last executing test programs:

12.361634111s ago: executing program 0 (id=7926):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000180)=0xfffffffd, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c)
syz_open_procfs$namespace(0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x8084)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5700000000000000100090650c95915aa857cc5debb205a2825e91ca19febcf1d76cf6a25479589510c3763639dae1bde88fb23c2184b764c37da52c81dfd81dacb59b6e6834c43352d4ef3e9a3e114ffa2fe33be611ef364049e4e8ae29a5997eaebd50c664eb73134b57de7601900618253b27b0e1e9b77ab4aae41645120de03e6210208f797f0949e744407577f72a2488bc5259113bc560d25345f151b51176f559f151a8abd6ebbc886c78c1a1d850f7e21803eaefd6d6e8b046f8fa6c27c64e000000000000", @ANYRESOCT=r5, @ANYRES64=r2, @ANYBLOB="e2dbe1c0d53c46d497", @ANYRESHEX=r4], 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x841)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r8)
sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES64=r6, @ANYBLOB="2503000400000000000008000000", @ANYBLOB="b1d145233d1ee0d1ca912a3994c2af4cf38deb0d8c1aefd4a0e81d4bb49ded95bd85ee0d4c0c7802cb4bd15dc3c9e2e0c7e9ad50325a889b3e681b534e13b8b4feb36d98ff2f4502967741b04a6cda06a006d508424c365bd36024a9f09b67f8502d75c592eaf71b6d3d7d45c9e7e8470404cece4a7d02ac7bbec38593690b0310db7273181b8e88de8b67c6fdc2e9ae6a8f9480b8bd8aa88b83440a38ad2044c115eaead22e1b652c3d31e526704d91"], 0x14}, 0x1, 0x0, 0x0, 0x24048896}, 0xda2f8acea3abddf1)
unshare(0x62040200)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000340)={r9, r9, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

6.99730996s ago: executing program 0 (id=7954):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000140))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000030121000000000002000000a9884151a3d64e9f738d0100"/43], 0x14}}, 0x20044040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000000080103000000000000000002000005e0f47a84275dfc0f17cc58334c3209311b848ee0ed7535a482a505fcc235d7e74cde042eaa4b64b3bfd42bffa037b5ed4ecb028dbbe1b66ed53e2162f040f1f0b150721d9f09b5a27c15f5606dc776cbf5717eb6cfd876671cc47535bc0494f4bc1fc19585ea2ff10297f6d9a3a86895fe98a48091fef59842a6f413854800bb8c3ab3bb7ed0825bda234765c139d0663b8f84ecfe39e059b2f17c5ac2934b7936a085127b3a0ab51943cb36e00b3205be78dfc74f8b408ed19b"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000080000000000000000000000095000000000000004a01a86476fe20d11ee1554b6c734c4653eb2d89c83e91f0f6e99c58b0687b82f1e5e814c2bb743c9795e24ddfb57b2777e90998761ee412305a3630aa3fb79098501fc7ce45c7dd57378365"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="000000000000000000009a14e2de0000dde25d05ecbb2d0d4008000000000006", @ANYRES32=r1, @ANYRES32, @ANYBLOB="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"], 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x11, 0x68, 0x0, &(0x7f0000000140))
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000006c0)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r10, r5, 0x25, 0x2, @void}, 0x10)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4e22, 0x419f, 0x2, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0x4, 0x7, 0x3, 0x8000000000000001, 0x20000000000000, 0x4}, {0x2, 0x6, 0x7, 0x80004}, 0x8, 0x0, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d6, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x3507, 0x1, 0x0, 0x17, 0x107, 0x4, 0x280000}}, 0xe8)
sendmmsg(r12, &(0x7f0000009d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004004)
close(r12)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0xb8}}, 0x24008800)
sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000003000000100000000a0020002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000fefffffffefffffd000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)

6.73530562s ago: executing program 0 (id=7957):
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc48d2}, 0x0)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b", 0x5}], 0x1}}], 0x1, 0x20008000)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000780), 0x0)
recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0xb00000000065808, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {0x7, 0xffff}, {0xa, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x7}}]}, 0x2c}}, 0x20000040)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0)
close(0xffffffffffffffff)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1100000000f336, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000180)=0x38)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r3, 0xe6905000)

6.537535337s ago: executing program 0 (id=7959):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
write(r1, &(0x7f00000003c0)="fa8a4e785a73c662822e2a36d22d367923ebddbd84fa85c9a3f7dc1654ae0104000000406c871ea9242fbd18cd095244a6e008cf21ae324f61695077205f70dcdd73b02358d5ce668eaca298a8b7b3da", 0x50)
recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001040)=""/28, 0x1c}, {&(0x7f0000000000)=""/169, 0xa9}], 0x2}}], 0x1, 0x0, 0x0)

6.135202313s ago: executing program 3 (id=7962):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98000282901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000440)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8)
ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000000c0))

6.031312255s ago: executing program 0 (id=7963):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10)
write(r2, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r9)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000ac0)={'wg0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x34, r10, 0xf01, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008040}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="010000"], 0x3c}}, 0x0)

5.161831818s ago: executing program 3 (id=7967):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x594, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="14043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0)

4.95602664s ago: executing program 3 (id=7968):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xb, 0x100000, 0x1}}, 0x40)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200), 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4)
close(r2)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
getsockopt(r5, 0xc0, 0x7, &(0x7f00000001c0)=""/53, &(0x7f0000000240)=0x35)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000140))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x10, 0x4, 0x1, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0x7f, 0x0, 0x0, @empty, @empty}}}})
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c)
socket(0x15, 0x5, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4)

2.704320155s ago: executing program 4 (id=7982):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0xc, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @fwd={0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @struct={0xd, 0x2, 0x0, 0x4, 0x0, 0x22, [{0xf, 0x3, 0xcfd}, {0x9, 0x5, 0x3}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @func={0x3, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}]}, {0x0, [0x5f, 0x61, 0x2e, 0x30, 0x0, 0x2e, 0x60, 0x2e, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/36, 0xb0, 0x24, 0x0, 0x1, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES8=r0, @ANYBLOB="0000000002000000b705001008000000856c4893daf6d57656"], &(0x7f0000000640)='syzkaller\x00', 0x400008, 0xfe9, &(0x7f0000001e00)=""/4073, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)

2.507610163s ago: executing program 4 (id=7983):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/26, 0x2000, 0x1000, 0x1, 0x7}, 0x20)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_int(r7, 0x1, 0x2c, 0x0, &(0x7f0000000500))
sendmsg$nl_xfrm(r4, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="88010000180000012abd7000fbdbdf25fe880000000000000000000000000001e00000020000000000000000000000004e2010004e2000000200a0003b000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"/496], 0x188}, 0x1, 0x0, 0x0, 0x8814}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x4, 0xffffffff, '\x00', {0x6}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, [], [0xff, 0xff000000], 'wg1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x4000000, 0x5, 0x0, 0xfffffffe, 0x7, 0x3ff, 0x18, 0x88}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/26, 0x2000, 0x1000, 0x1, 0x7}, 0x20) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) (async)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
getsockopt$sock_int(r7, 0x1, 0x2c, 0x0, &(0x7f0000000500)) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="88010000180000012abd7000fbdbdf25fe880000000000000000000000000001e00000020000000000000000000000004e2010004e2000000200a0003b000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"/496], 0x188}, 0x1, 0x0, 0x0, 0x8814}, 0x10) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x4, 0xffffffff, '\x00', {0x6}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, [], [0xff, 0xff000000], 'wg1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x4000000, 0x5, 0x0, 0xfffffffe, 0x7, 0x3ff, 0x18, 0x88}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) (async)

2.421674938s ago: executing program 1 (id=7984):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={<r1=>0x0, 0x1e, "6607e126bd3ad9ecc34e3f5f7927eba2ab0de388e9b92b98e8a66c2c0b57"}, &(0x7f0000000080)=0x26)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0xc, 0xe, 0x2, 0x8, 0x3}, &(0x7f0000000100)=0x14)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0xf, 0x3, 0xdc, 0x0, 0x6, 0x0, 0xf7, 0x21, 0x5, 0x4, 0x22, 0xa, 0x8, 0xf6}, 0xe)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000180)=0x7f, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdf2, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040081}, 0x8800)
setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000340), 0x4)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f00000004c0)=""/193, 0xc1}, {&(0x7f00000005c0)=""/26, 0x1a}], 0x4, 0x9, 0x2)
recvfrom$inet(r0, &(0x7f0000000640)=""/110, 0x6e, 0x40000041, &(0x7f00000006c0)={0x2, 0x4e20, @private=0xa010102}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x620, 0x230, 0x0, 0x328, 0x410, 0x0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, &(0x7f0000000700), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4, 0x15}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@hl={{0x28}, {0xf1507d7d81904393, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x11, 0x2, 0x5}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xff000000, 0xff, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xffffffff], 'ip_vti0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x2f, 0x7f, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0xd}, @ipv4=@rand_addr=0x64010100, 0xe, 0x4, 0x7e29}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @loopback, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], [0xff, 0x0, 0xffffff00, 0xff000000], 'dvmrp1\x00', 'wlan0\x00', {}, {}, 0x3c, 0x3, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x9, @ipv6=@loopback, 0x4e21}}}, {{@ipv6={@mcast1, @remote, [0x0, 0xffffff00, 0xff, 0xff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'dummy0\x00', 'sit0\x00', {0xff}, {}, 0x2e, 0x0, 0x1, 0x4}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@local, 0x0, 0x13, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000e00)=0xff)
listen(r0, 0x3383)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000e40)={r0}, 0x8)
sendmsg$kcm(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000e80)="119f6849ac8a6bacb94dace2089baff069aa3f8095684a73eca03484d526a9a8c2a5b3638d0a6c05ddf2cd6b6bca189c243534260e6b11990d4daecd04a11597159eff1eb9b8d6a3ec019ab31f135d8f733be53d29b6d987a0bd69428e981c37df70501bafe0321d16c83d1005862ec1c4c526be87ce0604fd9c8bbc6d7a78dcfbb4f2d590831bde69239482caa47c1c", 0x90}, {&(0x7f0000000f40)="f2032dbad2c15df92d184cd21f9d93f102e37ff2fb28150d72e809cab0cb3fa1947f9b3460c1e91e519f957873813c4c5966bcaf1a806f9def", 0x39}, {&(0x7f0000000f80)="45542944ade11790b62fd0787f36c33725b4c58df301b5327f709a00d7f773d9d230b4cd673c5d3615566e4a179620c0f7a0500d2ec1dbc71931f1971b079dffad3daa731d7ad4b272a36f33fd79b5561d580fbddd022bd2c06d4000022a758e10d5ffb9ec6bc464cb27f5c62aa65865b623206ba4b284c2bd00d716694fa7a3772b2f4273370a92c692365641503a059b80a7d3064b22d58a", 0x99}, {&(0x7f0000001040)="4a0fe8b5ce06f661daf0c6a1a2921c8811fff76357afe7a4d772f7a20665a80ed49025e46cc7d2d9c37c6507faec2f7881703496f382b5b526ab0a3517ebc37b95db5fb756229c73f6c41295bb80bb5ed1426b8e5a0f3db4bea41b4e85432136864f91e4b4abdd101ab3aec818a58ce8efd5182e10004eeed0563fed7380cd3b67816c1826547caea2ae5dd2566446b2c045c8ad1df53d61cfd411f2ca24336090b11695a25eee7597547d60ffbdac4746b18d256f683da9852eb06c1745ca66390c51", 0xc3}, {&(0x7f0000001140)="1776ad96b69ffd66e7357475f318874fdab9d6f8bd644fbf09d891c070a9eee4cbca93d33a09e8967cc224495037b4169479eefda3b74c143e195edd002a6f45c028696e9595", 0x46}], 0x5, &(0x7f0000001240)=[{0x90, 0x114, 0x4544, "945f88f4db1793888de40db2438490b05414761376a6bdf90ac6f1927c5209f4fb87e39795cec3092f67f3dfdc8592d6d45506092ef79796c673b722d6f630ab83bdcc6357702d531f36fc3c8daa204c21cfdda401c86ee0689db2a19dce8c323b390fb2945234fd603941f2fd1011afd17afa54b4548bb5b9457f9222a059"}, {0x80, 0x101, 0xf3aa, "0872b3b442840025298a16dfab47dc530398e06e5a9b95104bd27a98aceb8b9cbe679be8be4a9cfd4477ab13d30b7763c836109766be2de84fc5483c1c42f6342ed2bbbd09206fb181684a3ef2f98b6f9a533ada2e97c9c249fe755e89b1f4c2b0155abb483c9313331d83"}], 0x110}, 0x800)
syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0), r0)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001500)=0xffffffffffffffff, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x498, 0x498, 0x158, 0x2b0, 0x2b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000001540), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x31}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0x0, 0xffff00], 'veth0_to_bridge\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x62, 0x7, 0x3, 0x4b}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x0, [0x5, 0x6, 0x1, 0x400, 0x8001, 0x0, 0x2, 0x2, 0x8, 0x0, 0x40, 0xfff7, 0xc, 0x8, 0xf, 0x7ff], 0xf}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0xe101, @ipv6=@empty, 0x4e24}}}, {{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffffff, 0xff000000], [0xff, 0xffffffff, 0xffffff00, 0xffffff00], 'syzkaller0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x67, 0x63, 0x6, 0x69}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x2, 0x0, [0x5, 0xfffe, 0x17c, 0x4, 0x0, 0x7fff, 0x7, 0x81, 0x80, 0xae1d, 0x2, 0x0, 0x10, 0x5, 0xb8, 0x5], 0x9}}, @common=@ipv6header={{0x28}, {0x0, 0x61, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffff, 0xdd8c000, 0x0, 0x6, 0xffffffff, 0xb10, 0x1, 0x3]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff, 0x0, 0xffffff00], 'veth0_to_bond\x00', 'bridge0\x00', {0xff}, {}, 0x2e, 0x5, 0x2, 0x2}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@remote, 0x3b, 0x13, 0xadc6}}}, {{@ipv6={@private0, @mcast2, [0x0, 0xff], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'veth1\x00', 'ip6erspan0\x00', {0xff}, {}, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1d, 0x2, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d00), r0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0xc020400}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x68, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000041}, 0x20044000)
listen(r0, 0x6)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001e40)=@req={0x40, 0x8, 0x2f0, 0x5cf61dba}, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x50, r5, 0xd6b6e6ae1cf2f645, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xb}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4004801)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000002000)=[@in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e23, @multicast2}], 0x40)
r6 = socket(0x10, 0x5, 0x5)
close(r6)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002080)={0xf8, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcf74}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x40010)

2.133174653s ago: executing program 1 (id=7986):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xe1bb3fe437fffcd2}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x108, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0xd4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x81}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c894)
accept4(r0, 0x0, 0x0, 0x800) (async)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580))

2.109751754s ago: executing program 4 (id=7988):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRESOCT=r0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.997639919s ago: executing program 3 (id=7989):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000002c0), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000956b3b0706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r7}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94)

1.895720387s ago: executing program 4 (id=7991):
unshare(0x400)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4c1103, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x1a071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c00108004000b80040005800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="18030000ef7f0000000000009bb111c018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, <r5=>0x0}, 0x8)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r7, r2, 0x0, r0}, 0x10)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000100)}, 0x8040)
r9 = socket$isdn(0x22, 0x2, 0x25)
write$cgroup_int(r9, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffb, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400401a}, 0x4000080)
r11 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r11)

1.837048876s ago: executing program 1 (id=7992):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffffffffffcb2}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
sendmsg$nl_route_sched_retired(r5, 0x0, 0x4000004)
pipe(0x0)
mmap(&(0x7f0000164000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x21f42000)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r7=>0x0)
unshare(0x20000400)
syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856f1200008c", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "000f00", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x8035}}}}}}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\t'], 0xc)
close(0x3)

1.489298874s ago: executing program 2 (id=7993):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$inet6_int(r2, 0x29, 0x5, 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000f004500"], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$caif_stream(0x25, 0x1, 0x5)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r5)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f0000000040)=0x2, 0x4)
close(0xffffffffffffffff)
ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0)
r9 = socket(0x10, 0x3, 0x0)
unshare(0x400)
write(r9, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)
close(r1)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(0xffffffffffffffff, 0x800)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000})

1.456580461s ago: executing program 1 (id=7994):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r4, @ANYBLOB='H\x000'], 0x64}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan3\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4094)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close(0x3)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Au\\', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0)
sendmmsg$inet(r10, &(0x7f0000000900)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000340)="c82fe7f31ce320ef5b9d32f07dba69603511303de58063f993325b76e937287abe5d3cebdf224bc038a6ddc2088f16727b21fd69a87e6450e860b3ad031d4c25dadd3692de3df5820627a48d6fef1f70b72b79cb7c47c6a207b11b2e142c4fc0109ac79138d9bfd8de63ed4861c9df0891fd1ea15aee48fc8f9d614543194668211d5c4662fd92931daec956e1fa89a2bb5d5934834ca8fb8f28d80b93189412154e198edb0667651cf4804e3bce5a46d5e06a714edc87fa4cb241649b5941607907c03a6958725496c414e22ff5ffdaa561b2bb255d59035c6243", 0xdb}, {&(0x7f0000000440)="caa06e2bd6e8d01d73312a00069b9c19ced7bb44d41a29200b8d4ea91db914e70f33b2b7e0cd0c4ac4efe75ff623be49286339a706fe9e557bd8a1d6fb83be12f029542897b87c29fe3c16494dbd6e9fbda2316ce36a3f6fa41ca943814cf1271fad0a2c938060bef8491131255226310848968fb9df109a96b3", 0x7a}, {&(0x7f00000004c0)="0521c9ea88b068c3b211bd68866d2740858994a0673c60c53f4876d6472075666c807ab8abee858c7e3c7f5292bbc2a25cb071ca54ca259bd20b4df41e46564ed807efa0b00fbeb1132292eb30cbd8693e4a5144d100d1e0765bdc65f289fbbb8b44fdda7ca90c2efd15bce7d37cb637fe167362c576842b63210a9158f87a52efe56f85cdeaf221fcbefb6e32287bb89f3689aac5dfe11c90c1b79fb6500fcbffc4d0", 0xa3}], 0x3, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @loopback}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x92, 0x0, 0x4, [0x6b0, 0x8, 0x1, 0x4, 0x2, 0xfff, 0x8, 0x4]}, @generic={0x89, 0x6, "0967d182"}, @timestamp_prespec={0x44, 0x34, 0x18, 0x3, 0x2, [{@multicast1, 0x20}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xde29}, {@local, 0xc2}, {@local, 0xa}, {@multicast1}]}, @generic={0x82, 0xe, "bdc7265f57db898a2e5ae834"}, @generic={0x5, 0x6, "1bb44455"}, @cipso={0x86, 0x1d, 0x0, [{0x2, 0x2}, {0x2, 0x2}, {0x0, 0xe, "ae07c2d134e96e12412a4326"}, {0x7, 0x5, "864bb8"}]}, @timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0x0, [{@loopback, 0x3}, {@multicast1, 0x4}]}, @timestamp_addr={0x44, 0xc, 0xcc, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x80, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x42, [@local, @broadcast, @empty]}, @end, @timestamp_addr={0x44, 0x2c, 0xf2, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x152}]}, @lsrr={0x83, 0x1b, 0x39, [@rand_addr=0x64010100, @loopback, @local, @multicast1, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x0, [{@multicast2, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x89, 0x1, 0x7, [{@empty, 0x9}]}]}}}], 0x1f0}}, {{&(0x7f0000000780)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000980)="ece2b2a6a97ea5d6dc55d2e404559bd8238a1f2100dc5748373497c2d5c53fd09cfc9c9c90f46ecbd4fd1aa6b7665ca203a89abf40b64ca6e0a4e1754db8c41984271cf5b0834cef7998d9603821b1026789a60f9e7ab8e5a5799a10ff3e9f0e2b51780c4f21bc8d05cb2e96e92c47d96a4939b2e4cc18fb768d11bd50dc90863c259fe93c04f8f47d61ce162b8ed47fe0868988b2fc3642d54362c6e8417a643732880861c6409e378193f352bdabb6c2a3fa9e970590e30bb190b0d249f066476f10a3bf276ab74d29", 0xca}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010100}}}], 0x20}}], 0x2, 0x8000)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r12 = socket(0x10, 0x3, 0x8)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5701d560f12e085e0ad86b01e47ce0b3279b5dd036b5ab6f6315c14cdefcb5a2914954df4d3917d0aab59e2d070134d7804e7e092cea362c4d4ea9fe76561a5ad33a5d4d62a87951d3d0b72ceb759e36690c7f3d5d8d2521d95d7fd5c721f5bebe3d4d373441c7db5ab39d829b280ee560b50b2cd38f145caddbac0dea61c8d86007f933a210e84838eb90a72770416d6f6529b9147b255f2dacf54b826b5cdfa8f839869840b4915165d047d398f9002293a412c2882d1f3b0db30bd00e49976edf8e5ceecd686cd82e77f8b464ed3cd380504deac9f0270fa674d84c0f27898472ff93d3284c"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r13 = getuid()
bind$can_j1939(r12, &(0x7f0000000e00)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
setsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@private2, @in=@multicast1, 0x4e20, 0x0, 0x4e22, 0x6, 0xa, 0x180, 0x80, 0x0, 0x0, r13}, {0x8000000000000000, 0x9, 0xa, 0xed, 0x6, 0x7, 0x2, 0x9}, {0x200, 0x7f, 0x5, 0x2}, 0x80000000, 0x6e6bb2, 0x0, 0x1, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 0x3, 0x1, 0x8, 0x1, 0x71f9}}, 0xe8)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r12)
sendmsg$ETHTOOL_MSG_RINGS_SET(r12, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000c00)={0x54, r14, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xc89c}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffc01}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x65)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=r6, @ANYBLOB="fffffffed9526cfd8400128009000100766cea5fbe7872dd5a21ac55bb8f78616e000000007400028006000100000600000c000200367da1650e000000280003803000010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff030000e5fe8c8f82b3fe9c080000000c00010004000000020000004ce3e5ee0c0001000500000003000000571e6c85749938bdb5a0270d7e005b1a6c507d0eedc6257080174bf46450ec1293acdfbc6de4b8a920a3f720d23eed27d1f97345c0f958021d37aaf8106566c7", @ANYRES32=r7], 0xb4}}, 0x0)

1.083832214s ago: executing program 1 (id=7995):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0x7f, 0x10, 0xa, 0x45}, 0x6)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x888}, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
unshare(0x20000400)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3)
connect$tipc(r6, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r5, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f00000002c0)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0cc1f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf878673ca6bc8e7cb321e3f79552114e9bd518507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0xa0}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001100), &(0x7f0000001140)=0x4)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xbf44, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0xffffffffffffff5f)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="6346f89332b853b5b633c9000028", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

1.047625771s ago: executing program 2 (id=7996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000ef000000000000000000008da93c41c3aa1c43c00000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000500270002000000140035006d6163766c616e300000000000000000"], 0x3c}}, 0x8000)

901.398753ms ago: executing program 3 (id=7997):
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc48d2}, 0x0)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b", 0x5}], 0x1}}], 0x1, 0x20008000)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000780), 0x0)
recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0xb00000000065808, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x7, 0xffff}, {0xa, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x7}}]}, 0x2c}}, 0x20000040)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0)
close(0xffffffffffffffff)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1100000000f336, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000180)=0x38)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r3, 0xe6905000)

895.575631ms ago: executing program 2 (id=7998):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r6], 0x28}}, 0x0)

660.980842ms ago: executing program 2 (id=7999):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={<r5=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private0}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r5], 0x18)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000060800000000000000000000950000000000000007fe7796c18f9b3c4998f04fab5b3a6fe9c66e740de6358663ec6b5cb62b3188245068b286a4b5002ce5f80b5bd0c4b543bad371b0fb5755d20e324d34ad95ac66a61090735256aec5404e8b48cc55a9010e6591ce80d48a7d760442b6ef9f22b5bc1af9841ad8963a7eaecfd136f1d0916f5cfb2da10b6ff7d961992f5d6e98a459642d6ad18150785187efd4717f6a5ab0c04a174079aee453bc6321e463da1bb00562b012ce0af313ce8941fa0769a3d6c52427a3462c4ec834f636617d41506318fffe020df2b9794712b9f5c8c27d02819aae01cdef54011149870dd5a0a7894aa11c89fecbf6efd16b0fe40b2a3830b67c829634978cfb5fa9342efdd8e57c710361b336202f5b746470620ad2a8f98aa909da65c836feffffff53cd5cb21e4fd1f4267242ee86d01b42e9897a2b8082096fa3c6cbe7ff22a98d43a9cc8722f1ca0898c43fa3ad10c74a"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x9, 0x880}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r10=>0x0})
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x29, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x2], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14)
setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r10}, 0x14)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10)

349.114385ms ago: executing program 2 (id=8000):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)

303.572179ms ago: executing program 4 (id=8001):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992e05400c2", 0x10)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x1d)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0xd, 0x8, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

163.659312ms ago: executing program 2 (id=8002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x1cc, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x1c82, 0x5, 0x3, 0x8001, 0x7, 0xbaf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x5}, {0x5, 0x1}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x2, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x3}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x2}, {0x2, 0x2}, {0x2, 0x3}, {0x1, 0x7}, {0x3, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x8}, {0x7, 0x3}]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x7, 0x0, 0x7, 0x1c9, 0x1, 0x9b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd6c5, 0xe9, 0x9, 0x10, 0x6, 0xff2b, 0x4, 0xd42]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x6b, 0x3, 0x24, 0x24, 0x60, 0x18, 0x1b, 0x18, 0x36, 0x60, 0x60, 0x12, 0xb, 0x0, 0x5, 0x30, 0x3, 0xc, 0x12, 0x12]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x21, 0x6, 0x24, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x3, 0x6, 0x0, 0x81, 0x6, 0x29]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x2}, {}, {0x4, 0x3}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0x5}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x1}, {0x7, 0xa}, {}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7, 0x18}, {0x1, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc6, 0x6, 0x4, 0xdd0d, 0xf000, 0x1000, 0x4]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x3}, {0x6}, {}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x36, 0x6fba14e0ccf6dfc0, 0x5, 0xb, 0x12, 0x1, 0x2, 0x9, 0x2, 0x16, 0x9, 0x4, 0xb, 0x16, 0x4, 0x1, 0x9, 0xc, 0x30, 0x30, 0x2, 0x2f, 0x6, 0x30, 0xc, 0x48, 0xc, 0x14, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc2, 0x0, 0x5d2f, 0x8245, 0x7, 0x6, 0xb]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x3, 0x25, 0x1b, 0xc, 0xc, 0x16, 0x5, 0x12, 0x24, 0x48, 0x24, 0x36, 0x1, 0x50, 0x36, 0x6, 0x1, 0x24, 0x36, 0x5, 0x24, 0xc, 0x1b, 0x4, 0x98, 0x36, 0x4, 0x60, 0x4, 0xc, 0x43]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x4000040)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x124, 0x0, 0x200, 0x5, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}]]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000180)=r6)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000340)={<r13=>r12})
write$bt_hci(r13, 0x0, 0x0)
sendto$packet(r11, &(0x7f0000000140)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES64=r14, @ANYRES16=r14, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0)

112.831131ms ago: executing program 1 (id=8003):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @null, @bpq0, 0x8, 'syz1\x00', @null, 0xfff, 0x3, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r3}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x0, @null, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) (async)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x0, @null, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000040)=[{0x40, 0x1, 0x7, 0x4}, {0x28, 0x4, 0x5, 0xfffff038}, {0x6, 0x27, 0x2, 0xffffddc1}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000040)=[{0x40, 0x1, 0x7, 0x4}, {0x28, 0x4, 0x5, 0xfffff038}, {0x6, 0x27, 0x2, 0xffffddc1}]}, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000040)={@void, @val={0x1, 0x4, 0x9e6, 0x5f0, 0x7, 0x2}, @llc={@snap={0x154, 0x0, "7f18", '\x00\x00\b', 0x15}}}, 0x13)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2200a094}, 0x20044000)

83.05979ms ago: executing program 4 (id=8004):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000500626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x1, 0x6}}, 0x20)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
writev(r10, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1)
writev(r10, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2)
syz_emit_ethernet(0x3a, &(0x7f00000016c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "1976df", 0x0, 0x32, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}}}}, 0x0)
getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

2.340386ms ago: executing program 0 (id=8005):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10)
bind$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10) (async)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x3c, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x6, 0x5ca, @vifc_lcl_addr=@empty, @empty}, 0x10) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)={'security\x00', 0x0, [0x3, 0xe4cd, 0x0, 0xf0, 0x5]}, &(0x7f0000000140)=0x54)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x4040004)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff000000000000040085000000b5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 3 (id=8006):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000164000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x21f42000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d00010021bdf000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="80007e0a0a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040004)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="98010000", @ANYRES16=r2, @ANYBLOB="00032cbd7000fedbdf2507000000900001801400020070696d367265670000000000000000001400020077673000000000000000000000000000140002007465616d5f736c6176655f3100000000080003000200000014000200626f6e643000000000000000000000000800030002000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\"\x00', @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3100000000000000000c0001800800030001000000200001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r4, @ANYBLOB="8400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e30000000000000140002006970766c616e31000000000000000000140002006272696467655f736c6176655f3100001400020064766d7270300000000000000000000014000200677265300000000000000000000000001400020073797a5f74756e0000000000000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f77696669300000000000001400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x10004000}, 0x4000000)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80)
sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000)
sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000001240)={0x67c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x61b6}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff21b}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xa, 0x9, 0xf9, 0x8}, {0x2, 0x7, 0x2f, 0x4}, {0x5, 0x3, 0x74, 0xa}, {0xffff, 0x4, 0x2, 0x1fe}, {0xff, 0x0, 0x9, 0x3}, {0x7fff, 0x3, 0x1e, 0x9}, {0xaf4, 0x8, 0x2, 0x8}, {0x7, 0x0, 0x2, 0x4}, {0x7, 0x81, 0xb7, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x67c}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}], 0x1, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x7}})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000140), 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffff9, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xffff}, {0x4}, {0xe, 0xfffb}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x890)

kernel console output (not intermixed with test programs):

ions may not be safe on all matching packets.
[ 1180.012851][T31855] netlink: 'syz.0.6498': attribute type 1 has an invalid length.
[ 1180.109409][T31858] macvlan2: entered promiscuous mode
[ 1180.121510][T31862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6500'.
[ 1180.162690][T31858] macvlan2: entered allmulticast mode
[ 1180.202140][T31858] bond2: entered promiscuous mode
[ 1180.208364][T31858] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1180.269144][T31858] bond2: left promiscuous mode
[ 1180.296438][T31867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1180.375618][T31842] virt_wifi0 speed is unknown, defaulting to 1000
[ 1180.425231][T31842] ªªªªª9 speed is unknown, defaulting to 1000
[ 1180.457376][T31872] xt_hashlimit: size too large, truncated to 1048576
[ 1180.484440][T31842] xfrm0 speed is unknown, defaulting to 1000
[ 1181.080018][T31892] geneve2: entered promiscuous mode
[ 1181.342715][T31906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6512'.
[ 1181.394751][T31911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6512'.
[ 1181.504744][T31908] wg1 speed is unknown, defaulting to 1000
[ 1182.245526][T31936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6520'.
[ 1182.290755][T31936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6520'.
[ 1182.310025][T31936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6520'.
[ 1182.333468][T31944] xt_hashlimit: size too large, truncated to 1048576
[ 1182.532274][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL
[ 1182.538727][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[ 1182.840049][T31908] virt_wifi0 speed is unknown, defaulting to 1000
[ 1182.867795][T31908] ªªªªª9 speed is unknown, defaulting to 1000
[ 1182.889658][T31908] xfrm0 speed is unknown, defaulting to 1000
[ 1183.264569][T31971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1183.405168][T31977] xt_l2tp: unknown flags: 51
[ 1184.192888][T31983] syzkaller0: entered promiscuous mode
[ 1184.206942][T31983] syzkaller0: entered allmulticast mode
[ 1184.251914][T31983] 0: reclassify loop, rule prio 0, protocol 700
[ 1184.455474][T31992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6535'.
[ 1184.491460][T31992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6535'.
[ 1184.706510][T32000] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6538'.
[ 1184.827344][T32000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6538'.
[ 1184.864935][T31997] xt_hashlimit: size too large, truncated to 1048576
[ 1185.967808][T32053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6549'.
[ 1186.335154][T32067] IPVS: set_ctl: invalid protocol: 35532 10.1.1.1:20001
[ 1186.352086][ T7456] IPVS: starting estimator thread 0...
[ 1186.383861][T32067] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1186.413246][T32067] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1186.472394][T32068] IPVS: using max 24 ests per chain, 57600 per kthread
[ 1186.607725][T32077] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1186.618915][T32076] xt_hashlimit: size too large, truncated to 1048576
[ 1186.835824][T32082] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[ 1186.849516][T32082] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[ 1186.868063][T32082] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[ 1187.075278][T32095] __nla_validate_parse: 1 callbacks suppressed
[ 1187.075300][T32095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6562'.
[ 1187.078704][T32098] netlink: 'syz.3.6563': attribute type 1 has an invalid length.
[ 1187.101334][T32095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6562'.
[ 1187.252128][T32098] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1187.353928][T32111] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6564'.
[ 1187.359228][T32110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6565'.
[ 1187.493932][T32117] netlink: 'syz.3.6567': attribute type 6 has an invalid length.
[ 1187.499452][T32119] netlink: 'syz.3.6567': attribute type 6 has an invalid length.
[ 1187.524136][T32100] netlink: set zone limit has 4 unknown bytes
[ 1187.960617][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms
[ 1187.968681][    C0] lec:lec_tx_timeout: lec0
[ 1188.088869][T32134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6571'.
[ 1188.179210][T32136] IPv6: sit3: Disabled Multicast RS
[ 1188.356901][T32144] netlink: 'syz.3.6574': attribute type 15 has an invalid length.
[ 1188.382545][T32144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6574'.
[ 1188.423266][T32143] wg1 speed is unknown, defaulting to 1000
[ 1188.516640][T32149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6575'.
[ 1188.615802][T32158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6575'.
[ 1188.662803][T32153] xt_hashlimit: size too large, truncated to 1048576
[ 1188.697797][T32157] wg1 speed is unknown, defaulting to 1000
[ 1189.359714][T32143] virt_wifi0 speed is unknown, defaulting to 1000
[ 1189.389736][T32143] ªªªªª9 speed is unknown, defaulting to 1000
[ 1189.588490][T32143] xfrm0 speed is unknown, defaulting to 1000
[ 1189.723083][ T5825] Bluetooth: hci5: command 0x0406 tx timeout
[ 1189.931996][T32188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6589'.
[ 1189.968159][T32189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6588'.
[ 1190.103038][T22919] IPVS: starting estimator thread 0...
[ 1190.202791][T32195] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1190.221580][T32157] virt_wifi0 speed is unknown, defaulting to 1000
[ 1190.241785][T32157] ªªªªª9 speed is unknown, defaulting to 1000
[ 1190.386960][T32157] xfrm0 speed is unknown, defaulting to 1000
[ 1190.416429][T32200] netlink: 'syz.0.6593': attribute type 9 has an invalid length.
[ 1190.708649][T32208] netlink: 'syz.0.6594': attribute type 21 has an invalid length.
[ 1190.768301][T32209] syzkaller0: entered promiscuous mode
[ 1190.823842][T32209] syzkaller0: entered allmulticast mode
[ 1190.852644][T32205] vlan2: entered promiscuous mode
[ 1190.857806][T32205] geneve1: entered promiscuous mode
[ 1190.891091][T32205] vlan2: entered allmulticast mode
[ 1190.898883][T32205] geneve1: entered allmulticast mode
[ 1191.398347][T32214] syzkaller0: entered promiscuous mode
[ 1191.413129][T32214] syzkaller0: entered allmulticast mode
[ 1192.442145][ T5143] Bluetooth: hci1: command tx timeout
[ 1192.645902][T32254] __nla_validate_parse: 6 callbacks suppressed
[ 1192.645935][T32254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6606'.
[ 1192.976045][T32263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6607'.
[ 1193.034139][T32263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6607'.
[ 1193.469518][T32280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6613'.
[ 1193.509556][T32282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6614'.
[ 1193.616466][T32288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6616'.
[ 1193.798713][T32296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6619'.
[ 1193.828743][T32291] wg1 speed is unknown, defaulting to 1000
[ 1194.043074][T32309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6621'.
[ 1194.344307][T32314] wg1 speed is unknown, defaulting to 1000
[ 1194.416415][T32321] syzkaller1: entered promiscuous mode
[ 1194.425436][T32321] syzkaller1: entered allmulticast mode
[ 1194.454219][T32321] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6624'.
[ 1194.550088][T32291] virt_wifi0 speed is unknown, defaulting to 1000
[ 1194.562368][T32291] ªªªªª9 speed is unknown, defaulting to 1000
[ 1194.578590][T32291] xfrm0 speed is unknown, defaulting to 1000
[ 1194.887114][T32332] netlink: 'syz.1.6627': attribute type 1 has an invalid length.
[ 1195.039357][T32332] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1195.078398][T32336] bond1: (slave syz_tun): making interface the new active one
[ 1195.114697][T32336] bond1: (slave syz_tun): Enslaving as an active interface with an up link
[ 1195.189420][T19384] lec:lec_start_xmit: lec0:No lecd attached
[ 1195.307049][T32344] netlink: 'syz.2.6630': attribute type 1 has an invalid length.
[ 1195.415782][T32344] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1195.462194][T32350] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[ 1195.521114][T32314] virt_wifi0 speed is unknown, defaulting to 1000
[ 1195.599664][T32314] ªªªªª9 speed is unknown, defaulting to 1000
[ 1195.624140][T32314] xfrm0 speed is unknown, defaulting to 1000
[ 1195.992687][T32362] syzkaller1: entered promiscuous mode
[ 1195.998226][T32362] syzkaller1: entered allmulticast mode
[ 1196.154265][T32365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1196.233642][T32366] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.6635'.
[ 1196.669264][T32375] wg1 speed is unknown, defaulting to 1000
[ 1197.397879][T32375] virt_wifi0 speed is unknown, defaulting to 1000
[ 1197.409973][T32388] wg1 speed is unknown, defaulting to 1000
[ 1197.471560][T32375] ªªªªª9 speed is unknown, defaulting to 1000
[ 1197.553725][T32375] xfrm0 speed is unknown, defaulting to 1000
[ 1197.757555][T32392] ip6tnl1: entered promiscuous mode
[ 1197.917826][T32388] virt_wifi0 speed is unknown, defaulting to 1000
[ 1197.929285][T32388] ªªªªª9 speed is unknown, defaulting to 1000
[ 1198.364788][T32392] Bluetooth: MGMT ver 1.23
[ 1198.476045][T32388] xfrm0 speed is unknown, defaulting to 1000
[ 1198.866392][T32399] __nla_validate_parse: 2 callbacks suppressed
[ 1198.866413][T32399] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6642'.
[ 1199.749392][T32413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6646'.
[ 1199.767020][T32414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6645'.
[ 1199.985000][T32420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6647'.
[ 1201.000718][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms
[ 1201.008927][    C0] lec:lec_tx_timeout: lec0
[ 1201.503235][T32454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6658'.
[ 1201.624827][T32456] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6657'.
[ 1201.674834][T32459] netlink: 'syz.1.6659': attribute type 1 has an invalid length.
[ 1201.682520][T32460] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6657'.
[ 1201.702914][T32459] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6659'.
[ 1202.218427][T32488] syzkaller0: entered promiscuous mode
[ 1202.239901][T32488] syzkaller0: entered allmulticast mode
[ 1202.270384][T32495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6668'.
[ 1202.327649][T32499] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6666'.
[ 1202.527003][T32495] bond0: entered promiscuous mode
[ 1202.537046][T32495] bond_slave_0: entered promiscuous mode
[ 1202.561004][T32495] bond_slave_1: entered promiscuous mode
[ 1202.582055][T32495] bridge0: entered promiscuous mode
[ 1202.601837][T32495] gretap0: entered promiscuous mode
[ 1202.624466][T32495] debugfs: 'hsr1' already exists in 'hsr'
[ 1202.643734][T32495] Cannot create hsr debugfs directory
[ 1202.651948][T32495] hsr1: entered promiscuous mode
[ 1202.659960][T32503] syzkaller1: entered promiscuous mode
[ 1202.672689][T32503] syzkaller1: entered allmulticast mode
[ 1202.684028][T32492] wg1 speed is unknown, defaulting to 1000
[ 1202.804375][T32510] syzkaller0: entered promiscuous mode
[ 1202.810018][T32510] syzkaller0: entered allmulticast mode
[ 1203.492522][T32535] netlink: 'syz.3.6676': attribute type 1 has an invalid length.
[ 1203.645452][T32538] gretap1: entered allmulticast mode
[ 1203.656953][T32538] bond5: (slave gretap1): making interface the new active one
[ 1203.669677][T32538] bond5: (slave gretap1): Enslaving as an active interface with an up link
[ 1203.714761][T32492] virt_wifi0 speed is unknown, defaulting to 1000
[ 1203.725966][T32547] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.733646][T32547] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.820202][T32492] ªªªªª9 speed is unknown, defaulting to 1000
[ 1203.846430][T32492] xfrm0 speed is unknown, defaulting to 1000
[ 1204.477433][T32565] wg1 speed is unknown, defaulting to 1000
[ 1205.238166][T32565] virt_wifi0 speed is unknown, defaulting to 1000
[ 1205.259768][T32565] ªªªªª9 speed is unknown, defaulting to 1000
[ 1205.278346][T32580] tap0: tun_chr_ioctl cmd 1074025673
[ 1205.285617][T32579] tap0: tun_chr_ioctl cmd 2147767506
[ 1205.340362][T32565] xfrm0 speed is unknown, defaulting to 1000
[ 1205.478827][T32588] __nla_validate_parse: 7 callbacks suppressed
[ 1205.478847][T32588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6689'.
[ 1205.634126][T32591] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6690'.
[ 1205.680226][T32593] netlink: 'syz.2.6691': attribute type 89 has an invalid length.
[ 1205.873054][T32585] wg1 speed is unknown, defaulting to 1000
[ 1206.548715][T32603] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6694'.
[ 1206.806558][T32585] virt_wifi0 speed is unknown, defaulting to 1000
[ 1206.842949][T32585] ªªªªª9 speed is unknown, defaulting to 1000
[ 1206.889224][T32585] xfrm0 speed is unknown, defaulting to 1000
[ 1207.305608][T32617] IPv6: addrconf: prefix option has invalid lifetime
[ 1207.313238][T32617] IPv6: addrconf: prefix option has invalid lifetime
[ 1208.666512][T32639] geneve2: entered promiscuous mode
[ 1209.278599][T32653] bond1 (unregistering): Released all slaves
[ 1210.047337][T32680] team0: Port device bridge1 added
[ 1210.064411][T32690] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6717'.
[ 1210.083092][T32686] xt_hashlimit: size too large, truncated to 1048576
[ 1210.135495][T32690] netlink: 'syz.3.6717': attribute type 3 has an invalid length.
[ 1210.218454][T32683] wg1 speed is unknown, defaulting to 1000
[ 1210.247051][T32690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6717'.
[ 1210.602031][T32699] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.6719'.
[ 1211.192828][T32683] virt_wifi0 speed is unknown, defaulting to 1000
[ 1211.216531][T32683] ªªªªª9 speed is unknown, defaulting to 1000
[ 1211.261990][T32683] xfrm0 speed is unknown, defaulting to 1000
[ 1211.302813][T32720] netlink: 'syz.3.6723': attribute type 1 has an invalid length.
[ 1211.322084][T32720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6723'.
[ 1211.647911][T32724] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1211.668502][T32724] xt_hashlimit: size too large, truncated to 1048576
[ 1211.686338][T32724] xt_hashlimit: overflow, try lower: 0/0
[ 1212.563343][T32743] bpq0: left promiscuous mode
[ 1212.612726][T32743] bpq0: left allmulticast mode
[ 1212.647151][T32739] xt_hashlimit: size too large, truncated to 1048576
[ 1213.783966][  T307] netlink: 'syz.1.6739': attribute type 2 has an invalid length.
[ 1214.134914][  T323] netlink: 'syz.0.6743': attribute type 10 has an invalid length.
[ 1214.237840][  T323] team0: Port device dummy0 added
[ 1214.259686][  T333] netlink: 'syz.4.6745': attribute type 1 has an invalid length.
[ 1214.437118][  T337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6747'.
[ 1214.474722][  T325] veth0: entered promiscuous mode
[ 1214.484388][  T325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6744'.
[ 1214.616983][  T324] veth0: left promiscuous mode
[ 1214.658271][  T342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1214.668007][  T342] syzkaller0: entered promiscuous mode
[ 1214.682692][  T342] syzkaller0: entered allmulticast mode
[ 1214.706997][  T342] tipc: Resetting bearer <eth:syzkaller0>
[ 1214.756928][  T341] tipc: Resetting bearer <eth:syzkaller0>
[ 1214.820336][  T341] tipc: Disabling bearer <eth:syzkaller0>
[ 1214.885322][  T350] dvmrp0: entered allmulticast mode
[ 1214.936956][  T358] wg1 speed is unknown, defaulting to 1000
[ 1214.976775][  T345] netlink: 'syz.2.6751': attribute type 2 has an invalid length.
[ 1215.126349][  T366] netlink: 'syz.4.6756': attribute type 1 has an invalid length.
[ 1215.174110][T31968] IPVS: starting estimator thread 0...
[ 1215.187823][  T366] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6756'.
[ 1215.253537][  T362] netlink: 'syz.4.6756': attribute type 1 has an invalid length.
[ 1215.265090][  T362] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6756'.
[ 1215.289295][  T371] netlink: 47 bytes leftover after parsing attributes in process `syz.1.6758'.
[ 1215.315162][  T368] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1215.530220][  T378] netlink: 'syz.4.6761': attribute type 8 has an invalid length.
[ 1215.570781][  T378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6761'.
[ 1215.874274][  T358] virt_wifi0 speed is unknown, defaulting to 1000
[ 1215.892490][  T358] ªªªªª9 speed is unknown, defaulting to 1000
[ 1215.921447][  T358] xfrm0 speed is unknown, defaulting to 1000
[ 1216.435278][  T407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6768'.
[ 1216.476490][  T407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6768'.
[ 1216.978292][  T429] netlink: 64106 bytes leftover after parsing attributes in process `syz.4.6770'.
[ 1220.224560][  T434] netlink: 356 bytes leftover after parsing attributes in process `syz.3.6772'.
[ 1220.236126][  T434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6772'.
[ 1220.265787][  T434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6772'.
[ 1220.297749][  T434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6772'.
[ 1220.392991][  T435] tipc: Started in network mode
[ 1220.398052][  T435] tipc: Node identity 32192c026dd1, cluster identity 4711
[ 1220.443147][  T434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6772'.
[ 1220.452550][  T435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1220.464669][  T435] lo: entered allmulticast mode
[ 1220.489929][  T435] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6773'.
[ 1220.544856][  T435] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6773'.
[ 1220.757666][  T432] tipc: Disabling bearer <eth:syzkaller0>
[ 1221.189946][  T464] ip6t_rpfilter: unknown options
[ 1221.323639][  T471] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1221.449220][  T474] __nla_validate_parse: 4 callbacks suppressed
[ 1221.449244][  T474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6782'.
[ 1221.609794][  T480] netlink: 'syz.4.6784': attribute type 2 has an invalid length.
[ 1221.618772][  T480] netlink: 'syz.4.6784': attribute type 1 has an invalid length.
[ 1221.652872][  T481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6782'.
[ 1221.712937][  T484] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 1221.728694][  T481] vlan3: entered promiscuous mode
[ 1222.146351][  T497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6788'.
[ 1222.173475][  T497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6788'.
[ 1222.356342][  T514] netlink: 'syz.1.6792': attribute type 15 has an invalid length.
[ 1222.415250][  T514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6792'.
[ 1222.435260][  T518] netlink: 'syz.1.6792': attribute type 11 has an invalid length.
[ 1222.548523][T11027] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[ 1222.557879][  T514] netlink: 'syz.1.6792': attribute type 15 has an invalid length.
[ 1222.603234][  T522] tipc: Started in network mode
[ 1222.608284][  T514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6792'.
[ 1222.626328][  T522] tipc: Node identity 22d323df8153, cluster identity 4711
[ 1222.636622][  T522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1222.646281][T11027] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[ 1222.668018][T11027] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[ 1222.690284][T11027] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[ 1222.721089][  T519] syzkaller0: entered promiscuous mode
[ 1222.728286][  T519] syzkaller0: entered allmulticast mode
[ 1222.753405][  T523] wg1 speed is unknown, defaulting to 1000
[ 1222.799341][  T529] sock: sock_set_timeout: `syz.1.6796' (pid 529) tries to set negative timeout
[ 1222.849945][  T524] tipc: Started in network mode
[ 1222.866056][  T524] tipc: Node identity 1aaa3510b75c, cluster identity 4711
[ 1222.874802][  T524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1222.901489][  T534] tipc: Resetting bearer <eth:syzkaller0>
[ 1222.951830][  T517] tipc: Resetting bearer <eth:syzkaller0>
[ 1222.985481][  T526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6795'.
[ 1223.009384][  T541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6798'.
[ 1223.069770][  T541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6798'.
[ 1223.123542][  T541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6798'.
[ 1223.224929][  T517] tipc: Disabling bearer <eth:syzkaller0>
[ 1223.259759][  T524] tipc: Resetting bearer <eth:syzkaller0>
[ 1223.416130][  T521] tipc: Disabling bearer <eth:syzkaller0>
[ 1223.429253][  T548] sctp: [Deprecated]: syz.1.6800 (pid 548) Use of int in max_burst socket option deprecated.
[ 1223.429253][  T548] Use struct sctp_assoc_value instead
[ 1223.515551][  T523] virt_wifi0 speed is unknown, defaulting to 1000
[ 1223.543185][  T523] ªªªªª9 speed is unknown, defaulting to 1000
[ 1223.576636][  T523] xfrm0 speed is unknown, defaulting to 1000
[ 1223.588460][  T552] netlink: 'syz.4.6802': attribute type 1 has an invalid length.
[ 1223.623631][  T552] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1224.492392][  T584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1224.645046][  T588] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1224.734611][  T586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1225.095184][  T603] syzkaller1: entered promiscuous mode
[ 1225.137210][  T603] syzkaller1: entered allmulticast mode
[ 1226.644569][  T665] __nla_validate_parse: 10 callbacks suppressed
[ 1226.644599][  T665] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6829'.
[ 1226.674649][  T663] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6831'.
[ 1226.723042][  T669] vcan0: tx drop: invalid sa for name 0x0000080000000000
[ 1226.776193][  T669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6832'.
[ 1226.871391][  T672] openvswitch: netlink: Message has 4 unknown bytes.
[ 1226.943880][  T675] IPVS: length: 132 != 8
[ 1227.037831][  T672] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1227.050042][  T678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1227.079465][  T672] dvmrp0: entered allmulticast mode
[ 1227.087132][  T678] netlink: 'syz.0.6833': attribute type 2 has an invalid length.
[ 1227.117110][  T678] netlink: 'syz.0.6833': attribute type 1 has an invalid length.
[ 1227.164093][  T683] syzkaller0: entered promiscuous mode
[ 1227.169717][  T683] syzkaller0: entered allmulticast mode
[ 1227.254978][  T690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6838'.
[ 1227.268910][  T687] hsr0: entered promiscuous mode
[ 1227.289346][  T678] tipc: Resetting bearer <eth:syzkaller0>
[ 1227.306549][  T690] hsr_slave_0: left promiscuous mode
[ 1227.317174][  T690] hsr_slave_1: left promiscuous mode
[ 1227.409759][  T690] hsr0 (unregistering): left promiscuous mode
[ 1227.482472][  T673] tipc: Resetting bearer <eth:syzkaller0>
[ 1227.532700][  T673] tipc: Disabling bearer <eth:syzkaller0>
[ 1227.742695][  T710] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6841'.
[ 1227.760953][  T711] netlink: 'syz.0.6842': attribute type 8 has an invalid length.
[ 1228.396683][  T710] netlink: 'syz.2.6841': attribute type 21 has an invalid length.
[ 1228.518120][  T729] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[ 1228.693314][  T729] bond3 (unregistering): Released all slaves
[ 1228.768763][  T743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6851'.
[ 1228.825692][  T749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6851'.
[ 1228.841314][  T710] netlink: 'syz.2.6841': attribute type 1 has an invalid length.
[ 1228.869747][  T710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6841'.
[ 1228.892184][  T751] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6852'.
[ 1229.159763][  T755] xt_hashlimit: size too large, truncated to 1048576
[ 1229.285162][  T764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6854'.
[ 1230.046222][  T779] wg1 speed is unknown, defaulting to 1000
[ 1230.263600][  T792] wg1 speed is unknown, defaulting to 1000
[ 1230.449442][T31397] IPVS: starting estimator thread 0...
[ 1230.459772][  T802] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[ 1230.562000][  T803] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1230.712343][  T779] virt_wifi0 speed is unknown, defaulting to 1000
[ 1230.736252][  T779] ªªªªª9 speed is unknown, defaulting to 1000
[ 1230.770505][  T779] xfrm0 speed is unknown, defaulting to 1000
[ 1230.869559][  T809] xt_hashlimit: size too large, truncated to 1048576
[ 1231.574961][  T792] virt_wifi0 speed is unknown, defaulting to 1000
[ 1231.603144][  T792] ªªªªª9 speed is unknown, defaulting to 1000
[ 1231.648563][  T792] xfrm0 speed is unknown, defaulting to 1000
[ 1231.825091][  T826] __nla_validate_parse: 5 callbacks suppressed
[ 1231.825113][  T826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6869'.
[ 1232.278738][  T840] netlink: 'syz.4.6872': attribute type 64 has an invalid length.
[ 1232.507755][  T842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6873'.
[ 1232.533206][  T842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6873'.
[ 1232.562488][  T842] netlink: 'syz.2.6873': attribute type 6 has an invalid length.
[ 1232.570288][  T842] netlink: 'syz.2.6873': attribute type 5 has an invalid length.
[ 1232.668793][  T842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6873'.
[ 1232.679256][ T3504] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1232.701943][  T842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6873'.
[ 1232.722420][  T842] netlink: 'syz.2.6873': attribute type 6 has an invalid length.
[ 1232.731090][ T3504] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1232.749101][ T3504] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1232.761153][  T842] netlink: 'syz.2.6873': attribute type 5 has an invalid length.
[ 1232.791913][  T844] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6874'.
[ 1232.811780][  T844] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6874'.
[ 1232.883385][ T3504] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1233.345142][  T854] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6875'.
[ 1233.758969][  T863] xt_hashlimit: size too large, truncated to 1048576
[ 1234.383479][  T882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6880'.
[ 1234.975048][  T914] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6889'.
[ 1235.046736][  T911] netlink: 'syz.2.6888': attribute type 13 has an invalid length.
[ 1235.091378][  T917] syzkaller0: entered promiscuous mode
[ 1235.097252][  T917] syzkaller0: entered allmulticast mode
[ 1235.338142][  T935] xt_hashlimit: size too large, truncated to 1048576
[ 1236.535957][T28152] page_pool_release_retry() stalled pool shutdown: id 238, 1 inflight 60 sec
[ 1239.927093][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1239.938356][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.948869][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1239.960060][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1240.091735][  T975] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1240.572400][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1240.605218][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1240.655348][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1240.669089][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1240.960425][ T1003] netlink: 'syz.4.6906': attribute type 5 has an invalid length.
[ 1240.976335][ T1001] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6904'.
[ 1241.036334][ T1001] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6904'.
[ 1241.068146][ T1013] netlink: 'syz.3.6904': attribute type 4 has an invalid length.
[ 1241.092882][ T1014] xt_hashlimit: size too large, truncated to 1048576
[ 1241.119703][ T1020] netlink: 'syz.3.6904': attribute type 4 has an invalid length.
[ 1241.214236][ T1001] netlink: 'syz.3.6904': attribute type 6 has an invalid length.
[ 1241.278289][ T1001] netlink: 'syz.3.6904': attribute type 5 has an invalid length.
[ 1241.334643][ T1001] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6904'.
[ 1241.642361][ T1045] netlink: 'syz.3.6914': attribute type 9 has an invalid length.
[ 1241.693008][ T1043] netlink: 'syz.3.6914': attribute type 9 has an invalid length.
[ 1241.717081][ T1043] netlink: 'syz.3.6914': attribute type 11 has an invalid length.
[ 1241.739721][ T1045] netlink: 'syz.3.6914': attribute type 11 has an invalid length.
[ 1241.775425][ T1043] netlink: 'syz.3.6914': attribute type 12 has an invalid length.
[ 1241.785653][ T1057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6916'.
[ 1241.815049][ T1045] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6914'.
[ 1241.850077][ T1045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6914'.
[ 1241.879816][ T1043] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6914'.
[ 1241.937867][ T1043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6914'.
[ 1242.188656][  T981] udevd[981]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1242.317922][ T1083] ip6gre1: entered promiscuous mode
[ 1242.334167][ T1083] ip6gre1: entered allmulticast mode
[ 1242.442929][ T1083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6922'.
[ 1242.569932][ T1084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6920'.
[ 1242.617387][T31967] IPVS: starting estimator thread 0...
[ 1242.724240][ T1097] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1242.758657][ T1084] wg1 speed is unknown, defaulting to 1000
[ 1243.570110][ T1084] virt_wifi0 speed is unknown, defaulting to 1000
[ 1243.579555][ T1084] ªªªªª9 speed is unknown, defaulting to 1000
[ 1243.588982][ T1084] xfrm0 speed is unknown, defaulting to 1000
[ 1243.902202][ T1141] xt_hashlimit: max too large, truncated to 1048576
[ 1243.910317][ T1141] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1243.973855][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL
[ 1243.990468][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[ 1244.516163][ T1150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1245.343517][ T1168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1245.350976][ T1168] IPv6: NLM_F_CREATE should be set when creating new route
[ 1245.365122][ T1168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1245.372532][ T1168] IPv6: NLM_F_CREATE should be set when creating new route
[ 1245.668218][ T1104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1245.983322][ T1182] __nla_validate_parse: 4 callbacks suppressed
[ 1245.983344][ T1182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6949'.
[ 1246.044578][ T1143] Bluetooth: hci3: command 0x0406 tx timeout
[ 1246.128664][ T1186] openvswitch: netlink: Message has 592 unknown bytes.
[ 1246.148809][ T1186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1246.253500][ T1192] validate_nla: 4 callbacks suppressed
[ 1246.253521][ T1192] netlink: 'syz.3.6952': attribute type 1 has an invalid length.
[ 1246.338037][ T1193] netlink: 'syz.2.6950': attribute type 3 has an invalid length.
[ 1246.404214][ T1192] bond6: entered promiscuous mode
[ 1246.409905][ T1192] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1246.538340][ T1204] xt_hashlimit: size too large, truncated to 1048576
[ 1246.613404][ T1197] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1246.657813][ T1197] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[ 1246.724856][ T1197] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[ 1246.794948][ T1197] bond6: (slave wireguard0): making interface the new active one
[ 1246.817441][ T1197] wireguard0: entered promiscuous mode
[ 1246.918886][ T1197] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[ 1247.017669][ T1192] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address
[ 1247.084190][ T1192] bond6: (slave wireguard1): Enslaving as a backup interface with an up link
[ 1247.116133][ T1229] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1247.743413][ T1255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6965'.
[ 1247.769815][ T1253] xt_connbytes: Forcing CT accounting to be enabled
[ 1247.770011][ T1255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6965'.
[ 1248.005287][ T1261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6967'.
[ 1248.055374][ T1264] IPv6: addrconf: prefix option has invalid lifetime
[ 1248.092327][ T1264] wg1: entered promiscuous mode
[ 1248.097338][ T1264] wg1: entered allmulticast mode
[ 1248.274591][ T1264] bridge1: entered promiscuous mode
[ 1248.294297][ T1264] bridge1: entered allmulticast mode
[ 1248.325723][ T1270] vlan1: entered allmulticast mode
[ 1248.338618][ T1270] veth0_vlan: entered allmulticast mode
[ 1248.377305][ T1265] vlan1: left allmulticast mode
[ 1248.384180][ T1265] veth0_vlan: left allmulticast mode
[ 1248.427717][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6972'.
[ 1248.621767][ T1287] netlink: 'syz.0.6975': attribute type 13 has an invalid length.
[ 1248.648028][ T1277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6973'.
[ 1248.716054][ T1275] bond0: (slave rose0): Releasing backup interface
[ 1249.003524][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1249.011765][    C0] lec:lec_tx_timeout: lec0
[ 1249.504549][ T1287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1249.542266][ T1287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1250.018814][ T1312] vlan4: entered promiscuous mode
[ 1250.029045][ T1312] vlan4: entered allmulticast mode
[ 1250.066146][ T1312] bond0: entered allmulticast mode
[ 1250.081679][ T1312] bond3: entered allmulticast mode
[ 1250.094350][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1250.138632][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1250.154833][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1250.252081][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1250.383356][ T1315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1250.482287][ T1317] syzkaller0: entered promiscuous mode
[ 1250.488022][ T1317] syzkaller0: entered allmulticast mode
[ 1250.499180][ T1315] tipc: Resetting bearer <eth:syzkaller0>
[ 1250.557296][ T1315] tipc: Resetting bearer <eth:syzkaller0>
[ 1250.670134][ T1315] tipc: Disabling bearer <eth:syzkaller0>
[ 1250.726472][ T1337] veth8: entered allmulticast mode
[ 1250.807107][ T1339] C: renamed from team_slave_0
[ 1250.855234][ T1339] netlink: 'syz.3.6986': attribute type 2 has an invalid length.
[ 1250.907266][ T1339] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6986'.
[ 1250.942364][ T1339] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1251.047357][ T1355] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1251.253350][ T1365] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004
[ 1251.283147][ T1362] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1251.389339][ T1365] netlink: 1315 bytes leftover after parsing attributes in process `syz.2.6993'.
[ 1251.661819][ T1373] wg1 speed is unknown, defaulting to 1000
[ 1251.924976][ T1398] FAULT_INJECTION: forcing a failure.
[ 1251.924976][ T1398] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.005367][ T1398] CPU: 0 UID: 0 PID: 1398 Comm: syz.0.7000 Not tainted syzkaller #0 PREEMPT(full) 
[ 1252.005396][ T1398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1252.005427][ T1398] Call Trace:
[ 1252.005436][ T1398]  <TASK>
[ 1252.005446][ T1398]  dump_stack_lvl+0xe8/0x150
[ 1252.005483][ T1398]  should_fail_ex+0x412/0x560
[ 1252.005514][ T1398]  should_failslab+0xa8/0x100
[ 1252.005543][ T1398]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1252.005566][ T1398]  ? sctp_add_bind_addr+0x8c/0x370
[ 1252.005599][ T1398]  sctp_add_bind_addr+0x8c/0x370
[ 1252.005630][ T1398]  sctp_copy_local_addr_list+0x314/0x4f0
[ 1252.005660][ T1398]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[ 1252.005683][ T1398]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1252.005711][ T1398]  ? sctp_v4_is_any+0x35/0x60
[ 1252.005738][ T1398]  ? sctp_copy_one_addr+0x93/0x360
[ 1252.005767][ T1398]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1252.005794][ T1398]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1252.005822][ T1398]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 1252.005857][ T1398]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1252.005894][ T1398]  ? __local_bh_enable_ip+0xd0/0x130
[ 1252.005912][ T1398]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1252.005937][ T1398]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1252.005962][ T1398]  sctp_sendmsg+0x1528/0x2c10
[ 1252.006014][ T1398]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1252.006042][ T1398]  ? aa_sk_perm+0x15a/0x960
[ 1252.006067][ T1398]  ? aa_sk_perm+0x82d/0x960
[ 1252.006098][ T1398]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1252.006125][ T1398]  ? sock_rps_record_flow+0x19/0x400
[ 1252.006161][ T1398]  ? inet_sendmsg+0x2f4/0x370
[ 1252.006209][ T1398]  ____sys_sendmsg+0x894/0xad0
[ 1252.006246][ T1398]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1252.006287][ T1398]  ? import_iovec+0x73/0xa0
[ 1252.006323][ T1398]  ___sys_sendmsg+0x2a5/0x360
[ 1252.006352][ T1398]  ? __lock_acquire+0x6b5/0x2cf0
[ 1252.006388][ T1398]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1252.006437][ T1398]  ? kstrtouint+0x6e/0xe0
[ 1252.006498][ T1398]  ? __fget_files+0x2a/0x420
[ 1252.006532][ T1398]  ? __fget_files+0x3a0/0x420
[ 1252.006568][ T1398]  __sys_sendmmsg+0x27c/0x4e0
[ 1252.006605][ T1398]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1252.006633][ T1398]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1252.006692][ T1398]  ? ksys_write+0x242/0x270
[ 1252.006727][ T1398]  ? __pfx_ksys_write+0x10/0x10
[ 1252.006766][ T1398]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1252.006799][ T1398]  do_syscall_64+0xe2/0xf80
[ 1252.006826][ T1398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.006847][ T1398]  ? trace_irq_disable+0x37/0x100
[ 1252.006867][ T1398]  ? clear_bhb_loop+0x60/0xb0
[ 1252.006894][ T1398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.006914][ T1398] RIP: 0033:0x7fe4c179aeb9
[ 1252.006935][ T1398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1252.006954][ T1398] RSP: 002b:00007fe4c26b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1252.006978][ T1398] RAX: ffffffffffffffda RBX: 00007fe4c1a15fa0 RCX: 00007fe4c179aeb9
[ 1252.006993][ T1398] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 000000000000000c
[ 1252.007007][ T1398] RBP: 00007fe4c26b2090 R08: 0000000000000000 R09: 0000000000000000
[ 1252.007021][ T1398] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[ 1252.007035][ T1398] R13: 00007fe4c1a16038 R14: 00007fe4c1a15fa0 R15: 00007fff2cf65c18
[ 1252.007070][ T1398]  </TASK>
[ 1252.118464][ T1397] wg1 speed is unknown, defaulting to 1000
[ 1252.782113][ T1415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7004'.
[ 1252.812719][ T1415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7004'.
[ 1252.991489][ T1373] virt_wifi0 speed is unknown, defaulting to 1000
[ 1253.046171][ T1373] ªªªªª9 speed is unknown, defaulting to 1000
[ 1253.079391][ T1373] xfrm0 speed is unknown, defaulting to 1000
[ 1253.488308][ T1438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7008'.
[ 1253.499188][ T1438] netlink: 35 bytes leftover after parsing attributes in process `syz.0.7008'.
[ 1253.565458][T22919] hid-generic 0005:04F3:1012.0001: item fetching failed at offset 0/1
[ 1253.587560][T22919] hid-generic 0005:04F3:1012.0001: probe with driver hid-generic failed with error -22
[ 1253.912771][ T1451] netlink: 'syz.2.7012': attribute type 1 has an invalid length.
[ 1254.017063][ T1451] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1254.045212][ T1451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7012'.
[ 1254.067603][ T1397] virt_wifi0 speed is unknown, defaulting to 1000
[ 1254.085021][ T1458] FAULT_INJECTION: forcing a failure.
[ 1254.085021][ T1458] name failslab, interval 1, probability 0, space 0, times 0
[ 1254.101352][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7012'.
[ 1254.121624][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7012'.
[ 1254.134856][ T1458] CPU: 1 UID: 0 PID: 1458 Comm: syz.3.7013 Not tainted syzkaller #0 PREEMPT(full) 
[ 1254.134886][ T1458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1254.134900][ T1458] Call Trace:
[ 1254.134909][ T1458]  <TASK>
[ 1254.134919][ T1458]  dump_stack_lvl+0xe8/0x150
[ 1254.134952][ T1458]  should_fail_ex+0x412/0x560
[ 1254.134983][ T1458]  should_failslab+0xa8/0x100
[ 1254.135010][ T1458]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1254.135032][ T1458]  ? sctp_add_bind_addr+0x8c/0x370
[ 1254.135063][ T1458]  sctp_add_bind_addr+0x8c/0x370
[ 1254.135092][ T1458]  sctp_copy_local_addr_list+0x314/0x4f0
[ 1254.135122][ T1458]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[ 1254.135148][ T1458]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1254.135179][ T1458]  ? sctp_v4_is_any+0x35/0x60
[ 1254.135204][ T1458]  ? sctp_copy_one_addr+0x93/0x360
[ 1254.135233][ T1458]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1254.135258][ T1458]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1254.135284][ T1458]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 1254.135318][ T1458]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1254.135356][ T1458]  ? __local_bh_enable_ip+0xd0/0x130
[ 1254.135375][ T1458]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1254.135400][ T1458]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1254.135425][ T1458]  sctp_sendmsg+0x1528/0x2c10
[ 1254.135480][ T1458]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1254.135507][ T1458]  ? aa_sk_perm+0x15a/0x960
[ 1254.135534][ T1458]  ? aa_sk_perm+0x82d/0x960
[ 1254.135565][ T1458]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1254.135593][ T1458]  ? sock_rps_record_flow+0x19/0x400
[ 1254.135626][ T1458]  ? inet_sendmsg+0x2f4/0x370
[ 1254.135662][ T1458]  ____sys_sendmsg+0x894/0xad0
[ 1254.135702][ T1458]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1254.135741][ T1458]  ? import_iovec+0x73/0xa0
[ 1254.135793][ T1458]  ___sys_sendmsg+0x2a5/0x360
[ 1254.135832][ T1458]  ? __lock_acquire+0x6b5/0x2cf0
[ 1254.135867][ T1458]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1254.135902][ T1458]  ? kstrtouint+0x6e/0xe0
[ 1254.135954][ T1458]  ? __fget_files+0x2a/0x420
[ 1254.135978][ T1458]  ? __fget_files+0x3a0/0x420
[ 1254.136011][ T1458]  __sys_sendmmsg+0x27c/0x4e0
[ 1254.136048][ T1458]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1254.136075][ T1458]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1254.136131][ T1458]  ? ksys_write+0x242/0x270
[ 1254.136164][ T1458]  ? __pfx_ksys_write+0x10/0x10
[ 1254.136202][ T1458]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1254.136234][ T1458]  do_syscall_64+0xe2/0xf80
[ 1254.136261][ T1458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.136282][ T1458]  ? trace_irq_disable+0x37/0x100
[ 1254.136302][ T1458]  ? clear_bhb_loop+0x60/0xb0
[ 1254.136328][ T1458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.136349][ T1458] RIP: 0033:0x7fe22bb9aeb9
[ 1254.136377][ T1458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1254.136396][ T1458] RSP: 002b:00007fe22caf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1254.136419][ T1458] RAX: ffffffffffffffda RBX: 00007fe22be15fa0 RCX: 00007fe22bb9aeb9
[ 1254.136434][ T1458] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 000000000000000c
[ 1254.136448][ T1458] RBP: 00007fe22caf3090 R08: 0000000000000000 R09: 0000000000000000
[ 1254.136468][ T1458] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[ 1254.136481][ T1458] R13: 00007fe22be16038 R14: 00007fe22be15fa0 R15: 00007ffd8c163218
[ 1254.136517][ T1458]  </TASK>
[ 1254.518178][ T1462] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7014'.
[ 1254.589861][ T1453] bond3: (slave veth5): Enslaving as an active interface with a down link
[ 1254.696012][ T1456] bond3: (slave veth7): Enslaving as an active interface with a down link
[ 1254.706456][ T1397] ªªªªª9 speed is unknown, defaulting to 1000
[ 1254.717255][ T1397] xfrm0 speed is unknown, defaulting to 1000
[ 1256.678828][ T1506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7023'.
[ 1256.872053][ T1506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7023'.
[ 1256.924941][ T1506] wg1 speed is unknown, defaulting to 1000
[ 1256.954882][ T1513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7023'.
[ 1257.019441][ T1457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1257.207453][ T1518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1257.289166][ T1506] virt_wifi0 speed is unknown, defaulting to 1000
[ 1257.298996][ T1506] ªªªªª9 speed is unknown, defaulting to 1000
[ 1257.307460][ T1506] xfrm0 speed is unknown, defaulting to 1000
[ 1257.474763][ T1520] batadv0: mtu less than device minimum
[ 1257.494087][ T1520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7028'.
[ 1257.546980][ T1526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1257.614757][ T1532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7028'.
[ 1257.905414][ T1532] bridge_slave_1: left allmulticast mode
[ 1257.911970][ T1532] bridge_slave_1: left promiscuous mode
[ 1257.932400][ T1532] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1257.950220][ T1532] bridge_slave_0: left allmulticast mode
[ 1257.989500][ T1532] bridge_slave_0: left promiscuous mode
[ 1257.996315][ T1532] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1258.154339][ T1528] tipc: Disabling bearer <eth:syzkaller0>
[ 1258.473563][T19384] lec:lec_start_xmit: lec0:No lecd attached
[ 1258.616319][ T1556] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7038'.
[ 1258.765707][ T1555] ip6gre1: entered promiscuous mode
[ 1258.771281][ T1555] ip6gre1: entered allmulticast mode
[ 1259.065593][ T1562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7040'.
[ 1259.135134][ T1562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7040'.
[ 1259.478813][ T1576] netlink: 'syz.3.7044': attribute type 3 has an invalid length.
[ 1259.548691][ T1576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7044'.
[ 1259.967218][ T1581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7045'.
[ 1260.196302][ T1607] netlink: 'syz.0.7052': attribute type 1 has an invalid length.
[ 1260.597769][ T1622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1261.089476][ T1635] wg1 speed is unknown, defaulting to 1000
[ 1261.136570][ T1636] wg1 speed is unknown, defaulting to 1000
[ 1261.176181][ T1641] wg1 speed is unknown, defaulting to 1000
[ 1261.399174][ T1648] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1261.560187][ T1654] x_tables: duplicate underflow at hook 3
[ 1261.590406][ T1653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1261.652193][ T1655] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1261.771411][ T1635] virt_wifi0 speed is unknown, defaulting to 1000
[ 1261.826393][ T1635] ªªªªª9 speed is unknown, defaulting to 1000
[ 1261.856653][ T1635] xfrm0 speed is unknown, defaulting to 1000
[ 1262.146591][ T1677] __nla_validate_parse: 5 callbacks suppressed
[ 1262.146611][ T1677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7073'.
[ 1262.356876][ T1685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7076'.
[ 1262.368328][ T1684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7076'.
[ 1262.389140][ T1684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7076'.
[ 1263.060622][ T1636] virt_wifi0 speed is unknown, defaulting to 1000
[ 1263.114576][ T1636] ªªªªª9 speed is unknown, defaulting to 1000
[ 1263.258556][ T1636] xfrm0 speed is unknown, defaulting to 1000
[ 1263.688235][ T1731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7089'.
[ 1263.767055][ T1734] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7089'.
[ 1263.960853][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms
[ 1263.969091][ T1736] sit0: entered promiscuous mode
[ 1263.974112][    C0] lec:lec_tx_timeout: lec0
[ 1263.974454][ T1641] virt_wifi0 speed is unknown, defaulting to 1000
[ 1264.430066][ T1641] ªªªªª9 speed is unknown, defaulting to 1000
[ 1264.491586][ T1641] xfrm0 speed is unknown, defaulting to 1000
[ 1264.491609][ T1749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7095'.
[ 1264.512228][ T1749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7095'.
[ 1264.523780][ T1749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7095'.
[ 1264.549654][ T1749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7095'.
[ 1264.973555][ T1763] netlink: 'syz.0.7098': attribute type 29 has an invalid length.
[ 1265.041815][ T1763] netlink: 'syz.0.7098': attribute type 29 has an invalid length.
[ 1265.058935][ T1763] unsupported nla_type 58
[ 1265.616647][ T1778] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1265.988956][ T1780] wg1 speed is unknown, defaulting to 1000
[ 1266.528721][ T1143] Bluetooth: hci4: command 0x0406 tx timeout
[ 1267.394521][ T1780] virt_wifi0 speed is unknown, defaulting to 1000
[ 1267.434544][ T1780] ªªªªª9 speed is unknown, defaulting to 1000
[ 1267.463967][ T1780] xfrm0 speed is unknown, defaulting to 1000
[ 1267.546148][ T1819] FAULT_INJECTION: forcing a failure.
[ 1267.546148][ T1819] name failslab, interval 1, probability 0, space 0, times 0
[ 1267.591709][ T1819] CPU: 1 UID: 0 PID: 1819 Comm: syz.4.7115 Not tainted syzkaller #0 PREEMPT(full) 
[ 1267.591739][ T1819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1267.591753][ T1819] Call Trace:
[ 1267.591762][ T1819]  <TASK>
[ 1267.591771][ T1819]  dump_stack_lvl+0xe8/0x150
[ 1267.591804][ T1819]  should_fail_ex+0x412/0x560
[ 1267.591837][ T1819]  should_failslab+0xa8/0x100
[ 1267.591873][ T1819]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1267.591898][ T1819]  ? sctp_add_bind_addr+0x8c/0x370
[ 1267.591929][ T1819]  sctp_add_bind_addr+0x8c/0x370
[ 1267.591959][ T1819]  sctp_copy_local_addr_list+0x314/0x4f0
[ 1267.591989][ T1819]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[ 1267.592015][ T1819]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1267.592046][ T1819]  ? sctp_v4_is_any+0x35/0x60
[ 1267.592072][ T1819]  ? sctp_copy_one_addr+0x93/0x360
[ 1267.592101][ T1819]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1267.592127][ T1819]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1267.592153][ T1819]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 1267.592188][ T1819]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1267.592226][ T1819]  ? __local_bh_enable_ip+0xd0/0x130
[ 1267.592244][ T1819]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1267.592269][ T1819]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1267.592294][ T1819]  sctp_sendmsg+0x1528/0x2c10
[ 1267.592341][ T1819]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1267.592368][ T1819]  ? aa_sk_perm+0x15a/0x960
[ 1267.592395][ T1819]  ? aa_sk_perm+0x82d/0x960
[ 1267.592426][ T1819]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1267.592454][ T1819]  ? sock_rps_record_flow+0x19/0x400
[ 1267.592490][ T1819]  ? inet_sendmsg+0x2f4/0x370
[ 1267.592526][ T1819]  ____sys_sendmsg+0x894/0xad0
[ 1267.592567][ T1819]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1267.592606][ T1819]  ? import_iovec+0x73/0xa0
[ 1267.592641][ T1819]  ___sys_sendmsg+0x2a5/0x360
[ 1267.592669][ T1819]  ? __lock_acquire+0x6b5/0x2cf0
[ 1267.592705][ T1819]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1267.592741][ T1819]  ? kstrtouint+0x6e/0xe0
[ 1267.592795][ T1819]  ? __fget_files+0x2a/0x420
[ 1267.592818][ T1819]  ? __fget_files+0x3a0/0x420
[ 1267.592862][ T1819]  __sys_sendmmsg+0x27c/0x4e0
[ 1267.592899][ T1819]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1267.592926][ T1819]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1267.592985][ T1819]  ? ksys_write+0x242/0x270
[ 1267.593019][ T1819]  ? __pfx_ksys_write+0x10/0x10
[ 1267.593058][ T1819]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1267.593090][ T1819]  do_syscall_64+0xe2/0xf80
[ 1267.593118][ T1819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.593139][ T1819]  ? trace_irq_disable+0x37/0x100
[ 1267.593159][ T1819]  ? clear_bhb_loop+0x60/0xb0
[ 1267.593184][ T1819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.593205][ T1819] RIP: 0033:0x7efdb779aeb9
[ 1267.593225][ T1819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1267.593244][ T1819] RSP: 002b:00007efdb85f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1267.593266][ T1819] RAX: ffffffffffffffda RBX: 00007efdb7a15fa0 RCX: 00007efdb779aeb9
[ 1267.593282][ T1819] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 000000000000000c
[ 1267.593296][ T1819] RBP: 00007efdb85f0090 R08: 0000000000000000 R09: 0000000000000000
[ 1267.593309][ T1819] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[ 1267.593322][ T1819] R13: 00007efdb7a16038 R14: 00007efdb7a15fa0 R15: 00007ffd7c1b94d8
[ 1267.593357][ T1819]  </TASK>
[ 1268.498751][ T1833] SET target dimension over the limit!
[ 1268.526292][ T1833] ksmbd: Unknown IPC event: 4, ignore.
[ 1269.329929][ T1857] __nla_validate_parse: 90 callbacks suppressed
[ 1269.329952][ T1857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7128'.
[ 1269.559161][ T1870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1269.624231][ T1877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7132'.
[ 1269.776328][ T1870] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7133'.
[ 1269.812047][ T1870] syzkaller0: entered promiscuous mode
[ 1269.824721][ T1870] syzkaller0: entered allmulticast mode
[ 1269.862835][ T1870] tipc: Resetting bearer <eth:syzkaller0>
[ 1269.930055][ T1867] tipc: Resetting bearer <eth:syzkaller0>
[ 1270.034556][ T1867] tipc: Disabling bearer <eth:syzkaller0>
[ 1270.420290][ T1886] tipc: Invalid UDP bearer configuration
[ 1270.420349][ T1886] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1271.209810][ T1909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1271.239727][ T1918] netlink: 'syz.0.7144': attribute type 11 has an invalid length.
[ 1271.642958][ T1924] netem: incorrect gi model size
[ 1271.648595][ T1924] netem: change failed
[ 1272.056348][ T1939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7149'.
[ 1272.475469][ T1948] xt_TCPMSS: Only works on TCP SYN packets
[ 1272.509509][ T1948] xt_TCPMSS: Only works on TCP SYN packets
[ 1273.027733][ T1973] Cannot find del_set index 3 as target
[ 1273.044514][ T1972] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7160'.
[ 1273.116723][ T1972] vlan2: entered promiscuous mode
[ 1273.138068][ T1972] bridge0: entered promiscuous mode
[ 1273.164195][ T1968] wg1 speed is unknown, defaulting to 1000
[ 1273.201561][ T1981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7162'.
[ 1273.875825][ T1996] netlink: 'syz.4.7165': attribute type 39 has an invalid length.
[ 1278.049049][ T1968] virt_wifi0 speed is unknown, defaulting to 1000
[ 1278.058422][ T1968] ªªªªª9 speed is unknown, defaulting to 1000
[ 1278.074229][ T2005] kthread_run failed with err -4
[ 1278.213486][ T1968] xfrm0 speed is unknown, defaulting to 1000
[ 1278.272702][ T2016] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7170'.
[ 1278.358488][ T2021] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) !
[ 1278.445131][ T2024] netlink: 'syz.2.7171': attribute type 11 has an invalid length.
[ 1278.482126][ T2018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7169'.
[ 1278.527259][ T2028] FAULT_INJECTION: forcing a failure.
[ 1278.527259][ T2028] name failslab, interval 1, probability 0, space 0, times 0
[ 1278.581581][ T2028] CPU: 0 UID: 0 PID: 2028 Comm: syz.0.7173 Not tainted syzkaller #0 PREEMPT(full) 
[ 1278.581612][ T2028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1278.581625][ T2028] Call Trace:
[ 1278.581634][ T2028]  <TASK>
[ 1278.581643][ T2028]  dump_stack_lvl+0xe8/0x150
[ 1278.581715][ T2028]  should_fail_ex+0x412/0x560
[ 1278.581748][ T2028]  should_failslab+0xa8/0x100
[ 1278.581771][ T2028]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1278.581794][ T2028]  ? sctp_add_bind_addr+0x8c/0x370
[ 1278.581825][ T2028]  sctp_add_bind_addr+0x8c/0x370
[ 1278.581856][ T2028]  sctp_copy_local_addr_list+0x314/0x4f0
[ 1278.581886][ T2028]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[ 1278.581911][ T2028]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1278.581946][ T2028]  ? sctp_v4_is_any+0x35/0x60
[ 1278.581968][ T2028]  ? sctp_copy_one_addr+0x93/0x360
[ 1278.581995][ T2028]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1278.582021][ T2028]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1278.582048][ T2028]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 1278.582084][ T2028]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1278.582123][ T2028]  ? __local_bh_enable_ip+0xd0/0x130
[ 1278.582141][ T2028]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1278.582166][ T2028]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1278.582191][ T2028]  sctp_sendmsg+0x1528/0x2c10
[ 1278.582240][ T2028]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1278.582273][ T2028]  ? aa_sk_perm+0x15a/0x960
[ 1278.582306][ T2028]  ? aa_sk_perm+0x82d/0x960
[ 1278.582339][ T2028]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1278.582367][ T2028]  ? sock_rps_record_flow+0x19/0x400
[ 1278.582404][ T2028]  ? inet_sendmsg+0x2f4/0x370
[ 1278.582441][ T2028]  ____sys_sendmsg+0x894/0xad0
[ 1278.582483][ T2028]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1278.582520][ T2028]  ? import_iovec+0x73/0xa0
[ 1278.582555][ T2028]  ___sys_sendmsg+0x2a5/0x360
[ 1278.582583][ T2028]  ? __lock_acquire+0x6b5/0x2cf0
[ 1278.582617][ T2028]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1278.582653][ T2028]  ? kstrtouint+0x6e/0xe0
[ 1278.582717][ T2028]  ? __fget_files+0x2a/0x420
[ 1278.582741][ T2028]  ? __fget_files+0x3a0/0x420
[ 1278.582777][ T2028]  __sys_sendmmsg+0x27c/0x4e0
[ 1278.582814][ T2028]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1278.582842][ T2028]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1278.582902][ T2028]  ? ksys_write+0x242/0x270
[ 1278.582935][ T2028]  ? __pfx_ksys_write+0x10/0x10
[ 1278.582974][ T2028]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1278.583028][ T2028]  do_syscall_64+0xe2/0xf80
[ 1278.583055][ T2028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1278.583075][ T2028]  ? trace_irq_disable+0x37/0x100
[ 1278.583095][ T2028]  ? clear_bhb_loop+0x60/0xb0
[ 1278.583119][ T2028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1278.583139][ T2028] RIP: 0033:0x7fe4c179aeb9
[ 1278.583159][ T2028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1278.583177][ T2028] RSP: 002b:00007fe4c26b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1278.583199][ T2028] RAX: ffffffffffffffda RBX: 00007fe4c1a15fa0 RCX: 00007fe4c179aeb9
[ 1278.583221][ T2028] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 000000000000000c
[ 1278.583234][ T2028] RBP: 00007fe4c26b2090 R08: 0000000000000000 R09: 0000000000000000
[ 1278.583246][ T2028] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[ 1278.583258][ T2028] R13: 00007fe4c1a16038 R14: 00007fe4c1a15fa0 R15: 00007fff2cf65c18
[ 1278.583292][ T2028]  </TASK>
[ 1279.010413][ T2031] geneve3: entered promiscuous mode
[ 1279.277948][ T2041] xt_hashlimit: size too large, truncated to 1048576
[ 1279.298840][ T2029] wg1 speed is unknown, defaulting to 1000
[ 1280.358822][ T2029] virt_wifi0 speed is unknown, defaulting to 1000
[ 1280.434649][ T2029] ªªªªª9 speed is unknown, defaulting to 1000
[ 1280.486165][ T2029] xfrm0 speed is unknown, defaulting to 1000
[ 1280.944344][ T2071] FAULT_INJECTION: forcing a failure.
[ 1280.944344][ T2071] name failslab, interval 1, probability 0, space 0, times 0
[ 1280.992947][ T2071] CPU: 1 UID: 0 PID: 2071 Comm: syz.3.7185 Not tainted syzkaller #0 PREEMPT(full) 
[ 1280.992977][ T2071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1280.992990][ T2071] Call Trace:
[ 1280.992999][ T2071]  <TASK>
[ 1280.993009][ T2071]  dump_stack_lvl+0xe8/0x150
[ 1280.993043][ T2071]  should_fail_ex+0x412/0x560
[ 1280.993073][ T2071]  should_failslab+0xa8/0x100
[ 1280.993100][ T2071]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1280.993121][ T2071]  ? sctp_add_bind_addr+0x8c/0x370
[ 1280.993152][ T2071]  sctp_add_bind_addr+0x8c/0x370
[ 1280.993182][ T2071]  sctp_copy_local_addr_list+0x314/0x4f0
[ 1280.993212][ T2071]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[ 1280.993238][ T2071]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1280.993266][ T2071]  ? sctp_v4_is_any+0x35/0x60
[ 1280.993292][ T2071]  ? sctp_copy_one_addr+0x93/0x360
[ 1280.993320][ T2071]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1280.993350][ T2071]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1280.993376][ T2071]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 1280.993411][ T2071]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1280.993543][ T2071]  ? __local_bh_enable_ip+0xd0/0x130
[ 1280.993562][ T2071]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1280.993587][ T2071]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1280.993612][ T2071]  sctp_sendmsg+0x1528/0x2c10
[ 1280.993658][ T2071]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1280.993684][ T2071]  ? aa_sk_perm+0x15a/0x960
[ 1280.993710][ T2071]  ? aa_sk_perm+0x82d/0x960
[ 1280.993743][ T2071]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1280.993770][ T2071]  ? sock_rps_record_flow+0x19/0x400
[ 1280.993812][ T2071]  ? inet_sendmsg+0x2f4/0x370
[ 1280.993848][ T2071]  ____sys_sendmsg+0x894/0xad0
[ 1280.993890][ T2071]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1280.993931][ T2071]  ? import_iovec+0x73/0xa0
[ 1280.993966][ T2071]  ___sys_sendmsg+0x2a5/0x360
[ 1280.993995][ T2071]  ? __lock_acquire+0x6b5/0x2cf0
[ 1280.994035][ T2071]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1280.994071][ T2071]  ? kstrtouint+0x6e/0xe0
[ 1280.994126][ T2071]  ? __fget_files+0x2a/0x420
[ 1280.994149][ T2071]  ? __fget_files+0x3a0/0x420
[ 1280.994184][ T2071]  __sys_sendmmsg+0x27c/0x4e0
[ 1280.994220][ T2071]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1280.994247][ T2071]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1280.994306][ T2071]  ? ksys_write+0x242/0x270
[ 1280.994340][ T2071]  ? __pfx_ksys_write+0x10/0x10
[ 1280.994378][ T2071]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1280.994410][ T2071]  do_syscall_64+0xe2/0xf80
[ 1280.994437][ T2071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1280.994464][ T2071]  ? trace_irq_disable+0x37/0x100
[ 1280.994484][ T2071]  ? clear_bhb_loop+0x60/0xb0
[ 1280.994510][ T2071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1280.994531][ T2071] RIP: 0033:0x7fe22bb9aeb9
[ 1280.994551][ T2071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1280.994570][ T2071] RSP: 002b:00007fe22caf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1280.994594][ T2071] RAX: ffffffffffffffda RBX: 00007fe22be15fa0 RCX: 00007fe22bb9aeb9
[ 1280.994610][ T2071] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 000000000000000c
[ 1280.994624][ T2071] RBP: 00007fe22caf3090 R08: 0000000000000000 R09: 0000000000000000
[ 1280.994638][ T2071] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[ 1280.994651][ T2071] R13: 00007fe22be16038 R14: 00007fe22be15fa0 R15: 00007ffd8c163218
[ 1280.994687][ T2071]  </TASK>
[ 1282.113208][ T2102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7189'.
[ 1282.155718][ T2102] openvswitch: netlink: IP tunnel dst address not specified
[ 1282.393138][ T2104] xt_hashlimit: size too large, truncated to 1048576
[ 1282.463892][ T2112] netlink: 488 bytes leftover after parsing attributes in process `syz.1.7193'.
[ 1282.497040][ T2112] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7193'.
[ 1282.927038][ T2118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7194'.
[ 1282.951703][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7194'.
[ 1282.966039][ T2118] netlink: 'syz.3.7194': attribute type 1 has an invalid length.
[ 1282.974853][ T2118] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7194'.
[ 1282.993810][ T2118] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.7194'.
[ 1283.192878][ T2125] netlink: 'syz.1.7195': attribute type 1 has an invalid length.
[ 1283.375679][ T2134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7198'.
[ 1283.435133][ T2127] gretap1: entered allmulticast mode
[ 1283.628590][ T2127] bond2: (slave gretap1): making interface the new active one
[ 1283.692143][ T2127] bond2: (slave gretap1): Enslaving as an active interface with an up link
[ 1284.742233][ T2161] �ÿ: renamed from bond_slave_0
[ 1285.019799][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7203'.
[ 1285.109220][ T2170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7204'.
[ 1285.127326][ T2170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7204'.
[ 1285.165236][ T2168] wg1 speed is unknown, defaulting to 1000
[ 1286.143518][ T2196] geneve3: entered promiscuous mode
[ 1286.165436][ T2201] ip6tnl2: entered promiscuous mode
[ 1286.193854][ T2168] virt_wifi0 speed is unknown, defaulting to 1000
[ 1286.261124][ T2168] ªªªªª9 speed is unknown, defaulting to 1000
[ 1286.272480][ T2168] xfrm0 speed is unknown, defaulting to 1000
[ 1286.332572][ T2205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7213'.
[ 1286.424045][ T2209] bond1: (slave syz_tun): Releasing active interface
[ 1286.494599][ T2209] bridge_slave_0: left allmulticast mode
[ 1286.518857][ T2214] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7215'.
[ 1286.529256][ T2209] bridge_slave_0: left promiscuous mode
[ 1286.529520][ T2209] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1286.552198][ T2209] bridge_slave_1: left allmulticast mode
[ 1286.558088][ T2209] bridge_slave_1: left promiscuous mode
[ 1286.587773][ T2209] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1286.588089][ T2218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7216'.
[ 1286.641286][ T2209] bond0: (slave bond_slave_0): Releasing backup interface
[ 1286.694786][ T2209] bond0: (slave bond_slave_1): Releasing backup interface
[ 1286.714449][ T2220] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7216'.
[ 1286.729992][ T2220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7216'.
[ 1286.760366][ T2215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7215'.
[ 1286.793378][ T2209] team0: Port device team_slave_0 removed
[ 1286.838936][ T2209] team0: Port device team_slave_1 removed
[ 1286.854666][ T2209] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1286.880062][ T2209] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1286.895188][ T2209] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1286.902880][ T2209] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1286.916654][ T2209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1287.191115][ T2224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1287.286188][ T2228] netlink: 'syz.1.7218': attribute type 8 has an invalid length.
[ 1287.319547][ T2228] sch_fq: defrate 0 ignored.
[ 1287.421386][ T2232] netlink: 'syz.4.7220': attribute type 1 has an invalid length.
[ 1288.053591][ T2258] pimreg: entered allmulticast mode
[ 1288.657830][ T2271] __nla_validate_parse: 2 callbacks suppressed
[ 1288.657891][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7232'.
[ 1288.817870][ T2282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7234'.
[ 1288.852689][ T2282] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7234'.
[ 1288.927652][ T2277] geneve3: entered promiscuous mode
[ 1289.019824][ T2277] geneve3: entered allmulticast mode
[ 1289.059219][ T2279] wg1 speed is unknown, defaulting to 1000
[ 1289.437942][ T2287] netlink: 'syz.4.7237': attribute type 16 has an invalid length.
[ 1289.457242][ T2293] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1289.585118][ T2287] netlink: 'syz.4.7237': attribute type 17 has an invalid length.
[ 1289.625662][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1289.765886][ T2279] virt_wifi0 speed is unknown, defaulting to 1000
[ 1289.977849][ T2287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1290.057184][ T2307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7240'.
[ 1290.105625][ T2279] ªªªªª9 speed is unknown, defaulting to 1000
[ 1290.221704][ T2279] xfrm0 speed is unknown, defaulting to 1000
[ 1290.637198][ T2312] dvmrp0: left allmulticast mode
[ 1291.071709][ T2334] xt_l2tp: wrong L2TP version: 0
[ 1291.078297][ T2336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7249'.
[ 1291.156230][ T2337] bridge5: entered promiscuous mode
[ 1291.195096][ T2337] bridge5: entered allmulticast mode
[ 1291.217799][ T2347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1291.249210][ T2337] team0: Port device bridge5 added
[ 1291.652111][ T2362] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[ 1291.783664][ T2367] delete_channel: no stack
[ 1291.979546][ T2373] xt_hashlimit: size too large, truncated to 1048576
[ 1292.129628][ T2374] netlink: 'syz.0.7259': attribute type 1 has an invalid length.
[ 1292.207110][ T2389] netpci0: tun_chr_ioctl cmd 1074025678
[ 1292.226374][ T2389] netpci0: group set to 0
[ 1292.296274][ T2388] netpci0: tun_chr_ioctl cmd 1074025678
[ 1292.318801][ T2388] netpci0: group set to 0
[ 1292.426934][ T2392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7264'.
[ 1292.846694][ T2417] bond4: option packets_per_slave: invalid value (676200458)
[ 1292.855191][ T2417] bond4: option packets_per_slave: allowed values 0 - 65535
[ 1292.887631][ T2417] bond4 (unregistering): Released all slaves
[ 1293.021898][ T2420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7268'.
[ 1293.065111][ T2417] syz_tun: entered allmulticast mode
[ 1293.074697][ T2417] syz_tun: left allmulticast mode
[ 1293.079921][ T2417] pimreg: left allmulticast mode
[ 1293.308256][ T2432] syzkaller0: entered promiscuous mode
[ 1293.316835][ T2432] syzkaller0: entered allmulticast mode
[ 1293.327036][ T2439] x_tables: unsorted entry at hook 2
[ 1293.343830][ T2435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7272'.
[ 1293.372311][ T2440] pim6reg: entered allmulticast mode
[ 1293.504297][ T2451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7276'.
[ 1293.534397][ T2451] siw: device registration error -23
[ 1293.672428][ T2454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7277'.
[ 1297.752932][ T2438] pim6reg: left allmulticast mode
[ 1298.352786][ T2501] netlink: 'syz.2.7286': attribute type 12 has an invalid length.
[ 1298.377571][ T2501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7286'.
[ 1298.559762][ T2501] wg1 speed is unknown, defaulting to 1000
[ 1298.774423][ T2501] virt_wifi0 speed is unknown, defaulting to 1000
[ 1298.782966][ T2501] ªªªªª9 speed is unknown, defaulting to 1000
[ 1298.791164][ T2501] xfrm0 speed is unknown, defaulting to 1000
[ 1298.878366][ T2527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7291'.
[ 1299.121689][ T2535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7294'.
[ 1299.249774][ T2537] netlink: 'syz.0.7296': attribute type 1 has an invalid length.
[ 1299.446815][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7299'.
[ 1299.660729][ T2560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7301'.
[ 1299.700472][ T2551] IPv6: sit3: Disabled Multicast RS
[ 1299.721734][ T2560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7301'.
[ 1299.754435][ T2560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7301'.
[ 1300.110130][ T2575] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) !
[ 1300.269784][ T2575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7303'.
[ 1300.695180][ T2592] xt_hashlimit: size too large, truncated to 1048576
[ 1302.133580][ T2627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7317'.
[ 1302.199544][ T2638] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) !
[ 1302.253993][ T2639] bridge0: port 3(netdevsim0) entered blocking state
[ 1302.262377][ T2639] bridge0: port 3(netdevsim0) entered disabled state
[ 1302.269955][ T2639] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 1302.296744][ T2640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7315'.
[ 1302.329817][ T2639] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1302.375334][ T2627] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7317'.
[ 1303.105628][ T2676] netlink: 'syz.2.7322': attribute type 11 has an invalid length.
[ 1303.296130][ T5914] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[ 1303.322605][ T2675] wg1 speed is unknown, defaulting to 1000
[ 1303.343531][ T2685] syzkaller0: entered promiscuous mode
[ 1303.349270][ T2685] syzkaller0: entered allmulticast mode
[ 1303.432668][ T5914] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[ 1303.451219][ T5914] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[ 1303.505717][ T5914] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[ 1303.554037][ T2701] netlink: 'syz.0.7329': attribute type 2 has an invalid length.
[ 1303.609487][ T2703] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1303.646589][ T2701] l24): entered promiscuous mode
[ 1303.718132][ T2709] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) !
[ 1303.902850][ T2719] __nla_validate_parse: 7 callbacks suppressed
[ 1303.902870][ T2719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7332'.
[ 1304.082797][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7333'.
[ 1304.399727][ T2733] can: request_module (can-proto-0) failed.
[ 1304.406261][ T2675] virt_wifi0 speed is unknown, defaulting to 1000
[ 1304.422899][ T2675] ªªªªª9 speed is unknown, defaulting to 1000
[ 1304.441653][ T2675] xfrm0 speed is unknown, defaulting to 1000
[ 1304.552699][ T2749] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1304.583630][ T2749] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7337'.
[ 1305.282103][ T2777] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) !
[ 1305.356960][ T2777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7344'.
[ 1305.407887][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL
[ 1305.419722][ T2783] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.7346'.
[ 1305.438322][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[ 1305.553047][ T2787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7347'.
[ 1305.785794][ T2793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1306.137261][ T2808] xt_hashlimit: size too large, truncated to 1048576
[ 1306.687962][ T2822] wg1 speed is unknown, defaulting to 1000
[ 1306.800782][ T2833] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7354'.
[ 1306.839658][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1307.120021][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1307.503445][ T2822] virt_wifi0 speed is unknown, defaulting to 1000
[ 1307.596488][ T2822] ªªªªª9 speed is unknown, defaulting to 1000
[ 1307.644684][ T2822] xfrm0 speed is unknown, defaulting to 1000
[ 1307.758915][ T2865] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) !
[ 1307.832724][ T2865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7359'.
[ 1308.154047][ T2882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7365'.
[ 1308.335499][ T2890] netlink: 'syz.2.7366': attribute type 9 has an invalid length.
[ 1308.370882][ T2890] netlink: 'syz.2.7366': attribute type 11 has an invalid length.
[ 1308.409351][ T2890] netlink: 'syz.2.7366': attribute type 12 has an invalid length.
[ 1308.457006][ T2890] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.7366'.
[ 1308.511573][ T2894] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[ 1308.924267][ T2899] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1309.176336][ T2512] udevd[2512]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1309.458143][ T2914] netlink: 'syz.3.7368': attribute type 13 has an invalid length.
[ 1309.705561][ T2916] __nla_validate_parse: 2 callbacks suppressed
[ 1309.705582][ T2916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7370'.
[ 1309.808852][ T2919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7370'.
[ 1310.667489][ T2948] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) !
[ 1310.696230][ T2948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7376'.
[ 1311.001446][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms
[ 1311.009870][    C0] lec:lec_tx_timeout: lec0
[ 1311.049178][ T2957] netlink: 'syz.3.7381': attribute type 1 has an invalid length.
[ 1311.242846][ T2963] wg1 speed is unknown, defaulting to 1000
[ 1311.316234][ T2968] tunl0: Caught tx_queue_len zero misconfig
[ 1311.358147][ T2968] netlink: 'syz.3.7384': attribute type 1 has an invalid length.
[ 1311.367571][ T2968] netlink: 760 bytes leftover after parsing attributes in process `syz.3.7384'.
[ 1311.385038][ T2968] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7384'.
[ 1311.422222][ T2968] netlink: 'syz.3.7384': attribute type 1 has an invalid length.
[ 1311.436691][ T2968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7384'.
[ 1311.712415][ T2963] virt_wifi0 speed is unknown, defaulting to 1000
[ 1311.722403][ T2963] ªªªªª9 speed is unknown, defaulting to 1000
[ 1311.731085][ T2963] xfrm0 speed is unknown, defaulting to 1000
[ 1312.234028][ T2998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7390'.
[ 1312.308617][ T3002] netlink: 'syz.2.7393': attribute type 2 has an invalid length.
[ 1312.337227][ T3001] netlink: 'syz.2.7393': attribute type 2 has an invalid length.
[ 1312.350064][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7394'.
[ 1312.364378][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7394'.
[ 1312.432598][ T3002] : entered promiscuous mode
[ 1312.453505][ T2999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7390'.
[ 1313.648498][ T3045] wg1 speed is unknown, defaulting to 1000
[ 1313.683329][ T3053] syzkaller0: entered promiscuous mode
[ 1313.688958][ T3053] syzkaller0: entered allmulticast mode
[ 1313.778321][ T3057] netlink: 'syz.4.7405': attribute type 21 has an invalid length.
[ 1314.410311][ T3045] virt_wifi0 speed is unknown, defaulting to 1000
[ 1314.422589][ T3045] ªªªªª9 speed is unknown, defaulting to 1000
[ 1314.433067][ T3045] xfrm0 speed is unknown, defaulting to 1000
[ 1314.647772][ T3079] syzkaller0: entered promiscuous mode
[ 1314.665201][ T3079] syzkaller0: entered allmulticast mode
[ 1314.807720][ T3089] __nla_validate_parse: 8 callbacks suppressed
[ 1314.807741][ T3089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7414'.
[ 1315.044907][ T3096] geneve4: entered promiscuous mode
[ 1315.129274][ T3098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7417'.
[ 1315.367987][ T3105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7420'.
[ 1315.467166][ T3105] netlink: 'syz.2.7420': attribute type 9 has an invalid length.
[ 1315.482120][ T3105] netlink: 'syz.2.7420': attribute type 6 has an invalid length.
[ 1315.498652][ T3105] netlink: 'syz.2.7420': attribute type 7 has an invalid length.
[ 1315.529711][ T3105] netlink: 'syz.2.7420': attribute type 8 has an invalid length.
[ 1315.653818][ T3107] netlink: 'syz.4.7421': attribute type 1 has an invalid length.
[ 1315.797500][ T3119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7423'.
[ 1316.976211][ T3165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7431'.
[ 1317.455451][ T3185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7437'.
[ 1317.511082][ T3178] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1317.708739][ T3197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7437'.
[ 1318.558025][ T3214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7441'.
[ 1318.589248][ T3193] wg1 speed is unknown, defaulting to 1000
[ 1318.806839][ T3221] vxcan3: entered promiscuous mode
[ 1319.198049][ T3237] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1319.439671][ T3193] virt_wifi0 speed is unknown, defaulting to 1000
[ 1319.453105][ T3193] ªªªªª9 speed is unknown, defaulting to 1000
[ 1319.474555][ T3193] xfrm0 speed is unknown, defaulting to 1000
[ 1320.328147][ T3272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7458'.
[ 1320.352341][ T3272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7458'.
[ 1320.369231][ T3273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7458'.
[ 1320.717878][ T3287] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1320.869133][ T3295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7462'.
[ 1320.967169][ T3294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7462'.
[ 1321.486820][T19384] lec:lec_start_xmit: lec0:No lecd attached
[ 1321.761739][ T3321] netlink: 'syz.2.7468': attribute type 4 has an invalid length.
[ 1321.791550][ T3321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7468'.
[ 1321.806830][ T3321] bond0: up delay (196616) is not a multiple of miimon (33269), value rounded to 166345 ms
[ 1321.862591][ T3320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7470'.
[ 1321.866283][ T3325] xt_hashlimit: size too large, truncated to 1048576
[ 1322.098613][ T3331] xt_hashlimit: size too large, truncated to 1048576
[ 1322.250117][ T3337] .`: (slave bond_slave_0): Releasing backup interface
[ 1322.270434][ T3337] .`: (slave bond_slave_1): Releasing backup interface
[ 1322.309917][ T3338] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7474'.
[ 1322.347376][ T3338] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7474'.
[ 1322.376811][ T3337] team0: Failed to send port change of device C via netlink (err -105)
[ 1322.420170][ T3339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7474'.
[ 1322.448316][ T3337] team0: Port device C removed
[ 1322.469760][ T3337] team0: Failed to send options change via netlink (err -105)
[ 1322.485007][ T3337] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[ 1322.526553][ T3337] team0: Port device team_slave_1 removed
[ 1322.556467][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1322.581991][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1322.598450][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1322.610310][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1322.623246][ T3337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1322.969010][ T3350] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[ 1323.359279][ T3373] xt_hashlimit: size too large, truncated to 1048576
[ 1323.624990][ T3397] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[ 1323.665795][ T3397] sch_tbf: burst 0 is lower than device lo mtu (82) !
[ 1323.976069][ T3409] netlink: 'syz.3.7491': attribute type 1 has an invalid length.
[ 1324.054449][ T3409] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1324.169621][ T3419] syzkaller0: entered promiscuous mode
[ 1324.192905][ T3419] syzkaller0: entered allmulticast mode
[ 1324.673543][ T3444] netlink: 'syz.0.7499': attribute type 58 has an invalid length.
[ 1324.757741][ T3444] siw: device registration error -23
[ 1325.035265][ T3453] bond4: Removing last arp target with arp_interval on
[ 1325.084978][ T3442] xt_hashlimit: size too large, truncated to 1048576
[ 1325.315084][ T3467] netlink: 'syz.3.7505': attribute type 4 has an invalid length.
[ 1325.599334][ T3471] wg1 speed is unknown, defaulting to 1000
[ 1326.502337][ T3471] virt_wifi0 speed is unknown, defaulting to 1000
[ 1326.524725][ T3471] ªªªªª9 speed is unknown, defaulting to 1000
[ 1326.536629][ T3471] xfrm0 speed is unknown, defaulting to 1000
[ 1326.855781][ T3502] wg1 speed is unknown, defaulting to 1000
[ 1327.000513][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms
[ 1327.008840][    C0] lec:lec_tx_timeout: lec0
[ 1327.039315][ T3531] __nla_validate_parse: 7 callbacks suppressed
[ 1327.039337][ T3531] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7516'.
[ 1327.375699][ T3502] virt_wifi0 speed is unknown, defaulting to 1000
[ 1327.398992][ T3502] ªªªªª9 speed is unknown, defaulting to 1000
[ 1327.469668][ T3502] xfrm0 speed is unknown, defaulting to 1000
[ 1327.754032][ T3545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7520'.
[ 1327.771679][ T3547] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20001
[ 1327.782394][ T3545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7520'.
[ 1327.840733][ T3545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7520'.
[ 1327.850205][ T3545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7520'.
[ 1328.109699][ T3555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7523'.
[ 1328.119965][ T3554] netlink: 'syz.2.7522': attribute type 10 has an invalid length.
[ 1328.206623][ T3554] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1328.228769][ T3554] team0: Device bond0 failed to register rx_handler
[ 1329.207498][ T3576] wg1 speed is unknown, defaulting to 1000
[ 1329.839110][ T3576] virt_wifi0 speed is unknown, defaulting to 1000
[ 1329.879628][ T3576] ªªªªª9 speed is unknown, defaulting to 1000
[ 1329.928009][ T3576] xfrm0 speed is unknown, defaulting to 1000
[ 1330.279728][ T3595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7530'.
[ 1330.312329][ T3595] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7530'.
[ 1330.588922][ T3604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7532'.
[ 1330.885607][ T3610] xt_hashlimit: size too large, truncated to 1048576
[ 1331.195115][ T3621] netlink: 'syz.2.7537': attribute type 32 has an invalid length.
[ 1331.203696][ T3621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7537'.
[ 1331.251885][ T3621] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[ 1331.396259][ T3624] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1331.415338][ T3624] netlink: 'syz.4.7538': attribute type 15 has an invalid length.
[ 1332.320365][ T3646] wg1 speed is unknown, defaulting to 1000
[ 1332.439388][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7546'.
[ 1332.490788][ T3652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7546'.
[ 1332.882708][ T3660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7549'.
[ 1333.309920][ T3675] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 1333.348842][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7553'.
[ 1333.544784][ T3646] virt_wifi0 speed is unknown, defaulting to 1000
[ 1333.583933][ T3646] ªªªªª9 speed is unknown, defaulting to 1000
[ 1333.640245][ T3683] wg1 speed is unknown, defaulting to 1000
[ 1333.649691][ T3646] xfrm0 speed is unknown, defaulting to 1000
[ 1333.766104][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7557'.
[ 1333.941923][ T3693] syzkaller0: entered promiscuous mode
[ 1333.962189][ T3693] syzkaller0: entered allmulticast mode
[ 1334.005282][ T3693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7558'.
[ 1334.015837][ T3693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7558'.
[ 1334.508345][ T3683] virt_wifi0 speed is unknown, defaulting to 1000
[ 1334.535575][ T3701] wg1 speed is unknown, defaulting to 1000
[ 1334.553275][ T3683] ªªªªª9 speed is unknown, defaulting to 1000
[ 1334.560448][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7561'.
[ 1334.582826][ T3707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7553'.
[ 1334.606148][ T3683] xfrm0 speed is unknown, defaulting to 1000
[ 1335.479776][ T3715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7565'.
[ 1335.512515][ T3701] virt_wifi0 speed is unknown, defaulting to 1000
[ 1335.547089][ T3701] ªªªªª9 speed is unknown, defaulting to 1000
[ 1335.553726][ T3717] netlink: 'syz.2.7564': attribute type 13 has an invalid length.
[ 1335.882909][ T3701] xfrm0 speed is unknown, defaulting to 1000
[ 1336.268678][ T3736] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1336.298009][ T3733] wg1 speed is unknown, defaulting to 1000
[ 1337.162486][ T3745] wg1 speed is unknown, defaulting to 1000
[ 1337.373487][ T3756] xt_hashlimit: size too large, truncated to 1048576
[ 1338.039193][ T3765] sctp: [Deprecated]: syz.2.7576 (pid 3765) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1338.039193][ T3765] Use struct sctp_sack_info instead
[ 1338.207645][ T3745] virt_wifi0 speed is unknown, defaulting to 1000
[ 1338.217876][ T3745] ªªªªª9 speed is unknown, defaulting to 1000
[ 1338.217900][ T3733] virt_wifi0 speed is unknown, defaulting to 1000
[ 1338.239073][ T3745] xfrm0 speed is unknown, defaulting to 1000
[ 1338.253492][ T3733] ªªªªª9 speed is unknown, defaulting to 1000
[ 1338.366784][ T3775] __nla_validate_parse: 1 callbacks suppressed
[ 1338.366815][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7579'.
[ 1338.777210][ T3733] xfrm0 speed is unknown, defaulting to 1000
[ 1338.813888][ T3791] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7584'.
[ 1339.073108][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7585'.
[ 1339.214300][ T3772] siw: device registration error -23
[ 1339.508187][ T3802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7587'.
[ 1339.653048][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7587'.
[ 1340.053112][ T3802] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1340.089669][ T3808] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1340.182634][ T3808] bond5: (slave batadv1): Enslaving as an active interface with an up link
[ 1340.925023][ T3812] bond5 (unregistering): (slave batadv1): Releasing backup interface
[ 1340.950005][ T3812] bond5 (unregistering): Released all slaves
[ 1341.075751][ T3826] netlink: 'syz.1.7590': attribute type 10 has an invalid length.
[ 1341.134709][ T3827] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7590'.
[ 1341.168348][ T3826] team0: Port device dummy0 added
[ 1341.908369][ T3845] netlink: 'syz.2.7594': attribute type 4 has an invalid length.
[ 1341.921392][ T3844] netlink: 'syz.2.7594': attribute type 4 has an invalid length.
[ 1342.476380][ T3858] siw: device registration error -23
[ 1342.684467][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7600'.
[ 1342.742440][ T3865] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7601'.
[ 1342.929248][ T3872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7603'.
[ 1342.962019][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7603'.
[ 1342.997581][ T3872] netlink: 'syz.0.7603': attribute type 18 has an invalid length.
[ 1343.406675][ T3892] xt_hashlimit: size too large, truncated to 1048576
[ 1343.456469][ T3895] __nla_validate_parse: 1 callbacks suppressed
[ 1343.456491][ T3895] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7609'.
[ 1343.897074][ T3899] xt_hashlimit: size too large, truncated to 1048576
[ 1343.900031][ T3909] wg1 speed is unknown, defaulting to 1000
[ 1344.861317][ T3909] virt_wifi0 speed is unknown, defaulting to 1000
[ 1344.878333][ T3909] ªªªªª9 speed is unknown, defaulting to 1000
[ 1344.902918][ T3909] xfrm0 speed is unknown, defaulting to 1000
[ 1345.005891][ T3947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7621'.
[ 1345.126286][ T3951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7622'.
[ 1345.198610][ T3951] macvtap1: entered promiscuous mode
[ 1345.232094][ T3951] veth1_to_hsr: entered promiscuous mode
[ 1345.238885][ T3951] macvtap1: entered allmulticast mode
[ 1345.245727][ T3951] veth1_to_hsr: entered allmulticast mode
[ 1346.215659][ T3907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1346.625256][ T3983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7630'.
[ 1346.638575][ T3974] wg1 speed is unknown, defaulting to 1000
[ 1346.690883][ T3982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7630'.
[ 1346.796576][ T3983] macvlan2: entered promiscuous mode
[ 1346.858208][ T3982] macvlan3: entered promiscuous mode
[ 1346.975349][ T3990] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7633'.
[ 1347.143900][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7636'.
[ 1347.179820][ T3996] erspan0: entered promiscuous mode
[ 1347.563889][ T3974] virt_wifi0 speed is unknown, defaulting to 1000
[ 1347.599718][ T3974] ªªªªª9 speed is unknown, defaulting to 1000
[ 1347.623244][ T3974] xfrm0 speed is unknown, defaulting to 1000
[ 1347.751786][ T4019] sock: sock_set_timeout: `syz.1.7643' (pid 4019) tries to set negative timeout
[ 1347.996798][ T4024] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7645'.
[ 1348.188404][ T4037] netlink: 'syz.1.7648': attribute type 21 has an invalid length.
[ 1348.210056][ T4036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1348.230205][ T4037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7648'.
[ 1348.244273][ T4037] netlink: 'syz.1.7648': attribute type 1 has an invalid length.
[ 1348.277152][ T4036] xt_hashlimit: size too large, truncated to 1048576
[ 1348.346379][ T4038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7648'.
[ 1348.588895][ T4046] netlink: 496 bytes leftover after parsing attributes in process `syz.4.7649'.
[ 1349.828547][ T4077] wg1 speed is unknown, defaulting to 1000
[ 1350.024789][ T4086] netlink: 'syz.2.7658': attribute type 1 has an invalid length.
[ 1350.143623][ T4086] bond5: entered promiscuous mode
[ 1350.192215][ T4086] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1350.333695][ T4077] virt_wifi0 speed is unknown, defaulting to 1000
[ 1350.343455][ T4077] ªªªªª9 speed is unknown, defaulting to 1000
[ 1350.367363][ T4077] xfrm0 speed is unknown, defaulting to 1000
[ 1350.767222][ T4103] wg1 speed is unknown, defaulting to 1000
[ 1351.164582][ T4112] syzkaller1: entered promiscuous mode
[ 1351.170330][ T4112] syzkaller1: entered allmulticast mode
[ 1351.231700][ T4112] geneve4: entered promiscuous mode
[ 1351.652692][ T4118] netlink: 'syz.2.7667': attribute type 9 has an invalid length.
[ 1351.663160][ T4118] netlink: 'syz.2.7667': attribute type 6 has an invalid length.
[ 1351.715586][ T4103] virt_wifi0 speed is unknown, defaulting to 1000
[ 1351.727981][ T4103] ªªªªª9 speed is unknown, defaulting to 1000
[ 1351.783982][ T4103] xfrm0 speed is unknown, defaulting to 1000
[ 1351.930436][ T4125] xt_hashlimit: size too large, truncated to 1048576
[ 1352.606963][ T4142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7679'.
[ 1352.629248][ T4142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1352.901044][ T4145] bond3: option miimon: invalid value (18446744073709551607)
[ 1352.909038][ T4145] bond3: option miimon: allowed values 0 - 2147483647
[ 1352.937441][ T4145] bond3 (unregistering): Released all slaves
[ 1353.355074][ T4161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7684'.
[ 1353.507634][ T4161] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1353.619114][ T4175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7686'.
[ 1353.677364][ T4179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7688'.
[ 1353.697115][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7686'.
[ 1353.717039][ T4181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7688'.
[ 1353.732046][ T4175] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7686'.
[ 1353.786317][ T4175] netlink: 'syz.0.7686': attribute type 3 has an invalid length.
[ 1353.830249][ T4175] netlink: 'syz.0.7686': attribute type 2 has an invalid length.
[ 1353.874442][ T4175] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7686'.
[ 1353.920108][ T4175] netlink: 'syz.0.7686': attribute type 2 has an invalid length.
[ 1354.296767][ T4191] netlink: 'syz.4.7690': attribute type 1 has an invalid length.
[ 1354.347294][ T4192] wg1 speed is unknown, defaulting to 1000
[ 1354.715597][ T4191] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1355.736983][ T4228] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7700'.
[ 1355.769119][ T4227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7699'.
[ 1355.976882][ T4194] syzkaller0: entered promiscuous mode
[ 1355.982948][ T4194] syzkaller0: entered allmulticast mode
[ 1356.000674][ T4192] virt_wifi0 speed is unknown, defaulting to 1000
[ 1356.011441][ T4192] ªªªªª9 speed is unknown, defaulting to 1000
[ 1356.029024][ T4192] xfrm0 speed is unknown, defaulting to 1000
[ 1356.187171][ T4242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7705'.
[ 1359.904440][ T4232] wg1 speed is unknown, defaulting to 1000
[ 1360.009069][T30000] veth0_to_bridge: left allmulticast mode
[ 1360.027576][T30000] veth0_to_bridge: left promiscuous mode
[ 1360.067634][T30000] bridge0: port 2(veth0_to_bridge) entered disabled state
[ 1360.144283][T30000] erspan0: left allmulticast mode
[ 1360.149940][T30000] erspan0: left promiscuous mode
[ 1360.194529][ T4267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7709'.
[ 1360.201356][T30000] bridge0: port 1(erspan0) entered disabled state
[ 1360.975059][T30000] bond3 (unregistering): (slave erspan1): Releasing active interface
[ 1360.985718][T30000] erspan1 (unregistering): left promiscuous mode
[ 1361.481851][T30000] bond8 (unregistering): (slave bridge6): Releasing active interface
[ 1361.552977][T30000] team0: Port device bond0 removed
[ 1361.560075][T30000] bond0 (unregistering): Released all slaves
[ 1361.580763][T30000] bond1 (unregistering): Released all slaves
[ 1361.797484][T30000] bond2 (unregistering): (slave wireguard0): Releasing backup interface
[ 1361.806063][T30000] wireguard0: left promiscuous mode
[ 1361.816951][T30000] bond2 (unregistering): Released all slaves
[ 1362.025514][T30000] bond3 (unregistering): Released all slaves
[ 1362.047965][T30000] bond4 (unregistering): (slave vxcan3): Releasing backup interface
[ 1362.063565][T30000] bond4 (unregistering): Released all slaves
[ 1362.283389][T30000] bond5 (unregistering): Released all slaves
[ 1362.516842][T30000] bond6 (unregistering): Released all slaves
[ 1362.534319][T30000] bond7 (unregistering): Released all slaves
[ 1362.763972][T30000] bond8 (unregistering): Released all slaves
[ 1363.426172][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1363.897903][ T4232] virt_wifi0 speed is unknown, defaulting to 1000
[ 1363.907126][ T4232] ªªªªª9 speed is unknown, defaulting to 1000
[ 1363.947756][T30000] m1Ie5nè‹Ò: left promiscuous mode
[ 1364.089096][   T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1364.123898][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1364.157895][   T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1364.218359][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1364.243061][ T4232] xfrm0 speed is unknown, defaulting to 1000
[ 1364.480334][T30000] tipc: Disabling bearer <eth:syzkaller0>
[ 1364.503585][T30000] tipc: Left network mode
[ 1364.508157][   T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1364.563466][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1364.583616][   T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1364.604788][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1365.978728][ T4357] pimreg: entered allmulticast mode
[ 1366.633040][ T4374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1366.707018][ T4379] netlink: 'syz.0.7726': attribute type 15 has an invalid length.
[ 1366.718371][ T4379] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7726'.
[ 1366.782926][ T4374] netlink: 'syz.0.7726': attribute type 15 has an invalid length.
[ 1366.821197][ T4374] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7726'.
[ 1366.852392][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL
[ 1366.859643][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[ 1366.865743][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7728'.
[ 1367.016514][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7731'.
[ 1367.081543][ T4394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7731'.
[ 1367.519738][ T4397] wg1 speed is unknown, defaulting to 1000
[ 1367.877920][ T4422] netlink: 'syz.0.7737': attribute type 1 has an invalid length.
[ 1367.907686][ T4424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7737'.
[ 1368.213952][ T4434] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7739'.
[ 1368.289434][ T4422] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1368.299779][ T4435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7739'.
[ 1368.427950][ T4424] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1368.438516][ T4424] bond3: (slave batadv1): making interface the new active one
[ 1368.468957][ T4424] bond3: (slave batadv1): Enslaving as an active interface with an up link
[ 1368.679187][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7738'.
[ 1368.886865][ T4452] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7742'.
[ 1368.911512][ T4458] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1368.970534][ T4458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1369.214045][ T4464] netlink: 'syz.3.7729': attribute type 13 has an invalid length.
[ 1370.819759][ T4468] veth0: entered promiscuous mode
[ 1370.839915][ T4468] veth0: left promiscuous mode
[ 1371.967191][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms
[ 1371.976306][    C0] lec:lec_tx_timeout: lec0
[ 1372.167493][ T4464] veth1_vlan: left allmulticast mode
[ 1372.944542][ T4397] virt_wifi0 speed is unknown, defaulting to 1000
[ 1372.955911][ T4397] ªªªªª9 speed is unknown, defaulting to 1000
[ 1373.116771][ T3504] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1373.151554][ T3504] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.160178][ T5914] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1373.189888][ T5914] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.236133][ T4397] xfrm0 speed is unknown, defaulting to 1000
[ 1373.245933][ T5914] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1373.302822][ T5914] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.340665][ T5914] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1373.349176][ T5914] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.516094][ T4532] __nla_validate_parse: 5 callbacks suppressed
[ 1373.516115][ T4532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7754'.
[ 1373.964726][T30000] IPVS: stop unused estimator thread 0...
[ 1374.300055][ T4531] xt_CT: No such helper "snmp_trap"
[ 1374.588850][ T4570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7763'.
[ 1374.625967][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7762'.
[ 1374.635066][ T4569] netlink: 'syz.4.7762': attribute type 1 has an invalid length.
[ 1374.659060][ T4569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7762'.
[ 1374.673839][ T4569] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[ 1377.790407][ T4592] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7767'.
[ 1377.971081][ T4600] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1378.298420][ T4621] netlink: 'syz.0.7776': attribute type 2 has an invalid length.
[ 1378.310086][ T4621] netlink: 'syz.0.7776': attribute type 1 has an invalid length.
[ 1378.371389][ T4621] netlink: 'syz.0.7776': attribute type 2 has an invalid length.
[ 1378.413195][ T4621] netlink: 'syz.0.7776': attribute type 2 has an invalid length.
[ 1378.428864][ T4621] netlink: 'syz.0.7776': attribute type 1 has an invalid length.
[ 1378.476816][ T4621] netlink: 'syz.0.7776': attribute type 2 has an invalid length.
[ 1378.669883][ T4631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1378.741597][ T4634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7778'.
[ 1378.764828][ T4631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7779'.
[ 1379.167559][ T1143] Bluetooth: hci1: command 0x0406 tx timeout
[ 1379.244597][ T4648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7782'.
[ 1379.393985][ T4646] wg1 speed is unknown, defaulting to 1000
[ 1379.486948][ T4657] sctp: [Deprecated]: syz.1.7781 (pid 4657) Use of int in max_burst socket option.
[ 1379.486948][ T4657] Use struct sctp_assoc_value instead
[ 1379.786679][ T4670] wg1 speed is unknown, defaulting to 1000
[ 1379.988069][   T30] audit: type=1800 audit(1769835200.266:41): pid=4674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7789" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1600 res=0 errno=0
[ 1380.341451][ T4646] virt_wifi0 speed is unknown, defaulting to 1000
[ 1380.349712][ T4646] ªªªªª9 speed is unknown, defaulting to 1000
[ 1380.442283][ T4646] xfrm0 speed is unknown, defaulting to 1000
[ 1380.459783][ T4681] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7792'.
[ 1380.732911][ T4666] netlink: 'syz.4.7783': attribute type 6 has an invalid length.
[ 1380.819318][ T4670] virt_wifi0 speed is unknown, defaulting to 1000
[ 1380.850275][ T4670] ªªªªª9 speed is unknown, defaulting to 1000
[ 1381.100184][ T4702] IPVS: length: 132 != 8
[ 1381.162933][ T4670] xfrm0 speed is unknown, defaulting to 1000
[ 1381.365997][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7799'.
[ 1381.433437][ T4709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7799'.
[ 1382.035243][ T4720] syzkaller0: entered promiscuous mode
[ 1382.091722][ T4720] syzkaller0: entered allmulticast mode
[ 1382.346325][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7804'.
[ 1382.384273][ T4723] syzkaller0: entered promiscuous mode
[ 1382.391244][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7804'.
[ 1382.406907][ T4723] syzkaller0: entered allmulticast mode
[ 1383.458944][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7811'.
[ 1383.477312][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7811'.
[ 1383.800143][ T4780] openvswitch: netlink: IP tunnel dst address not specified
[ 1384.003348][ T4783] syzkaller0: entered promiscuous mode
[ 1384.071520][ T4783] syzkaller0: entered allmulticast mode
[ 1384.155045][ T4787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1384.183486][ T4789] netlink: 'syz.2.7821': attribute type 2 has an invalid length.
[ 1384.218402][ T4783] tipc: Resetting bearer <eth:syzkaller0>
[ 1384.235378][ T4795] __nla_validate_parse: 1 callbacks suppressed
[ 1384.235398][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7821'.
[ 1384.543148][ T4769] tipc: Resetting bearer <eth:syzkaller0>
[ 1384.787216][ T4813] netlink: 'syz.4.7827': attribute type 2 has an invalid length.
[ 1384.851650][ T4817] netlink: 'syz.4.7827': attribute type 6 has an invalid length.
[ 1384.920078][ T4820] netlink: 'syz.1.7830': attribute type 1 has an invalid length.
[ 1385.333994][T19384] lec:lec_start_xmit: lec0:No lecd attached
[ 1388.669641][ T4769] tipc: Disabling bearer <eth:syzkaller0>
[ 1388.691301][ T4318] tipc: Node number set to 1
[ 1388.705285][ T4824] netlink: 'syz.1.7831': attribute type 29 has an invalid length.
[ 1389.178045][ T4849] wg1 speed is unknown, defaulting to 1000
[ 1389.179340][ T4851] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7840'.
[ 1389.269400][ T4851] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7840'.
[ 1389.342212][ T4861] netlink: 4724 bytes leftover after parsing attributes in process `syz.3.7837'.
[ 1389.390766][ T4862] netlink: 'syz.2.7838': attribute type 1 has an invalid length.
[ 1389.634833][ T4856] wg1 speed is unknown, defaulting to 1000
[ 1389.945337][ T4849] virt_wifi0 speed is unknown, defaulting to 1000
[ 1389.959761][ T4849] ªªªªª9 speed is unknown, defaulting to 1000
[ 1390.071316][ T4849] xfrm0 speed is unknown, defaulting to 1000
[ 1390.204992][ T4866] wg1 speed is unknown, defaulting to 1000
[ 1390.215261][ T4883] batadv_slave_1: entered promiscuous mode
[ 1390.389449][ T4863] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[ 1390.427343][ T4863] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[ 1390.473726][ T4863] bridge0: port 3(netdevsim0) entered disabled state
[ 1390.544406][ T4876] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7842'.
[ 1390.658309][ T4882] batadv_slave_1: left promiscuous mode
[ 1391.000618][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms
[ 1391.008708][    C0] lec:lec_tx_timeout: lec0
[ 1391.174496][ T4905] ip6erspan0: entered allmulticast mode
[ 1391.271115][ T4856] virt_wifi0 speed is unknown, defaulting to 1000
[ 1391.416554][ T4856] ªªªªª9 speed is unknown, defaulting to 1000
[ 1391.479263][ T4856] xfrm0 speed is unknown, defaulting to 1000
[ 1391.587373][ T4914] wg1 speed is unknown, defaulting to 1000
[ 1391.707322][ T4894] SET target dimension over the limit!
[ 1392.596192][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7853'.
[ 1392.608705][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7853'.
[ 1392.688817][ T4936] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20003
[ 1392.807405][ T4914] virt_wifi0 speed is unknown, defaulting to 1000
[ 1392.819484][ T4914] ªªªªª9 speed is unknown, defaulting to 1000
[ 1392.835253][ T4866] virt_wifi0 speed is unknown, defaulting to 1000
[ 1392.872370][ T4866] ªªªªª9 speed is unknown, defaulting to 1000
[ 1392.892574][ T4866] xfrm0 speed is unknown, defaulting to 1000
[ 1393.798569][ T4914] xfrm0 speed is unknown, defaulting to 1000
[ 1394.181861][ T4961] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1394.207454][ T4961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7858'.
[ 1394.235473][ T4961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7858'.
[ 1394.759321][ T4972] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[ 1394.840370][ T4970] wg1 speed is unknown, defaulting to 1000
[ 1395.408789][ T4970] virt_wifi0 speed is unknown, defaulting to 1000
[ 1395.505442][ T4970] ªªªªª9 speed is unknown, defaulting to 1000
[ 1395.518415][ T4970] xfrm0 speed is unknown, defaulting to 1000
[ 1395.751835][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7865'.
[ 1397.412327][ T5010] syzkaller0: entered promiscuous mode
[ 1397.439801][ T5010] syzkaller0: entered allmulticast mode
[ 1397.468157][ T5019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1398.016426][ T5028] Cannot find del_set index 3 as target
[ 1398.057942][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7875'.
[ 1398.067170][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7875'.
[ 1398.138605][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7875'.
[ 1398.150120][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7875'.
[ 1398.335590][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7875'.
[ 1398.346695][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7875'.
[ 1400.989299][ T5023] geneve4: entered promiscuous mode
[ 1401.048818][T11027] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 37457 - 0
[ 1401.070948][T11027] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 37457 - 0
[ 1401.129097][T11027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 37457 - 0
[ 1401.144844][T11027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 37457 - 0
[ 1401.152807][ T5035] netlink: 'syz.1.7876': attribute type 10 has an invalid length.
[ 1401.175325][ T5027] wg1 speed is unknown, defaulting to 1000
[ 1401.222974][ T5035] netlink: 'syz.1.7876': attribute type 10 has an invalid length.
[ 1401.266176][ T5035] team0: Port device dummy0 removed
[ 1401.317916][ T5035] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1401.908128][ T5027] virt_wifi0 speed is unknown, defaulting to 1000
[ 1401.965949][ T5027] ªªªªª9 speed is unknown, defaulting to 1000
[ 1401.989275][ T5027] xfrm0 speed is unknown, defaulting to 1000
[ 1402.224262][ T5064] netlink: 'syz.0.7885': attribute type 1 has an invalid length.
[ 1402.283022][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7885'.
[ 1402.595083][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7886'.
[ 1402.622543][ T5069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7886'.
[ 1402.652277][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7887'.
[ 1402.662711][ T5069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7886'.
[ 1402.766517][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7887'.
[ 1402.933692][ T5080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1402.972668][ T5080] syzkaller0: entered promiscuous mode
[ 1402.978333][ T5080] syzkaller0: entered allmulticast mode
[ 1403.157890][ T5082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7890'.
[ 1403.274618][ T5087] wg1 speed is unknown, defaulting to 1000
[ 1403.445286][ T5097] wg1 speed is unknown, defaulting to 1000
[ 1403.477680][ T5100] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001
[ 1403.499820][ T5087] virt_wifi0 speed is unknown, defaulting to 1000
[ 1403.508378][ T5087] ªªªªª9 speed is unknown, defaulting to 1000
[ 1403.518583][ T5087] xfrm0 speed is unknown, defaulting to 1000
[ 1403.593119][ T5072] tipc: Resetting bearer <eth:syzkaller0>
[ 1403.834368][ T5072] tipc: Disabling bearer <eth:syzkaller0>
[ 1404.386830][ T5097] virt_wifi0 speed is unknown, defaulting to 1000
[ 1404.439857][ T5097] ªªªªª9 speed is unknown, defaulting to 1000
[ 1404.495962][ T5097] xfrm0 speed is unknown, defaulting to 1000
[ 1405.380272][ T5123] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1405.548580][ T5114] mpoa:mpoad_close: (<unknown>) going down
[ 1406.137165][ T5147] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7899'.
[ 1406.288697][ T5131] wg1 speed is unknown, defaulting to 1000
[ 1407.233183][ T5187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7906'.
[ 1407.407394][ T5193] netlink: 596 bytes leftover after parsing attributes in process `syz.4.7905'.
[ 1407.517400][ T5131] virt_wifi0 speed is unknown, defaulting to 1000
[ 1407.564597][ T5131] ªªªªª9 speed is unknown, defaulting to 1000
[ 1407.619424][ T5131] xfrm0 speed is unknown, defaulting to 1000
[ 1408.091590][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7911'.
[ 1408.531214][ T5216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7915'.
[ 1408.748736][ T5216] bond8: entered promiscuous mode
[ 1408.798873][ T5216] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1408.849068][ T5226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7917'.
[ 1409.386530][ T5216] bond8 (unregistering): Released all slaves
[ 1409.426780][ T5229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7918'.
[ 1409.462001][ T5229] lo: Caught tx_queue_len zero misconfig
[ 1409.467929][ T5229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7918'.
[ 1410.457669][ T5264] wg1 speed is unknown, defaulting to 1000
[ 1410.683832][ T5280] wg1 speed is unknown, defaulting to 1000
[ 1410.796109][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7930'.
[ 1410.844237][ T5283] bridge4: the hash_elasticity option has been deprecated and is always 16
[ 1410.869850][ T5283] bridge4: entered allmulticast mode
[ 1410.884944][ T5294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7928'.
[ 1410.925052][ T5281] tipc: MTU too low for tipc bearer
[ 1411.509191][ T5264] virt_wifi0 speed is unknown, defaulting to 1000
[ 1411.524337][ T5311] xt_hashlimit: max too large, truncated to 1048576
[ 1411.544641][ T5264] ªªªªª9 speed is unknown, defaulting to 1000
[ 1411.575151][ T5264] xfrm0 speed is unknown, defaulting to 1000
[ 1411.601610][ T5311] xt_hashlimit: overflow, try lower: 13/0
[ 1411.696749][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7937'.
[ 1411.825679][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7938'.
[ 1412.098870][ T5325] IPv6: Can't replace route, no match found
[ 1412.591939][ T5280] virt_wifi0 speed is unknown, defaulting to 1000
[ 1412.617722][ T5280] ªªªªª9 speed is unknown, defaulting to 1000
[ 1412.662741][ T5280] xfrm0 speed is unknown, defaulting to 1000
[ 1413.566584][ T5371] netlink: 'syz.2.7948': attribute type 2 has an invalid length.
[ 1413.714070][ T5371] netlink: 'syz.2.7948': attribute type 9 has an invalid length.
[ 1413.792814][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7948'.
[ 1413.810594][ T5369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7948'.
[ 1414.153307][ T5371] macvlan5: entered promiscuous mode
[ 1414.174743][ T5371] hsr0: entered promiscuous mode
[ 1414.209382][ T5371] macvlan5: entered allmulticast mode
[ 1414.241833][ T5371] hsr0: entered allmulticast mode
[ 1414.247060][ T5371] hsr_slave_0: entered allmulticast mode
[ 1414.293541][ T5371] hsr_slave_1: entered allmulticast mode
[ 1414.409311][ T5374] wg1 speed is unknown, defaulting to 1000
[ 1414.724331][ T5403] x_tables: duplicate entry at hook 3
[ 1415.068103][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7952'.
[ 1415.439368][ T5424] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7954'.
[ 1415.482682][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7956'.
[ 1415.624844][ T5374] virt_wifi0 speed is unknown, defaulting to 1000
[ 1415.662224][ T5374] ªªªªª9 speed is unknown, defaulting to 1000
[ 1415.670126][ T5374] xfrm0 speed is unknown, defaulting to 1000
[ 1415.986091][ T5444] xt_hashlimit: max too large, truncated to 1048576
[ 1416.018645][ T5444] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1416.087109][ T5444] netlink: 'syz.2.7961': attribute type 97 has an invalid length.
[ 1416.137578][ T5444] netlink: 'syz.2.7961': attribute type 4 has an invalid length.
[ 1416.212173][ T5444] netlink: 'syz.2.7961': attribute type 4 has an invalid length.
[ 1416.280998][ T5444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7961'.
[ 1416.296866][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7961'.
[ 1416.429707][ T5456] netlink: 'syz.0.7963': attribute type 1 has an invalid length.
[ 1416.497965][ T5456] bond4: entered promiscuous mode
[ 1416.512787][ T5457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7964'.
[ 1416.551269][ T5456] bond4: entered allmulticast mode
[ 1416.725229][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7963'.
[ 1416.738168][ T5459] bond4: (slave ip6gretap2): making interface the new active one
[ 1416.846568][ T5459] ip6gretap2: entered promiscuous mode
[ 1416.907455][ T5459] ip6gretap2: entered allmulticast mode
[ 1416.977996][ T5459] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[ 1417.076592][ T5456] bond4: left promiscuous mode
[ 1417.121300][ T5456] ip6gretap2: left promiscuous mode
[ 1417.131842][ T5456] bond4: left allmulticast mode
[ 1417.136983][ T5456] ip6gretap2: left allmulticast mode
[ 1417.145669][ T5456] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1417.534786][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7968'.
[ 1418.972199][ T5500] __nla_validate_parse: 1 callbacks suppressed
[ 1418.972218][ T5500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7976'.
[ 1419.011682][ T5511] sctp: [Deprecated]: syz.1.7978 (pid 5511) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1419.011682][ T5511] Use struct sctp_sack_info instead
[ 1419.054478][ T5502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7976'.
[ 1419.071352][ T5500] macvtap0: entered promiscuous mode
[ 1419.093165][ T5500] macvtap0: left promiscuous mode
[ 1419.272376][ T5502] macvtap0: entered promiscuous mode
[ 1419.302126][ T5502] macvtap0: left promiscuous mode
[ 1420.045565][ T5527] xt_hashlimit: max too large, truncated to 1048576
[ 1420.287138][ T5541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7988'.
[ 1420.917837][ T5562] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7994'.
[ 1420.962538][ T5562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7994'.
[ 1420.971911][ T5562] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7994'.
[ 1421.113503][ T5562] gre0: entered allmulticast mode
[ 1421.456197][ T5579] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7998'.
[ 1421.489486][ T5580] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7998'.
[ 1421.521279][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7998'.
[ 1421.866209][ T5547] delete_channel: no stack
[ 1422.231738][ T5596] syzkaller0: entered promiscuous mode
[ 1422.240551][ T5596] syzkaller0: entered allmulticast mode
[ 1422.292831][ T5600] ==================================================================
[ 1422.301054][ T5600] BUG: KASAN: slab-use-after-free in nr_neigh_put+0x21/0x170
[ 1422.308476][ T5600] Write of size 4 at addr ffff888026ddaf3c by task syz.1.8003/5600
[ 1422.316837][ T5600] 
[ 1422.319221][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz.1.8003 Not tainted syzkaller #0 PREEMPT(full) 
[ 1422.319248][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1422.319263][ T5600] Call Trace:
[ 1422.319272][ T5600]  <TASK>
[ 1422.319283][ T5600]  dump_stack_lvl+0xe8/0x150
[ 1422.319314][ T5600]  print_report+0xba/0x230
[ 1422.319336][ T5600]  ? nr_neigh_put+0x21/0x170
[ 1422.319355][ T5600]  kasan_report+0x117/0x150
[ 1422.319379][ T5600]  ? nr_neigh_put+0x21/0x170
[ 1422.319402][ T5600]  kasan_check_range+0x264/0x2c0
[ 1422.319427][ T5600]  nr_neigh_put+0x21/0x170
[ 1422.319446][ T5600]  nr_del_neigh+0x25a/0x2d0
[ 1422.319467][ T5600]  nr_rt_ioctl+0xd62/0xf90
[ 1422.319505][ T5600]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1422.319542][ T5600]  ? apparmor_capable+0x137/0x1a0
[ 1422.319578][ T5600]  ? capable+0x88/0xe0
[ 1422.319596][ T5600]  ? nr_ioctl+0x1b1/0x3b0
[ 1422.319624][ T5600]  sock_do_ioctl+0x101/0x320
[ 1422.319647][ T5600]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1422.319667][ T5600]  ? do_futex+0x333/0x420
[ 1422.319704][ T5600]  sock_ioctl+0x5c6/0x7f0
[ 1422.319725][ T5600]  ? __pfx_sock_ioctl+0x10/0x10
[ 1422.319744][ T5600]  ? __fget_files+0x2a/0x420
[ 1422.319765][ T5600]  ? __fget_files+0x3a0/0x420
[ 1422.319786][ T5600]  ? __fget_files+0x2a/0x420
[ 1422.319810][ T5600]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1422.319835][ T5600]  ? __pfx_sock_ioctl+0x10/0x10
[ 1422.319854][ T5600]  __se_sys_ioctl+0xfc/0x170
[ 1422.319885][ T5600]  do_syscall_64+0xe2/0xf80
[ 1422.319912][ T5600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.319932][ T5600]  ? trace_irq_disable+0x37/0x100
[ 1422.319952][ T5600]  ? clear_bhb_loop+0x60/0xb0
[ 1422.319976][ T5600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.319996][ T5600] RIP: 0033:0x7f3bd0f9aeb9
[ 1422.320015][ T5600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1422.320034][ T5600] RSP: 002b:00007f3bd1d7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1422.320056][ T5600] RAX: ffffffffffffffda RBX: 00007f3bd1216090 RCX: 00007f3bd0f9aeb9
[ 1422.320073][ T5600] RDX: 0000200000000680 RSI: 000000000000890c RDI: 0000000000000006
[ 1422.320087][ T5600] RBP: 00007f3bd1008c1f R08: 0000000000000000 R09: 0000000000000000
[ 1422.320101][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1422.320115][ T5600] R13: 00007f3bd1216128 R14: 00007f3bd1216090 R15: 00007fffa738a9e8
[ 1422.320141][ T5600]  </TASK>
[ 1422.320149][ T5600] 
[ 1422.561587][ T5600] Allocated by task 5599:
[ 1422.566058][ T5600]  kasan_save_track+0x3e/0x80
[ 1422.570778][ T5600]  __kasan_kmalloc+0x93/0xb0
[ 1422.575422][ T5600]  __kmalloc_cache_noprof+0x3d1/0x6e0
[ 1422.580817][ T5600]  nr_add_neigh+0x104/0x520
[ 1422.585365][ T5600]  nr_rt_ioctl+0xdf9/0xf90
[ 1422.589810][ T5600]  sock_do_ioctl+0x101/0x320
[ 1422.594420][ T5600]  sock_ioctl+0x5c6/0x7f0
[ 1422.598781][ T5600]  __se_sys_ioctl+0xfc/0x170
[ 1422.603408][ T5600]  do_syscall_64+0xe2/0xf80
[ 1422.607942][ T5600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.613856][ T5600] 
[ 1422.616206][ T5600] Freed by task 5600:
[ 1422.620292][ T5600]  kasan_save_track+0x3e/0x80
[ 1422.624987][ T5600]  kasan_save_free_info+0x46/0x50
[ 1422.630050][ T5600]  __kasan_slab_free+0x5c/0x80
[ 1422.634927][ T5600]  kfree+0x1be/0x650
[ 1422.638850][ T5600]  nr_del_neigh+0x246/0x2d0
[ 1422.643371][ T5600]  nr_rt_ioctl+0xd62/0xf90
[ 1422.647815][ T5600]  sock_do_ioctl+0x101/0x320
[ 1422.652433][ T5600]  sock_ioctl+0x5c6/0x7f0
[ 1422.656803][ T5600]  __se_sys_ioctl+0xfc/0x170
[ 1422.661441][ T5600]  do_syscall_64+0xe2/0xf80
[ 1422.666016][ T5600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.672011][ T5600] 
[ 1422.674358][ T5600] The buggy address belongs to the object at ffff888026ddaf00
[ 1422.674358][ T5600]  which belongs to the cache kmalloc-64 of size 64
[ 1422.688270][ T5600] The buggy address is located 60 bytes inside of
[ 1422.688270][ T5600]  freed 64-byte region [ffff888026ddaf00, ffff888026ddaf40)
[ 1422.702012][ T5600] 
[ 1422.704368][ T5600] The buggy address belongs to the physical page:
[ 1422.710821][ T5600] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26dda
[ 1422.719630][ T5600] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1422.727128][ T5600] page_type: f5(slab)
[ 1422.731167][ T5600] raw: 00fff00000000000 ffff88813fe268c0 ffffea0000a56ec0 dead000000000003
[ 1422.739780][ T5600] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[ 1422.748482][ T5600] page dumped because: kasan: bad access detected
[ 1422.754944][ T5600] page_owner tracks the page as allocated
[ 1422.760888][ T5600] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5835, tgid 5835 (syz-executor), ts 88717173954, free_ts 88621883212
[ 1422.780230][ T5600]  post_alloc_hook+0x228/0x280
[ 1422.785036][ T5600]  get_page_from_freelist+0x24dc/0x2580
[ 1422.790628][ T5600]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1422.796481][ T5600]  alloc_pages_mpol+0x232/0x4a0
[ 1422.801365][ T5600]  allocate_slab+0x86/0x3a0
[ 1422.805919][ T5600]  ___slab_alloc+0xd82/0x1760
[ 1422.810721][ T5600]  __slab_alloc+0x65/0x100
[ 1422.815184][ T5600]  __kmalloc_noprof+0x46c/0x7e0
[ 1422.820069][ T5600]  tnode_new+0xc3/0x3b0
[ 1422.824265][ T5600]  fib_insert_alias+0x9f7/0x1100
[ 1422.829233][ T5600]  fib_table_insert+0x695/0x1b50
[ 1422.834205][ T5600]  fib_magic+0x434/0x510
[ 1422.838496][ T5600]  fib_add_ifaddr+0x144/0x5f0
[ 1422.843212][ T5600]  fib_inetaddr_event+0x12e/0x190
[ 1422.848290][ T5600]  notifier_call_chain+0x19d/0x3a0
[ 1422.853451][ T5600]  blocking_notifier_call_chain+0x6a/0x90
[ 1422.859203][ T5600] page last free pid 5832 tgid 5832 stack trace:
[ 1422.865552][ T5600]  __free_frozen_pages+0xbf8/0xd70
[ 1422.870705][ T5600]  rcu_core+0xc9e/0x1750
[ 1422.875034][ T5600]  handle_softirqs+0x22a/0x7c0
[ 1422.879852][ T5600]  __irq_exit_rcu+0x5f/0x150
[ 1422.884478][ T5600]  irq_exit_rcu+0x9/0x30
[ 1422.888766][ T5600]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1422.894435][ T5600]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1422.900456][ T5600] 
[ 1422.902811][ T5600] Memory state around the buggy address:
[ 1422.908466][ T5600]  ffff888026ddae00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 1422.916555][ T5600]  ffff888026ddae80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 1422.924833][ T5600] >ffff888026ddaf00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1422.932922][ T5600]                                         ^
[ 1422.938839][ T5600]  ffff888026ddaf80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1422.947021][ T5600]  ffff888026ddb000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1422.955308][ T5600] ==================================================================
[ 1422.968088][ T5600] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1422.975356][ T5600] CPU: 1 UID: 0 PID: 5600 Comm: syz.1.8003 Not tainted syzkaller #0 PREEMPT(full) 
[ 1422.984716][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1422.994910][ T5600] Call Trace:
[ 1422.998230][ T5600]  <TASK>
[ 1423.001319][ T5600]  vpanic+0x1e0/0x670
[ 1423.005356][ T5600]  panic+0xc5/0xd0
[ 1423.009122][ T5600]  ? __pfx_panic+0x10/0x10
[ 1423.013589][ T5600]  ? preempt_schedule_thunk+0x16/0x30
[ 1423.019023][ T5600]  ? nr_neigh_put+0x21/0x170
[ 1423.023650][ T5600]  check_panic_on_warn+0x89/0xb0
[ 1423.028636][ T5600]  ? nr_neigh_put+0x21/0x170
[ 1423.033270][ T5600]  end_report+0x6f/0x140
[ 1423.037643][ T5600]  kasan_report+0x128/0x150
[ 1423.042277][ T5600]  ? nr_neigh_put+0x21/0x170
[ 1423.046915][ T5600]  kasan_check_range+0x264/0x2c0
[ 1423.051906][ T5600]  nr_neigh_put+0x21/0x170
[ 1423.056374][ T5600]  nr_del_neigh+0x25a/0x2d0
[ 1423.060935][ T5600]  nr_rt_ioctl+0xd62/0xf90
[ 1423.065483][ T5600]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1423.070481][ T5600]  ? apparmor_capable+0x137/0x1a0
[ 1423.075573][ T5600]  ? capable+0x88/0xe0
[ 1423.079720][ T5600]  ? nr_ioctl+0x1b1/0x3b0
[ 1423.084186][ T5600]  sock_do_ioctl+0x101/0x320
[ 1423.088834][ T5600]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1423.093977][ T5600]  ? do_futex+0x333/0x420
[ 1423.098355][ T5600]  sock_ioctl+0x5c6/0x7f0
[ 1423.102723][ T5600]  ? __pfx_sock_ioctl+0x10/0x10
[ 1423.107615][ T5600]  ? __fget_files+0x2a/0x420
[ 1423.112247][ T5600]  ? __fget_files+0x3a0/0x420
[ 1423.116975][ T5600]  ? __fget_files+0x2a/0x420
[ 1423.121607][ T5600]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1423.126584][ T5600]  ? __pfx_sock_ioctl+0x10/0x10
[ 1423.131474][ T5600]  __se_sys_ioctl+0xfc/0x170
[ 1423.136292][ T5600]  do_syscall_64+0xe2/0xf80
[ 1423.140925][ T5600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1423.147021][ T5600]  ? trace_irq_disable+0x37/0x100
[ 1423.152065][ T5600]  ? clear_bhb_loop+0x60/0xb0
[ 1423.156780][ T5600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1423.162716][ T5600] RIP: 0033:0x7f3bd0f9aeb9
[ 1423.167171][ T5600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1423.187351][ T5600] RSP: 002b:00007f3bd1d7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1423.195919][ T5600] RAX: ffffffffffffffda RBX: 00007f3bd1216090 RCX: 00007f3bd0f9aeb9
[ 1423.204043][ T5600] RDX: 0000200000000680 RSI: 000000000000890c RDI: 0000000000000006
[ 1423.212040][ T5600] RBP: 00007f3bd1008c1f R08: 0000000000000000 R09: 0000000000000000
[ 1423.220119][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1423.228201][ T5600] R13: 00007f3bd1216128 R14: 00007f3bd1216090 R15: 00007fffa738a9e8
[ 1423.236470][ T5600]  </TASK>
[ 1423.240110][ T5600] Kernel Offset: disabled
[ 1423.244439][ T5600] Rebooting in 86400 seconds..