last executing test programs:

5.018519454s ago: executing program 0 (id=5069):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x3, 0x2}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x3, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}, 0x40c0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="ef616b4d", 0x4}, {0x0}], 0x2}, 0x4040810) (async)
sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="ef616b4d", 0x4}, {0x0}], 0x2}, 0x4040810)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a31000000001400078005001500820000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x4}, 0x6)
socket$can_raw(0x1d, 0x3, 0x1)
socket$kcm(0x2a, 0x2, 0x0) (async)
socket$kcm(0x2a, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRESOCT=r2, @ANYBLOB="070000000000000000000000f38c158ec948708ae05e259b8c704f8318e929d058668453e1c0fdc82445a46b68d47918b6cb5f9b50299812d7b36a039d7beaef7abb59bf4fe3d61b05d8ded3a89090148ae9136d6aaacb36801568c1e7453306dff8e095992044013591f811c16bf13acb1bbaa1b49d0d77e88e6326f59edd885adc866cd8cbe85f08754faefdd8803d23dd2cea2e97838f8336032f27a37bedb1f9089c1be1096731bb33cd1d7ab6c6528dbf740ba8e1355a9d2b529d1ef6f464b36e97066e555858000ff0907c94e914b448a2f068da34df895b0802424516ea7721aededa0e0c1100e1fbc349b663ed83056bf316f363e17f8b7fe82be9406378c6d4b0207e651190d4995097bebc1ed9146edca977f68617a334423616afcdc0b643431750120cc0fa61ca6fed811b71d6a02ebf9290f77f74aca92ca789bd28c27c91eed6318c08798d1b37a2fb24622cd7b8b91f933041b575399422b46dfe99d95cc58557ef90cb3e282fa7d89bf0be1aebce2d3710681f3db3b10606564b2aedf147612bd3fea497873cd3eeb1bdbcf3388ec3d03fa502e434e7d3678da5eaf527132bd67b3be5d17a0dc119984868492ce75b9aad2a09319cb1be997b96d0b2d8e44674aa18690d7fe6b8d1fddc4ad6c68ae1cabfcaddbeab54dccee87bc368edac078de95f80497d3db9f77ae0dea75cacd9c75238cc0ee473dba4d7150d17a664bea45efd643459d02c24bcd2496b8652d12b1b2d7bd54975fc21b9a73cc541fea88dbc285c9839a23dd4ade8febf9f892d4f2e670538d6e0543431efeb70ac099aa6ef4dc18385b99aef8f578633304a201518f1d79152", @ANYRES32, @ANYBLOB, @ANYRESHEX], 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x8, 0x7, [0x1, 0x73, 0x9, 0x0, 0x9, 0x4a, 0x7]}, &(0x7f00000001c0)=0x16)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000000c0)={r6})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000180)=[{0xd01, 0x52, 0x4, 0x1000}, {0x1400, 0xde, 0x9}, {0x2, 0x1, 0x74, 0xec}, {0x8, 0x9, 0x10}, {0xfffc, 0x5, 0x8, 0x101}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000180)=[{0xd01, 0x52, 0x4, 0x1000}, {0x1400, 0xde, 0x9}, {0x2, 0x1, 0x74, 0xec}, {0x8, 0x9, 0x10}, {0xfffc, 0x5, 0x8, 0x101}]}, 0x10)

4.619429988s ago: executing program 0 (id=5076):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb9000000000000000080ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0)

4.398657392s ago: executing program 0 (id=5080):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040)

4.346124747s ago: executing program 4 (id=5083):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x2a, 0x2, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="500238", @ANYRES64=r2], 0x3b)
close(r1)

4.265683264s ago: executing program 3 (id=5085):
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
unshare(0x20000400) (async)
unshare(0x20000400)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bind$bt_hci(r0, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000862eb1fd0120000000000000000000"], 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xe38, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x6}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @loopback={0xf5ffffff}, @ipv4={'\x00', '\xff\xff', @multicast1}, [{0x1, 0x1c1, "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"}]}}}}}, 0xe6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000040000008500000005000000bf0920000000000035090100000000009500000000000000b7020000230000007b9af8ff00000000b5090000000000807baaf0ff00000000ae8800000000000007080000f8ffffffbf8420000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x16}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000340)="ee47", &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r7, &(0x7f0000000780)}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2d, 0x4) (async)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2d, 0x4)

4.145198882s ago: executing program 2 (id=5087):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={<r1=>r0, 0x24, 0xfffffffffffffff9, 0x8})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffc0}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x41}, 0x94)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa410100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x80000000, 0x68}, 0x2c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="12450000", @ANYRES16=0x0, @ANYBLOB], 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, 0x0)
ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000300)={0x0, @bcast, @bpq0, 0x7, 'syz0\x00', @null, 0x2, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="c5407a6a4aaca71dd62bd80aca699a310ef818bc6ca034f7000ae864a70c5db4753105f596e3a044e81e2215f2698bfdc81334c70e4c0d93fadc4905dd04c9bc38ddcbecbc72a3c3bd738ad843515d1a6fc47c32c8a38aa74f59996097656b3dd246ea30af26e88ff691f00d93b292d575e7c542867e33635aa68fc5f2c0e9b7f42f5750ec61e833fc4578cf9b64474cc5931fa3ce2bae944fcb7ff7d744e2074c14e7d3f9ffffffffffffffe2b762f641d76b"], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="fefaa68b55bdf78bda19e31b2928d1aeb7a738100450817a08f35860f32f92c4209d1e864dab3dbc097f96abe9dbbda79ccf83ea4314e73dbef75d98ff6c52012f37ba3e936c88f435db9693ceb83899fd1c4ede218bba6cbc6f325b395f7ff2a5ec43086bed07928eb0296472dab813219dd468333324b64b085770b6d4b700dbe29f792934dbaec697541fbebe08410d4917d3abe4070f76bafde3000c22d27de9947aab97e995770cd1a3af4e8b3c84e681cda99b7be70ad7a8e3"], 0x24}}, 0x0)
r11 = socket(0x2, 0x80805, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r12, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={<r13=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x7a, &(0x7f0000000840)={<r14=>r13, @in6={{0xa, 0x3, 0x6, @mcast2}}}, &(0x7f00000002c0)=0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000100)={r14, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000500)={<r15=>0x0}, &(0x7f0000000540)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000580)={r15, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, &(0x7f0000000640)=0x84)
sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000429bd7000fddbdf255400000008000300987db5defd7adcb0251d21606e676e06880cfbf9e132886492ddc7e51cb9e1f13e0c991f924ec5d170094ebf21114aaee29c5ebbebad837ce275f3e028f7ecff690fa8fe396198fc33a75b1a8009ff3947cc2ad03ef1ef5c2cfe90eab7eb96d98748f42df08e0684319e2fa0e3bd3eba98b785488e3e8dda95cde72245e06cdaa70d0a6978", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x4c00d}, 0x0)

4.017938255s ago: executing program 4 (id=5089):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

3.914624256s ago: executing program 0 (id=5091):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
accept4(r0, 0x0, 0x0, 0x800)
socket$inet6_udplite(0xa, 0x2, 0x88)
recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x50, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
socket(0xa, 0x3, 0xfc)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

3.884889797s ago: executing program 3 (id=5092):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0x4}, {0x0, 0xb}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000002c0)={0xb, 0xbd})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200007800000000000000626f0000850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa10800000016007f49582b6182cdf2b702000008000000b70300003f000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "b4bb1e0f4aba819b", "35f17d3327dd4dea62fa696f7b463903", "adf8eada", "6bec80de810b00"}, 0x28)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbb}}], 0x30}, 0x0)

3.883646033s ago: executing program 4 (id=5093):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000001b00000000020000000000000000000000000000002b0000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c000000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

3.839675789s ago: executing program 1 (id=5094):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002, 0x800, 0xffffffffffffffff, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2, 0xfffffffe, 0x18}, 0xc)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r2, 0x1, 0xce8a00fc84026858}, 0xc)
socket(0x22, 0x80000, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20)

3.81507747s ago: executing program 2 (id=5095):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e22, @multicast2}})
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0), 0x8)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x396}, 0x4)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606096e0000000028000a8006000100040000001c0003800c00010007000000670000000c000803f7ffffff030000000800050000000000000000000000000000000000edaf081c464ec2868c12f2a6c81fd4131194c3b84aa4bb9e6875711215425e11585c0ab3481c8d73cd495828702b8a04f66a23c9c3d422b2784f891c0530bac0a0a88d320618e54baa2e121ef8e1e716bd15bfdaebf6f3dd606752962f6d8a0bffb6f57dbd7b09d7eb2f1e42b918c27b709472d7c80f039a27", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x19c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x120000}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0xd005}, 0x20004080)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c18bd10030002907800000000e00003001100907800000000"], 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xb}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x4041080)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r7)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000127ad7000fedbdf250600000008000306001800000004000180080004000000000005000500140000000400018050bcf91ba95716c504a0b085031321d6ce890d1e827907017686ed73be1381624e3e2a88743780418143932d029a638e5412580cb81ac177187958f9420f8639fd0f2c6dbf4534b07e00"/131], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084)
close(0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
close(0x4)

3.755284313s ago: executing program 1 (id=5096):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r3=>0x0, 0x29, 0x3e, 0x4, 0x200, 0x1, @empty, @empty, 0x8000, 0x700, 0x8}})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0xfffff840, 0x0, 0x0, 0x0, 0x1f, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ef5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1869d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f33ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a29459aff1374df5c49ca11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc006b340658342d2d9e06008c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e9dffd8918de33aed5bb09cb2a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf422b7473c24b93085c51e02af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00bb02000000000000c84799aa792cdaeb607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee127ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c435c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fceea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfe089e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cf594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f5bce1cdaa99705a8fa48f61071f548d411353965615c24c1860790dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9776f89c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba26bb91d7b1b98f11fb7a77b03206c151b00015305af815f7da19872085b503a21cbe722842c26ad8dd6b83018300000000000000000000f4ffffffffffffff000000000000000000000000000000000000798d011c62dbfdbad9e58e07d371e3a2399f2369631138ad4fb3aeb3f51233922b4c700fb163efbc55c912276685a774f2dce9bb9c54fd1f505eccf06323fad86c37adafb5e80b96ba9f925a6fd57de5fedf691e8b41c9835a840d12a224ed233c93ed92603401e5a61298294e9cab078c231121d4e32fb8286478fb12f5804d13c7bcff5dcffccd1d520dc04910239efc397b7736682e1c0ef0d001c17ec1441026ed4b1395b8e88a58d667a65cec1ddee1b30bcc96652a238c990a2701e2ee0915335fa4b8c33372bd00021f17c012451519ad56594c9469f164bb915edb1fd4ce76fb37bb9512632e9c9e7dcc772128c280c6e6cc0e859bd65c666e8b7732a2c2d517af56f4cde502f364922f3c2bbf9f4ced5c6f3d33428775b7399e6c6cf52bc8d5b48079700db251c7cdad3836c1e137b11917cff00e0ecc5e93fd7e8bdd83313a27197651c92f2f9be4a6f83662fa948c46632a979e8c66d22777a06601c5f5d3ab28b9f9e39543d2bb9de6ce57a6c1c3a635a0515c87abd11988cae405b9495f54b8d89503a8c9e96bdf08eb563e4cffe00e27272ca6e392ffca16b172ce8b6ee542ec9135e969b7b029beaeba12836110fcb686d82c066d0fc67fee8a00acda99a302a7aac9e920e34174323e7c6aeefd0a092545274fb164f21ac2f46849a6d0b51ad5a230a5ffab7a66e7dde5a335aeaa9736678319f344a32c99ac748bf200368963de24c237873ff5a01f14335de9a6d06c8b49ff27ddf0f13d5fe0901355765c397ce52791339d666eec141f0d33ca51f7b8aa6e9937631269b064d9c7323df8b7154f76708b912e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r4)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd)

3.59379399s ago: executing program 4 (id=5097):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000380), &(0x7f00000004c0)=r1}, 0x20) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$kcm(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000f00e8ffffff0500c400000000", @ANYRES16=r3], 0x48) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000))
gettid() (async)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000380001092cbd7000ffdbdf25021800000000d0c21ea6000800000000"], 0x1c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.28157074s ago: executing program 3 (id=5098):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x7}, 0x80, 0xcd, 0x100, 0x6, 0x15, 'syz0\x00', "224e985b370d3c071e6a3a8ab23cd0c0189351f934658775d5145a6764ee9f1b", "e0cda5700cf575dfe55e90d0f04cb0d048421e6fe03df1dfe6bfbac2235b4d60", [{0x1, 0xfffd, {0x3, 0x7ff}}, {0xffff, 0x3, {0x2, 0xa}}, {0x10, 0x8000, {0x3, 0xb614}}, {0x8, 0x8, {0x1, 0x2}}, {0x6, 0x1, {0x3, 0x8}}, {0x8, 0x8, {0x0, 0x100}}, {0x3, 0x9, {0x0, 0x4}}, {0x68, 0x0, {0x0, 0x2}}, {0x7, 0x9, {0x2, 0x4}}, {0x6, 0xf4, {0x3, 0x2}}, {0x3, 0x879, {0x0, 0xffffffff}}, {0x8, 0x8, {0x2, 0x9}}, {0x4, 0x3, {0x3, 0x5}}, {0x0, 0x2, {0x3, 0x7fffffff}}, {0x800, 0x6, {0x1, 0x9}}, {0x2, 0x0, {0x3, 0x1}}, {0x7f, 0xffff, {0x0, 0x3}}, {0x40, 0xff, {0x0, 0x101}}, {0x3, 0x6a, {0x3, 0x4}}, {0x8001, 0x92, {0x3, 0x9}}, {0x4, 0xd, {0x0, 0x3}}, {0x2, 0x7fff, {0x2, 0x10}}, {0x7, 0x4, {0x1, 0x8f9}}, {0x0, 0x9, {0x3, 0x1ff}}, {0x6, 0x4, {0x1}}, {0x0, 0x81, {0x1, 0x7}}, {0x6, 0x8, {0x3, 0xb3000000}}, {0xd, 0xfffc, {0x2, 0x3}}, {0x3, 0x7, {0x2, 0x40}}, {0x9, 0x6, {0x3, 0xffff}}, {0x5, 0x4, {0x3}}, {0x7, 0x5, {0x2, 0x4f}}, {0x2, 0x4, {0x1, 0x2}}, {0x4, 0x7d}, {0x8, 0x9, {0x3, 0xfffffffb}}, {0x6, 0x4ce8, {0x1, 0x80}}, {0x0, 0x1, {0x2, 0x1d8}}, {0x5, 0xf801, {0x1, 0x3}}, {0x1ff, 0x80, {0x2, 0x37f0}}, {0x5, 0x8, {0x3, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x30000080}, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x9}, [@CTA_NAT_SRC={0x60, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048005}, 0x40001)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300030e0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005002b00000002004e22ac14140a00000000000000000100140002"], 0x70}, 0x1, 0x7}, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0xe, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x7}, 0x80, 0xcd, 0x100, 0x6, 0x15, 'syz0\x00', "224e985b370d3c071e6a3a8ab23cd0c0189351f934658775d5145a6764ee9f1b", "e0cda5700cf575dfe55e90d0f04cb0d048421e6fe03df1dfe6bfbac2235b4d60", [{0x1, 0xfffd, {0x3, 0x7ff}}, {0xffff, 0x3, {0x2, 0xa}}, {0x10, 0x8000, {0x3, 0xb614}}, {0x8, 0x8, {0x1, 0x2}}, {0x6, 0x1, {0x3, 0x8}}, {0x8, 0x8, {0x0, 0x100}}, {0x3, 0x9, {0x0, 0x4}}, {0x68, 0x0, {0x0, 0x2}}, {0x7, 0x9, {0x2, 0x4}}, {0x6, 0xf4, {0x3, 0x2}}, {0x3, 0x879, {0x0, 0xffffffff}}, {0x8, 0x8, {0x2, 0x9}}, {0x4, 0x3, {0x3, 0x5}}, {0x0, 0x2, {0x3, 0x7fffffff}}, {0x800, 0x6, {0x1, 0x9}}, {0x2, 0x0, {0x3, 0x1}}, {0x7f, 0xffff, {0x0, 0x3}}, {0x40, 0xff, {0x0, 0x101}}, {0x3, 0x6a, {0x3, 0x4}}, {0x8001, 0x92, {0x3, 0x9}}, {0x4, 0xd, {0x0, 0x3}}, {0x2, 0x7fff, {0x2, 0x10}}, {0x7, 0x4, {0x1, 0x8f9}}, {0x0, 0x9, {0x3, 0x1ff}}, {0x6, 0x4, {0x1}}, {0x0, 0x81, {0x1, 0x7}}, {0x6, 0x8, {0x3, 0xb3000000}}, {0xd, 0xfffc, {0x2, 0x3}}, {0x3, 0x7, {0x2, 0x40}}, {0x9, 0x6, {0x3, 0xffff}}, {0x5, 0x4, {0x3}}, {0x7, 0x5, {0x2, 0x4f}}, {0x2, 0x4, {0x1, 0x2}}, {0x4, 0x7d}, {0x8, 0x9, {0x3, 0xfffffffb}}, {0x6, 0x4ce8, {0x1, 0x80}}, {0x0, 0x1, {0x2, 0x1d8}}, {0x5, 0xf801, {0x1, 0x3}}, {0x1ff, 0x80, {0x2, 0x37f0}}, {0x5, 0x8, {0x3, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x30000080}, 0x4) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x9}, [@CTA_NAT_SRC={0x60, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048005}, 0x40001) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300030e0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005002b00000002004e22ac14140a00000000000000000100140002"], 0x70}, 0x1, 0x7}, 0x0) (async)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0xe, 0x2}) (async)

2.862153071s ago: executing program 3 (id=5099):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)=""/196, &(0x7f0000000040)=0xc4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x2a, 0x2, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="500238", @ANYRES64=r2], 0x3b)
close(r1)

2.518333269s ago: executing program 3 (id=5100):
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$l2tp6(0xa, 0x2, 0x73)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="03", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8, 0x0, 0xa6ff}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000000380)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0xfc48e1f23e38647f}], 0x1}}], 0x3, 0x4048401)

2.402717756s ago: executing program 3 (id=5101):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x100000}]}}, 0x0, 0x3e, 0x0, 0x0, 0xfffffffe}, 0x28)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xffffffffffffff52, 0x2, 0x1}]}}]}, 0x50}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r11, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x1, 0x9, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @dev={0xac, 0x14, 0x14, 0x35}}, 0xc)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x7}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)={0x2c, r15, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000ce8c28393f41355585551c2383f9a8b07a25100f237d7ac03504c3b5356a85", @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000100000048000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c769049199715c1}, 0x40)

635.417562ms ago: executing program 4 (id=5102):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3) (async)
r4 = socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24050)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async, rerun: 32)
r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00012abd7000fedbdf0000000000000000000700000069000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) (async, rerun: 64)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r11, {0x3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x24, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x78d8b7aae58cf1e1}, @TCA_TBF_BURST={0x8, 0x6, 0x5f}, @TCA_TBF_PRATE64={0xc, 0x5, 0x99300bd66d509cf0}]}}]}, 0x50}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r14)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_CONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x101}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @NL80211_ATTR_SSID={0x6, 0x34, @random="d787"}]}, 0x3c}}, 0x4000000) (async, rerun: 64)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) (rerun: 64)

619.198353ms ago: executing program 2 (id=5103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") (async)
unshare(0x6020400) (async)
r2 = gettid()
r3 = syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
close(r3) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r6, 0x8) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r8, 0x8, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0]}, 0x40) (async)
sendmmsg$unix(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) (async)
sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async)
sendto$inet(r7, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) (async)
sendmmsg$alg(r7, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46a765abf639b72b8a139f359b9ab775ac089217bd34619d163b302fe5b56c83ba36f2ad5754652a659f4ca2976163de39b0b1cb89a196cf345297dcd360a49eb55a17802e01dd8889e790398c694d209ea9ec4b5a7b2137842999f05efaaffad4d5fc4c297426d39e2973afd17797c56f1ee7565a175f08702135bc531a8f2f45a6e2256a06a59cd5c0e8f04a30cf162903e042383dcf85118a5c0512d767cca0b677800dbe39150990370afcbbc0550c13d62bdd242cc9dfab2e194bc4103e3293bcb3d55fb5e7887c07d23157b978ce1378c755f654a5eeed63e488fafc22fa520f8c974e901ac57ad1072d8362d5022583ce4698aa51a1ba478ec2128d2467a4a5c8ba0e0e073115c783458d5cc562d473a42b8693dfa2f5047ad4484c9000fc70303560903325dba08cc0ca84652ac269a33e43981372f5f0cbf016385b579c2e3bae9fe2ae1b537dae375160794c21e1d0346bd9577ce62bfb3634105ebfa216cd9a2d693b4eb420af5b94b2a35c024a2199f72280b96ebbd50d1f934e2ed5e809b7eb513b932f049846c783c755c2997d9213d3be892dcbd11e9618aebd610b230b78c5fd673741063fb3603c3c87989eb6a2ca0d2029d8c055c35e3b918c234abc1287ad6665fc04995434cd078d5997edc4b2f86ee29412688aafbb274b1837783edf0cea84870a97a13b5acd0e409ea7bf9ae009785b5effd2745231f0d95b42649f41d4fe01b9c079960701bbb696036cd39a7775fa4ee55b67687f976a269e42fcbae04fc688ca91a013661f47027c0b669a55ad7a84476293273282e170d28ab4db9e3b8d26b756d0eea813fb28df6a9a2127fef569c27dc1a721b1ccd709eb97636a1c1bc796edaabd6751b9d402fccb80767ee30665c7186dd94eafa176fe21871f0610533771fdccfedfa071ab4dba858e2b0bd7f9ea6638226c43c87e709b5ca61967573b6cb7b758a9ad659f2caf4a260027a000eead341238d4c213dd75683694d9a938ec88ce5a78e27d611c1af8cf9b22501e29847a73eab3c39d936088b856d3de4338a1d8bf078e517448c3f19646899ae2fe6edc10448e4e5ce1d4a37141835819bf278166071bb6806e2e7eec03184d7dd0b7c89bbd6f8cf6b9535b167f472ca59fd3357bf75fbf1cf2e7eba744334f82c6b49a6675abdf500c262b1526b5a708aa38964cb65127097ddc5695e6c95038457b38924ddbb537ed72cc37ee823bf61e42247b9456f85e9dca39596f96f00fe37eabb9d782ef34932ff05b170aa3d0ea2d422f42f2eee50e12937c0fd1016a6fcc55692c1b4f108dfbd6d90bda43295a64b25a033d773358c71842d2159e8c4cca76596f7748920968fdfe46b08235b3910a375c5a6db9355d2fd6f269e7c8cc3ab6a442829a68b358ae27d3346817a2f0d93c0c6745d67051e9b58428f1745be75e3aca2b99c93a452b28d84cc84d433baa63a9e345f027eef5cd4901d81b77fbb90d8a51d8c9071c94e4e907b1a1b29ebe55f4545d51a9b1c23daa92b0b6555afb80942fd7fdfcffd16f2e4fcbf1bd2181a8a714539eebed30a47084b47a7cfc69862611948ba8beb154979f8ac9cf4c7cf449e4de220a88e941323c67965e86c1bbe5baf43a5a57ab8820f76082aff7e4ca01d9fffb9b2e849ed59c520664115fc510b3c5799ae9b0ce0a3689573b5e75686555fabaabaf22d5ce759cc0eb01856426db4763cbbb32355e99ac8c", 0x4d1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) (async)
close(r7) (async)
bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r5, &(0x7f00000006c0)="3b000000010006", 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000000)="41e69f28f3e104c89119205e071cefed27a28c880c50c7ac0751a82092802c0b0b5ab203735f76a7d12dac7efc629a9a17584f2b83dba750d9bbac311f2ff2782a5a5a2f90e74ff338f699349de3001b98f627", 0x801, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)

514.739262ms ago: executing program 1 (id=5104):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x403}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0ff01006f5bec", 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x4d, 0x6b, &(0x7f0000000140)="e877bd86b3def4c7354cddabb692520b4dbcb69cde922490382da5e73847f6034fa797a24b7b445b182437d322966edb948f53427a574d71a588836410893fe512d6631723863b699e926d59c0", &(0x7f0000000280)=""/107, 0x6, 0x0, 0x46, 0xb3, &(0x7f0000000300)="96279eb0d393258da584e6ae9061862016a75fedf4b60807acd0a27794e0493894c1181e607e26625966afdf8df2c84a0b4964e5715676a94fc38defe76401f905c1c16709c7", &(0x7f00000003c0)="e13345d54fafabfebac4d25160fa1a8d9210fe88799e89a560665e0052e326bcdf9ae40d9f83accc385d8c042956d90d23d166fc681bf6606c063db1889f513109a7d23fda0e9349a175ee585a1e3e1d3966789787fc4fd675dbe5a3446981c1f527d4bd81a196d0a2d434d57fba15f72c60d9710fb423a430253bba8c995a4fce5e1817a19b3a86b027fc98182cd0055990357f5d78292e224294803238b8ecd0ce6aefd3e42c67d24b78b2e983a9f14ffaae", 0x2, 0x0, 0x8}, 0x50)

479.610343ms ago: executing program 2 (id=5105):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={<r1=>r0, 0x24, 0xfffffffffffffff9, 0x8})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffc0}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x41}, 0x94)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa410100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x80000000, 0x68}, 0x2c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="12450000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, 0x0)
ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000300)={0x0, @bcast, @bpq0, 0x7, 'syz0\x00', @null, 0x2, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="c5407a6a4aaca71dd62bd80aca699a310ef818bc6ca034f7000ae864a70c5db4753105f596e3a044e81e2215f2698bfdc81334c70e4c0d93fadc4905dd04c9bc38ddcbecbc72a3c3bd738ad843515d1a6fc47c32c8a38aa74f59996097656b3dd246ea30af26e88ff691f00d93b292d575e7c542867e33635aa68fc5f2c0e9b7f42f5750ec61e833fc4578cf9b64474cc5931fa3ce2bae944fcb7ff7d744e2074c14e7d3f9ffffffffffffffe2b762f641d76b"], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="fefaa68b55bdf78bda19e31b2928d1aeb7a738100450817a08f35860f32f92c4209d1e864dab3dbc097f96abe9dbbda79ccf83ea4314e73dbef75d98ff6c52012f37ba3e936c88f435db9693ceb83899fd1c4ede218bba6cbc6f325b395f7ff2a5ec43086bed07928eb0296472dab813219dd468333324b64b085770b6d4b700dbe29f792934dbaec697541fbebe08410d4917d3abe4070f76bafde3000c22d27de9947aab97e995770cd1a3af4e8b3c84e681cda99b7be70ad7a8e3"], 0x24}}, 0x0)
r11 = socket(0x2, 0x80805, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r12, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={<r13=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x7a, &(0x7f0000000840)={<r14=>r13, @in6={{0xa, 0x3, 0x6, @mcast2}}}, &(0x7f00000002c0)=0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000100)={r14, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000500)={<r15=>0x0}, &(0x7f0000000540)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000580)={r15, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, &(0x7f0000000640)=0x84)
sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000429bd7000fddbdf255400000008000300987db5defd7adcb0251d21606e676e06880cfbf9e132886492ddc7e51cb9e1f13e0c991f924ec5d170094ebf21114aaee29c5ebbebad837ce275f3e028f7ecff690fa8fe396198fc33a75b1a8009ff3947cc2ad03ef1ef5c2cfe90eab7eb96d98748f42df08e0684319e2fa0e3bd3eba98b785488e3e8dda95cde72245e06cdaa70d0a6978", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x4c00d}, 0x0)

432.8976ms ago: executing program 1 (id=5106):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000dd27b80f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x45)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="846ba26c298b", 0x6}, {&(0x7f0000000240)="7db62fe54680b383b397ea01c0f7db555337", 0x12}, {0x0}], 0x3}}], 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', r2, 0x4, 0x3, 0xd6, 0x7, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, @rand_addr=' \x01\x00', 0x20, 0x40, 0x6}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read(r6, &(0x7f0000001300)=""/112, 0x70)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20)

370.545499ms ago: executing program 4 (id=5107):
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$kcm(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(0x0, 0x0, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
socket$netlink(0x10, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000003c0))
socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305ffffffffffffffef00000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)

252.864785ms ago: executing program 2 (id=5108):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0x4}, {0x0, 0xb}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000002c0)={0xb, 0xbd})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200007800000000000000626f0000850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa10800000016007f49582b6182cdf2b702000008000000b70300003f000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "b4bb1e0f4aba819b", "35f17d3327dd4dea62fa696f7b463903", "adf8eada", "6bec80de810b00"}, 0x28)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbb}}], 0x30}, 0x0)

243.349637ms ago: executing program 1 (id=5109):
r0 = socket(0x22, 0x2, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x100}}}}}}}, 0x0)

178.622239ms ago: executing program 0 (id=5110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

62.504063ms ago: executing program 1 (id=5111):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb9000000000000000080ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0)

730.788µs ago: executing program 0 (id=5112):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000001b0000000002000000000000000000000000000000000500000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c000000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

0s ago: executing program 2 (id=5113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}], 0x1, 0x20044851)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
unshare(0x22020600)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2f0000001000000004"], 0x20)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="16d006000033e100000024001280090001001400021d06000000ffffff7f0800094000000000bf9d29349edba7f0a64d37a09f2dad252a3743857884f180956d5ca01f2b90f44e339739956fdeb8e22edc2f2da97bdd50a89a5e08f031df91e45d3294f98958cbb354758a6993a55c48313cfba81023c44c6cfa90cf71d09d74c5f4afb1db12b8510bf28c98eb346a3649507dabf8cee66b97a2c7ed431bf347b2c80562bb0f35de8fde36f58afee990ab8ccdcedad4c70113204eb4b4908d30a33f6b729b810025d285a87e50ebd4dffa0058399a2c"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r6 = socket$isdn(0x22, 0x3, 0x11)
getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40)

kernel console output (not intermixed with test programs):

4.3609'.
[  471.094680][T19957] xt_cgroup: path and classid specified
[  471.131823][T19961] IPVS: set_ctl: invalid protocol: 98 100.1.1.0:20000
[  471.142255][T19961] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20003
[  472.007767][T20007] tipc: Invalid UDP bearer configuration
[  472.007835][T20007] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  472.098116][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3632'.
[  472.192278][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'.
[  472.207780][T20018] netlink: 'syz.3.3633': attribute type 2 has an invalid length.
[  472.232313][T20018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3633'.
[  472.353999][T20025] Bluetooth: MGMT ver 1.23
[  472.360398][T20025] netlink: 'syz.1.3636': attribute type 49 has an invalid length.
[  472.575286][T20037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3639'.
[  472.585944][   T30] audit: type=1800 audit(1770504635.029:5): pid=20038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3640" name=CB dev="tmpfs" ino=945 res=0 errno=0
[  472.637210][T20039] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3639'.
[  472.716049][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'.
[  472.850556][T20044] team0: Port device team_slave_1 removed
[  472.891549][   T72] smc: removing ib device syz1
[  472.911021][T20042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3641'.
[  473.000080][T20052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.055865][T20052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  473.287092][T20052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.343557][T20052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  473.732298][T20052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.743153][T20052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  473.914322][T20052] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.924851][T20052] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  474.100697][ T3491] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  474.112024][ T3491] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  474.157156][   T34] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  474.172118][   T34] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  474.203281][ T3491] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  474.211931][ T3491] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  474.232227][   T34] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  474.248372][   T34] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  474.273459][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  474.281665][    C1] lec:lec_tx_timeout: lec0
[  474.286379][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  474.669836][T20088] netlink: 'syz.0.3651': attribute type 1 has an invalid length.
[  474.977050][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3655'.
[  474.996100][T20105] bridge0: port 3(batadv1) entered blocking state
[  475.002878][T20105] bridge0: port 3(batadv1) entered disabled state
[  475.010125][T20105] batadv1: entered allmulticast mode
[  475.019519][T20105] batadv1: entered promiscuous mode
[  475.465910][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  475.493549][ T7640] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  475.502949][ T7640] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  475.742411][T20067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  476.126763][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'.
[  476.311308][T20144] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3666'.
[  476.334836][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.371828][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.382810][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.412569][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.444038][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.464693][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.483231][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.521299][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.563229][T20147] openvswitch: netlink: Multiple metadata blocks provided
[  476.664029][T20156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  476.773103][T20172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  476.793323][T20173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  477.058914][T20186] netlink: 'syz.4.3675': attribute type 11 has an invalid length.
[  477.283165][T20198] __nla_validate_parse: 5 callbacks suppressed
[  477.283187][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'.
[  477.761305][T20228] netlink: 'syz.4.3685': attribute type 1 has an invalid length.
[  477.771211][ T5993] IPVS: starting estimator thread 0...
[  477.887423][T20235] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3685'.
[  477.894909][T20229] IPVS: using max 24 ests per chain, 57600 per kthread
[  477.995691][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'.
[  478.123030][T20247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.182635][T20239] tipc: Resetting bearer <eth:syzkaller0>
[  478.339288][T20249] syzkaller0: entered promiscuous mode
[  478.354108][T20249] syzkaller0: entered allmulticast mode
[  478.385990][T20237] tipc: Resetting bearer <eth:syzkaller0>
[  478.442201][T20237] tipc: Disabling bearer <eth:syzkaller0>
[  478.553509][T20260] wg1 speed is unknown, defaulting to 1000
[  478.559519][T20260] wg1 speed is unknown, defaulting to 1000
[  478.602046][T20260] wg1 speed is unknown, defaulting to 1000
[  478.637999][T20260] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  478.671482][T20260] wg1 speed is unknown, defaulting to 1000
[  478.681743][T20260] wg1 speed is unknown, defaulting to 1000
[  478.689907][T20260] wg1 speed is unknown, defaulting to 1000
[  478.697844][T20260] wg1 speed is unknown, defaulting to 1000
[  478.706024][T20260] wg1 speed is unknown, defaulting to 1000
[  478.714020][T20260] wg1 speed is unknown, defaulting to 1000
[  478.761659][T20269] netlink: 'syz.2.3694': attribute type 33 has an invalid length.
[  478.769847][T20269] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3694'.
[  478.929517][T20273] wg1 speed is unknown, defaulting to 1000
[  478.959115][T20280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3695'.
[  479.111055][T20286] netlink: 'syz.4.3700': attribute type 8 has an invalid length.
[  479.151543][T20286] netlink: 'syz.4.3700': attribute type 8 has an invalid length.
[  479.718604][T20301] syzkaller0: entered promiscuous mode
[  479.735503][T20301] syzkaller0: entered allmulticast mode
[  479.777046][T20308] syzkaller0: entered promiscuous mode
[  479.782608][T20308] syzkaller0: entered allmulticast mode
[  479.794998][T20296] tipc: Started in network mode
[  479.799928][T20296] tipc: Node identity , cluster identity 4711
[  479.833992][T20296] tipc: Failed to obtain node identity
[  479.839907][T20296] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  480.054669][T16202] IPVS: starting estimator thread 0...
[  480.064112][T20321] netlink: 'syz.3.3709': attribute type 1 has an invalid length.
[  480.103413][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  480.111759][    C1] lec:lec_tx_timeout: lec0
[  480.116787][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  480.162159][T20323] IPVS: using max 28 ests per chain, 67200 per kthread
[  482.115323][T20321] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  482.293014][T20356] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3716'.
[  482.333725][T20356] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3716'.
[  482.370831][T20358] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3715'.
[  483.020919][T20393] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3727'.
[  483.038449][T20392] wg1 speed is unknown, defaulting to 1000
[  483.054129][T20393] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3727'.
[  483.066005][T20384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'.
[  483.104955][T20393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3727'.
[  483.121481][T20384] net_ratelimit: 24 callbacks suppressed
[  483.121507][T20384] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  483.205171][T20393] netlink: 'syz.0.3727': attribute type 4 has an invalid length.
[  483.225138][T20393] netlink: 'syz.0.3727': attribute type 4 has an invalid length.
[  483.331575][T20399] netlink: 'syz.4.3730': attribute type 1 has an invalid length.
[  483.413511][T20399] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  483.581351][T20409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.606702][T20403] syzkaller0: entered promiscuous mode
[  483.621096][T20403] syzkaller0: entered allmulticast mode
[  485.123877][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  485.131989][    C1] lec:lec_tx_timeout: lec0
[  485.136978][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  485.738305][T20419] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3735'.
[  486.063103][T20452] netlink: 'syz.4.3744': attribute type 10 has an invalid length.
[  486.080701][T20445] wg1 speed is unknown, defaulting to 1000
[  486.150798][T20451] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3743'.
[  486.178366][T20452] 8021q: adding VLAN 0 to HW filter on device team0
[  486.185351][T20462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3742'.
[  486.219815][T20452] bond0: (slave team0): Enslaving as an active interface with an up link
[  486.229888][T20460] netlink: 'syz.4.3744': attribute type 1 has an invalid length.
[  486.259088][T20455] netlink: 'syz.2.3742': attribute type 4 has an invalid length.
[  486.313269][T20462] netlink: 'syz.2.3742': attribute type 4 has an invalid length.
[  486.472759][T20471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  486.660959][T20481] wg1 speed is unknown, defaulting to 1000
[  486.709113][T20486] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  487.650946][T20493] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  487.674588][T20493] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  487.828789][T20512] __nla_validate_parse: 3 callbacks suppressed
[  487.828823][T20512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3761'.
[  487.831414][T20493] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  487.844646][T20510] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3760'.
[  487.844692][T20510] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3760'.
[  487.871721][T20493] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  487.882295][T20510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3760'.
[  487.914533][T20510] netlink: 'syz.2.3760': attribute type 4 has an invalid length.
[  487.970836][T20514] netlink: 'syz.2.3760': attribute type 4 has an invalid length.
[  488.069733][T20493] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  488.100316][T20493] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  488.209286][T20529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  488.323462][T20493] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  488.329572][T20493] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  488.502266][T20538] 
: renamed from bond_slave_0 (while UP)
[  488.508685][T20493] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  488.515962][T20493] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  488.866360][T20554] No such timeout policy "syz0"
[  488.871572][T20556] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3772'.
[  488.985379][T20565] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.993139][T20565] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.024002][T20565] bridge0: entered allmulticast mode
[  489.058383][T20567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3778'.
[  489.071605][T20567] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3778'.
[  489.113679][T20567] netlink: 'syz.2.3778': attribute type 6 has an invalid length.
[  489.164187][T20567] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3778'.
[  489.185407][T20573] netlink: 'syz.1.3777': attribute type 1 has an invalid length.
[  489.191498][T20567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3778'.
[  489.211795][T20567] netlink: 'syz.2.3778': attribute type 4 has an invalid length.
[  489.254335][T20567] netlink: 'syz.2.3778': attribute type 4 has an invalid length.
[  489.692560][T20603] wg1 speed is unknown, defaulting to 1000
[  489.874797][ T3491] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  489.882628][ T3491] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  489.903860][T16207] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  490.143424][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  490.151565][    C1] lec:lec_tx_timeout: lec0
[  490.156711][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  490.350896][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3798'.
[  490.394912][T20648] netlink: 'syz.2.3800': attribute type 1 has an invalid length.
[  490.489529][T20648] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  490.509527][T20648] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  490.533713][T20648] bond2: (slave vxcan3): making interface the new active one
[  490.542148][T20648] bond2: (slave vxcan3): Enslaving as an active interface with an up link
[  490.601854][T20655] bond2 (unregistering): (slave vxcan3): Releasing backup interface
[  490.646041][T20655] bond2 (unregistering): Released all slaves
[  490.677420][T20659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.825308][ T5993] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  490.903886][ T5993] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  491.287615][T20689] siw: device registration error -23
[  491.307154][T20687] wg1 speed is unknown, defaulting to 1000
[  491.439229][T20693] netlink: 'syz.4.3809': attribute type 2 has an invalid length.
[  491.654149][T20701] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  491.725944][T20703] xt_CT: No such helper "netbios-ns"
[  493.783663][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  494.039687][T20727] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  494.227817][T20743] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  494.283938][T20749] netlink: 'syz.1.3824': attribute type 1 has an invalid length.
[  494.464110][T20757] netlink: 'syz.1.3828': attribute type 1 has an invalid length.
[  494.472332][T16202] IPVS: starting estimator thread 0...
[  494.532743][T20765] __nla_validate_parse: 13 callbacks suppressed
[  494.532765][T20765] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3828'.
[  494.573609][T20760] IPVS: using max 28 ests per chain, 67200 per kthread
[  494.623602][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'.
[  494.632986][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3831'.
[  494.643085][T20770] netlink: 'syz.3.3831': attribute type 11 has an invalid length.
[  494.660057][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3828'.
[  494.731757][T20754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3827'.
[  494.753614][T20770] netlink: 'syz.3.3831': attribute type 2 has an invalid length.
[  494.791094][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'.
[  495.163432][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  495.171783][    C1] lec:lec_tx_timeout: lec0
[  495.176465][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  495.233685][T20789] geneve4: entered promiscuous mode
[  495.239361][T20789] geneve4: entered allmulticast mode
[  495.541426][T20794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3837'.
[  495.854111][T20810] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3844'.
[  495.874666][T20810] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3844'.
[  495.884198][T20808] netlink: 'syz.1.3842': attribute type 1 has an invalid length.
[  495.951157][T20808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3842'.
[  496.133960][T20824] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  496.141821][T20824] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  496.854768][T20866] wg1 speed is unknown, defaulting to 1000
[  497.031518][T20867] syzkaller1: entered promiscuous mode
[  497.037604][T20867] syzkaller1: entered allmulticast mode
[  497.292098][T20882] syzkaller0: entered promiscuous mode
[  497.297859][T20882] syzkaller0: entered allmulticast mode
[  497.433947][T20884] 0: reclassify loop, rule prio 0, protocol 800
[  498.310628][T20919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.519834][T20926] netlink: 'syz.4.3872': attribute type 15 has an invalid length.
[  499.435179][T20962] netlink: 'syz.4.3882': attribute type 10 has an invalid length.
[  499.452898][T20962] hsr0: entered promiscuous mode
[  499.469276][T20962] bridge0: port 3(hsr0) entered blocking state
[  499.519975][T20972] netlink: 'syz.4.3882': attribute type 10 has an invalid length.
[  499.538466][T20962] bridge0: port 3(hsr0) entered disabled state
[  499.551792][T20962] hsr0: entered allmulticast mode
[  499.564926][T20972] __nla_validate_parse: 11 callbacks suppressed
[  499.564946][T20972] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3882'.
[  499.600810][T20962] hsr_slave_0: entered allmulticast mode
[  499.617254][T20962] hsr_slave_1: entered allmulticast mode
[  499.661724][T20962] bridge0: port 3(hsr0) entered blocking state
[  499.668112][T20962] bridge0: port 3(hsr0) entered forwarding state
[  499.831596][T20977] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3886'.
[  500.183434][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  500.191515][    C1] lec:lec_tx_timeout: lec0
[  500.196208][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  500.341478][T21013] sit1: entered promiscuous mode
[  500.416453][T21019] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3895'.
[  500.555271][T21023] syzkaller0: entered promiscuous mode
[  500.569938][T21023] syzkaller0: entered allmulticast mode
[  500.707574][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'.
[  500.876893][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  501.291495][T21066] netlink: 'syz.4.3909': attribute type 1 has an invalid length.
[  501.382468][T21066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3909'.
[  501.469015][T21066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3909'.
[  501.606868][T21074] netlink: 'syz.2.3912': attribute type 1 has an invalid length.
[  501.623995][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  501.703603][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  501.728715][T21074] bond2: entered promiscuous mode
[  501.737522][T21074] 8021q: adding VLAN 0 to HW filter on device bond2
[  501.874185][T21089] sctp: [Deprecated]: syz.2.3916 (pid 21089) Use of int in max_burst socket option.
[  501.874185][T21089] Use struct sctp_assoc_value instead
[  502.143145][T21106] syz.4.3920: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  502.160118][T21106] CPU: 0 UID: 0 PID: 21106 Comm: syz.4.3920 Not tainted syzkaller #0 PREEMPT(full) 
[  502.160163][T21106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  502.160178][T21106] Call Trace:
[  502.160188][T21106]  <TASK>
[  502.160197][T21106]  dump_stack_lvl+0xe8/0x150
[  502.160228][T21106]  warn_alloc+0x249/0x340
[  502.160252][T21106]  ? stack_trace_save+0xa9/0x100
[  502.160284][T21106]  ? __pfx_warn_alloc+0x10/0x10
[  502.160316][T21106]  ? kasan_save_track+0x4f/0x80
[  502.160335][T21106]  ? kasan_save_track+0x3e/0x80
[  502.160354][T21106]  ? __kasan_kmalloc+0x93/0xb0
[  502.160373][T21106]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  502.160392][T21106]  ? xskq_create+0x56/0x170
[  502.160429][T21106]  ? xsk_setsockopt+0x54c/0x990
[  502.160450][T21106]  ? do_sock_setsockopt+0x17c/0x1b0
[  502.160477][T21106]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  502.160503][T21106]  ? do_syscall_64+0xe2/0xf80
[  502.160535][T21106]  __vmalloc_node_range_noprof+0x132/0x1730
[  502.160594][T21106]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  502.160624][T21106]  ? __kasan_kmalloc+0x93/0xb0
[  502.160652][T21106]  vmalloc_user_noprof+0xad/0xe0
[  502.160674][T21106]  ? xskq_create+0xbf/0x170
[  502.160701][T21106]  xskq_create+0xbf/0x170
[  502.160732][T21106]  xsk_init_queue+0xad/0x110
[  502.160761][T21106]  xsk_setsockopt+0x54c/0x990
[  502.160789][T21106]  ? __pfx_xsk_setsockopt+0x10/0x10
[  502.160814][T21106]  ? __pfx_aa_sk_perm+0x10/0x10
[  502.160844][T21106]  ? aa_sock_opt_perm+0xff/0x1a0
[  502.160874][T21106]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  502.160897][T21106]  ? __pfx_xsk_setsockopt+0x10/0x10
[  502.160923][T21106]  do_sock_setsockopt+0x17c/0x1b0
[  502.160958][T21106]  __x64_sys_setsockopt+0x13d/0x1b0
[  502.160994][T21106]  do_syscall_64+0xe2/0xf80
[  502.161023][T21106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.161044][T21106]  ? trace_irq_disable+0x37/0x100
[  502.161065][T21106]  ? clear_bhb_loop+0x60/0xb0
[  502.161091][T21106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.161112][T21106] RIP: 0033:0x7f3f8cb9aeb9
[  502.161141][T21106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.161161][T21106] RSP: 002b:00007f3f8d9e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  502.161184][T21106] RAX: ffffffffffffffda RBX: 00007f3f8ce16090 RCX: 00007f3f8cb9aeb9
[  502.161199][T21106] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  502.161212][T21106] RBP: 00007f3f8cc08c1f R08: 0000000000000004 R09: 0000000000000000
[  502.161225][T21106] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.161239][T21106] R13: 00007f3f8ce16128 R14: 00007f3f8ce16090 R15: 00007fffa90e4de8
[  502.161274][T21106]  </TASK>
[  502.161298][T21106] Mem-Info:
[  502.444673][T21106] active_anon:6814 inactive_anon:0 isolated_anon:0
[  502.444673][T21106]  active_file:3579 inactive_file:40103 isolated_file:0
[  502.444673][T21106]  unevictable:768 dirty:221 writeback:0
[  502.444673][T21106]  slab_reclaimable:11540 slab_unreclaimable:139564
[  502.444673][T21106]  mapped:31472 shmem:1869 pagetables:1312
[  502.444673][T21106]  sec_pagetables:0 bounce:0
[  502.444673][T21106]  kernel_misc_reclaimable:0
[  502.444673][T21106]  free:1273877 free_pcp:17315 free_cma:0
[  502.504690][T21106] Node 0 active_anon:27756kB inactive_anon:0kB active_file:14316kB inactive_file:160208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127288kB dirty:884kB writeback:0kB shmem:6340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13352kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  502.541545][T21106] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  502.595525][T21106] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  502.635835][ T3491] syzkaller0: tun_net_xmit 76
[  502.642936][ T3491] syzkaller0: tun_net_xmit 48
[  502.643524][T21106] lowmem_reserve[]: 0 2494 2495 2495 2495
[  502.664162][T21106] Node 0 DMA32 free:1197616kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29456kB inactive_anon:0kB active_file:14316kB inactive_file:160208kB unevictable:1536kB writepending:884kB zspages:0kB present:3129332kB managed:2554036kB mlocked:0kB bounce:0kB free_pcp:42924kB local_pcp:11496kB free_cma:0kB
[  502.698855][T21098] syzkaller0: delete flow: hash 1210629011 index 1
[  502.730580][T21106] lowmem_reserve[]: 0 0 1 1 1
[  502.735570][T21106] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  502.786768][T21106] lowmem_reserve[]: 0 0 0 0 0
[  502.791602][T21106] Node 1 Normal free:3882404kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24340kB local_pcp:14372kB free_cma:0kB
[  502.824478][T21112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.844366][T21106] lowmem_reserve[]: 0 0 0 0 0
[  502.853815][T21106] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  502.887908][T21106] Node 0 DMA32: 4004*4kB (UME) 5218*8kB (UM) 2754*16kB (UME) 760*32kB (UME) 315*64kB (UME) 325*128kB (UME) 219*256kB (UM) 160*512kB (UM) 150*1024kB (UE) 60*2048kB (UM) 145*4096kB (UM) = 1196288kB
[  502.912989][T21115] netlink: 'syz.2.3921': attribute type 1 has an invalid length.
[  502.936143][T21115] sctp: [Deprecated]: syz.2.3921 (pid 21115) Use of struct sctp_assoc_value in delayed_ack socket option.
[  502.936143][T21115] Use struct sctp_sack_info instead
[  502.973624][T21106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  503.003802][T21106] Node 1 Normal: 213*4kB (UE) 56*8kB (UME) 43*16kB (UME) 85*32kB (UME) 37*64kB (UME) 10*128kB (UME) 3*256kB (UM) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3882404kB
[  503.023692][T21106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  503.033312][T21106] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  503.045601][T21106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  503.056756][T21106] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  503.070004][T21106] 47097 total pagecache pages
[  503.083573][T21106] 0 pages in swap cache
[  503.097403][T21106] Free swap  = 124996kB
[  503.101634][T21106] Total swap = 124996kB
[  503.123810][T21106] 2097051 pages RAM
[  503.127721][T21106] 0 pages HighMem/MovableOnly
[  503.132529][T21106] 426644 pages reserved
[  503.152701][T21106] 0 pages cma reserved
[  503.301232][T21121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3924'.
[  504.963502][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'.
[  505.026339][T21121] wg1 speed is unknown, defaulting to 1000
[  505.199516][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'.
[  505.213520][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  505.221650][    C1] lec:lec_tx_timeout: lec0
[  505.226963][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  505.239119][T16201] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  505.276533][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'.
[  505.599939][T21156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3935'.
[  505.662729][T21157] netlink: 'syz.3.3936': attribute type 21 has an invalid length.
[  505.738235][T21157] netlink: 'syz.3.3936': attribute type 21 has an invalid length.
[  505.759229][T21157] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3936'.
[  505.838121][T21162] bond3: option resend_igmp: invalid value (2878)
[  505.854077][T21162] bond3: option resend_igmp: allowed values 0 - 255
[  505.877503][T21163] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3937'.
[  505.887241][T16199] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  505.954042][T21162] bond3 (unregistering): Released all slaves
[  506.060224][T21177] syz_tun: entered allmulticast mode
[  506.105354][ T3491] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  506.147371][T21179] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3939'.
[  506.335906][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3945'.
[  506.423291][T21196] xfrm1: entered allmulticast mode
[  506.488478][T21176] syz_tun: left allmulticast mode
[  506.821266][T21218] xt_connbytes: Forcing CT accounting to be enabled
[  506.836858][T21217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  506.853914][T21218] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  506.959513][T21224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3955'.
[  506.981853][T21221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3954'.
[  507.144201][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  507.203918][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  507.274501][T21230] netlink: 'syz.3.3956': attribute type 2 has an invalid length.
[  507.292285][T21230] hmac(sha224): entered promiscuous mode
[  507.701502][T21256] xt_policy: neither incoming nor outgoing policy selected
[  507.731999][T21258] xt_policy: neither incoming nor outgoing policy selected
[  507.976298][T21271] netlink: 'syz.2.3969': attribute type 6 has an invalid length.
[  508.049984][T21271] netlink: 'syz.2.3969': attribute type 4 has an invalid length.
[  508.103786][T21281] netlink: 'syz.2.3969': attribute type 4 has an invalid length.
[  508.169967][T21275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.184162][ T5993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  508.248192][T21277] wg1 speed is unknown, defaulting to 1000
[  508.337773][T21275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.438697][T21275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.708683][T21275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.022323][T21311] dvmrp0: entered allmulticast mode
[  509.173890][ T7640] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.207542][ T7640] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.244843][T16542] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.290874][   T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.475030][T21323] netlink: 'syz.3.3980': attribute type 1 has an invalid length.
[  509.684840][T21323] 8021q: adding VLAN 0 to HW filter on device bond2
[  509.777692][T21334] netlink: 'syz.0.3982': attribute type 6 has an invalid length.
[  509.864018][T21335] netlink: 'syz.0.3982': attribute type 4 has an invalid length.
[  509.915949][T21339] netlink: 'syz.0.3982': attribute type 4 has an invalid length.
[  509.936721][T21341] nft_compat: unsupported protocol 5
[  510.135801][T21344] syz_tun: entered allmulticast mode
[  510.243461][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  510.251753][    C1] lec:lec_tx_timeout: lec0
[  510.258104][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  510.534154][T21364] __nla_validate_parse: 16 callbacks suppressed
[  510.534177][T21364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3992'.
[  510.607811][T21354] syz_tun: left allmulticast mode
[  510.655320][T21362] wg1 speed is unknown, defaulting to 1000
[  511.311008][T21393] wg1 speed is unknown, defaulting to 1000
[  511.394585][T21414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.449078][T21414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.504677][T21420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4003'.
[  511.543608][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  511.602963][T21411] wg1 speed is unknown, defaulting to 1000
[  511.632293][T21426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4006'.
[  511.660091][T21403] wg1 speed is unknown, defaulting to 1000
[  511.756590][T21408] wg1 speed is unknown, defaulting to 1000
[  512.643485][T21454] bridge0: port 3(batadv0) entered blocking state
[  512.663748][T21454] bridge0: port 3(batadv0) entered disabled state
[  512.675865][T21454] batadv0: entered allmulticast mode
[  512.695444][T21454] batadv0: entered promiscuous mode
[  512.721172][T21461] batadv0: left allmulticast mode
[  512.743941][T21461] batadv0: left promiscuous mode
[  512.749888][T21461] bridge0: port 3(batadv0) entered disabled state
[  513.163731][T21480] netlink: 'syz.1.4018': attribute type 3 has an invalid length.
[  513.193468][T21480] netlink: 'syz.1.4018': attribute type 1 has an invalid length.
[  513.208794][T21480] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4018'.
[  513.286733][T21482] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4019'.
[  513.310557][T21482] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4019'.
[  513.351826][T21482] netlink: 'syz.2.4019': attribute type 6 has an invalid length.
[  513.375938][T21487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4019'.
[  513.385266][T21482] netlink: 'syz.2.4019': attribute type 5 has an invalid length.
[  513.393045][T21482] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4019'.
[  513.416201][T21487] netlink: 'syz.2.4019': attribute type 4 has an invalid length.
[  513.467296][T21482] netlink: 'syz.2.4019': attribute type 4 has an invalid length.
[  513.596228][T21505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4025'.
[  513.741025][T21506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.743799][T21517] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.4029'.
[  513.897747][T21506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.049937][T21506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.184220][T21506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.201058][T21533] netlink: 'syz.2.4032': attribute type 32 has an invalid length.
[  514.232992][T21541] netlink: 'syz.4.4036': attribute type 5 has an invalid length.
[  514.318532][T21541] geneve3: entered promiscuous mode
[  514.340322][T21541] geneve3: entered allmulticast mode
[  514.366337][T16542] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  514.391360][T16542] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  514.413670][T16542] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  514.433054][T16542] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  514.508133][T21550] x_tables: duplicate underflow at hook 1
[  514.518436][T21546] netlink: 'syz.0.4038': attribute type 6 has an invalid length.
[  514.529669][T16542] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.540420][T21546] netlink: 'syz.0.4038': attribute type 5 has an invalid length.
[  514.578710][ T1146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.627964][   T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.648676][   T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.779651][T21556] syzkaller0: entered promiscuous mode
[  514.794769][T21557] sctp: [Deprecated]: syz.3.4042 (pid 21557) Use of int in max_burst socket option.
[  514.794769][T21557] Use struct sctp_assoc_value instead
[  514.811177][T21556] syzkaller0: entered allmulticast mode
[  514.843663][T21562] IPv6: addrconf: prefix option has invalid lifetime
[  514.888569][T21563] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  514.900997][T21563] bond3 (unregistering): Released all slaves
[  515.273390][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  515.281505][    C1] lec:lec_tx_timeout: lec0
[  515.287036][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  515.591986][T21602] __nla_validate_parse: 14 callbacks suppressed
[  515.592011][T21602] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4054'.
[  515.609056][T21602] unsupported nlmsg_type 40
[  515.793829][T21616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4055'.
[  516.126419][T21620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4058'.
[  516.423581][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  516.562847][T21651] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4067'.
[  516.593527][T21651] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4067'.
[  516.602579][T21651] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4067'.
[  516.637308][T21653] netlink: 41380 bytes leftover after parsing attributes in process `syz.4.4068'.
[  516.658459][T21651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4067'.
[  516.683086][T21655] syzkaller0: entered promiscuous mode
[  516.695318][T21655] syzkaller0: entered allmulticast mode
[  516.750220][T21655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.763102][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4070'.
[  516.785594][T21655] tipc: Resetting bearer <eth:syzkaller0>
[  516.794199][T21655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.820324][T21659] syzkaller0: entered promiscuous mode
[  516.840425][T21659] syzkaller0: entered allmulticast mode
[  516.860373][T21654] tipc: Resetting bearer <eth:syzkaller0>
[  516.934595][T21654] tipc: Disabling bearer <eth:syzkaller0>
[  517.194519][T21675] netlink: 'syz.2.4076': attribute type 11 has an invalid length.
[  517.231992][T21675] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.4076'.
[  517.264437][T21680] xt_hashlimit: size too large, truncated to 1048576
[  517.358966][T21685] bridge_slave_0 (unregistering): left allmulticast mode
[  517.404989][T21685] bridge_slave_0 (unregistering): left promiscuous mode
[  517.438172][T21685] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.772703][T21705] sctp: [Deprecated]: syz.2.4083 (pid 21705) Use of int in max_burst socket option deprecated.
[  517.772703][T21705] Use struct sctp_assoc_value instead
[  518.226076][T21721] Cannot find add_set index 2 as target
[  518.513557][T21743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  518.558721][T21743] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.566392][T21743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.574181][T21743] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.581481][T21743] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.749230][T21751] wg1 speed is unknown, defaulting to 1000
[  518.870031][T21763] validate_nla: 17 callbacks suppressed
[  518.870052][T21763] netlink: 'syz.1.4101': attribute type 6 has an invalid length.
[  518.888923][T21767] lo speed is unknown, defaulting to 1000
[  518.901415][T21767] lo speed is unknown, defaulting to 1000
[  518.909218][T21767] lo speed is unknown, defaulting to 1000
[  518.914254][T21763] netlink: 'syz.1.4101': attribute type 5 has an invalid length.
[  518.960141][T21763] netlink: 'syz.1.4101': attribute type 4 has an invalid length.
[  518.970688][T21767] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  518.975938][T21771] vxcan2: entered allmulticast mode
[  519.023526][T21770] netlink: 'syz.1.4101': attribute type 4 has an invalid length.
[  519.044400][T21767] lo speed is unknown, defaulting to 1000
[  519.058470][T21767] lo speed is unknown, defaulting to 1000
[  519.069050][T21767] lo speed is unknown, defaulting to 1000
[  519.079499][T21767] lo speed is unknown, defaulting to 1000
[  519.088183][T21767] lo speed is unknown, defaulting to 1000
[  519.098719][T21767] lo speed is unknown, defaulting to 1000
[  519.361977][T21785] netlink: 'syz.4.4107': attribute type 58 has an invalid length.
[  519.421039][T21787] openvswitch: netlink: Unknown nsh attribute 0
[  519.919167][T21808] netlink: 'syz.1.4114': attribute type 2 has an invalid length.
[  519.954163][T21811] netlink: 'syz.2.4116': attribute type 6 has an invalid length.
[  519.962250][T21811] netlink: 'syz.2.4116': attribute type 5 has an invalid length.
[  519.974802][T21811] netlink: 'syz.2.4116': attribute type 4 has an invalid length.
[  520.036548][T21817] netlink: 'syz.2.4116': attribute type 4 has an invalid length.
[  520.263544][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  520.631500][T21857] __nla_validate_parse: 23 callbacks suppressed
[  520.631524][T21857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4132'.
[  520.649741][T21857] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4132'.
[  520.659008][T21857] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4132'.
[  520.672811][T21857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4132'.
[  520.770129][T21859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4133'.
[  520.814820][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'.
[  521.063385][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  521.071577][    C1] lec:lec_tx_timeout: lec0
[  521.076696][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  521.313446][T21894] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4144'.
[  521.322805][T21894] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4144'.
[  521.333185][T21894] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4144'.
[  521.348440][T21894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4144'.
[  521.528234][T16200] lo speed is unknown, defaulting to 1000
[  521.528447][ T5993] lo speed is unknown, defaulting to 1000
[  521.615674][T21907] syz_tun: entered allmulticast mode
[  521.875122][T21905] syz_tun: left allmulticast mode
[  522.139876][T21940] Cannot find add_set index 2 as target
[  522.536957][T21960] xt_hashlimit: size too large, truncated to 1048576
[  522.650605][T21965] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.774343][T21965] bridge_slave_0 (unregistering): left allmulticast mode
[  522.820132][T21965] bridge_slave_0 (unregistering): left promiscuous mode
[  522.861890][T21965] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.000305][T21974] syz_tun: entered allmulticast mode
[  523.277211][T21966] syz_tun: left allmulticast mode
[  523.531138][T21994] bond3: entered promiscuous mode
[  523.565728][T22000] veth0: entered promiscuous mode
[  523.597485][T22003] vlan0: entered allmulticast mode
[  523.602696][T22003] team0: entered allmulticast mode
[  523.608417][T22003] team_slave_0: entered allmulticast mode
[  523.614664][T22003] bridge1: entered allmulticast mode
[  523.624136][T22003] dummy0: entered allmulticast mode
[  523.700904][T21999] veth0: left promiscuous mode
[  523.725505][T22004] syzkaller0: entered promiscuous mode
[  523.732491][T22004] syzkaller0: entered allmulticast mode
[  523.888711][T22018] validate_nla: 17 callbacks suppressed
[  523.888736][T22018] netlink: 'syz.0.4175': attribute type 1 has an invalid length.
[  523.925671][T22018] syzkaller1: entered promiscuous mode
[  523.931308][T22018] syzkaller1: entered allmulticast mode
[  524.015947][T22023] syz_tun: entered allmulticast mode
[  524.046797][T22024] syzkaller0: entered promiscuous mode
[  524.065995][T22024] syzkaller0: entered allmulticast mode
[  524.135340][T22029] bridge0: port 1(syz_tun) entered blocking state
[  524.142482][T22029] bridge0: port 1(syz_tun) entered disabled state
[  524.149353][T22029] syz_tun: entered allmulticast mode
[  524.156801][T22029] syz_tun: entered promiscuous mode
[  524.162659][T22029] bridge0: port 1(syz_tun) entered blocking state
[  524.169305][T22029] bridge0: port 1(syz_tun) entered forwarding state
[  524.178174][T22022] syz_tun: left allmulticast mode
[  524.310748][T22032] 8021q: adding VLAN 0 to HW filter on device bond3
[  524.399390][T22042] netlink: 'syz.1.4185': attribute type 6 has an invalid length.
[  524.413582][T22042] netlink: 'syz.1.4185': attribute type 5 has an invalid length.
[  524.442156][T22042] netlink: 'syz.1.4185': attribute type 4 has an invalid length.
[  524.467902][T22042] netlink: 'syz.1.4185': attribute type 4 has an invalid length.
[  524.850738][T22062] wg1 speed is unknown, defaulting to 1000
[  524.880961][T22062] lo speed is unknown, defaulting to 1000
[  524.951590][T22067] syz_tun: entered allmulticast mode
[  524.995831][T22067] dvmrp0: left allmulticast mode
[  525.117570][T22075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  525.139071][T22075] batman_adv: batadv0: Removing interface: batadv_slave_0
[  525.281088][T22076] wg1 speed is unknown, defaulting to 1000
[  525.324766][T22076] lo speed is unknown, defaulting to 1000
[  525.380410][T22065] syz_tun: left allmulticast mode
[  525.751152][T22094] __nla_validate_parse: 18 callbacks suppressed
[  525.751173][T22094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4200'.
[  526.103537][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  526.111616][    C1] lec:lec_tx_timeout: lec0
[  526.116436][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  526.197661][T22114] syz_tun: entered allmulticast mode
[  526.639806][T22113] syz_tun: left allmulticast mode
[  526.730117][T22136] netlink: 'syz.2.4215': attribute type 6 has an invalid length.
[  526.782676][T22139] batadv_slave_1: entered promiscuous mode
[  526.926249][T22140] batadv_slave_1: left promiscuous mode
[  527.106550][T22159] openvswitch: netlink: Flow actions attr not present in new flow.
[  527.183141][T22164] syzkaller1: tun_chr_ioctl cmd 1074025677
[  527.189509][T22164] syzkaller1: linktype set to 778
[  527.240197][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4222'.
[  527.501771][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4225'.
[  527.521761][T22178] siw: device registration error -23
[  528.066483][T22195] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  528.102972][T22195] bond3 (unregistering): Released all slaves
[  528.661176][T22214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4236'.
[  528.680002][T22213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4237'.
[  528.708587][T22213] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4237'.
[  528.725619][T22213] netlink: 'syz.4.4237': attribute type 6 has an invalid length.
[  528.739917][T22213] netlink: 'syz.4.4237': attribute type 5 has an invalid length.
[  528.749608][T22218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4237'.
[  528.760843][T22213] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4237'.
[  528.801717][T22218] netlink: 'syz.4.4237': attribute type 4 has an invalid length.
[  528.839096][T16199] lo speed is unknown, defaulting to 1000
[  528.846769][T22213] netlink: 'syz.4.4237': attribute type 4 has an invalid length.
[  528.872102][T16199] syz2: Port: 1 Link DOWN
[  528.896197][T16200] lo speed is unknown, defaulting to 1000
[  528.914795][T16200] syz2: Port: 1 Link ACTIVE
[  528.960325][T22224] syz_tun: entered allmulticast mode
[  528.989058][T22224] dvmrp0: left allmulticast mode
[  529.146027][T22223] syz_tun: left allmulticast mode
[  529.232597][T22236] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4243'.
[  529.243992][T22236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4243'.
[  530.029580][T22270] pim6reg1: entered allmulticast mode
[  530.144020][T22279] wg1 speed is unknown, defaulting to 1000
[  530.218634][T22279] lo speed is unknown, defaulting to 1000
[  530.880547][T22324] __nla_validate_parse: 4 callbacks suppressed
[  530.880570][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'.
[  531.123396][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  531.131983][    C1] lec:lec_tx_timeout: lec0
[  531.137341][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  531.254943][T22342] syz_tun: entered allmulticast mode
[  531.406005][T22346] syz_tun: left allmulticast mode
[  531.586948][T22358] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  531.611707][T22358] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  531.665972][T22363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4272'.
[  531.712855][T22358] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  531.736019][T22358] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  531.772866][T22366] wg1 speed is unknown, defaulting to 1000
[  531.786045][T22367] netlink: 'syz.4.4275': attribute type 1 has an invalid length.
[  531.794002][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4275'.
[  531.850604][T22366] lo speed is unknown, defaulting to 1000
[  531.907764][T22358] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  531.959305][T22358] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  532.081320][T22358] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  532.104016][T22358] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  532.318909][T22383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4278'.
[  532.425478][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  532.531699][   T34] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  532.557998][   T34] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  532.678128][ T1146] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  532.700949][ T1146] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  532.784586][ T3491] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  532.796914][ T3491] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  532.860060][ T3491] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  532.888133][ T3491] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  533.028276][T22409] netlink: 'syz.4.4281': attribute type 1 has an invalid length.
[  533.099290][T22420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4281'.
[  533.179715][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'.
[  533.691495][T22444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.808235][T22444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.855683][T22452] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.880401][T22452] bridge_slave_1: left allmulticast mode
[  533.887119][T22452] bridge_slave_1: left promiscuous mode
[  533.894862][T22452] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.916900][T22452] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  533.954681][T22444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.033275][T22444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.166153][   T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.194933][T22466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4297'.
[  534.205967][   T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.212283][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4295'.
[  534.227912][T22466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4297'.
[  534.272215][ T3491] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.299552][ T3491] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.471141][T22479] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4299'.
[  534.481668][T22479] netlink: 'syz.2.4299': attribute type 6 has an invalid length.
[  534.497911][T22479] netlink: 'syz.2.4299': attribute type 5 has an invalid length.
[  534.511716][T22479] netlink: 'syz.2.4299': attribute type 4 has an invalid length.
[  534.546087][T22479] netlink: 'syz.2.4299': attribute type 4 has an invalid length.
[  534.770917][T22489] netlink: 'syz.4.4303': attribute type 1 has an invalid length.
[  535.215258][T22509] netlink: 'syz.1.4311': attribute type 6 has an invalid length.
[  535.233316][T22509] netlink: 'syz.1.4311': attribute type 5 has an invalid length.
[  535.262653][T22509] netlink: 'syz.1.4311': attribute type 4 has an invalid length.
[  535.434852][T22517] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  535.696727][T22527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  535.704106][T22527] IPv6: NLM_F_CREATE should be set when creating new route
[  535.711419][T22527] IPv6: NLM_F_CREATE should be set when creating new route
[  535.718742][T22527] IPv6: NLM_F_CREATE should be set when creating new route
[  535.731135][T22527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  535.894127][T22533] __nla_validate_parse: 10 callbacks suppressed
[  535.894150][T22533] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4317'.
[  535.949563][T22533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4317'.
[  536.116210][T22545] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4322'.
[  536.153401][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  536.161538][    C1] lec:lec_tx_timeout: lec0
[  536.163543][T22545] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4322'.
[  536.166850][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  536.227879][T22545] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4322'.
[  536.279186][T22553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4322'.
[  536.316469][T22560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4322'.
[  536.343736][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4322'.
[  536.510384][   T30] audit: type=1800 audit(1770504698.949:6): pid=22565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4326" name="memory.events" dev="tmpfs" ino=1062 res=0 errno=0
[  536.588285][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4326'.
[  536.619712][T22565] : entered promiscuous mode
[  536.685552][T22573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4328'.
[  536.929167][T22582] validate_nla: 8 callbacks suppressed
[  536.929188][T22582] netlink: 'syz.2.4330': attribute type 15 has an invalid length.
[  537.196844][T22594] netlink: 'syz.4.4334': attribute type 1 has an invalid length.
[  537.345705][T22600] netlink: 'syz.0.4337': attribute type 6 has an invalid length.
[  537.367764][T22600] netlink: 'syz.0.4337': attribute type 5 has an invalid length.
[  537.398655][T22600] netlink: 'syz.0.4337': attribute type 4 has an invalid length.
[  537.426249][T22598] wg1 speed is unknown, defaulting to 1000
[  537.432438][T22600] netlink: 'syz.0.4337': attribute type 4 has an invalid length.
[  537.445185][T22604] netlink: 'syz.1.4336': attribute type 1 has an invalid length.
[  537.481863][T22598] lo speed is unknown, defaulting to 1000
[  537.544203][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  538.419881][T22639] netlink: 'syz.1.4347': attribute type 9 has an invalid length.
[  538.477364][T22642] netlink: 'syz.3.4348': attribute type 1 has an invalid length.
[  538.710905][T22653] netlink: 'syz.1.4350': attribute type 6 has an invalid length.
[  539.098480][T22681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  539.960150][T16200] lo speed is unknown, defaulting to 1000
[  539.969180][T16199] lo speed is unknown, defaulting to 1000
[  540.164864][T22724] syzkaller0: entered promiscuous mode
[  540.170413][T22724] syzkaller0: entered allmulticast mode
[  540.545127][T22748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.673150][T22757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.688717][T22757] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  540.791851][T22762] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  541.019367][T22765] __nla_validate_parse: 33 callbacks suppressed
[  541.019385][T22765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4381'.
[  541.037386][T22765] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4381'.
[  541.046932][T22765] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4381'.
[  541.057162][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4381'.
[  541.071220][T22765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4381'.
[  541.183395][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  541.191537][    C1] lec:lec_tx_timeout: lec0
[  541.196603][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  541.247627][T22773] team0: Port device dummy0 added
[  541.315040][T22774] team0: Port device dummy0 removed
[  541.355608][T22774] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  541.427505][ T5934] IPVS: starting estimator thread 0...
[  541.496706][T22784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4386'.
[  541.533732][T22780] IPVS: using max 29 ests per chain, 69600 per kthread
[  541.795146][T22801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  541.852319][T22803] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4393'.
[  541.861693][T22803] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4393'.
[  541.875354][T22803] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4393'.
[  541.886466][T22803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4393'.
[  541.975532][T22803] validate_nla: 20 callbacks suppressed
[  541.975555][T22803] netlink: 'syz.2.4393': attribute type 4 has an invalid length.
[  542.026497][T22803] netlink: 'syz.2.4393': attribute type 4 has an invalid length.
[  542.460962][T22823] netlink: 'syz.2.4400': attribute type 1 has an invalid length.
[  542.646172][T22829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  542.687459][T22832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  542.747765][T22835] netlink: 'syz.3.4406': attribute type 6 has an invalid length.
[  542.756404][T22835] netlink: 'syz.3.4406': attribute type 5 has an invalid length.
[  542.771749][T22835] netlink: 'syz.3.4406': attribute type 4 has an invalid length.
[  542.787058][T22835] netlink: 'syz.3.4406': attribute type 4 has an invalid length.
[  543.199311][T22857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  543.316923][T22861] netlink: 'syz.3.4414': attribute type 1 has an invalid length.
[  543.577918][T22875] netlink: 'syz.3.4417': attribute type 6 has an invalid length.
[  543.586033][T22875] netlink: 'syz.3.4417': attribute type 5 has an invalid length.
[  544.233153][T22907] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000
[  544.264640][T22904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.527055][   T49] tipc: Subscription rejected, illegal request
[  544.593553][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  544.638536][T22924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.867369][T22936] FAULT_INJECTION: forcing a failure.
[  544.867369][T22936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.880965][T22936] CPU: 0 UID: 0 PID: 22936 Comm: syz.4.4437 Not tainted syzkaller #0 PREEMPT(full) 
[  544.880996][T22936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  544.881009][T22936] Call Trace:
[  544.881018][T22936]  <TASK>
[  544.881027][T22936]  dump_stack_lvl+0xe8/0x150
[  544.881060][T22936]  should_fail_ex+0x412/0x560
[  544.881093][T22936]  _copy_from_user+0x2d/0xb0
[  544.881127][T22936]  ___sys_sendmsg+0x1c6/0x360
[  544.881158][T22936]  ? __lock_acquire+0x6b5/0x2cf0
[  544.881193][T22936]  ? __pfx____sys_sendmsg+0x10/0x10
[  544.881229][T22936]  ? kstrtouint+0x6e/0xe0
[  544.881283][T22936]  ? __fget_files+0x2a/0x420
[  544.881307][T22936]  ? __fget_files+0x3a0/0x420
[  544.881343][T22936]  __sys_sendmmsg+0x27c/0x4e0
[  544.881379][T22936]  ? __pfx___sys_sendmmsg+0x10/0x10
[  544.881408][T22936]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  544.881476][T22936]  ? ksys_write+0x242/0x270
[  544.881511][T22936]  ? __pfx_ksys_write+0x10/0x10
[  544.881549][T22936]  __x64_sys_sendmmsg+0xa0/0xc0
[  544.881582][T22936]  do_syscall_64+0xe2/0xf80
[  544.881612][T22936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.881633][T22936]  ? trace_irq_disable+0x37/0x100
[  544.881653][T22936]  ? clear_bhb_loop+0x60/0xb0
[  544.881680][T22936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.881701][T22936] RIP: 0033:0x7f3f8cb9aeb9
[  544.881721][T22936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.881738][T22936] RSP: 002b:00007f3f8da0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  544.881759][T22936] RAX: ffffffffffffffda RBX: 00007f3f8ce15fa0 RCX: 00007f3f8cb9aeb9
[  544.881775][T22936] RDX: 0000000000000003 RSI: 0000200000000f00 RDI: 0000000000000004
[  544.881788][T22936] RBP: 00007f3f8da0a090 R08: 0000000000000000 R09: 0000000000000000
[  544.881801][T22936] R10: 0000000004048401 R11: 0000000000000246 R12: 0000000000000001
[  544.881812][T22936] R13: 00007f3f8ce16038 R14: 00007f3f8ce15fa0 R15: 00007fffa90e4de8
[  544.881844][T22936]  </TASK>
[  546.203488][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  546.211571][    C1] lec:lec_tx_timeout: lec0
[  568.184341][T14409] lec:lec_start_xmit: lec0:No lecd attached
[  571.463703][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  573.193457][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  573.201515][    C1] lec:lec_tx_timeout: lec0
[  573.206253][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  573.385904][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  578.213466][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  578.221784][    C0] lec:lec_tx_timeout: lec0
[  604.103684][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  606.119805][T22949] __nla_validate_parse: 18 callbacks suppressed
[  606.119828][T22949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4443'.
[  606.151658][T22950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4442'.
[  606.171363][T22950] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4442'.
[  606.186270][T22950] validate_nla: 3 callbacks suppressed
[  606.186289][T22950] netlink: 'syz.3.4442': attribute type 6 has an invalid length.
[  606.200254][T22950] netlink: 'syz.3.4442': attribute type 5 has an invalid length.
[  606.209376][T22950] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4442'.
[  606.218883][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4439'.
[  606.286998][T22950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4442'.
[  606.301649][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4441'.
[  606.312524][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4441'.
[  606.347322][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4443'.
[  606.358640][T22959] netlink: 'syz.3.4442': attribute type 4 has an invalid length.
[  606.706418][T22973] batadv0: mtu less than device minimum
[  606.714818][T22973] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4446'.
[  607.881556][T23019] syzkaller0: entered promiscuous mode
[  607.887422][T23019] syzkaller0: entered allmulticast mode
[  608.229655][T23025] wg1 speed is unknown, defaulting to 1000
[  608.248658][T23025] lo speed is unknown, defaulting to 1000
[  608.453710][T23040] tipc: Started in network mode
[  608.463155][T23040] tipc: Node identity , cluster identity 4711
[  608.478731][T23040] tipc: Failed to obtain node identity
[  608.492484][T23040] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  608.521440][T23036] delete_channel: no stack
[  608.759288][T23049] syz_tun: entered allmulticast mode
[  608.877666][T23047] syz_tun: left allmulticast mode
[  609.053839][T23063] netlink: 'syz.3.4474': attribute type 13 has an invalid length.
[  609.074675][T23065] netlink: 'syz.1.4472': attribute type 13 has an invalid length.
[  609.493388][T23065] bridge0: port 1(syz_tun) entered disabled state
[  609.817225][T23065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  609.871261][T23065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  610.467879][T23059] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  610.483520][T23059] syzkaller0: entered promiscuous mode
[  610.489071][T23059] syzkaller0: entered allmulticast mode
[  610.516962][T23074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  610.552010][T23058] tipc: Resetting bearer <eth:syzkaller0>
[  610.592906][T23058] tipc: Disabling bearer <eth:syzkaller0>
[  610.623421][ T3491] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.635129][ T3491] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  610.649752][ T3491] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.663689][ T3491] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  610.673507][T23087] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  610.680934][ T3491] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.691416][ T3491] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  610.715862][T23083] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[  610.725420][ T3491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.753651][ T3491] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  610.942985][T23097] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  610.965201][T23095] mac80211_hwsim hwsim36 wlan1: left allmulticast mode
[  611.051063][T23103] netlink: 'syz.4.4482': attribute type 1 has an invalid length.
[  611.132979][T23105] wg1 speed is unknown, defaulting to 1000
[  611.161087][T23105] lo speed is unknown, defaulting to 1000
[  611.433755][T23122] __nla_validate_parse: 14 callbacks suppressed
[  611.433781][T23122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4484'.
[  611.550745][T23125] netlink: 'syz.4.4486': attribute type 21 has an invalid length.
[  611.695408][T23130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4487'.
[  611.805556][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4486'.
[  611.931044][T23125] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.109304][T23142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4488'.
[  612.488003][T23150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  612.635259][T23154] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4494'.
[  612.766560][T23154] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4494'.
[  612.805753][T23154] netlink: 'syz.4.4494': attribute type 6 has an invalid length.
[  612.843500][T23154] netlink: 'syz.4.4494': attribute type 5 has an invalid length.
[  612.858862][T23156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4494'.
[  612.866599][T23154] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4494'.
[  612.907595][T23154] netlink: 'syz.4.4494': attribute type 4 has an invalid length.
[  613.202451][T23162] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  613.223621][T23162] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  613.269934][T23167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4498'.
[  613.336221][T23162] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  613.353420][T23162] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  613.433457][T23167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4498'.
[  613.502237][T23162] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  613.532378][T23162] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  613.626935][T23162] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  613.643979][T23162] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  613.834800][   T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  613.855865][   T49] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  613.913985][T23188] netlink: 'syz.3.4503': attribute type 1 has an invalid length.
[  613.921996][   T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  613.934395][   T49] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  614.029663][T23191] netlink: 'syz.4.4505': attribute type 6 has an invalid length.
[  614.058659][T23191] netlink: 'syz.4.4505': attribute type 5 has an invalid length.
[  614.081184][T23187] bond6: entered promiscuous mode
[  614.089731][T23187] bond6: entered allmulticast mode
[  614.097693][T23187] 8021q: adding VLAN 0 to HW filter on device bond6
[  614.110547][ T3491] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  614.122853][ T3491] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  614.143228][ T3491] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  614.152891][ T3491] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  614.190243][T23188] 8021q: adding VLAN 0 to HW filter on device bond7
[  614.201467][T23188] bond7: entered promiscuous mode
[  614.207005][T23203] netlink: 'syz.4.4505': attribute type 4 has an invalid length.
[  614.208795][T23188] bond7: entered allmulticast mode
[  614.221880][T23188] bond6: (slave bond7): Enslaving as a backup interface with a down link
[  614.282440][T23204] netlink: 'syz.4.4505': attribute type 4 has an invalid length.
[  614.374657][T16201] lo speed is unknown, defaulting to 1000
[  614.374677][T23075] lo speed is unknown, defaulting to 1000
[  614.502525][T23209] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  614.576411][T23208] mac80211_hwsim hwsim36 wlan1: left allmulticast mode
[  614.732039][T23219] bridge0: left allmulticast mode
[  614.764793][T23219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  614.803636][T23221] netlink: 'syz.3.4514': attribute type 9 has an invalid length.
[  615.376608][T23254] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  615.503140][T23247] mac80211_hwsim hwsim32 wlan1: left allmulticast mode
[  615.645401][T23264] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  615.676622][T23264] batman_adv: batadv0: Adding interface: gretap1
[  615.685812][T23264] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  615.737262][T23264] batman_adv: batadv0: Interface activated: gretap1
[  615.928256][T23277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  616.231453][T23294] wg1 speed is unknown, defaulting to 1000
[  616.252338][T23294] lo speed is unknown, defaulting to 1000
[  616.769250][T23321] __nla_validate_parse: 17 callbacks suppressed
[  616.769274][T23321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4548'.
[  616.857872][T23321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4548'.
[  616.873667][T23324] validate_nla: 4 callbacks suppressed
[  616.873691][T23324] netlink: 'syz.0.4549': attribute type 1 has an invalid length.
[  617.011977][T23324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4549'.
[  617.095438][T23341] netlink: 'syz.2.4552': attribute type 10 has an invalid length.
[  617.152993][T23342] netlink: 'syz.2.4552': attribute type 1 has an invalid length.
[  617.456022][T23348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4554'.
[  617.475427][T23348] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4554'.
[  617.502246][T23348] netlink: 'syz.4.4554': attribute type 6 has an invalid length.
[  617.523489][T23348] netlink: 'syz.4.4554': attribute type 5 has an invalid length.
[  617.559899][T23348] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4554'.
[  617.613199][T23348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4554'.
[  617.664731][T23359] netlink: 'syz.4.4554': attribute type 4 has an invalid length.
[  618.401298][T23403] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  618.432100][T23398] wg1 speed is unknown, defaulting to 1000
[  618.455406][T23398] lo speed is unknown, defaulting to 1000
[  618.467807][T23403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'.
[  618.499845][T23403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4570'.
[  618.725213][T23411] bond0: entered promiscuous mode
[  618.730565][T23411] bond_slave_0: entered promiscuous mode
[  618.737279][T23411] bond_slave_1: entered promiscuous mode
[  618.744806][T23411] bridge_slave_1: entered promiscuous mode
[  618.751122][T23411] dummy0: entered promiscuous mode
[  618.759325][T23411] batadv0: entered promiscuous mode
[  618.766614][T23411] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  618.777756][T23411] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  618.789771][T23411] 8021q: adding VLAN 0 to HW filter on device hsr1
[  618.809526][T23411] bond0: left promiscuous mode
[  618.814726][T23411] bond_slave_0: left promiscuous mode
[  618.829699][T23411] bond_slave_1: left promiscuous mode
[  618.844010][T23411] bridge_slave_1: left promiscuous mode
[  618.858199][T23411] dummy0: left promiscuous mode
[  618.892880][T23411] batadv0: left promiscuous mode
[  619.137464][T23419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4575'.
[  619.171962][T23419] netlink: 'syz.3.4575': attribute type 6 has an invalid length.
[  619.189164][T23421] netlink: 'syz.0.4576': attribute type 101 has an invalid length.
[  619.202388][T23421] netlink: 'syz.0.4576': attribute type 7 has an invalid length.
[  619.224891][T23419] netlink: 'syz.3.4575': attribute type 5 has an invalid length.
[  619.846896][T23456] FAULT_INJECTION: forcing a failure.
[  619.846896][T23456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  619.861640][T23456] CPU: 1 UID: 0 PID: 23456 Comm: syz.1.4586 Not tainted syzkaller #0 PREEMPT(full) 
[  619.861668][T23456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  619.861683][T23456] Call Trace:
[  619.861693][T23456]  <TASK>
[  619.861702][T23456]  dump_stack_lvl+0xe8/0x150
[  619.861735][T23456]  should_fail_ex+0x412/0x560
[  619.861766][T23456]  _copy_from_user+0x2d/0xb0
[  619.861801][T23456]  __sys_bpf+0x229/0x920
[  619.861826][T23456]  ? __pfx___sys_bpf+0x10/0x10
[  619.861871][T23456]  ? ksys_write+0x242/0x270
[  619.861905][T23456]  ? __pfx_ksys_write+0x10/0x10
[  619.861943][T23456]  __x64_sys_bpf+0x7c/0x90
[  619.861976][T23456]  do_syscall_64+0xe2/0xf80
[  619.862006][T23456]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.862027][T23456]  ? trace_irq_disable+0x37/0x100
[  619.862048][T23456]  ? clear_bhb_loop+0x60/0xb0
[  619.862075][T23456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.862095][T23456] RIP: 0033:0x7fcf34d9aeb9
[  619.862112][T23456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.862129][T23456] RSP: 002b:00007fcf35d33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  619.862151][T23456] RAX: ffffffffffffffda RBX: 00007fcf35015fa0 RCX: 00007fcf34d9aeb9
[  619.862166][T23456] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  619.862181][T23456] RBP: 00007fcf35d33090 R08: 0000000000000000 R09: 0000000000000000
[  619.862194][T23456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.862207][T23456] R13: 00007fcf35016038 R14: 00007fcf35015fa0 R15: 00007ffe8de0ac88
[  619.862241][T23456]  </TASK>
[  619.936546][   T72] tipc: Subscription rejected, illegal request
[  620.006083][T23460] netlink: 'syz.3.4588': attribute type 11 has an invalid length.
[  620.615399][T23487] FAULT_INJECTION: forcing a failure.
[  620.615399][T23487] name failslab, interval 1, probability 0, space 0, times 0
[  620.664503][T23487] CPU: 1 UID: 0 PID: 23487 Comm: syz.2.4599 Not tainted syzkaller #0 PREEMPT(full) 
[  620.664535][T23487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  620.664550][T23487] Call Trace:
[  620.664560][T23487]  <TASK>
[  620.664570][T23487]  dump_stack_lvl+0xe8/0x150
[  620.664604][T23487]  should_fail_ex+0x412/0x560
[  620.664636][T23487]  should_failslab+0xa8/0x100
[  620.664663][T23487]  __kmalloc_noprof+0xde/0x7e0
[  620.664685][T23487]  ? bpf_test_init+0x9f/0x150
[  620.664714][T23487]  bpf_test_init+0x9f/0x150
[  620.664741][T23487]  bpf_prog_test_run_xdp+0x529/0x1160
[  620.664793][T23487]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  620.664823][T23487]  ? __fget_files+0x2a/0x420
[  620.664853][T23487]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  620.664879][T23487]  bpf_prog_test_run+0x2c7/0x340
[  620.664907][T23487]  __sys_bpf+0x5cb/0x920
[  620.664930][T23487]  ? __pfx___sys_bpf+0x10/0x10
[  620.664969][T23487]  ? ksys_write+0x242/0x270
[  620.665002][T23487]  ? __pfx_ksys_write+0x10/0x10
[  620.665041][T23487]  __x64_sys_bpf+0x7c/0x90
[  620.665075][T23487]  do_syscall_64+0xe2/0xf80
[  620.665105][T23487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.665125][T23487]  ? trace_irq_disable+0x37/0x100
[  620.665146][T23487]  ? clear_bhb_loop+0x60/0xb0
[  620.665171][T23487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.665191][T23487] RIP: 0033:0x7ff4fbd9aeb9
[  620.665211][T23487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.665230][T23487] RSP: 002b:00007ff4fcc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  620.665254][T23487] RAX: ffffffffffffffda RBX: 00007ff4fc015fa0 RCX: 00007ff4fbd9aeb9
[  620.665269][T23487] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  620.665283][T23487] RBP: 00007ff4fcc01090 R08: 0000000000000000 R09: 0000000000000000
[  620.665296][T23487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.665309][T23487] R13: 00007ff4fc016038 R14: 00007ff4fc015fa0 R15: 00007ffedd3f1c78
[  620.665344][T23487]  </TASK>
[  621.275208][T23513] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  621.316754][T23513] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  621.707042][T23535] FAULT_INJECTION: forcing a failure.
[  621.707042][T23535] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  621.729784][T23535] CPU: 0 UID: 0 PID: 23535 Comm: syz.2.4612 Not tainted syzkaller #0 PREEMPT(full) 
[  621.729815][T23535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  621.729830][T23535] Call Trace:
[  621.729839][T23535]  <TASK>
[  621.729848][T23535]  dump_stack_lvl+0xe8/0x150
[  621.729882][T23535]  should_fail_ex+0x412/0x560
[  621.729915][T23535]  _copy_from_user+0x2d/0xb0
[  621.729950][T23535]  bpf_test_init+0xd8/0x150
[  621.729978][T23535]  bpf_prog_test_run_xdp+0x529/0x1160
[  621.730020][T23535]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  621.730051][T23535]  ? __fget_files+0x2a/0x420
[  621.730082][T23535]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  621.730108][T23535]  bpf_prog_test_run+0x2c7/0x340
[  621.730137][T23535]  __sys_bpf+0x5cb/0x920
[  621.730161][T23535]  ? __pfx___sys_bpf+0x10/0x10
[  621.730202][T23535]  ? ksys_write+0x242/0x270
[  621.730237][T23535]  ? __pfx_ksys_write+0x10/0x10
[  621.730277][T23535]  __x64_sys_bpf+0x7c/0x90
[  621.730309][T23535]  do_syscall_64+0xe2/0xf80
[  621.730338][T23535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.730359][T23535]  ? trace_irq_disable+0x37/0x100
[  621.730380][T23535]  ? clear_bhb_loop+0x60/0xb0
[  621.730406][T23535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.730428][T23535] RIP: 0033:0x7ff4fbd9aeb9
[  621.730448][T23535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.730466][T23535] RSP: 002b:00007ff4fcc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  621.730489][T23535] RAX: ffffffffffffffda RBX: 00007ff4fc015fa0 RCX: 00007ff4fbd9aeb9
[  621.730505][T23535] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  621.730518][T23535] RBP: 00007ff4fcc01090 R08: 0000000000000000 R09: 0000000000000000
[  621.730532][T23535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.730545][T23535] R13: 00007ff4fc016038 R14: 00007ff4fc015fa0 R15: 00007ffedd3f1c78
[  621.730579][T23535]  </TASK>
[  622.092970][T23544] validate_nla: 3 callbacks suppressed
[  622.092991][T23544] netlink: 'syz.2.4614': attribute type 9 has an invalid length.
[  622.114376][T23530] block nbd1: server does not support multiple connections per device.
[  622.124448][T23530] block nbd1: shutting down sockets
[  622.178654][T23542] syzkaller0: entered promiscuous mode
[  622.184412][T23542] syzkaller0: entered allmulticast mode
[  622.244415][T23547] __nla_validate_parse: 7 callbacks suppressed
[  622.244437][T23547] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4615'.
[  622.264774][T23547] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4615'.
[  622.309160][T23552] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  622.379451][T23555] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  622.416378][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4616'.
[  622.426811][T23555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4616'.
[  622.592149][T23569] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4619'.
[  622.788434][T23582] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  622.886906][T23581] mac80211_hwsim hwsim32 wlan1: left allmulticast mode
[  622.905203][T23587] FAULT_INJECTION: forcing a failure.
[  622.905203][T23587] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  622.935882][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4625'.
[  622.949038][T23587] CPU: 0 UID: 0 PID: 23587 Comm: syz.4.4624 Not tainted syzkaller #0 PREEMPT(full) 
[  622.949073][T23587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  622.949089][T23587] Call Trace:
[  622.949099][T23587]  <TASK>
[  622.949111][T23587]  dump_stack_lvl+0xe8/0x150
[  622.949149][T23587]  should_fail_ex+0x412/0x560
[  622.949184][T23587]  _copy_to_user+0x31/0xb0
[  622.949225][T23587]  bpf_test_finish+0x1db/0x6b0
[  622.949264][T23587]  ? __pfx_bpf_test_finish+0x10/0x10
[  622.949299][T23587]  ? _copy_from_user+0x94/0xb0
[  622.949335][T23587]  ? bpf_test_init+0x113/0x150
[  622.949363][T23587]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  622.949413][T23587]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  622.949448][T23587]  ? __fget_files+0x2a/0x420
[  622.949482][T23587]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  622.949512][T23587]  bpf_prog_test_run+0x2c7/0x340
[  622.949545][T23587]  __sys_bpf+0x5cb/0x920
[  622.949572][T23587]  ? __pfx___sys_bpf+0x10/0x10
[  622.949615][T23587]  ? ksys_write+0x242/0x270
[  622.949653][T23587]  ? __pfx_ksys_write+0x10/0x10
[  622.949699][T23587]  __x64_sys_bpf+0x7c/0x90
[  622.949743][T23587]  do_syscall_64+0xe2/0xf80
[  622.949777][T23587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.949800][T23587]  ? trace_irq_disable+0x37/0x100
[  622.949823][T23587]  ? clear_bhb_loop+0x60/0xb0
[  622.949852][T23587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.949885][T23587] RIP: 0033:0x7f3f8cb9aeb9
[  622.949906][T23587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  622.949926][T23587] RSP: 002b:00007f3f8da0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  622.949952][T23587] RAX: ffffffffffffffda RBX: 00007f3f8ce15fa0 RCX: 00007f3f8cb9aeb9
[  622.949969][T23587] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  622.949985][T23587] RBP: 00007f3f8da0a090 R08: 0000000000000000 R09: 0000000000000000
[  622.950000][T23587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  622.950014][T23587] R13: 00007f3f8ce16038 R14: 00007f3f8ce15fa0 R15: 00007fffa90e4de8
[  622.950052][T23587]  </TASK>
[  623.316277][T23597] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4628'.
[  623.346339][T23601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.373548][T23597] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4628'.
[  623.421938][T23597] netlink: 'syz.0.4628': attribute type 6 has an invalid length.
[  623.454714][T23597] netlink: 'syz.0.4628': attribute type 5 has an invalid length.
[  623.462621][T23597] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4628'.
[  623.520274][T23597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4628'.
[  623.566577][T23597] netlink: 'syz.0.4628': attribute type 4 has an invalid length.
[  624.192886][T23644] netlink: 'syz.1.4641': attribute type 1 has an invalid length.
[  624.317858][T23652] FAULT_INJECTION: forcing a failure.
[  624.317858][T23652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  624.334569][T23652] CPU: 1 UID: 0 PID: 23652 Comm: syz.3.4643 Not tainted syzkaller #0 PREEMPT(full) 
[  624.334599][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  624.334613][T23652] Call Trace:
[  624.334622][T23652]  <TASK>
[  624.334632][T23652]  dump_stack_lvl+0xe8/0x150
[  624.334666][T23652]  should_fail_ex+0x412/0x560
[  624.334698][T23652]  _copy_to_user+0x31/0xb0
[  624.334745][T23652]  bpf_test_finish+0x22c/0x6b0
[  624.334781][T23652]  ? __pfx_bpf_test_finish+0x10/0x10
[  624.334830][T23652]  ? _copy_from_user+0x94/0xb0
[  624.334862][T23652]  ? bpf_test_init+0x113/0x150
[  624.334887][T23652]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  624.334931][T23652]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  624.334961][T23652]  ? __fget_files+0x2a/0x420
[  624.334991][T23652]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  624.335017][T23652]  bpf_prog_test_run+0x2c7/0x340
[  624.335046][T23652]  __sys_bpf+0x5cb/0x920
[  624.335070][T23652]  ? __pfx___sys_bpf+0x10/0x10
[  624.335110][T23652]  ? ksys_write+0x242/0x270
[  624.335144][T23652]  ? __pfx_ksys_write+0x10/0x10
[  624.335185][T23652]  __x64_sys_bpf+0x7c/0x90
[  624.335218][T23652]  do_syscall_64+0xe2/0xf80
[  624.335248][T23652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.335269][T23652]  ? trace_irq_disable+0x37/0x100
[  624.335290][T23652]  ? clear_bhb_loop+0x60/0xb0
[  624.335315][T23652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.335337][T23652] RIP: 0033:0x7f68f959aeb9
[  624.335357][T23652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.335375][T23652] RSP: 002b:00007f68fa457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  624.335399][T23652] RAX: ffffffffffffffda RBX: 00007f68f9815fa0 RCX: 00007f68f959aeb9
[  624.335416][T23652] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  624.335431][T23652] RBP: 00007f68fa457090 R08: 0000000000000000 R09: 0000000000000000
[  624.335444][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.335457][T23652] R13: 00007f68f9816038 R14: 00007f68f9815fa0 R15: 00007ffd905b3ca8
[  624.335492][T23652]  </TASK>
[  624.511089][T23656] netlink: 'syz.2.4644': attribute type 3 has an invalid length.
[  625.110114][T23685] macsec0: entered allmulticast mode
[  625.174040][T23690] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  625.249296][T23692] wg1 speed is unknown, defaulting to 1000
[  625.316480][T23692] lo speed is unknown, defaulting to 1000
[  625.344429][T23700] FAULT_INJECTION: forcing a failure.
[  625.344429][T23700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  625.358006][T23700] CPU: 1 UID: 0 PID: 23700 Comm: syz.2.4657 Not tainted syzkaller #0 PREEMPT(full) 
[  625.358036][T23700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  625.358051][T23700] Call Trace:
[  625.358061][T23700]  <TASK>
[  625.358070][T23700]  dump_stack_lvl+0xe8/0x150
[  625.358104][T23700]  should_fail_ex+0x412/0x560
[  625.358136][T23700]  _copy_to_user+0x31/0xb0
[  625.358171][T23700]  bpf_test_finish+0x53c/0x6b0
[  625.358205][T23700]  ? __pfx_bpf_test_finish+0x10/0x10
[  625.358237][T23700]  ? _copy_from_user+0x94/0xb0
[  625.358270][T23700]  ? bpf_test_init+0x113/0x150
[  625.358294][T23700]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  625.358338][T23700]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  625.358369][T23700]  ? __fget_files+0x2a/0x420
[  625.358400][T23700]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  625.358424][T23700]  bpf_prog_test_run+0x2c7/0x340
[  625.358453][T23700]  __sys_bpf+0x5cb/0x920
[  625.358476][T23700]  ? __pfx___sys_bpf+0x10/0x10
[  625.358513][T23700]  ? ksys_write+0x242/0x270
[  625.358547][T23700]  ? __pfx_ksys_write+0x10/0x10
[  625.358585][T23700]  __x64_sys_bpf+0x7c/0x90
[  625.358616][T23700]  do_syscall_64+0xe2/0xf80
[  625.358646][T23700]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.358675][T23700]  ? trace_irq_disable+0x37/0x100
[  625.358696][T23700]  ? clear_bhb_loop+0x60/0xb0
[  625.358722][T23700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.358743][T23700] RIP: 0033:0x7ff4fbd9aeb9
[  625.358763][T23700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.358781][T23700] RSP: 002b:00007ff4fcc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  625.358805][T23700] RAX: ffffffffffffffda RBX: 00007ff4fc015fa0 RCX: 00007ff4fbd9aeb9
[  625.358820][T23700] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  625.358834][T23700] RBP: 00007ff4fcc01090 R08: 0000000000000000 R09: 0000000000000000
[  625.358848][T23700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.358860][T23700] R13: 00007ff4fc016038 R14: 00007ff4fc015fa0 R15: 00007ffedd3f1c78
[  625.358896][T23700]  </TASK>
[  625.730868][T23705] netlink: 'syz.3.4659': attribute type 10 has an invalid length.
[  625.761543][T23705] netlink: 'syz.3.4659': attribute type 10 has an invalid length.
[  625.771348][T23705] dummy0: left allmulticast mode
[  625.779795][T23705] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  625.800070][T23705] team0: Port device dummy0 removed
[  625.832630][T23705] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  626.172377][T23722] team0: Failed to send port change of device bridge1 via netlink (err -105)
[  626.243598][T23722] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  626.403499][   T72] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.435985][   T72] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.484101][   T72] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.494502][   T72] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.801074][T23744] FAULT_INJECTION: forcing a failure.
[  626.801074][T23744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.820711][T23744] CPU: 1 UID: 0 PID: 23744 Comm: syz.4.4671 Not tainted syzkaller #0 PREEMPT(full) 
[  626.820746][T23744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  626.820760][T23744] Call Trace:
[  626.820769][T23744]  <TASK>
[  626.820780][T23744]  dump_stack_lvl+0xe8/0x150
[  626.820815][T23744]  should_fail_ex+0x412/0x560
[  626.820847][T23744]  _copy_to_user+0x31/0xb0
[  626.820883][T23744]  simple_read_from_buffer+0xe1/0x170
[  626.820912][T23744]  proc_fail_nth_read+0x1bb/0x230
[  626.820946][T23744]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  626.820981][T23744]  ? rw_verify_area+0x2a6/0x4d0
[  626.821010][T23744]  ? __fget_files+0x2a/0x420
[  626.821032][T23744]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  626.821064][T23744]  vfs_read+0x20c/0xa70
[  626.821094][T23744]  ? fdget_pos+0x246/0x320
[  626.821121][T23744]  ? __pfx___mutex_lock+0x10/0x10
[  626.821153][T23744]  ? __pfx_vfs_read+0x10/0x10
[  626.821183][T23744]  ? __fget_files+0x2a/0x420
[  626.821211][T23744]  ? __fget_files+0x3a0/0x420
[  626.821233][T23744]  ? __fget_files+0x2a/0x420
[  626.821264][T23744]  ksys_read+0x150/0x270
[  626.821297][T23744]  ? __pfx_ksys_read+0x10/0x10
[  626.821335][T23744]  do_syscall_64+0xe2/0xf80
[  626.821364][T23744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.821383][T23744]  ? trace_irq_disable+0x37/0x100
[  626.821404][T23744]  ? clear_bhb_loop+0x60/0xb0
[  626.821437][T23744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.821513][T23744] RIP: 0033:0x7f3f8cb5b78e
[  626.821535][T23744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  626.821553][T23744] RSP: 002b:00007f3f8da09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  626.821576][T23744] RAX: ffffffffffffffda RBX: 00007f3f8da0a6c0 RCX: 00007f3f8cb5b78e
[  626.821593][T23744] RDX: 000000000000000f RSI: 00007f3f8da0a0a0 RDI: 0000000000000006
[  626.821607][T23744] RBP: 00007f3f8da0a090 R08: 0000000000000000 R09: 0000000000000000
[  626.821643][T23744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.821656][T23744] R13: 00007f3f8ce16038 R14: 00007f3f8ce15fa0 R15: 00007fffa90e4de8
[  626.821695][T23744]  </TASK>
[  627.584701][T23761] __nla_validate_parse: 11 callbacks suppressed
[  627.584724][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4675'.
[  627.688071][T23765] wg1 speed is unknown, defaulting to 1000
[  627.698360][T23765] lo speed is unknown, defaulting to 1000
[  627.777663][T23768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4675'.
[  627.798617][T23768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4675'.
[  627.828069][T23771] netlink: 'syz.0.4678': attribute type 1 has an invalid length.
[  627.884672][T23774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4678'.
[  627.954328][T23771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4678'.
[  628.012990][T23780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  628.146718][T23785] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  628.160768][T23785] bond8 (unregistering): Released all slaves
[  628.181133][T23787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4682'.
[  628.201366][T23787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4682'.
[  628.210783][T23787] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  628.301497][T23789] wg1 speed is unknown, defaulting to 1000
[  628.309562][T23789] lo speed is unknown, defaulting to 1000
[  629.029911][T23821] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4694'.
[  629.268503][T23831] netlink: 'syz.2.4696': attribute type 1 has an invalid length.
[  629.318976][T23831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4696'.
[  629.332471][T23831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4696'.
[  629.590733][T23841] IPVS: Scheduler module ip_vs_sip not found
[  629.610656][T23844] IPVS: length: 140 != 8
[  629.724108][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  630.229256][T23876] bond6: option resend_igmp: invalid value (2878)
[  630.239523][T23876] bond6: option resend_igmp: allowed values 0 - 255
[  630.255608][T23876] bond6 (unregistering): Released all slaves
[  631.146178][T23914] wg1 speed is unknown, defaulting to 1000
[  631.154368][T23917] syzkaller0: entered promiscuous mode
[  631.160042][T23917] syzkaller0: entered allmulticast mode
[  631.170071][T23917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.198600][T23914] lo speed is unknown, defaulting to 1000
[  631.232232][T23917] tipc: Resetting bearer <eth:syzkaller0>
[  631.242774][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.251499][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.310078][T23912] tipc: Resetting bearer <eth:syzkaller0>
[  631.336024][T23912] tipc: Disabling bearer <eth:syzkaller0>
[  631.694514][T23935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  631.820289][T23943] netlink: 'syz.2.4735': attribute type 4 has an invalid length.
[  631.828399][T23943] netlink: 'syz.2.4735': attribute type 1 has an invalid length.
[  632.198874][T23943] wg1 speed is unknown, defaulting to 1000
[  632.211692][T23943] lo speed is unknown, defaulting to 1000
[  632.320341][T23958] netlink: 'syz.3.4740': attribute type 6 has an invalid length.
[  632.328224][T23958] netlink: 'syz.3.4740': attribute type 5 has an invalid length.
[  632.417956][T23958] netlink: 'syz.3.4740': attribute type 4 has an invalid length.
[  632.467718][T23964] syzkaller0: entered promiscuous mode
[  632.496367][T23964] syzkaller0: entered allmulticast mode
[  632.609224][T23963] wg1 speed is unknown, defaulting to 1000
[  632.617419][T23963] lo speed is unknown, defaulting to 1000
[  632.636834][T23972] xt_nfacct: accounting object `syz0' does not exist
[  633.245283][T23996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.322936][T23999] __nla_validate_parse: 11 callbacks suppressed
[  633.322960][T23999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4754'.
[  633.351367][T23999] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4754'.
[  633.361469][T23999] netlink: 'syz.2.4754': attribute type 6 has an invalid length.
[  633.370241][T23999] netlink: 'syz.2.4754': attribute type 5 has an invalid length.
[  633.390746][T23999] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4754'.
[  633.403956][T23999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4754'.
[  633.434495][T24002] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4755'.
[  633.434529][T23999] netlink: 'syz.2.4754': attribute type 4 has an invalid length.
[  633.524380][T24005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4756'.
[  633.640088][T24010] netlink: 'syz.2.4758': attribute type 1 has an invalid length.
[  633.680509][T24010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4758'.
[  633.702894][T24010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4758'.
[  633.861707][T24022] tunl0: Caught tx_queue_len zero misconfig
[  633.900041][T24005] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4756'.
[  634.084504][T24029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4764'.
[  634.288346][T24047] netlink: 'syz.0.4768': attribute type 6 has an invalid length.
[  634.296646][T24047] netlink: 'syz.0.4768': attribute type 5 has an invalid length.
[  634.327833][T24049] netlink: 'syz.1.4769': attribute type 1 has an invalid length.
[  634.336514][T24042] netlink: 'syz.3.4767': attribute type 29 has an invalid length.
[  634.350602][T24048] netlink: 'syz.3.4767': attribute type 29 has an invalid length.
[  634.361014][T24047] netlink: 'syz.0.4768': attribute type 4 has an invalid length.
[  634.401633][T24049] 8021q: adding VLAN 0 to HW filter on device bond8
[  634.559337][T24059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  634.675875][T24066] xt_limit: Overflow, try lower: 271964/0
[  634.792507][T24074] bond10: entered promiscuous mode
[  634.798398][T24074] 8021q: adding VLAN 0 to HW filter on device bond10
[  634.838163][T24074] bond10: (slave bridge5): making interface the new active one
[  634.848679][T24074] bridge5: entered promiscuous mode
[  634.858552][T24074] bond10: (slave bridge5): Enslaving as an active interface with an up link
[  634.934509][T24081] xt_TPROXY: Can be used only with -p tcp or -p udp
[  635.063432][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms
[  635.071564][    C1] lec:lec_tx_timeout: lec0
[  635.076260][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  636.677109][T24154] bond8: (slave gretap1): making interface the new active one
[  636.723242][T24154] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  636.786647][T24157] vlan3: entered allmulticast mode
[  636.807079][T24157] bond8: entered allmulticast mode
[  636.826975][T24157] gretap1: entered allmulticast mode
[  636.862840][T24157] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  636.974879][T24168] syzkaller0: entered promiscuous mode
[  637.011634][T24168] syzkaller0: entered allmulticast mode
[  637.276330][T24191] wg1 speed is unknown, defaulting to 1000
[  637.295051][T24191] lo speed is unknown, defaulting to 1000
[  637.595329][T24210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  637.647770][T24214] bridge0: port 4(veth1_to_hsr) entered blocking state
[  637.673782][T24214] bridge0: port 4(veth1_to_hsr) entered disabled state
[  637.681067][T24214] veth1_to_hsr: entered allmulticast mode
[  637.696458][T24214] veth1_to_hsr: entered promiscuous mode
[  637.702918][T24214] bridge0: port 4(veth1_to_hsr) entered blocking state
[  637.709983][T24214] bridge0: port 4(veth1_to_hsr) entered forwarding state
[  637.984931][T24232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.597128][T24246] wg1 speed is unknown, defaulting to 1000
[  638.656125][T24246] lo speed is unknown, defaulting to 1000
[  639.434104][T24298] syzkaller1: tun_chr_ioctl cmd 1074025677
[  639.440204][T24298] syzkaller1: linktype set to 778
[  639.617317][T24314] geneve5: entered promiscuous mode
[  639.624072][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.632894][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.694747][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.715994][ T1146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.730459][T24322] __nla_validate_parse: 29 callbacks suppressed
[  639.730503][T24322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4853'.
[  639.843844][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4853'.
[  639.983538][T24326] can: request_module (can-proto-0) failed.
[  640.113589][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms
[  640.121755][    C1] lec:lec_tx_timeout: lec0
[  640.249081][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4859'.
[  640.296782][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4859'.
[  640.328954][T24349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4860'.
[  640.376206][T24349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4860'.
[  640.731215][T24370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4867'.
[  640.763210][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4867'.
[  640.918305][T24378] FAULT_INJECTION: forcing a failure.
[  640.918305][T24378] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  640.958558][T24378] CPU: 1 UID: 0 PID: 24378 Comm: syz.2.4870 Not tainted syzkaller #0 PREEMPT(full) 
[  640.958607][T24378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  640.958629][T24378] Call Trace:
[  640.958646][T24378]  <TASK>
[  640.958656][T24378]  dump_stack_lvl+0xe8/0x150
[  640.958692][T24378]  should_fail_ex+0x412/0x560
[  640.958725][T24378]  _copy_from_user+0x2d/0xb0
[  640.958759][T24378]  __sys_bpf+0x229/0x920
[  640.958784][T24378]  ? __pfx___sys_bpf+0x10/0x10
[  640.958802][T24378]  ? kmem_cache_free+0x195/0x610
[  640.958842][T24378]  ? ksys_write+0x1fc/0x270
[  640.958877][T24378]  ? __pfx_ksys_write+0x10/0x10
[  640.958915][T24378]  __x64_sys_bpf+0x7c/0x90
[  640.958947][T24378]  do_syscall_64+0xe2/0xf80
[  640.958979][T24378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.959000][T24378]  ? trace_irq_disable+0x37/0x100
[  640.959021][T24378]  ? clear_bhb_loop+0x60/0xb0
[  640.959048][T24378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.959077][T24378] RIP: 0033:0x7ff4fbd9aeb9
[  640.959098][T24378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  640.959116][T24378] RSP: 002b:00007ff4fcc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  640.959139][T24378] RAX: ffffffffffffffda RBX: 00007ff4fc015fa0 RCX: 00007ff4fbd9aeb9
[  640.959155][T24378] RDX: 0000000000000020 RSI: 00002000000008c0 RDI: 0000000000000009
[  640.959169][T24378] RBP: 00007ff4fcc01090 R08: 0000000000000000 R09: 0000000000000000
[  640.959183][T24378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  640.959196][T24378] R13: 00007ff4fc016038 R14: 00007ff4fc015fa0 R15: 00007ffedd3f1c78
[  640.959231][T24378]  </TASK>
[  641.477123][T24400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4877'.
[  641.488405][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4877'.
[  641.528072][T24405] validate_nla: 10 callbacks suppressed
[  641.528097][T24405] netlink: 'syz.1.4879': attribute type 6 has an invalid length.
[  641.544040][T24394] tipc: Started in network mode
[  641.550985][T24394] tipc: Node identity 2e90d35ab54b, cluster identity 4711
[  641.559750][T24394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  641.575383][T24405] netlink: 'syz.1.4879': attribute type 5 has an invalid length.
[  641.601521][T24394] syzkaller0: entered promiscuous mode
[  641.613404][T24394] syzkaller0: entered allmulticast mode
[  641.696291][T24393] tipc: Resetting bearer <eth:syzkaller0>
[  641.746671][T24409] netlink: 'syz.1.4879': attribute type 4 has an invalid length.
[  641.755147][T24393] tipc: Disabling bearer <eth:syzkaller0>
[  641.936084][T24417] bridge6: entered promiscuous mode
[  641.941384][T24417] bridge6: entered allmulticast mode
[  641.972287][T24417] team0: Port device bridge6 added
[  641.990262][T24419] bridge0: port 1(team0) entered blocking state
[  642.005334][T24419] bridge0: port 1(team0) entered disabled state
[  642.027731][T24419] team0: entered promiscuous mode
[  642.042447][T24419] team_slave_0: entered promiscuous mode
[  642.057624][T24419] bridge1: entered promiscuous mode
[  642.076307][T24421] FAULT_INJECTION: forcing a failure.
[  642.076307][T24421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  642.116538][T24421] CPU: 1 UID: 0 PID: 24421 Comm: syz.4.4882 Not tainted syzkaller #0 PREEMPT(full) 
[  642.116570][T24421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  642.116584][T24421] Call Trace:
[  642.116594][T24421]  <TASK>
[  642.116604][T24421]  dump_stack_lvl+0xe8/0x150
[  642.116638][T24421]  should_fail_ex+0x412/0x560
[  642.116669][T24421]  _copy_to_user+0x31/0xb0
[  642.116706][T24421]  simple_read_from_buffer+0xe1/0x170
[  642.116736][T24421]  proc_fail_nth_read+0x1bb/0x230
[  642.116773][T24421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  642.116808][T24421]  ? rw_verify_area+0x2a6/0x4d0
[  642.116839][T24421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  642.116873][T24421]  vfs_read+0x20c/0xa70
[  642.116901][T24421]  ? bpf_prog_put+0x8f/0x1f0
[  642.116939][T24421]  ? __pfx_vfs_read+0x10/0x10
[  642.116967][T24421]  ? __sys_bpf+0x71d/0x920
[  642.116990][T24421]  ? __pfx___sys_bpf+0x10/0x10
[  642.117019][T24421]  ? kmem_cache_free+0x195/0x610
[  642.117058][T24421]  ksys_read+0x150/0x270
[  642.117092][T24421]  ? __pfx_ksys_read+0x10/0x10
[  642.117137][T24421]  do_syscall_64+0xe2/0xf80
[  642.117168][T24421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.117189][T24421]  ? trace_irq_disable+0x37/0x100
[  642.117210][T24421]  ? clear_bhb_loop+0x60/0xb0
[  642.117236][T24421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.117262][T24421] RIP: 0033:0x7f3f8cb5b78e
[  642.117281][T24421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  642.117300][T24421] RSP: 002b:00007f3f8da09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  642.117323][T24421] RAX: ffffffffffffffda RBX: 00007f3f8da0a6c0 RCX: 00007f3f8cb5b78e
[  642.117339][T24421] RDX: 000000000000000f RSI: 00007f3f8da0a0a0 RDI: 0000000000000008
[  642.117353][T24421] RBP: 00007f3f8da0a090 R08: 0000000000000000 R09: 0000000000000000
[  642.117367][T24421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.117380][T24421] R13: 00007f3f8ce16038 R14: 00007f3f8ce15fa0 R15: 00007fffa90e4de8
[  642.117416][T24421]  </TASK>
[  642.591690][T24425] netlink: 'syz.3.4884': attribute type 3 has an invalid length.
[  642.600007][T24425] netlink: 'syz.3.4884': attribute type 3 has an invalid length.
[  642.965735][T24445] netlink: 'syz.0.4891': attribute type 6 has an invalid length.
[  642.991900][T24445] netlink: 'syz.0.4891': attribute type 5 has an invalid length.
[  643.025877][T24445] netlink: 'syz.0.4891': attribute type 4 has an invalid length.
[  643.307272][T24465] wg1 speed is unknown, defaulting to 1000
[  643.398692][T24477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  643.433898][T24465] lo speed is unknown, defaulting to 1000
[  643.517887][T24483] veth3: entered promiscuous mode
[  691.150564][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  696.163384][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  696.171456][    C1] lec:lec_tx_timeout: lec0
[  697.546765][T14409] lec:lec_start_xmit: lec0:No lecd attached
[  700.905334][T24536] netlink: 'syz.1.4915': attribute type 1 has an invalid length.
[  700.948951][T24536] __nla_validate_parse: 19 callbacks suppressed
[  700.948971][T24536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4915'.
[  700.978563][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4915'.
[  700.991057][T24540] netlink: 'syz.4.4918': attribute type 9 has an invalid length.
[  701.219303][T24547] nbd: couldn't find device at index 0
[  701.254703][T24542] 8021q: VLANs not supported on caif0
[  701.335596][T24552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4921'.
[  701.488681][T24557] netlink: 'syz.1.4922': attribute type 10 has an invalid length.
[  701.520610][T24557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  701.564533][T24557] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  701.591561][T24560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4924'.
[  701.610960][T24560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4924'.
[  701.669983][T24561] wg1 speed is unknown, defaulting to 1000
[  701.715717][T24561] lo speed is unknown, defaulting to 1000
[  701.802435][T24568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4925'.
[  701.843414][T24568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4925'.
[  701.881821][T24570] netlink: 'syz.4.4926': attribute type 1 has an invalid length.
[  701.957382][T24570] 8021q: adding VLAN 0 to HW filter on device bond9
[  702.014556][T24573] bond9: (slave ip6gretap1): making interface the new active one
[  702.026537][T24573] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  702.050248][T24575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4927'.
[  702.172011][T24570] bond9: (slave erspan0): Enslaving as an active interface with an up link
[  702.312417][T24586] netlink: 'syz.0.4932': attribute type 1 has an invalid length.
[  702.379814][T24592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4932'.
[  702.441912][T24590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4931'.
[  702.648784][T24602] netlink: 'syz.1.4934': attribute type 1 has an invalid length.
[  702.845461][T24606] netlink: 'syz.0.4936': attribute type 1 has an invalid length.
[  702.981334][T24611] netlink: 'syz.3.4938': attribute type 3 has an invalid length.
[  703.063314][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms
[  703.071429][    C1] lec:lec_tx_timeout: lec0
[  703.251624][T24624] x_tables: duplicate underflow at hook 2
[  703.344598][T24621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  703.424253][T24621] syzkaller0: entered promiscuous mode
[  703.429779][T24621] syzkaller0: entered allmulticast mode
[  703.436818][T24621] tipc: Resetting bearer <eth:syzkaller0>
[  703.439486][T24626] netlink: 'syz.1.4943': attribute type 1 has an invalid length.
[  703.450862][T24627] syzkaller1: entered promiscuous mode
[  703.457639][T24627] syzkaller1: entered allmulticast mode
[  703.566190][T24627] 8021q: adding VLAN 0 to HW filter on device bond14
[  703.582194][T24627] bond13: (slave bond14): making interface the new active one
[  703.592815][T24627] bond13: (slave bond14): Enslaving as an active interface with an up link
[  703.620773][T24619] tipc: Resetting bearer <eth:syzkaller0>
[  703.785629][T24639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  705.698005][T24619] tipc: Disabling bearer <eth:syzkaller0>
[  705.718560][T24626] bond13: (slave gretap2): Enslaving as a backup interface with an up link
[  705.730369][T24627] 8021q: adding VLAN 0 to HW filter on device bond13
[  705.745974][T24635] vlan2: entered promiscuous mode
[  705.751214][T24635] bond13: entered promiscuous mode
[  705.761379][T24635] bond14: entered promiscuous mode
[  705.903619][T23075] tipc: Node number set to 2614874970
[  705.947277][T24659] netlink: 'syz.2.4950': attribute type 1 has an invalid length.
[  706.000050][T24666] __nla_validate_parse: 10 callbacks suppressed
[  706.000073][T24666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4950'.
[  706.044748][T24661] wg1 speed is unknown, defaulting to 1000
[  706.052338][T24661] lo speed is unknown, defaulting to 1000
[  706.060106][T24666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4950'.
[  706.107315][T24664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4951'.
[  706.237553][T24671] wg1 speed is unknown, defaulting to 1000
[  706.244910][T24671] lo speed is unknown, defaulting to 1000
[  706.441044][T24686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4956'.
[  706.486940][T24686] vlan2: entered promiscuous mode
[  706.498412][T24686] geneve1: entered promiscuous mode
[  706.553640][T24686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4956'.
[  706.605695][T24686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4956'.
[  706.619524][T24686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4956'.
[  706.819372][T24698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  706.842046][T24686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4956'.
[  706.868160][T24686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4956'.
[  706.912043][T24686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4956'.
[  706.991278][T24705] netlink: 'syz.0.4963': attribute type 7 has an invalid length.
[  706.999362][T24705] netlink: 'syz.0.4963': attribute type 8 has an invalid length.
[  707.014465][T24705] netlink: 'syz.0.4963': attribute type 9 has an invalid length.
[  707.115095][T24710] netlink: 'syz.2.4964': attribute type 1 has an invalid length.
[  707.658956][T24733] netlink: 'syz.3.4971': attribute type 15 has an invalid length.
[  707.766316][T24739] SET target dimension over the limit!
[  707.904721][T24741] netlink: 'syz.2.4975': attribute type 1 has an invalid length.
[  708.467616][T24786] netlink: 'syz.0.4990': attribute type 1 has an invalid length.
[  708.726549][T24796] batadv0: entered promiscuous mode
[  708.742882][T24796] batadv0: left promiscuous mode
[  709.004154][T24814] netlink: 'syz.1.5000': attribute type 2 has an invalid length.
[  709.086432][T24823] netlink: 'syz.3.5002': attribute type 1 has an invalid length.
[  709.234923][T24828] tipc: New replicast peer: 255.255.255.255
[  709.241803][T24828] tipc: Enabled bearer <udp:syz2>, priority 10
[  709.541547][T24846] batadv0: entered promiscuous mode
[  709.547825][T24846] batadv0: left promiscuous mode
[  709.661132][T24849] sctp: [Deprecated]: syz.2.5011 (pid 24849) Use of struct sctp_assoc_value in delayed_ack socket option.
[  709.661132][T24849] Use struct sctp_sack_info instead
[  709.695876][T24853] pimreg: tun_chr_ioctl cmd 1074025677
[  709.702289][T24853] pimreg: linktype set to 1
[  709.999995][T24869] bond0: Error: Cannot enslave bond to itself.
[  710.207164][T24882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  710.529839][T24901] batadv0: entered promiscuous mode
[  710.541563][T24901] bridge0: entered promiscuous mode
[  710.590157][T24901] debugfs: 'hsr0' already exists in 'hsr'
[  710.603419][T24901] Cannot create hsr debugfs directory
[  710.609127][T24901] hsr0: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  710.619961][T24901] hsr0: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network
[  710.660338][T24911] dummy0: entered promiscuous mode
[  710.670807][T24911] dummy0: left promiscuous mode
[  711.172171][T24935] __nla_validate_parse: 56 callbacks suppressed
[  711.172196][T24935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5034'.
[  711.539858][T24951] validate_nla: 2 callbacks suppressed
[  711.539880][T24951] netlink: 'syz.2.5042': attribute type 1 has an invalid length.
[  711.609204][T24955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5041'.
[  711.614249][T24957] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5042'.
[  711.632713][T24955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5041'.
[  711.666314][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'.
[  711.817731][T24963] syzkaller1: entered promiscuous mode
[  711.823615][T24963] syzkaller1: entered allmulticast mode
[  711.924576][T24970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5046'.
[  711.959185][T24970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5046'.
[  712.187529][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5050'.
[  712.205941][T24984] bridge0: port 4(batadv2) entered blocking state
[  712.233806][T24984] bridge0: port 4(batadv2) entered disabled state
[  712.240731][T24984] batadv2: entered allmulticast mode
[  712.260171][T24984] batadv2: entered promiscuous mode
[  712.357359][T24996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5052'.
[  712.412839][T24996] netlink: 580 bytes leftover after parsing attributes in process `syz.2.5052'.
[  712.555174][T25007] netlink: 'syz.1.5056': attribute type 1 has an invalid length.
[  712.707125][ T1146] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  712.717061][ T1146] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  713.112377][T25045] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8
[  713.318876][T25059] netlink: 'syz.0.5069': attribute type 10 has an invalid length.
[  713.405424][T25060] netlink: 'syz.0.5069': attribute type 10 has an invalid length.
[  713.427604][T25059] team0: Port device dummy0 added
[  713.453716][T25060] team0: Port device dummy0 removed
[  713.479071][T25060] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  713.491369][T25066] netlink: 'syz.3.5072': attribute type 1 has an invalid length.
[  713.514534][T25062] bridge_slave_0: left allmulticast mode
[  713.520818][T25062] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.535316][T25062] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  713.559440][T25071] netlink: 'syz.1.5073': attribute type 1 has an invalid length.
[  713.881808][T25093] xt_ecn: cannot match TCP bits for non-tcp packets
[  713.985942][T25097] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  714.001069][T25102] netlink: 'syz.0.5080': attribute type 9 has an invalid length.
[  714.167899][T25117] netlink: 'syz.2.5087': attribute type 1 has an invalid length.
[  714.651335][T25142] syzkaller0: entered promiscuous mode
[  714.658152][T25142] syzkaller0: entered allmulticast mode
[  717.566015][T25175] ip6tnl0: Caught tx_queue_len zero misconfig
[  717.572225][T25175] __nla_validate_parse: 14 callbacks suppressed
[  717.572245][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5101'.
[  717.866195][T25195] netlink: 'syz.2.5105': attribute type 1 has an invalid length.
[  717.881003][T25197] SET target dimension over the limit!
[  717.929353][T25195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5105'.
[  717.970742][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5105'.
[  718.062330][T25201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5107'.
[  718.085297][T25201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5107'.
[  718.097469][T25206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5110'.
[  718.139086][T25201] batadv0: entered promiscuous mode
[  718.154976][T25201] bridge0: entered promiscuous mode
[  718.163770][T25206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5110'.
[  718.274212][    C1] 
[  718.276614][    C1] ============================================
[  718.282975][    C1] WARNING: possible recursive locking detected
[  718.289205][    C1] syzkaller #0 Not tainted
[  718.293665][    C1] --------------------------------------------
[  718.299852][    C1] syz.1.5111/25211 is trying to acquire lock:
[  718.305978][    C1] ffff88807a788f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  718.315100][    C1] 
[  718.315100][    C1] but task is already holding lock:
[  718.322501][    C1] ffff888056a98f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[  718.332839][    C1] 
[  718.332839][    C1] other info that might help us debug this:
[  718.340940][    C1]  Possible unsafe locking scenario:
[  718.340940][    C1] 
[  718.348431][    C1]        CPU0
[  718.351754][    C1]        ----
[  718.355074][    C1]   lock(&hsr->seqnr_lock);
[  718.359628][    C1]   lock(&hsr->seqnr_lock);
[  718.364202][    C1] 
[  718.364202][    C1]  *** DEADLOCK ***
[  718.364202][    C1] 
[  718.372382][    C1]  May be due to missing lock nesting notation
[  718.372382][    C1] 
[  718.380735][    C1] 9 locks held by syz.1.5111/25211:
[  718.385969][    C1]  #0: ffff888040bae540 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  718.395963][    C1]  #1: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5a0
[  718.406051][    C1]  #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370
[  718.415266][    C1]  #3: ffff888056a98f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[  718.426014][    C1]  #4: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860
[  718.435535][    C1]  #5: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850
[  718.445501][    C1]  #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1920
[  718.454758][    C1]  #7: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850
[  718.464733][    C1]  #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  718.473903][    C1] 
[  718.473903][    C1] stack backtrace:
[  718.479816][    C1] CPU: 1 UID: 0 PID: 25211 Comm: syz.1.5111 Not tainted syzkaller #0 PREEMPT(full) 
[  718.479837][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  718.479848][    C1] Call Trace:
[  718.479859][    C1]  <IRQ>
[  718.479867][    C1]  dump_stack_lvl+0xe8/0x150
[  718.479893][    C1]  print_deadlock_bug+0x279/0x290
[  718.479911][    C1]  __lock_acquire+0x253f/0x2cf0
[  718.479938][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  718.479962][    C1]  ? kmem_cache_free+0x195/0x610
[  718.479984][    C1]  ? packet_rcv+0x175/0x1720
[  718.480007][    C1]  ? hsr_dev_xmit+0x237/0x360
[  718.480022][    C1]  lock_acquire+0x106/0x330
[  718.480043][    C1]  ? hsr_dev_xmit+0x237/0x360
[  718.480062][    C1]  ? dev_queue_xmit_nit+0x969/0xad0
[  718.480084][    C1]  ? hsr_dev_xmit+0x237/0x360
[  718.480099][    C1]  _raw_spin_lock_bh+0x36/0x50
[  718.480119][    C1]  ? hsr_dev_xmit+0x237/0x360
[  718.480134][    C1]  hsr_dev_xmit+0x237/0x360
[  718.480149][    C1]  ? hsr_dev_xmit+0x2d/0x360
[  718.480166][    C1]  dev_hard_start_xmit+0x2cd/0x7f0
[  718.480195][    C1]  __dev_queue_xmit+0x168f/0x3850
[  718.480223][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  718.480240][    C1]  ? __dev_queue_xmit+0x274/0x3850
[  718.480263][    C1]  ? ebt_do_table+0x2665/0x2830
[  718.480283][    C1]  ? ebt_do_table+0x2665/0x2830
[  718.480304][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  718.480337][    C1]  ? br_nf_post_routing+0x219/0xfe0
[  718.480354][    C1]  ? lock_acquire+0x106/0x330
[  718.480380][    C1]  br_dev_queue_push_xmit+0x370/0x4a0
[  718.480396][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  718.480412][    C1]  NF_HOOK+0x360/0x3f0
[  718.480428][    C1]  ? NF_HOOK+0xa2/0x3f0
[  718.480442][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  718.480457][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  718.480472][    C1]  ? lock_acquire+0x106/0x330
[  718.480504][    C1]  br_forward_finish+0xd3/0x130
[  718.480518][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  718.480534][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  718.480549][    C1]  NF_HOOK+0x360/0x3f0
[  718.480564][    C1]  ? NF_HOOK+0xa2/0x3f0
[  718.480578][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  718.480593][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  718.480609][    C1]  ? __skb_clone+0x483/0x7a0
[  718.480631][    C1]  ? br_handle_vlan+0x61/0x530
[  718.480654][    C1]  __br_forward+0x397/0x540
[  718.480669][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  718.480686][    C1]  br_flood+0x6ee/0xb80
[  718.480706][    C1]  ? br_dev_xmit+0x193/0x1920
[  718.480725][    C1]  br_dev_xmit+0x127a/0x1920
[  718.480745][    C1]  ? br_dev_xmit+0x193/0x1920
[  718.480766][    C1]  ? __pfx_br_dev_xmit+0x10/0x10
[  718.480787][    C1]  ? dev_queue_xmit_nit+0x2d/0xad0
[  718.480808][    C1]  ? netdev_adjacent_rename_links+0x190/0x510
[  718.480826][    C1]  ? dev_queue_xmit_nit+0x2d/0xad0
[  718.480850][    C1]  dev_hard_start_xmit+0x2cd/0x7f0
[  718.480879][    C1]  __dev_queue_xmit+0x168f/0x3850
[  718.480902][    C1]  ? handle_softirqs+0x22a/0x7c0
[  718.480917][    C1]  ? __do_fault+0x138/0x390
[  718.480936][    C1]  ? __dev_queue_xmit+0x274/0x3850
[  718.480963][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  718.480991][    C1]  ? __copy_skb_header+0xa3/0x4a0
[  718.481018][    C1]  ? hsr_addr_subst_dest+0x30d/0xa90
[  718.481036][    C1]  ? skb_clone+0x246/0x3a0
[  718.481059][    C1]  hsr_forward_skb+0x157b/0x2860
[  718.481083][    C1]  ? hsr_forward_skb+0xb3/0x2860
[  718.481103][    C1]  ? __pfx_hsr_forward_skb+0x10/0x10
[  718.481121][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  718.481141][    C1]  ? __asan_memset+0x22/0x50
[  718.481165][    C1]  ? __skb_pad+0x405/0x610
[  718.481189][    C1]  send_hsr_supervision_frame+0x731/0xcb0
[  718.481212][    C1]  ? __pfx_send_hsr_supervision_frame+0x10/0x10
[  718.481231][    C1]  hsr_announce+0x1db/0x370
[  718.481249][    C1]  ? hsr_announce+0x89/0x370
[  718.481265][    C1]  ? __pfx_hsr_announce+0x10/0x10
[  718.481280][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  718.481302][    C1]  call_timer_fn+0x192/0x5a0
[  718.481326][    C1]  ? __pfx_hsr_announce+0x10/0x10
[  718.481341][    C1]  ? call_timer_fn+0xd4/0x5a0
[  718.481364][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  718.481392][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  718.481411][    C1]  ? __pfx_hsr_announce+0x10/0x10
[  718.481427][    C1]  __run_timer_base+0x652/0x8b0
[  718.481448][    C1]  ? ktime_get+0x45/0x200
[  718.481472][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  718.481501][    C1]  ? sched_clock_cpu+0x74/0x440
[  718.481527][    C1]  run_timer_softirq+0xb7/0x170
[  718.481549][    C1]  handle_softirqs+0x22a/0x7c0
[  718.481565][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  718.481582][    C1]  __irq_exit_rcu+0x5f/0x150
[  718.481597][    C1]  irq_exit_rcu+0x9/0x30
[  718.481610][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  718.481632][    C1]  </IRQ>
[  718.481637][    C1]  <TASK>
[  718.481644][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  718.481662][    C1] RIP: 0010:special_mapping_fault+0x75/0x3c0
[  718.481680][    C1] Code: 08 4c 89 f7 e8 9c 43 16 00 4d 8b 36 4d 8d 66 10 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 7f 43 16 00 4d 8b 24 24 <4d> 85 e4 74 25 e8 61 f3 ad ff 4c 89 f7 4c 89 fe 48 89 da 4d 89 e3
[  718.481694][    C1] RSP: 0000:ffffc90004bbfad0 EFLAGS: 00000246
[  718.481711][    C1] RAX: 1ffffffff17409fa RBX: ffffc90004bbfd60 RCX: ffff888033bbbd00
[  718.481724][    C1] RDX: 0000000000000000 RSI: 000000001f69e007 RDI: ffffc90004bbfd60
[  718.481735][    C1] RBP: dffffc0000000000 R08: ffffffff82184479 R09: ffffffff8e55a360
[  718.481747][    C1] R10: ffffc90004bbfd8c R11: ffffffff82166370 R12: ffffffff81337150
[  718.481760][    C1] R13: dffffc0000000000 R14: ffffffff8ba04fc0 R15: ffff888059f58000
[  718.481773][    C1]  ? __pfx_vdso_fault+0x10/0x10
[  718.481795][    C1]  ? __pfx_special_mapping_fault+0x10/0x10
[  718.481812][    C1]  ? ___pte_offset_map+0x29/0x240
[  718.481840][    C1]  __do_fault+0x138/0x390
[  718.481857][    C1]  do_pte_missing+0x21a2/0x37a0
[  718.481878][    C1]  ? handle_mm_fault+0xee/0x32a0
[  718.481902][    C1]  handle_mm_fault+0x1b8c/0x32a0
[  718.481931][    C1]  ? handle_mm_fault+0xee/0x32a0
[  718.481956][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  718.481986][    C1]  ? lock_mm_and_find_vma+0xa7/0x340
[  718.482003][    C1]  do_user_addr_fault+0x75b/0x1360
[  718.482034][    C1]  exc_page_fault+0x6a/0xc0
[  718.482056][    C1]  asm_exc_page_fault+0x26/0x30
[  718.482071][    C1] RIP: 0033:0x7fcf35d3aa90
[  718.482092][    C1] Code: Unable to access opcode bytes at 0x7fcf35d3aa66.
[  718.482101][    C1] RSP: 002b:00007ffe8de0adb8 EFLAGS: 00010206
[  718.482114][    C1] RAX: 00007fcf35d3aa90 RBX: 0000000000000000 RCX: 0000001b2f264000
[  718.482125][    C1] RDX: 0000001b2f224000 RSI: 00007ffe8de0add0 RDI: 0000000000000001
[  718.482136][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  718.482145][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  718.482155][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe8de0b080
[  718.482172][    C1]  </TASK>
[  719.211034][T25214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5113'.
[  726.983768][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!