017878][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  384.025918][    C0] lec:lec_tx_timeout: lec0
[  384.031690][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  384.055602][T15418] bond0: (slave bridge0): Releasing backup interface
[  384.063288][T15418] bridge0 (unregistering): left promiscuous mode
[  384.114486][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2459'.
[  384.235314][T15421] lo speed is unknown, defaulting to 1000
[  384.318852][T14946] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  384.396630][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'.
[  384.438151][T15443] netlink: 'syz.1.2463': attribute type 13 has an invalid length.
[  384.918728][ T9218] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  385.025327][T15461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2468'.
[  385.119089][T15462] lo speed is unknown, defaulting to 1000
[  385.388545][T15480] geneve1: entered promiscuous mode
[  385.398655][  T251] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  385.407002][  T251] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  385.570258][T15467] lo speed is unknown, defaulting to 1000
[  385.608871][ T9232] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  385.952485][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'.
[  386.011257][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'.
[  386.035915][T15514] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2482'.
[  386.133047][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'.
[  386.171173][T15496] lo speed is unknown, defaulting to 1000
[  386.260504][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'.
[  386.398133][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'.
[  386.534767][T15494] lo speed is unknown, defaulting to 1000
[  386.787653][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'.
[  386.809654][T15536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.760543][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2489'.
[  387.961038][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2489'.
[  388.005347][T15554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2492'.
[  388.407198][T15567] netlink: 'syz.2.2496': attribute type 5 has an invalid length.
[  388.422264][T15570] mac80211_hwsim hwsim7 wlan1: Device is already in use.
[  388.449958][T15569] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  388.578660][T15569] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  388.752422][T15569] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  388.873290][T15569] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  389.037971][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  389.046246][    C0] lec:lec_tx_timeout: lec0
[  389.050926][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  389.308170][  T991] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  389.400480][  T134] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  389.505309][  T134] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  389.551546][  T134] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  389.791065][T15629] lo speed is unknown, defaulting to 1000
[  389.798123][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  389.921070][T15636] netlink: 'syz.1.2518': attribute type 3 has an invalid length.
[  390.007947][T15636] bond1: left allmulticast mode
[  390.013034][T15636] bond1: left promiscuous mode
[  390.180188][T15636] veth1_vlan: left allmulticast mode
[  390.340697][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.350670][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.368317][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.393304][T15630] lo speed is unknown, defaulting to 1000
[  390.410901][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.481278][T15689] __nla_validate_parse: 9 callbacks suppressed
[  391.481299][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'.
[  391.615914][T15691] lo speed is unknown, defaulting to 1000
[  391.629857][T15693] netlink: 'syz.2.2535': attribute type 1 has an invalid length.
[  391.641316][T15695] netlink: 'syz.2.2535': attribute type 1 has an invalid length.
[  391.688124][T15693] netlink: 'syz.2.2535': attribute type 2 has an invalid length.
[  391.696187][T15695] netlink: 'syz.2.2535': attribute type 2 has an invalid length.
[  392.232320][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'.
[  392.336110][T15712] lo speed is unknown, defaulting to 1000
[  392.943555][T15736] lo speed is unknown, defaulting to 1000
[  393.254491][T15758] xt_hashlimit: max too large, truncated to 1048576
[  393.261712][T15758] xt_hashlimit: overflow, try lower: 18446744073709551608/8
[  393.302299][T15758] syzkaller1: entered promiscuous mode
[  393.308051][T15758] syzkaller1: entered allmulticast mode
[  393.392939][T15740] lo speed is unknown, defaulting to 1000
[  393.624338][T15768] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  393.632036][T15768] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  394.020335][T15780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2556'.
[  394.035484][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2556'.
[  394.057883][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  394.065978][    C0] lec:lec_tx_timeout: lec0
[  394.070698][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  394.400035][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'.
[  395.360365][T15826] syzkaller0: entered promiscuous mode
[  395.365918][T15826] syzkaller0: entered allmulticast mode
[  395.468888][T15832] lo speed is unknown, defaulting to 1000
[  395.630236][T15848] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2574'.
[  395.690223][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'.
[  396.287228][T15875] netlink: 'syz.2.2583': attribute type 6 has an invalid length.
[  396.500834][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2581'.
[  396.716020][T15878] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  396.843830][T15892] bond11 (unregistering): Released all slaves
[  396.882381][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2589'.
[  397.168309][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'.
[  397.542034][T15948] netlink: 'syz.0.2601': attribute type 51 has an invalid length.
[  397.604168][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2605'.
[  397.708914][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'.
[  397.796351][T15945] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2603'.
[  398.120835][T15945] 8021q: VLANs not supported on ip6gre0
[  398.530988][T15986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2615'.
[  398.829756][T15992] lo speed is unknown, defaulting to 1000
[  399.078776][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  399.086859][    C0] lec:lec_tx_timeout: lec0
[  399.091480][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  399.164005][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  399.648340][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'.
[  400.519099][T16087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2640'.
[  400.571983][T16087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2640'.
[  400.629806][T16091] syzkaller1: entered promiscuous mode
[  400.638773][T16091] syzkaller1: entered allmulticast mode
[  400.766579][T16098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.801443][T16096] syzkaller0: entered promiscuous mode
[  400.807136][T16096] syzkaller0: entered allmulticast mode
[  401.059638][T16113] syzkaller0: entered promiscuous mode
[  401.065305][T16113] syzkaller0: entered allmulticast mode
[  401.073169][T16113] dvmrp1: tun_chr_ioctl cmd 2147767506
[  401.359893][T16131] netlink: 'syz.0.2653': attribute type 7 has an invalid length.
[  401.369445][T16131] netlink: 'syz.0.2653': attribute type 8 has an invalid length.
[  401.406028][T16132] lo speed is unknown, defaulting to 1000
[  401.501966][T16128] can: request_module (can-proto-0) failed.
[  401.826832][T16141] lo speed is unknown, defaulting to 1000
[  401.953879][T16150] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  402.044622][T16150] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  402.837783][T16179] __nla_validate_parse: 3 callbacks suppressed
[  402.837804][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2664'.
[  402.882510][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'.
[  403.289348][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'.
[  403.298991][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'.
[  403.656114][T16220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2674'.
[  403.671748][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'.
[  403.684228][T16220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2674'.
[  404.052133][T16241] tipc: Resetting bearer <eth:syzkaller0>
[  404.098053][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  404.106107][    C0] lec:lec_tx_timeout: lec0
[  404.111179][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  404.401409][T16260] netlink: 'syz.1.2684': attribute type 1 has an invalid length.
[  404.594921][T16260] bond13: entered promiscuous mode
[  404.625027][T16260] 8021q: adding VLAN 0 to HW filter on device bond13
[  404.654508][T16266] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2687'.
[  404.683793][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2687'.
[  404.725885][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2687'.
[  404.936898][T16295] xt_connbytes: Forcing CT accounting to be enabled
[  404.987223][T16296] netlink: 'syz.0.2694': attribute type 32 has an invalid length.
[  405.257759][T16313] syzkaller0: entered promiscuous mode
[  405.278042][T16313] syzkaller0: entered allmulticast mode
[  405.565292][T16337] netlink: 'syz.3.2707': attribute type 1 has an invalid length.
[  405.573200][T16337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.588603][T16330] lo speed is unknown, defaulting to 1000
[  405.974945][T16357] openvswitch: netlink: Message has 16 unknown bytes.
[  406.213161][T16372] netlink: 'syz.1.2716': attribute type 1 has an invalid length.
[  406.663604][T16389] bond14: entered promiscuous mode
[  406.688709][T16389] 8021q: adding VLAN 0 to HW filter on device bond14
[  406.761944][T16397] pim6reg: entered allmulticast mode
[  407.622994][T16459] syzkaller0: entered promiscuous mode
[  407.628785][T16459] syzkaller0: entered allmulticast mode
[  408.614437][T16520] netlink: 'syz.0.2750': attribute type 13 has an invalid length.
[  408.639518][T16520] netlink: 'syz.0.2750': attribute type 17 has an invalid length.
[  408.677018][T16525] __nla_validate_parse: 11 callbacks suppressed
[  408.677040][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'.
[  408.796422][T16520] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.819220][T16520] 8021q: adding VLAN 0 to HW filter on device team0
[  408.845053][T16529] FAULT_INJECTION: forcing a failure.
[  408.845053][T16529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.858495][T16529] CPU: 1 UID: 0 PID: 16529 Comm: syz.1.2753 Not tainted syzkaller #0 PREEMPT(full) 
[  408.858522][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  408.858540][T16529] Call Trace:
[  408.858619][T16529]  <TASK>
[  408.858629][T16529]  dump_stack_lvl+0xe8/0x150
[  408.858792][T16529]  should_fail_ex+0x412/0x560
[  408.858891][T16529]  _copy_from_user+0x2d/0xb0
[  408.858966][T16529]  ___sys_sendmsg+0x1c6/0x360
[  408.859065][T16529]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.859159][T16529]  ? __fget_files+0x2a/0x420
[  408.859219][T16529]  ? __fget_files+0x3a0/0x420
[  408.859260][T16529]  __x64_sys_sendmsg+0x1bd/0x2a0
[  408.859291][T16529]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  408.859330][T16529]  ? __pfx_ksys_write+0x10/0x10
[  408.859378][T16529]  do_syscall_64+0x14d/0xf80
[  408.859485][T16529]  ? trace_irq_disable+0x3b/0x150
[  408.859536][T16529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.859577][T16529]  ? clear_bhb_loop+0x40/0x90
[  408.859603][T16529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.859628][T16529] RIP: 0033:0x7f7fff39c799
[  408.859676][T16529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.859694][T16529] RSP: 002b:00007f800019f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.859744][T16529] RAX: ffffffffffffffda RBX: 00007f7fff615fa0 RCX: 00007f7fff39c799
[  408.859759][T16529] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003
[  408.859772][T16529] RBP: 00007f800019f090 R08: 0000000000000000 R09: 0000000000000000
[  408.859785][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.859797][T16529] R13: 00007f7fff616038 R14: 00007f7fff615fa0 R15: 00007ffc505a0f28
[  408.859831][T16529]  </TASK>
[  409.054239][T16520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  409.122650][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  409.130761][    C0] lec:lec_tx_timeout: lec0
[  409.135420][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  409.164973][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2754'.
[  409.174893][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2754'.
[  409.191276][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2754'.
[  409.200770][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2754'.
[  409.399625][T16550] syzkaller1: entered promiscuous mode
[  409.405718][T16550] syzkaller1: entered allmulticast mode
[  409.677990][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2766'.
[  409.774746][T16569] lo speed is unknown, defaulting to 1000
[  409.817031][T16579] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2769'.
[  409.908389][T16584] syzkaller1: entered promiscuous mode
[  409.920689][T16584] syzkaller1: entered allmulticast mode
[  410.326383][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'.
[  410.384447][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'.
[  410.440872][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'.
[  410.505829][T16612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.611499][T16619] tun0: tun_chr_ioctl cmd 1074025675
[  410.621673][T16619] tun0: persist enabled
[  410.629776][T16619] tun0: tun_chr_ioctl cmd 1074025675
[  410.651883][T16619] tun0: persist enabled
[  410.729301][T16619] tun0: tun_chr_ioctl cmd 1074025673
[  411.411349][T16676] syzkaller0: entered promiscuous mode
[  411.428027][T16676] syzkaller0: entered allmulticast mode
[  412.950000][T16683] lo speed is unknown, defaulting to 1000
[  413.039502][T16701] xt_TCPMSS: Only works on TCP SYN packets
[  413.182738][T16709] netlink: 'syz.0.2808': attribute type 1 has an invalid length.
[  413.314855][T16710] bond11: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  413.423280][T16719] veth7: entered promiscuous mode
[  413.759354][T16743] __nla_validate_parse: 76 callbacks suppressed
[  413.759376][T16743] netlink: 212064 bytes leftover after parsing attributes in process `syz.2.2815'.
[  414.147906][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  414.155991][    C0] lec:lec_tx_timeout: lec0
[  414.161092][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  414.176415][T16762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2818'.
[  414.189110][T16761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2818'.
[  414.249120][T16761] syzkaller0: entered promiscuous mode
[  414.258255][T16761] syzkaller0: entered allmulticast mode
[  414.527249][T16778] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2
[  414.597491][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'.
[  415.794071][T16778] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  415.917381][T16791] IPv6: Can't replace route, no match found
[  415.924763][T16791] IPv6: Can't replace route, no match found
[  415.955992][T16791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2824'.
[  416.166172][T16806] netlink: 'syz.1.2830': attribute type 15 has an invalid length.
[  416.358055][T16818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2833'.
[  416.372613][T16818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2833'.
[  416.426072][T16818] syzkaller0: entered promiscuous mode
[  416.431750][T16818] syzkaller0: entered allmulticast mode
[  416.597458][T16825] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2835'.
[  416.758549][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2836'.
[  416.829364][T16829] netlink: 'syz.4.2836': attribute type 1 has an invalid length.
[  417.718107][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  418.179087][T16833] vlan0: entered promiscuous mode
[  418.184334][T16833] erspan0: entered promiscuous mode
[  418.352267][T16828] lo speed is unknown, defaulting to 1000
[  418.532213][T16862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2843'.
[  418.783560][T16875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2849'.
[  418.811442][T16875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2849'.
[  418.901948][T16875] syzkaller0: entered promiscuous mode
[  418.907508][T16875] syzkaller0: entered allmulticast mode
[  418.926571][T16878] hsr0: entered promiscuous mode
[  418.949962][T16877] hsr0: left promiscuous mode
[  419.081607][T16888] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.2854'.
[  419.097018][T16888] sctp: [Deprecated]: syz.4.2854 (pid 16888) Use of struct sctp_assoc_value in delayed_ack socket option.
[  419.097018][T16888] Use struct sctp_sack_info instead
[  419.167969][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  419.176028][    C0] lec:lec_tx_timeout: lec0
[  419.180677][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  419.522797][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'.
[  420.544662][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'.
[  420.665615][T16914] netlink: 364 bytes leftover after parsing attributes in process `syz.3.2861'.
[  420.751194][T16916] lo speed is unknown, defaulting to 1000
[  420.758444][T16928] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2861'.
[  420.778154][T16914] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2861'.
[  420.962066][T16932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.972009][T16932] bond0: (slave batadv0): Releasing backup interface
[  420.979896][T16932] batadv0 (unregistering): left promiscuous mode
[  421.081703][T16914] siw: device registration error -23
[  421.126464][T16930] lo speed is unknown, defaulting to 1000
[  421.276421][T16939] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2866'.
[  421.513926][T16947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.033983][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  422.053640][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  422.068028][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  422.083609][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  422.095023][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  422.126428][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  422.135372][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  422.146179][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  422.158813][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  422.174372][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  422.471603][T16960] lo speed is unknown, defaulting to 1000
[  422.997190][T16986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2876'.
[  423.596937][T16999] netlink: 'syz.1.2880': attribute type 5 has an invalid length.
[  423.944185][T17008] __nla_validate_parse: 2 callbacks suppressed
[  423.944206][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'.
[  424.085721][T17015] netlink: 'syz.0.2884': attribute type 1 has an invalid length.
[  424.221301][T17023] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2885'.
[  424.253900][T17015] 8021q: adding VLAN 0 to HW filter on device bond12
[  424.334058][T16960] chnl_net:caif_netlink_parms(): no params data found
[  424.358075][ T5832] Bluetooth: hci5: command tx timeout
[  424.506241][T17019] lo speed is unknown, defaulting to 1000
[  425.023181][T17050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'.
[  425.408899][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6230 ms
[  425.417040][    C0] lec:lec_tx_timeout: lec0
[  425.422434][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  425.586315][T16960] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.593893][T16960] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.623749][T16960] bridge_slave_0: entered allmulticast mode
[  425.642269][T16960] bridge_slave_0: entered promiscuous mode
[  425.663185][T16960] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.698048][T16960] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.705325][T16960] bridge_slave_1: entered allmulticast mode
[  425.717008][T16960] bridge_slave_1: entered promiscuous mode
[  425.731369][T17058] tipc: Trying to set illegal importance in message
[  425.755527][T17058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2892'.
[  425.882909][T16960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.949981][T17065] nbd: must specify an index to disconnect
[  425.956007][T16960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.043820][T16960] team0: Port device team_slave_0 added
[  426.052836][T16960] team0: Port device team_slave_1 added
[  426.270266][T16960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.277357][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.367955][T16960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.438234][ T5832] Bluetooth: hci5: command tx timeout
[  426.490158][T16960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.498709][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.568210][T16960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.637967][T17073] lo speed is unknown, defaulting to 1000
[  426.747796][T16960] hsr_slave_0: entered promiscuous mode
[  426.765942][T16960] hsr_slave_1: entered promiscuous mode
[  426.779479][T16960] debugfs: 'hsr0' already exists in 'hsr'
[  426.795612][T16960] Cannot create hsr debugfs directory
[  426.999436][  T991] tipc: Resetting bearer <eth:syzkaller0>
[  427.193732][T17100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2903'.
[  427.599074][T17113] netlink: 'syz.4.2905': attribute type 11 has an invalid length.
[  427.740398][T17115] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2906'.
[  427.776467][T16960] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  427.822486][T17118] sctp: [Deprecated]: syz.4.2907 (pid 17118) Use of int in maxseg socket option.
[  427.822486][T17118] Use struct sctp_assoc_value instead
[  427.850040][T17120] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  427.866134][T16960] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  427.893688][T16960] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  427.911862][T16960] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  428.026850][T17133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2911'.
[  428.162647][T16960] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.213023][T16960] 8021q: adding VLAN 0 to HW filter on device team0
[  428.315334][T14942] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.322629][T14942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.363436][  T251] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.370689][  T251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.520969][ T5832] Bluetooth: hci5: command tx timeout
[  428.580267][T17154] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  428.684134][T17159] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2920'.
[  428.931207][T17168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2922'.
[  428.953672][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'.
[  429.114653][T16960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.179021][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2926'.
[  429.251115][T17176] 8021q: adding VLAN 0 to HW filter on device bond13
[  429.273539][T17176] bond13: (slave batadv0): Opening slave failed
[  429.304393][T17190] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2924'.
[  429.338667][T16960] veth0_vlan: entered promiscuous mode
[  429.371419][T17178] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  429.624908][T16960] veth1_vlan: entered promiscuous mode
[  429.774558][T16960] veth0_macvtap: entered promiscuous mode
[  429.800471][T16960] veth1_macvtap: entered promiscuous mode
[  429.865072][T17201] lo speed is unknown, defaulting to 1000
[  429.905965][T16960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.951422][T16960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.001249][  T991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.034715][  T991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.068392][  T991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.088292][  T991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.436411][T17214] ip6gre0: left promiscuous mode
[  430.467071][T17214] macvlan2: left promiscuous mode
[  430.488470][T17214] macvlan2: left allmulticast mode
[  430.494421][T17214] sit1: left allmulticast mode
[  430.500731][T17214] ip6tnl2: left allmulticast mode
[  430.506666][T17214] macvtap1: left promiscuous mode
[  430.511911][T17214] macvtap1: left allmulticast mode
[  430.519657][T17214] bond10: left promiscuous mode
[  430.524847][T17214] vti1: left promiscuous mode
[  430.529626][T17214] vti1: left allmulticast mode
[  430.535742][T17214] bond13: left promiscuous mode
[  430.547555][T17214] bond14: left promiscuous mode
[  430.581869][T17221] erspan0: entered promiscuous mode
[  430.598135][ T5832] Bluetooth: hci5: command tx timeout
[  430.695679][T17221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  430.770800][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2937'.
[  430.856989][T17232] netlink: 'syz.1.2939': attribute type 8 has an invalid length.
[  430.866249][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2939'.
[  430.918082][T17233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2939'.
[  430.927531][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.947963][T17234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2939'.
[  430.954626][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.149852][T14942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.157859][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms
[  431.165885][    C0] lec:lec_tx_timeout: lec0
[  431.170967][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  431.184941][T14942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.490534][T17253] lo speed is unknown, defaulting to 1000
[  431.745866][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  431.755553][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  431.764338][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  431.778290][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  431.786107][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  431.967052][T17276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2950'.
[  432.017778][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2951'.
[  432.154572][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'.
[  432.395312][   T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  432.479354][   T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  432.537070][T17271] lo speed is unknown, defaulting to 1000
[  432.551724][   T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  432.611229][T17303] Cannot find add_set index 0 as target
[  432.787659][   T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  432.950102][T17314] veth3: entered promiscuous mode
[  433.118706][T17323] nbd: must specify a device to reconfigure
[  433.654152][   T13] bond11 (unregistering): (slave ip6gretap0): Releasing backup interface
[  433.879066][ T5832] Bluetooth: hci1: command tx timeout
[  433.935626][   T13] bond3 (unregistering): (slave bridge2): Releasing active interface
[  434.116018][   T13] bond0 (unregistering): left promiscuous mode
[  434.122602][   T13] bond_slave_0: left promiscuous mode
[  434.129171][   T13] bond_slave_1: left promiscuous mode
[  434.135148][   T13] dummy0: left promiscuous mode
[  434.144785][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.158055][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.170180][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  434.185227][   T13] bond0 (unregistering): Released all slaves
[  434.199453][   T13] bond1 (unregistering): Released all slaves
[  434.224048][   T13] bond2 (unregistering): Released all slaves
[  434.238504][   T13] bond3 (unregistering): Released all slaves
[  434.258344][   T13] bond4 (unregistering): Released all slaves
[  434.285419][   T13] bond5 (unregistering): Released all slaves
[  434.305150][   T13] bond6 (unregistering): Released all slaves
[  434.329773][   T13] bond7 (unregistering): Released all slaves
[  434.349127][   T13] bond8 (unregistering): Released all slaves
[  434.380393][   T13] bond9 (unregistering): Released all slaves
[  434.401417][   T13] bond10 (unregistering): Released all slaves
[  434.423764][   T13] bond11 (unregistering): Released all slaves
[  434.442746][   T13] bond12 (unregistering): Released all slaves
[  434.469179][   T13] bond13 (unregistering): Released all slaves
[  434.531735][T14942] tipc: Resetting bearer <eth:syzkaller0>
[  434.560964][T17342] vxcan2: entered allmulticast mode
[  434.707539][   T13] tipc: Left network mode
[  434.985653][T17355] __nla_validate_parse: 4 callbacks suppressed
[  434.985672][T17355] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2969'.
[  435.099960][T17363] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2972'.
[  435.145094][T17363] netlink: Unknown conntrack attr (type=2304, max=9)
[  435.223567][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2973'.
[  435.315147][T17368] vlan2: entered promiscuous mode
[  435.327307][T17368] bridge0: entered promiscuous mode
[  435.340385][T17271] chnl_net:caif_netlink_parms(): no params data found
[  435.769776][T17375] hsr0: entered promiscuous mode
[  435.783810][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'.
[  435.820085][T17271] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.829098][T17394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2978'.
[  435.858035][T17271] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.870274][T17394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2978'.
[  435.887564][T17271] bridge_slave_0: entered allmulticast mode
[  435.909011][T17271] bridge_slave_0: entered promiscuous mode
[  435.939337][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'.
[  435.953998][T17398] netlink: 'syz.1.2977': attribute type 29 has an invalid length.
[  435.963156][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'.
[  435.972237][ T5832] Bluetooth: hci1: command tx timeout
[  436.021997][T17376] hsr_slave_0: left promiscuous mode
[  436.107706][T17376] hsr_slave_1: left promiscuous mode
[  436.128394][T17376] hsr0 (unregistering): left promiscuous mode
[  436.161172][T17411] netlink: 'syz.3.2981': attribute type 21 has an invalid length.
[  436.182000][T17271] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.194647][T17271] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.204595][T17271] bridge_slave_1: entered allmulticast mode
[  436.216442][T17271] bridge_slave_1: entered promiscuous mode
[  436.250133][T17411] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2981'.
[  436.264922][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'.
[  436.407640][T17423] netlink: 'syz.2.2984': attribute type 1 has an invalid length.
[  436.443052][T17271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.500850][T17271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.797062][T17423] bond8: entered promiscuous mode
[  436.810347][T17423] 8021q: adding VLAN 0 to HW filter on device bond8
[  436.818762][T17444] netlink: 'syz.3.2988': attribute type 1 has an invalid length.
[  436.873277][T17438] bond8: (slave bridge12): making interface the new active one
[  436.891291][T17438] bridge12: entered promiscuous mode
[  436.904010][T17438] bridge12: left promiscuous mode
[  436.977034][T17447] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  436.997947][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  437.006049][    C0] lec:lec_tx_timeout: lec0
[  437.011242][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  437.039561][   T13] veth0_to_bridge: left promiscuous mode
[  437.281777][   T13] team0 (unregistering): Port device team_slave_1 removed
[  437.323414][   T13] team0 (unregistering): Port device team_slave_0 removed
[  437.601642][T17475] rdma_op ffff88805427e1f0 conn xmit_rdma 0000000000000000
[  437.709690][T17271] team0: Port device team_slave_0 added
[  437.747820][T17450] lo speed is unknown, defaulting to 1000
[  437.762292][T17271] team0: Port device team_slave_1 added
[  437.890127][T17271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.897141][T17271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.974327][T17271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.000167][T17271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.007247][T17271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.038296][ T5832] Bluetooth: hci1: command tx timeout
[  438.096943][T17271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.298993][T17494] set match dimension is over the limit!
[  438.346458][T17271] hsr_slave_0: entered promiscuous mode
[  438.422890][T17271] hsr_slave_1: entered promiscuous mode
[  438.489448][   T13] IPVS: stop unused estimator thread 0...
[  438.619268][T17506] SET target dimension over the limit!
[  439.720988][T17560] netlink: 'syz.3.3012': attribute type 4 has an invalid length.
[  440.012775][T17271] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  440.059178][T17574] syz_tun: entered allmulticast mode
[  440.081011][T17574] syz_tun: left allmulticast mode
[  440.086240][T17271] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  440.115277][T17271] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  440.138405][ T5832] Bluetooth: hci1: command tx timeout
[  440.165909][T17271] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  440.415420][T17590] dvmrp0: entered allmulticast mode
[  440.453761][T17596] __nla_validate_parse: 4 callbacks suppressed
[  440.453781][T17596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3020'.
[  440.565566][T17271] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.636039][T17271] 8021q: adding VLAN 0 to HW filter on device team0
[  440.744646][T14942] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.751974][T14942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.808877][T14942] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.816214][T14942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.934015][T17271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  441.541423][T17271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.613696][T17647] lo speed is unknown, defaulting to 1000
[  442.006563][T17649] lo speed is unknown, defaulting to 1000
[  442.018110][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  442.026185][    C0] lec:lec_tx_timeout: lec0
[  442.031189][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  442.037846][T17271] veth0_vlan: entered promiscuous mode
[  442.072028][T17271] veth1_vlan: entered promiscuous mode
[  442.140770][T17271] veth0_macvtap: entered promiscuous mode
[  442.178059][T17271] veth1_macvtap: entered promiscuous mode
[  442.349990][T17665] bond10 (unregistering): Released all slaves
[  442.464002][T17271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.526272][T17271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.534056][T17677] syz.3.3034 uses old SIOCAX25GETINFO
[  442.615360][ T6228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.666498][ T6228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.713403][ T6228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.750276][ T6228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.769096][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'.
[  442.801897][T17686] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3035'.
[  442.838357][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'.
[  442.887690][T17686] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3035'.
[  442.928952][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'.
[  443.039332][T14946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.062383][T14946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.146724][T17691] syzkaller0: entered promiscuous mode
[  443.162045][T17691] syzkaller0: entered allmulticast mode
[  443.229884][T17688] lo speed is unknown, defaulting to 1000
[  443.387170][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.456834][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.640076][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3039'.
[  443.711619][T17698] bond15: invalid ARP target 0.0.0.0 specified for addition
[  443.745385][T17698] bond15: option arp_ip_target: invalid value (0)
[  443.757573][T17698] bond15 (unregistering): Released all slaves
[  444.347205][T17722] : renamed from dummy0 (while UP)
[  444.464914][T17722] syzkaller1: entered promiscuous mode
[  444.487522][T17722] syzkaller1: entered allmulticast mode
[  444.585995][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  444.595831][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  444.610076][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  444.621126][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  444.638133][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  444.840158][T17726] lo speed is unknown, defaulting to 1000
[  445.283316][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3047'.
[  445.402643][T17747] 8021q: adding VLAN 0 to HW filter on device bond9
[  445.564974][T17751] bond1 (unregistering): Released all slaves
[  445.975537][T17768] netlink: 'syz.3.3056': attribute type 11 has an invalid length.
[  446.007479][T17768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3056'.
[  446.031421][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'.
[  446.152074][T17726] chnl_net:caif_netlink_parms(): no params data found
[  446.203161][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'.
[  446.326840][T17787] xt_TCPMSS: Only works on TCP SYN packets
[  446.466151][T17787] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.529827][T17726] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.537115][T17726] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.552648][T17726] bridge_slave_0: entered allmulticast mode
[  446.568889][T17726] bridge_slave_0: entered promiscuous mode
[  446.586609][T17726] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.598472][T17726] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.605728][T17726] bridge_slave_1: entered allmulticast mode
[  446.630224][T17726] bridge_slave_1: entered promiscuous mode
[  446.666177][T17785] lo speed is unknown, defaulting to 1000
[  446.681723][ T5832] Bluetooth: hci0: command tx timeout
[  446.715488][T17726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.729249][T17726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.933084][T17726] team0: Port device team_slave_0 added
[  446.956879][T17726] team0: Port device team_slave_1 added
[  447.037863][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  447.046018][    C0] lec:lec_tx_timeout: lec0
[  447.051694][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  447.152084][T17726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.185432][T17726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.273795][T17726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.337712][T17726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.365162][T17726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.442309][T17726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.464436][T17798] lo speed is unknown, defaulting to 1000
[  447.482596][T17821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3067'.
[  447.534778][T17823] netlink: 'syz.4.3068': attribute type 15 has an invalid length.
[  447.706268][T17828] netlink: 'syz.0.3069': attribute type 1 has an invalid length.
[  447.735327][T17726] hsr_slave_0: entered promiscuous mode
[  447.758600][T17726] hsr_slave_1: entered promiscuous mode
[  447.765611][T17726] debugfs: 'hsr0' already exists in 'hsr'
[  447.784640][T17726] Cannot create hsr debugfs directory
[  447.879841][T17828] gre0: entered promiscuous mode
[  447.885131][T17828] gre0: entered allmulticast mode
[  448.178110][T17816] lo speed is unknown, defaulting to 1000
[  448.573153][T17817] lo speed is unknown, defaulting to 1000
[  448.758014][ T5832] Bluetooth: hci0: command tx timeout
[  450.794036][T17877] pimreg9: entered allmulticast mode
[  450.805397][T17839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  450.840331][ T5832] Bluetooth: hci0: command tx timeout
[  450.862081][T17726] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  450.929760][T17726] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  450.962265][T17885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3086'.
[  450.974356][T17726] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  451.033676][T17888] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3087'.
[  451.063780][T17726] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  451.307654][T17903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3089'.
[  451.422565][T17909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3093'.
[  451.541161][T17917] netlink: 876 bytes leftover after parsing attributes in process `syz.2.3093'.
[  451.550606][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'.
[  451.570926][T17918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3095'.
[  451.593938][T17919] netlink: 'syz.2.3093': attribute type 3 has an invalid length.
[  451.601837][T17919] netlink: 'syz.2.3093': attribute type 1 has an invalid length.
[  451.768265][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'.
[  451.791508][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'.
[  451.813729][T17926] netlink: 'syz.4.3097': attribute type 12 has an invalid length.
[  451.834168][T17926] netlink: 'syz.4.3097': attribute type 11 has an invalid length.
[  452.047526][T17726] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.057862][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  452.065932][    C0] lec:lec_tx_timeout: lec0
[  452.070830][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  452.131515][T17726] 8021q: adding VLAN 0 to HW filter on device team0
[  452.162078][T14946] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.169341][T14946] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.178406][T17930] netlink: 'syz.2.3099': attribute type 1 has an invalid length.
[  452.186172][T17930] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3099'.
[  452.216346][T14946] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.223625][T14946] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.234937][T17930] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3099'.
[  452.246974][T17930] netlink: 'syz.2.3099': attribute type 1 has an invalid length.
[  452.898908][T17955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  452.906223][T17955] IPv6: NLM_F_CREATE should be set when creating new route
[  452.913532][T17955] IPv6: NLM_F_CREATE should be set when creating new route
[  452.920762][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  452.934336][ T5832] Bluetooth: hci0: command tx timeout
[  452.998827][T17957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  453.101593][T17726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.291703][T17726] veth0_vlan: entered promiscuous mode
[  453.362027][T17726] veth1_vlan: entered promiscuous mode
[  453.477463][T17726] veth0_macvtap: entered promiscuous mode
[  453.555411][T17726] veth1_macvtap: entered promiscuous mode
[  453.606653][T17978] lo speed is unknown, defaulting to 1000
[  453.696846][T17726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.762138][T17726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.887039][ T6228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.904679][T16792] udevd[16792]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory
[  453.922572][ T6228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.964101][ T6228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.002381][ T6228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.201160][T14946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.230124][T14946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.353436][ T6228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.385890][ T6228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.675274][T17999] netlink: 'syz.1.3042': attribute type 61 has an invalid length.
[  455.024805][T18008] netlink: 'syz.1.3114': attribute type 30 has an invalid length.
[  455.748608][T18025] netlink: 'syz.3.3117': attribute type 1 has an invalid length.
[  455.981850][T18030] batadv0: entered promiscuous mode
[  456.019606][T18030] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  456.091320][T18032] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  456.500477][T18047] netlink: 'syz.2.3122': attribute type 32 has an invalid length.
[  456.553574][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  456.570159][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  456.602500][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  456.638360][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  456.659359][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  456.770049][T18047] bond10: option coupled_control: invalid value (14)
[  456.843599][T18047] bond10 (unregistering): Released all slaves
[  457.077929][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  457.086072][    C0] lec:lec_tx_timeout: lec0
[  457.090859][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  457.305891][T18063] lo speed is unknown, defaulting to 1000
[  457.374531][T18079] __nla_validate_parse: 4 callbacks suppressed
[  457.374559][T18079] netlink: 1311 bytes leftover after parsing attributes in process `syz.1.3129'.
[  457.411998][T18084] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3131'.
[  457.770028][   T29] audit: type=1800 audit(1774182606.260:6): pid=18100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3134" name="memory.events" dev="tmpfs" ino=53 res=0 errno=0
[  457.860625][T18110] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3136'.
[  457.869993][T18110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3136'.
[  458.101072][T18114] pim6reg1: entered promiscuous mode
[  458.106560][T18114] pim6reg1: entered allmulticast mode
[  458.257404][T18049] lo speed is unknown, defaulting to 1000
[  458.723371][T18131] syzkaller0: entered promiscuous mode
[  458.760139][   T51] Bluetooth: hci3: command tx timeout
[  458.772200][T18131] syzkaller0: entered allmulticast mode
[  458.955053][T18122] lo speed is unknown, defaulting to 1000
[  459.268489][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3143'.
[  459.583112][T18049] chnl_net:caif_netlink_parms(): no params data found
[  459.894508][T18049] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.937414][T18049] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.965443][T18049] bridge_slave_0: entered allmulticast mode
[  460.005073][T18049] bridge_slave_0: entered promiscuous mode
[  460.028991][T18049] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.058050][T18049] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.078159][T18049] bridge_slave_1: entered allmulticast mode
[  460.111446][T18049] bridge_slave_1: entered promiscuous mode
[  460.228222][T18167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3151'.
[  460.289528][T18049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.313015][T18049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.430933][T18167] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.575939][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.629112][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.838596][   T51] Bluetooth: hci3: command tx timeout
[  461.031051][  T251] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  461.047107][  T251] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  461.063663][  T251] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  461.095107][T18049] team0: Port device team_slave_0 added
[  461.121428][T18049] team0: Port device team_slave_1 added
[  461.168761][  T251] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  461.287912][T18190] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3154'.
[  461.336461][T18190] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3154'.
[  461.382031][T18049] batman_adv: batadv0: Adding interface: batadv_slave_0
[  461.406275][T18200] x_tables: duplicate underflow at hook 3
[  461.409213][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.493026][T18049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  461.537254][T18049] batman_adv: batadv0: Adding interface: batadv_slave_1
[  461.556182][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.635365][T18049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.840699][T18049] hsr_slave_0: entered promiscuous mode
[  461.866454][T18049] hsr_slave_1: entered promiscuous mode
[  461.884127][T18049] debugfs: 'hsr0' already exists in 'hsr'
[  461.912890][T18049] Cannot create hsr debugfs directory
[  461.981374][T18210] 8021q: adding VLAN 0 to HW filter on device bond1
[  462.098368][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  462.106462][    C0] lec:lec_tx_timeout: lec0
[  462.111351][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  462.141993][T18211] bond1: (slave ip6gretap1): making interface the new active one
[  462.159781][T18211] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  462.627347][T18235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3168'.
[  462.887329][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'.
[  462.918566][   T51] Bluetooth: hci3: command tx timeout
[  463.087521][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'.
[  463.429812][T18262] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  463.476135][T18262] bond1 (unregistering): Released all slaves
[  463.833585][T18282] netlink: 'syz.2.3180': attribute type 13 has an invalid length.
[  463.860747][T18282] netlink: 'syz.2.3180': attribute type 17 has an invalid length.
[  463.877503][T18049] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  463.886402][T18282] netlink: 'syz.2.3180': attribute type 27 has an invalid length.
[  463.920447][T18049] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  463.969703][T18049] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  464.009586][T18049] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  464.110870][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'.
[  464.129021][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'.
[  464.303578][T18049] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.360465][T18049] 8021q: adding VLAN 0 to HW filter on device team0
[  464.377178][T14942] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.384462][T14942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.424423][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.431619][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.600164][T18314] netlink: 'syz.2.3188': attribute type 1 has an invalid length.
[  464.617266][T18314] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.3188'.
[  464.896751][T18329] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  464.999419][   T51] Bluetooth: hci3: command tx timeout
[  465.380783][T18049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.728257][T18374] netlink: 'syz.3.3198': attribute type 1 has an invalid length.
[  465.736208][T18374] netlink: 'syz.3.3198': attribute type 7 has an invalid length.
[  465.745168][T18374] netlink: 'syz.3.3198': attribute type 8 has an invalid length.
[  465.755137][T18374] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3198'.
[  465.914860][T18378] netlink: 'syz.1.3201': attribute type 10 has an invalid length.
[  465.984659][T18378] veth0_vlan: left promiscuous mode
[  466.001727][T18385] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3203'.
[  466.019898][T18378] veth0_vlan: entered promiscuous mode
[  466.042726][T18385] netlink: Conntrack attr has 4 unknown bytes
[  466.058726][T18378] team0: Device veth0_vlan failed to register rx_handler
[  466.072772][T18384] netlink: 'syz.3.3203': attribute type 16 has an invalid length.
[  466.111224][T18384] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3203'.
[  466.265877][T18049] veth0_vlan: entered promiscuous mode
[  466.292144][T18395] netlink: get zone limit has 4 unknown bytes
[  466.321814][T18049] veth1_vlan: entered promiscuous mode
[  466.461390][T18049] veth0_macvtap: entered promiscuous mode
[  466.512424][T18049] veth1_macvtap: entered promiscuous mode
[  466.616391][T18049] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.685272][T18049] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.709635][T18410] netlink: 'syz.1.3207': attribute type 11 has an invalid length.
[  466.717514][T18410] netlink: 'syz.1.3207': attribute type 4 has an invalid length.
[  466.752115][  T991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.804580][  T991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.807168][T18410] netlink: 195060 bytes leftover after parsing attributes in process `syz.1.3207'.
[  466.826069][  T991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.870844][  T991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.117854][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  467.126046][    C0] lec:lec_tx_timeout: lec0
[  467.131264][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  467.182509][T14942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.217969][T14942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.297417][  T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.310941][  T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.686744][T18453] gtp0: entered promiscuous mode
[  467.723100][T18453] gtp0: entered allmulticast mode
[  467.815323][T18461] syzkaller0: entered promiscuous mode
[  467.847958][T18461] syzkaller0: entered allmulticast mode
[  468.051955][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  468.061751][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  468.072191][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  468.081707][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  468.099375][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  468.386025][T18467] lo speed is unknown, defaulting to 1000
[  468.540539][T18478] syzkaller0: entered promiscuous mode
[  468.552935][T18478] syzkaller0: entered allmulticast mode
[  468.901414][T18476] siw: device registration error -23
[  468.938103][T18479] lo speed is unknown, defaulting to 1000
[  468.978737][T18479] lo speed is unknown, defaulting to 1000
[  468.985534][T18479] lo speed is unknown, defaulting to 1000
[  469.097654][T18479] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  469.307960][T18501] validate_nla: 2 callbacks suppressed
[  469.307979][T18501] netlink: 'syz.0.3225': attribute type 2 has an invalid length.
[  469.337649][T18510] __nla_validate_parse: 2 callbacks suppressed
[  469.337668][T18510] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3228'.
[  469.478958][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'.
[  469.489282][T18479] lo speed is unknown, defaulting to 1000
[  469.496834][T18479] lo speed is unknown, defaulting to 1000
[  469.551926][T18501] !: entered promiscuous mode
[  469.608186][T18520] netlink: 'syz.1.3229': attribute type 61 has an invalid length.
[  469.623266][T18479] lo speed is unknown, defaulting to 1000
[  469.650313][T18479] lo speed is unknown, defaulting to 1000
[  469.668074][T18520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3229'.
[  469.681713][T18479] lo speed is unknown, defaulting to 1000
[  469.696220][T18479] lo speed is unknown, defaulting to 1000
[  469.753907][T18479] lo speed is unknown, defaulting to 1000
[  469.808625][T18479] lo speed is unknown, defaulting to 1000
[  469.844275][T18467] chnl_net:caif_netlink_parms(): no params data found
[  469.906808][T18479] lo speed is unknown, defaulting to 1000
[  469.997916][T18479] lo speed is unknown, defaulting to 1000
[  470.033691][T18479] lo speed is unknown, defaulting to 1000
[  470.056648][T18479] lo speed is unknown, defaulting to 1000
[  470.163559][T18467] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.197519][T18467] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.213593][ T5832] Bluetooth: hci4: command tx timeout
[  470.221097][T18467] bridge_slave_0: entered allmulticast mode
[  470.250004][T18467] bridge_slave_0: entered promiscuous mode
[  470.300590][T18467] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.319883][T18467] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.327259][T18467] bridge_slave_1: entered allmulticast mode
[  470.348076][T18467] bridge_slave_1: entered promiscuous mode
[  470.502105][T18467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.545097][T18467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.572110][T18548] tipc: Started in network mode
[  470.585285][T18548] tipc: Node identity 5a43565e7e45, cluster identity 4711
[  470.598906][T18548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.650550][T18553] syzkaller0: entered promiscuous mode
[  470.696678][T18553] syzkaller0: entered allmulticast mode
[  470.757537][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'.
[  470.800392][T18467] team0: Port device team_slave_0 added
[  470.829316][T18467] team0: Port device team_slave_1 added
[  470.869459][T18557] tipc: Resetting bearer <eth:syzkaller0>
[  470.874426][T18564] netlink: 'syz.0.3237': attribute type 8 has an invalid length.
[  470.906054][T18546] tipc: Resetting bearer <eth:syzkaller0>
[  470.996953][T18546] tipc: Disabling bearer <eth:syzkaller0>
[  471.029632][T18467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.045113][T18467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.072834][T18467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.151993][T18467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.179905][T18467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.223258][T18467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.445639][T18467] hsr_slave_0: entered promiscuous mode
[  471.460621][T18588] netlink: 'syz.0.3244': attribute type 10 has an invalid length.
[  471.462002][T18467] hsr_slave_1: entered promiscuous mode
[  471.482535][T18467] debugfs: 'hsr0' already exists in 'hsr'
[  471.488817][T18467] Cannot create hsr debugfs directory
[  471.494627][T18585] lo speed is unknown, defaulting to 1000
[  471.512300][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'.
[  471.557597][T18588] team0: Port device dummy0 added
[  472.032110][T18585] lo speed is unknown, defaulting to 1000
[  472.137864][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  472.145981][    C0] lec:lec_tx_timeout: lec0
[  472.150668][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  472.162940][T18603] syzkaller1: entered allmulticast mode
[  472.188767][T18605] netlink: 'syz.1.3249': attribute type 1 has an invalid length.
[  472.202333][T18467] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.279814][ T5832] Bluetooth: hci4: command tx timeout
[  472.438872][T18605] bond1: entered promiscuous mode
[  472.448312][T18605] 8021q: adding VLAN 0 to HW filter on device bond1
[  472.505807][T18613] vlan2: entered allmulticast mode
[  472.514115][T18613] bond1: entered allmulticast mode
[  472.537455][T18617] bond1: (slave bridge1): making interface the new active one
[  472.545333][T18617] bridge1: entered promiscuous mode
[  472.551353][T18617] bridge1: entered allmulticast mode
[  472.559530][T18617] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  472.593273][T18467] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.694186][T18467] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.772931][T18467] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.252553][T18467] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  473.276262][T18467] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  473.304888][T18467] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  473.325449][T18467] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  473.604542][T18467] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.679063][T18467] 8021q: adding VLAN 0 to HW filter on device team0
[  473.719379][  T134] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.726538][  T134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.786983][  T251] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.794243][  T251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  474.234308][T18656] pim6reg: entered allmulticast mode
[  474.264439][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3259'.
[  474.299374][T18653] pim6reg: left allmulticast mode
[  474.350948][T18656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3258'.
[  474.361286][ T5832] Bluetooth: hci4: command tx timeout
[  474.388394][T18656] 8021q: VLANs not supported on caif0
[  474.407398][T18659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  474.628612][T18467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.740413][T18670] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  474.797317][T18467] veth0_vlan: entered promiscuous mode
[  474.804433][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'.
[  474.813697][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3263'.
[  474.859892][T18678] sctp: [Deprecated]: syz.4.3263 (pid 18678) Use of int in max_burst socket option.
[  474.859892][T18678] Use struct sctp_assoc_value instead
[  474.908396][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'.
[  474.919165][T18467] veth1_vlan: entered promiscuous mode
[  474.937773][T14942] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  474.954069][T14942] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  474.964003][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3263'.
[  474.989365][T14942] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  475.081633][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  475.136027][T18467] veth0_macvtap: entered promiscuous mode
[  475.184081][T18467] veth1_macvtap: entered promiscuous mode
[  475.251634][T18467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.306449][T18467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.410925][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.439139][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.489321][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.620736][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.956966][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.996185][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.103748][T18694] netlink: 'syz.4.3270': attribute type 10 has an invalid length.
[  476.109448][  T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.137849][  T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.157038][T18694] team0: Port device dummy0 added
[  476.181112][T18697] netlink: 'syz.4.3270': attribute type 10 has an invalid length.
[  476.218886][T18697] team0: Port device dummy0 removed
[  476.248537][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'.
[  476.350324][T18697] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  476.441112][ T5832] Bluetooth: hci4: command tx timeout
[  476.614854][T18704] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3272'.
[  476.847748][T18716] tipc: Started in network mode
[  476.866175][T18716] tipc: Node identity 22fba703c93e, cluster identity 4711
[  476.889726][T18716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.909070][T18719] syzkaller0: entered promiscuous mode
[  476.919141][T18719] syzkaller0: entered allmulticast mode
[  477.116725][T18716] tipc: Resetting bearer <eth:syzkaller0>
[  477.158005][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  477.166070][    C0] lec:lec_tx_timeout: lec0
[  477.170734][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  477.194516][T18716] tipc: Disabling bearer <eth:syzkaller0>
[  477.404512][T18727] ip6gretap0: entered promiscuous mode
[  477.573677][T18729] syzkaller0: entered promiscuous mode
[  477.586127][T18729] syzkaller0: entered allmulticast mode
[  477.644745][T18731] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3278'.
[  477.823102][T18736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3281'.
[  478.103405][T18755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3286'.
[  478.225718][T18757] netlink: 'syz.3.3283': attribute type 1 has an invalid length.
[  479.056680][T18804] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  479.097808][T18794] xt_CT: No such helper "netbios-ns"
[  479.162956][T18804] syzkaller0: entered promiscuous mode
[  479.180906][T18804] syzkaller0: entered allmulticast mode
[  479.194156][T18807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  479.443629][T18825] __nla_validate_parse: 3 callbacks suppressed
[  479.443651][T18825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3304'.
[  479.499901][T18825] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3304'.
[  479.607664][T18830] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3305'.
[  479.625022][T18835] netlink: 'syz.2.3306': attribute type 3 has an invalid length.
[  479.647176][T18835] netlink: 772 bytes leftover after parsing attributes in process `syz.2.3306'.
[  479.674739][T18835] netlink: 'syz.2.3306': attribute type 3 has an invalid length.
[  479.684737][T18836] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  479.696522][T18835] netlink: 772 bytes leftover after parsing attributes in process `syz.2.3306'.
[  479.904958][T18840] bond1 (unregistering): Released all slaves
[  479.940500][T18843] netlink: 'syz.0.3310': attribute type 32 has an invalid length.
[  479.951192][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'.
[  479.990538][T18843] bond2: Setting coupled_control to off (0)
[  480.338067][T18873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3316'.
[  481.050647][T18896] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3323'.
[  481.211595][T18902] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3325'.
[  481.267859][T18902] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.276587][T18902] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.563759][T18916] lo speed is unknown, defaulting to 1000
[  481.864140][T18916] lo speed is unknown, defaulting to 1000
[  481.922802][T18934] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3333'.
[  482.180628][T18951] xt_TPROXY: Can be used only with -p tcp or -p udp
[  482.223104][T18953] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  482.408396][T18965] netlink: 'syz.1.3340': attribute type 7 has an invalid length.
[  482.427182][T18965] netlink: 'syz.1.3340': attribute type 8 has an invalid length.
[  482.566163][T18927] lo speed is unknown, defaulting to 1000
[  482.617270][T18972] tun0: tun_chr_ioctl cmd 2147767507
[  482.998756][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  483.007294][    C0] lec:lec_tx_timeout: lec0
[  483.012730][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  483.131234][T18987] lo speed is unknown, defaulting to 1000
[  483.146126][T18927] lo speed is unknown, defaulting to 1000
[  483.702281][T18987] lo speed is unknown, defaulting to 1000
[  483.926851][T19009] syzkaller0: entered promiscuous mode
[  483.944848][T19009] syzkaller0: entered allmulticast mode
[  484.199272][T19009] macsec1: entered promiscuous mode
[  484.934464][T19034] xt_hashlimit: max too large, truncated to 1048576
[  484.952704][T19034] xt_hashlimit: overflow, try lower: 18446744073709551608/8
[  484.999698][T19035] tipc: Started in network mode
[  485.007448][T19035] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  485.051208][T19035] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  485.073057][T19035] tipc: Enabled bearer <udp:syz0>, priority 26
[  485.084726][T19033] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  485.093060][T19047] netlink: 'syz.1.3360': attribute type 13 has an invalid length.
[  485.101514][T19047] __nla_validate_parse: 4 callbacks suppressed
[  485.101531][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'.
[  485.206684][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'.
[  485.480206][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  485.742158][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'.
[  485.833811][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'.
[  485.857919][T19066] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3366'.
[  485.867010][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'.
[  485.919596][T19066] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3366'.
[  485.947938][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'.
[  487.805677][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  487.812672][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  487.819578][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  487.827634][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  487.834481][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  487.841304][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  487.848143][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  487.854971][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  487.861828][T19061] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  488.027983][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  488.036100][    C0] lec:lec_tx_timeout: lec0
[  488.040923][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  488.152618][T19039] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.160413][T19039] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.287698][T19039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.305547][T19039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.635649][   T24] tipc: Node number set to 1
[  488.684935][T14942] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  488.708883][T14942] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  488.776640][  T251] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  488.811267][  T251] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.042612][T19126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3376'.
[  490.107697][T19129] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3379'.
[  490.155687][T19131] netlink: 'syz.2.3380': attribute type 1 has an invalid length.
[  490.206582][T19129] vlan2: entered allmulticast mode
[  490.222165][T19129] gretap0: entered allmulticast mode
[  490.258362][T19131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3380'.
[  490.325692][T19135] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3380'.
[  490.426179][T19140] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  490.591594][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'.
[  490.788913][T19163] netlink: 'syz.1.3388': attribute type 2 has an invalid length.
[  490.809574][T19163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3388'.
[  490.833782][T19165] netlink: 'syz.2.3389': attribute type 1 has an invalid length.
[  490.856733][T19164] bridge1: port 1(batadv1) entered blocking state
[  490.863592][T19164] bridge1: port 1(batadv1) entered disabled state
[  490.877144][T19168] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3390'.
[  490.882561][T19164] batadv1: entered allmulticast mode
[  490.906505][T19164] batadv1: entered promiscuous mode
[  490.928280][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'.
[  490.931263][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'.
[  490.959554][T19165] batadv1: left allmulticast mode
[  490.964704][T19165] batadv1: left promiscuous mode
[  490.976630][T19165] bridge1: port 1(batadv1) entered disabled state
[  491.092715][T19173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3392'.
[  491.114738][T19173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3392'.
[  491.147582][T19173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3392'.
[  491.591381][T19176] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.613123][T19176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.832031][T19184] net_ratelimit: 56 callbacks suppressed
[  491.832062][T19184] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  491.924678][   T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.944296][   T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  492.014770][   T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  492.048500][   T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  492.134574][ T9237] IPVS: starting estimator thread 0...
[  492.222884][T19214] netlink: 'syz.1.3403': attribute type 7 has an invalid length.
[  492.239343][T19214] netlink: 'syz.1.3403': attribute type 8 has an invalid length.
[  492.247923][T19210] IPVS: using max 28 ests per chain, 67200 per kthread
[  492.306560][T19222] netlink: 'syz.3.3401': attribute type 1 has an invalid length.
[  492.497307][T19228] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  492.703841][T19237] netlink: 'syz.2.3410': attribute type 4 has an invalid length.
[  492.855914][T19243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.047856][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  493.055907][    C0] lec:lec_tx_timeout: lec0
[  493.060653][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  493.067621][T19250] ipt_rpfilter: unknown options
[  493.447718][T19261] netlink: zone id is out of range
[  493.465881][T19261] netlink: del zone limit has 8 unknown bytes
[  493.480092][T19262] sctp: [Deprecated]: syz.4.3418 (pid 19262) Use of int in max_burst socket option deprecated.
[  493.480092][T19262] Use struct sctp_assoc_value instead
[  493.565346][T19264] netlink: 'syz.4.3418': attribute type 12 has an invalid length.
[  494.034148][T19284] gretap0: entered promiscuous mode
[  494.204701][T19292] netlink: 'syz.0.3424': attribute type 1 has an invalid length.
[  494.223988][T19292] netlink: 'syz.0.3424': attribute type 2 has an invalid length.
[  494.259959][T19292] �9: entered promiscuous mode
[  494.818362][T19316] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  494.869625][T19322] bond1: entered promiscuous mode
[  494.874811][T19322] bond1: entered allmulticast mode
[  494.880829][T19322] 8021q: adding VLAN 0 to HW filter on device bond1
[  494.977197][T19327] bond0: entered promiscuous mode
[  494.990579][T19327] bond_slave_0: entered promiscuous mode
[  494.996601][T19327] bond_slave_1: entered promiscuous mode
[  495.025624][T19327] batadv_slave_0: entered promiscuous mode
[  495.032857][T19327] batadv_slave_0: left promiscuous mode
[  495.039161][T19327] bond0: left promiscuous mode
[  495.044245][T19327] bond_slave_0: left promiscuous mode
[  495.050123][T19327] bond_slave_1: left promiscuous mode
[  495.164471][T19330] bond2: option lacp_active: invalid value (10)
[  495.193383][T19330] bond2 (unregistering): Released all slaves
[  495.590671][T19351] validate_nla: 3 callbacks suppressed
[  495.590689][T19351] netlink: 'syz.1.3442': attribute type 1 has an invalid length.
[  495.621323][T19351] __nla_validate_parse: 16 callbacks suppressed
[  495.621341][T19351] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3442'.
[  495.746935][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'.
[  495.827826][T19360] tipc: Started in network mode
[  495.841971][T19360] tipc: Node identity 2, cluster identity 4711
[  495.848562][T19360] tipc: Node number set to 2
[  496.301158][T19379] macsec2: entered promiscuous mode
[  496.312363][T19379] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  497.709011][T19429] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3463'.
[  497.798800][T19438] netlink: 'syz.2.3465': attribute type 21 has an invalid length.
[  497.806762][T19438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3465'.
[  497.839687][T19438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3465'.
[  497.910172][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3467'.
[  498.067930][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  498.076031][    C0] lec:lec_tx_timeout: lec0
[  498.191643][T19449] 8021q: adding VLAN 0 to HW filter on device bond1
[  498.303172][T19457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3471'.
[  498.345222][T19455] Bluetooth: MGMT ver 1.23
[  498.553353][T19469] syzkaller0: entered promiscuous mode
[  498.559161][T19469] syzkaller0: entered allmulticast mode
[  498.605952][   T13] ------------[ cut here ]------------
[  498.611607][   T13] conntrack cleanup blocked for 60s
[  498.611635][   T13] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:1/13
[  498.629629][   T13] Modules linked in:
[  498.633908][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  498.643285][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  498.653478][   T13] Workqueue: netns cleanup_net
[  498.658439][   T13] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340
[  498.666191][   T13] Code: 08 48 89 df e8 0d fa 64 f8 4c 8b 3b 49 39 df 74 69 e8 d0 b7 fa f7 45 31 e4 e9 8e fe ff ff e8 c3 b7 fa f7 48 8d 3d 1c 8e 55 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff
[  498.685924][   T13] RSP: 0018:ffffc900001278b0 EFLAGS: 00010293
[  498.692146][   T13] RAX: ffffffff89cae93d RBX: ffffc90000127a50 RCX: ffff88801da9db80
[  498.700593][   T13] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff90207760
[  498.709178][   T13] RBP: 0000000000000001 R08: ffff888078969403 R09: 1ffff1100f12d280
[  498.717193][   T13] R10: dffffc0000000000 R11: ffffed100f12d281 R12: 0000000000000001
[  498.725335][   T13] R13: dffffc0000000000 R14: 0000000100004cd7 R15: 0000000100004cd8
[  498.733377][   T13] FS:  0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000
[  498.742398][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  498.749053][   T13] CR2: 0000000000000000 CR3: 000000000e54c000 CR4: 00000000003526f0
[  498.757082][   T13] Call Trace:
[  498.760559][   T13]  <TASK>
[  498.763556][   T13]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  498.769758][   T13]  ops_undo_list+0x52b/0x940
[  498.774400][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  498.779648][   T13]  ? idr_destroy+0x218/0x290
[  498.784390][   T13]  ? do_raw_spin_unlock+0xf5/0x210
[  498.789633][   T13]  cleanup_net+0x56b/0x800
[  498.794105][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  498.799149][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  498.805330][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  498.811405][   T13]  process_scheduled_works+0xb6e/0x18c0
[  498.817065][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  498.823161][   T13]  ? assign_work+0x3d5/0x5e0
[  498.827850][   T13]  worker_thread+0xa53/0xfc0
[  498.832526][   T13]  kthread+0x388/0x470
[  498.836671][   T13]  ? __pfx_worker_thread+0x10/0x10
[  498.842139][   T13]  ? __pfx_kthread+0x10/0x10
[  498.846783][   T13]  ret_from_fork+0x51e/0xb90
[  498.851508][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  498.857122][   T13]  ? __switch_to+0xc7d/0x1450
[  498.861971][   T13]  ? __pfx_kthread+0x10/0x10
[  498.866616][   T13]  ret_from_fork_asm+0x1a/0x30
[  498.871533][   T13]  </TASK>
[  498.874616][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  498.881929][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  498.891239][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  498.901320][   T13] Workqueue: netns cleanup_net
[  498.906120][   T13] Call Trace:
[  498.909460][   T13]  <TASK>
[  498.912415][   T13]  vpanic+0x56c/0xa60
[  498.916453][   T13]  ? __pfx__printk+0x10/0x10
[  498.921171][   T13]  ? __pfx_vpanic+0x10/0x10
[  498.925787][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  498.931186][   T13]  ? is_bpf_text_address+0x26/0x2b0
[  498.936407][   T13]  panic+0xc5/0xd0
[  498.940150][   T13]  ? __pfx_panic+0x10/0x10
[  498.944599][   T13]  ? ret_from_fork_asm+0x1a/0x30
[  498.949570][   T13]  __warn+0x315/0x4f0
[  498.953571][   T13]  ? nf_conntrack_cleanup_net_list+0x234/0x340
[  498.959768][   T13]  ? nf_conntrack_cleanup_net_list+0x234/0x340
[  498.965946][   T13]  __report_bug+0x29a/0x540
[  498.970538][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[  498.975514][   T13]  ? nf_conntrack_cleanup_net_list+0x234/0x340
[  498.981701][   T13]  ? __pfx___report_bug+0x10/0x10
[  498.986766][   T13]  ? nf_conntrack_cleanup_net_list+0x13e/0x340
[  498.992953][   T13]  report_bug_entry+0x19a/0x290
[  498.997821][   T13]  ? nf_conntrack_cleanup_net_list+0x234/0x340
[  499.004004][   T13]  ? nf_conntrack_cleanup_net_list+0x239/0x340
[  499.010192][   T13]  handle_bug+0xce/0x200
[  499.014461][   T13]  exc_invalid_op+0x1a/0x50
[  499.018993][   T13]  asm_exc_invalid_op+0x1a/0x20
[  499.023862][   T13] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340
[  499.030664][   T13] Code: 08 48 89 df e8 0d fa 64 f8 4c 8b 3b 49 39 df 74 69 e8 d0 b7 fa f7 45 31 e4 e9 8e fe ff ff e8 c3 b7 fa f7 48 8d 3d 1c 8e 55 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff
[  499.050294][   T13] RSP: 0018:ffffc900001278b0 EFLAGS: 00010293
[  499.056386][   T13] RAX: ffffffff89cae93d RBX: ffffc90000127a50 RCX: ffff88801da9db80
[  499.064374][   T13] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff90207760
[  499.072369][   T13] RBP: 0000000000000001 R08: ffff888078969403 R09: 1ffff1100f12d280
[  499.080370][   T13] R10: dffffc0000000000 R11: ffffed100f12d281 R12: 0000000000000001
[  499.088372][   T13] R13: dffffc0000000000 R14: 0000000100004cd7 R15: 0000000100004cd8
[  499.096386][   T13]  ? nf_conntrack_cleanup_net_list+0x22d/0x340
[  499.102619][   T13]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  499.108726][   T13]  ops_undo_list+0x52b/0x940
[  499.113348][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  499.118493][   T13]  ? idr_destroy+0x218/0x290
[  499.123101][   T13]  ? do_raw_spin_unlock+0xf5/0x210
[  499.128241][   T13]  cleanup_net+0x56b/0x800
[  499.132681][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  499.137643][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  499.143409][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  499.149152][   T13]  process_scheduled_works+0xb6e/0x18c0
[  499.154752][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  499.160761][   T13]  ? assign_work+0x3d5/0x5e0
[  499.165378][   T13]  worker_thread+0xa53/0xfc0
[  499.170017][   T13]  kthread+0x388/0x470
[  499.174115][   T13]  ? __pfx_worker_thread+0x10/0x10
[  499.179268][   T13]  ? __pfx_kthread+0x10/0x10
[  499.183881][   T13]  ret_from_fork+0x51e/0xb90
[  499.188503][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  499.193636][   T13]  ? __switch_to+0xc7d/0x1450
[  499.198339][   T13]  ? __pfx_kthread+0x10/0x10
[  499.202944][   T13]  ret_from_fork_asm+0x1a/0x30
[  499.207751][   T13]  </TASK>
[  499.211395][   T13] Kernel Offset: disabled
[  499.215726][   T13] Rebooting in 86400 seconds..