last executing test programs:

2m52.894103721s ago: executing program 2 (id=2828):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000081001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200010000000007020000f8ffffffb703000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r5, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000280)=0xe, 0x1)
write$cgroup_type(r6, &(0x7f0000000180), 0x40010)

2m52.813497953s ago: executing program 2 (id=2829):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a021800000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94)

2m52.681183026s ago: executing program 2 (id=2831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a000810000008848457600580066000005229078e0000001ac1414aa0421880b0000000000000800090086dd080088be00000000191f35d40100000000000007080022eb00000003250f630002000000000000c90200261b0800655800000000"], 0x72)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001900010000000000fbdbdf0900000000040006801967ba5d8bfc"], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[], 0x10}}], 0x1, 0x4004804)
r4 = socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x7, 0x12)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @empty}], 0x30)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r7, &(0x7f0000000180), &(0x7f0000000340)=""/203}, 0x20)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054)

2m52.341720658s ago: executing program 2 (id=2834):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) (async, rerun: 64)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x5c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x21}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5f1e}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6a1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8004) (async, rerun: 64)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000001c0)=0xd, 0x4) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7, 0x8788, 0x20}, 0xc) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={r7, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x9, 0x9, 0x2, 0x2, 0x8000, 0x2}, &(0x7f0000000040)=0x9c) (async, rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}}, 0x2) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r11=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

2m52.264104339s ago: executing program 2 (id=2835):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0)
syz_emit_ethernet(0x40b, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd"}}}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0)
write(r4, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r8)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r9, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
tee(r3, r5, 0x8f5, 0x100000000000000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800)
write$cgroup_type(r5, &(0x7f0000000180), 0x9)
write(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

2m51.244310862s ago: executing program 2 (id=2846):
syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000208604ece9793862e4ffff01000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x4}, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6}, 0x50)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f00000000c0), 0x0, 0x1)
write$tun(r9, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)

2m35.124042054s ago: executing program 32 (id=2846):
syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000208604ece9793862e4ffff01000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x4}, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6}, 0x50)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f00000000c0), 0x0, 0x1)
write$tun(r9, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)

3.932555653s ago: executing program 0 (id=5314):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000780)='GPL\x00'}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001380)={'syztnl0\x00', 0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0xe, 0xc8}, {0x9, 0xff, 0x3}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x2e, 0x0, 0x61, 0x0, 0x30]}}, &(0x7f0000001440)=""/96, 0x47, 0x60, 0x0, 0x2}, 0x28)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%pI4   \x00'}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x5, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x0, &(0x7f0000001240), &(0x7f0000001140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001500)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001800)=[r0, r3, r4, r5, 0xffffffffffffffff, r6], &(0x7f0000001840)=[{0x5, 0x5, 0xf, 0xc}, {0x2, 0x5, 0xf, 0xa}, {0x4, 0x2, 0xf}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0x3}, 0x94)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600000049fbb08500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r7}, 0x38)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r10, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r12 = accept(r11, 0x0, 0x0)
sendmmsg$alg(r12, &(0x7f0000005f40)=[{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005240)="16345de08029397f88749e879e6b45be1131b0747c22c18f0d774bc63823b92aab0faa654530932968426555b0b050ccc23ede3be455a39f29547db89864a70d7f1ef5de7e82ea416fefc1768a620182d2132bd8e78d9f652868751876f5e3c9a4f58d14ceafe388f984ed9a67d2fd198787e8419fa5b25cdb0ae12826dfc841c179fef216d2fd8584", 0x89}, {&(0x7f0000005300)="145637c4e3c5cf83761fdcebaa8ebcc4ea37f119bd7beafc5d6a3b259e461dad2179b4a61cad9fe2ec4cd369091617deca7075fc925f86d8fae6c0471f391c995aaa5d175625f7f5557cc049c4a65db6807db39cd0a5564bba6d7066dee46651d82050f6e8cc96451213aeb7385331cc7c63ec326d536fe04aff57c23df16e95b097bbc54fb6ccf58906ccbcf8042ff191b3", 0x92}, {0x0}], 0x3}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001080)}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0)

3.057921969s ago: executing program 0 (id=5333):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x26)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000d10600000b00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000008d5a01000000010000a005f9ffffc74b0fc01d9a476e"], 0x48}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x801)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x2})
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000140)={0xa0000000})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f00000001c0)={0x7b03, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x7fffffffffffffff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff, 0x100000000}, 0x0, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x28, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000340))
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000008bfb7cbe5c5cf3354cad7c9b98a67c941a700e5e5bea0d312c29fa3773b8d06f7a3df3832eee5db9709cc8ae57a5a5e1827528736de912", @ANYRES16=r9, @ANYBLOB="20062cbd7000fcdbdf25060000000c009900030000000d0000000a001800030303030303000008000500070000000500530000000000"], 0x3c}}, 0x30000800)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="269c6cba8f9059490551ca33cd85dfa49af02094e20c189fede8b7e2006986a64667c83b431dfe111148e711025eb131eb6d59011f8392110a2dd1339f3edae526a659c54aa953d55526b5ff32fc178b02f36ec8f0a56a", @ANYRES16=r10, @ANYBLOB="8101000000000000000003000000"], 0x14}}, 0x0)

2.999524403s ago: executing program 0 (id=5336):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)

2.930231143s ago: executing program 0 (id=5338):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c0002803400038008000200070000000800010001000000080002000000000008000100070000000800010007000000080002000200000008000200e50b00000c0003"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189a42, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x200}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
epoll_create1(0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r8, 0x1, 0x80, 0x25dfdc01, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc46}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
close(r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

2.525508231s ago: executing program 0 (id=5346):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10c}, 0x1, 0x0, 0x0, 0x4004}, 0x20008890)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xf3a, 0x0)
splice(r5, 0x0, r6, 0x0, 0x80, 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
write(r6, &(0x7f0000003300)="ac", 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="0000000002000100240012800b00010065727370"], 0x44}}, 0x0)
close(0x3)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000009100"/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0xa0, 0x0, &(0x7f0000000740)="965b7a3312080000000000000000a1284f49316700f6317f7a9b3669e800864baea5a7163baee2c3bcc0b1b194f9379f0e9475d9f1016b87f3af2703759affdb48c4abfa35b67cd9fcb41c3a733af85f35297bf3ee90bfb272e21574ca05d4a0f95309233096db4d4341a1d6432d75c61a98254fe14628bdf4628ba49eaec34cb745450cf28b2d03e3c4ee49d98b4d893081693040bd5a673c65da8a8f9d2423", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$packet(0x11, 0x3, 0x300)

2.428773601s ago: executing program 0 (id=5349):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r0, r3, 0x8f5, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0xa, &(0x7f00000003c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x99}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@local, 0x1, 0x0, 0x20, 0x0, [{@local}, {@remote}]}})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r7, 0x11a, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
r8 = socket(0x11, 0x3, 0x7c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'gre0\x00', <r10=>0x0})
bind$packet(r8, &(0x7f0000000180)={0x11, 0x3, r10}, 0x14)
sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540), 0x395}, 0x24048000)
getsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4)

2.204860482s ago: executing program 5 (id=5353):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
socket$alg(0x26, 0x5, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf251a00000054002e80050005000100000008000600020000000c0004000203aaaaaaaaaaaa0c00040000000000000000000c000400025e2cfe66edb10620000500010000000c0004000202aaaaaaaaaaaa06000100390c000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x7c}}, 0x8000) (fail_nth: 4)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x5, 0xfffffffa)
connect$inet(r2, 0x0, 0x0)

1.670461344s ago: executing program 5 (id=5358):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00')
unshare(0x6a040000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req={0xf, 0x0, 0x4, 0x3}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x3, 0xb6bc, 0x5b}, 0x2c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x24044884)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001600), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x6c}, @ldst={0x2, 0x0, 0x6, 0x9, 0x7, 0x4, 0x4}], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x3ff, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d4, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xce}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0xa0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

1.430606337s ago: executing program 1 (id=5361):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x40, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}, @TCA_PIE_TARGET={0x8, 0x1, 0x80000001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x3}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newchain={0x78, 0x64, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0xfff4}, {0x9, 0xf}, {0x7, 0x1}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x81}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x25}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x301}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xfb, 0xd}}]}, 0x78}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r8, 0x0, &(0x7f0000000a80))
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000200000008000000f16dfc0f00000010", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)

1.347364029s ago: executing program 3 (id=5364):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.110660259s ago: executing program 1 (id=5365):
unshare(0x24060400) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="8500000089000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\"\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='2'], 0x20) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
pwrite64(r1, &(0x7f00000000c0)="8ce5affab1a8d366bb84ed7eda2d7c846ac3d96a43581e6dac353d61e947acf3a2cb3df75176e66794d6734f46900edd87fb5412c96fec159c1ad628163b139368d7a21fb675eb6444fb5b8b5c5fa3dbdee562eba2353e879ffda48f34a6", 0x5e, 0x7fffffffffffffff)

1.070384312s ago: executing program 5 (id=5366):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r1, 0x8921, &(0x7f0000000100)={'pim6reg1\x00', @ifru_data=&(0x7f00000000c0)="60a564be60e1f9cdf30c24e29eafecb00f0f7bc04cf5387f1fe06b2c04f91a9e"})
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe)
sendto$inet6(r2, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)

1.001495303s ago: executing program 4 (id=5367):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000002008000000000000000178508df5ede4d0000008a000000950000"], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r1=>0x0, 0x4, 0xc4, 0x4, 0x4, 0x48, @mcast2, @remote, 0x7, 0x7, 0x8000, 0x7}}) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f4ffffff850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) (async)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', <r12=>0x0}) (async)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x67, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000000)=@raw=[@exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3000000}}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x8c, &(0x7f0000000140)=""/140, 0x1f00, 0x0, '\x00', r1, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x180}, 0x10, 0x20aab, r0, 0x6, &(0x7f0000000540)=[r2, r3, r4, r7, 0x1, r8, r9, r10], &(0x7f0000000580)=[{0x5, 0x2, 0x9, 0x3}, {0x3, 0x3, 0x2, 0x2}, {0x4, 0x2, 0x2, 0x9}, {0x5, 0x5, 0x2, 0x2}, {0x3, 0x80002, 0xd, 0x4}, {0x2, 0x5, 0x2, 0x7}], 0x10, 0x3}, 0x94)

970.578262ms ago: executing program 3 (id=5368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0xa}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)

937.791525ms ago: executing program 4 (id=5369):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000000000400048028000380d8fd010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x2f4, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0xd7, 0x8, "a2ebcbb23d1bedf29973446cf3df48e46eacbd105e0845eaf17b578055cf47ddb4f20f40c6513392e4024de34375b93a2d523303f376ba11afdadeeb308487cbb9e520351f524c43d565c84bc02509cdce8dcc3058849c7960a6fbe9ac91c901702e064a3d873e6b7f6fd22775c62010fe40dde8ec22e840ddd186c1789b349f7e97b59797a29e3eb4702873125f84b5a76e9a462f36f9a83ab486441dc056778d0f49ba5c6e3a2cb72591b0b73fb6ac68b458088e11655a9f00c76c9e705ba0034fce06926955fd41de338969bf7dcd23e2f1"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xed, 0x8, "237a9ad35a04ce8e3424b722e8ef540ce3841ee5afbc99f6f35080fdb5f340f999b97bb71e7f38e27f5cd229f5dd381e583669112ef0bf0f253f7ed47ccdb06c6d7cf3eef3a4965f7fd816d006ed69eaf60d5ccf0feab4ebc13a9fe7fee4a80d732a291499efc662bb8d3bec967b245b10e8927cbe59e63b5ac62cfce380e47b77c3297095c46ece6b31ef19c6c16b1052ed49644fb6ff5519c3b0c858ac40f16a61d7cd2517d9ed4226fe5ed9501e9ed515c991d330e2d5c96badc4e2ed2996d9ff3eef27dffa1c19d74ac82ec60c8f88c67339692b1ec44ec4c2e5e6defc438f2cbc8a96a8ca0345"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x8e, 0x8, "b7c0113c9ef3aeb4554316e19e7c604c8d2fc28e72cea73e91dfef69713c51548f852dc6834f1f267d12f1bd6a1a8677a23e12cc7cf126275e1b67f33ebbfa17b6c58904b162b63041a56b07755b06301a414c579f0dfc0c6ea4f7ecf4562dc840086a269bd8406c40e7141ee21ea0cf74bfb146170633630bcfae6d83d00428e26b6ff1d867afd43dbb"}, @NFTA_OBJ_USERDATA={0x4c, 0x8, "bb3d155c0379c7bcb2afa7a953f3139e1446640476fe90dd414a4838941191602689b42411fa7ca138034b082ba8ddeace2d9a660b33d7ddbf76fc76c5531c2fe017867c5aa64ecd"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x2f4}}, 0x45)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

873.880599ms ago: executing program 3 (id=5370):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xcd400000, @local, 0x6}, 0x1c)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040)=0x5191cb7f, 0x4)
listen(r2, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0x7)
r3 = accept4(r2, 0x0, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00')
unshare(0x6a040000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
r5 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags})
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r6, 0x8b27, &(0x7f0000000080))
sendmmsg$inet6(r5, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}, {0x0}], 0x2}}], 0x1, 0xc0000)
r7 = socket(0x23, 0x5, 0x0)
ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f0000000000))
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

873.411474ms ago: executing program 5 (id=5371):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x118}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000900)="2ce98c23e443f9416378507a98dab24bb803e53f68fd78fb26db274d3ad23f048971c6f608c286b61fa5d1a5ce6a7edfe3bab8e589251c181b919f9195c75c911f86ab4ed759cc64679fb4d3f850dd66ae6ecdd012f218da33a5479a41003422d2316992b0a1c4f51ceb6689c824d2a07d8b211dce3cf9284def67c3ea6bf3d096a4536a9ee99af40ff1835ac7c1192cea0b1f9833cebc1a4079d0f4122f48bef51ec089f6fd5e91a158433adc51e273be9852fa03931288a05f7e680c5ff23b717a8978716b173a2d0eea4706903169f3349aacbd84bcf3ad16c15d758774c3da", &(0x7f00000001c0), 0xfffffffb}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38)
syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4)
setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$inet_tcp_buf(r5, 0x6, 0xe, &(0x7f00000001c0)="399ff4eaeaff2919db024a11a73cc0d1e3861c20c27906731a84686f08b4", 0x1e)
close(r5)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05a300000000000000000d"], 0x1c}}, 0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) (fail_nth: 13)

804.848792ms ago: executing program 1 (id=5372):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 64)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (rerun: 64)
write$cgroup_subtree(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32)
sendto$inet(r3, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) (async)
recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x2, 0x22, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async)
connect$vsock_stream(r5, &(0x7f0000000280), 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async)
unshare(0x42000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780800001cac1414aac100089078"], 0x0) (async, rerun: 32)
close(r8) (async, rerun: 32)
socket(0x10, 0x3, 0x0)

394.087968ms ago: executing program 1 (id=5373):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x9, 0x3}, {}, {0x9, 0xd}}}, 0x24}}, 0x4044004)
connect$netrom(r0, &(0x7f0000000000)={{0x3, @bcast, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESHEX=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000000000000000000000e93800"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=<r6=>0x0)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f0000000540)="6db1dfe621c62ed96411799a41c2156f51559ed1b2acb5afec88fc69745e097ba77f875386450adb4446657841b472a5b1f309a62a22c0c02a7a57e3640262a192025be09809bbe5d5a594c01bed99d9e6ee204282ee246f564dd0fe2936226defd6322aef7a9686d55fba"}, 0x20)
sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@nfc_llcp={0x27, r6, 0x0, 0x3, 0x4, 0x0, "f4d215f3173800e00382cc429d814f61e35b2bfed780789396757fb26c4b5294c9609cf17b4c70ab3cfa49c72ec2ae55322a4b0e2b1d2a98d59aa227f9e564", 0x7}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)="652f1633dfa910c6c7fd813ede594bca039de7f4a28f86beeee8dec3986cf084ec642aafaf417411b49c36caffab70659c180401e7afd9df8bb558c066e5ff9c81cafa1bc88515b589e0102d98b3958379ef6e0fd351ee358a7ad0c370d860bdc29a1e0b117b41aa36bb77030d4f99507c6ad39540c17e0c6f5c789274605238c6e9780723c78eb6b1958ae007738bc6372de070f6a4f2a8a7bc8ddc11cb933e00f61bc20cb700c8d0aacf83ee04eb71c41923717185b594ad4570cc1243db7f6357c6c5f88277f490cd007a325197427643c23da139cbccee98415498e72a9bf9ccf0c76973d41fa2", 0xe9}], 0x1, &(0x7f0000000e40)=[{0xc8, 0x104, 0xffffff3d, "069f662c9db0804156b03f485704d55e665d2682e5d0bed4d05c04358bfa76a1be04191816053777d90f5d4464043e3351a17a69e9a42fa455bfdb24f4b7cbc64ed14481a58376a45d0e9740320cc31d1e94c1c674861c63a08563b466e1b65d7175684caf0aadcb6458ce17a8cd2ca757536b8589f39ecc42ef976e04e8a90164f85ed513bbb52cee24ed215d328b7b5863161f1d62f097ea044615074127e6366b3f6ac706b2c10e0e762f6444bc5f2f3113093e"}, {0x1010, 0x10c, 0x9, "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"}], 0x10d8}}], 0x1, 0x1)

289.945931ms ago: executing program 4 (id=5374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @dev}})
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @dev}}) (async)

289.396074ms ago: executing program 1 (id=5375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x1d}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2b8, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x33, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @random="a437844be3b4", {0x4, 0x8}}, @tdls_disc_req={0xc, 0xa, {0x7d, {0x65, 0x12, {@from_mac=@device_b}}}}}}, @NL80211_ATTR_FRAME={0x23b, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="0b8d2747cdd4", {0x7, 0x1}}, @void, @void, @val={0x3, 0x1, 0x88}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x0, 0x0, {0x8, 0x5, 0x0, 0x3a0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x1, 0xb}}, @void, [{0xdd, 0x1a, "89623c0bc5849499caf7ffd9cbbe8b01c8302759173c8ec9a956"}, {0xdd, 0xb7, "e01792bbe1c4c9f0dd32798963c1a9acc84d9bf24a40552bedf1f22e78e1fce4772840775d68a427a2ae1638c2aa9efa3e50a26cfd7902bb3e62079f91fc961576e0395a498dbb6a321c02185496d15a1d63b3a0157964a47aba1dd3c16ffa647c3e12b63563854b7683937b6a178c6d75bcfb572da99902459f0c08d090b655cc073f8baf2e5853eef80c53963faea03ac5ff33171ddad19844bafefe46213fbd2437e2b3d0c56b89cdd9606eacc9e3a594730b9c0136"}, {0xdd, 0x7d, "43876807157bfe83db838d090a3f61f7abd21fdc35d7106cfb950212741bf48da19d9936e2ae4bf279ecb8fc9d6997044f6117e36d005fff6be0118b53e9f985984241ea8d91225d691f08a2ccb1a9898003e17a9e7e72d35e1abc64113127ca953dac918eab162012a6cc34ab746a48a64a6e0b49806e3cf5c6230362"}, {0xdd, 0xaa, "92ade6a003151e85d78bd4d07b9ac78fc0668d9d943c6999aca09339df99fb0c5a5149a659954a541a0f6149bd684767128bdf4778cde386e3a6ddc5d3a420e6b3fe5071e6aeb6b0c317305b31225d39ee4ee2fb6c5dfa038c8b6f6473a1eb8ab1f0913738e2427aa52279aefc795f31b6df630fd0923ce2c58fb2d9170cf93d1a2744025c58fd6330552ce536427b0ef3204119fc9ad60bcae6d0e0df9b1532f32ddead037ca4e40647"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000401008000440000000c8080002400000000b080003400000000208000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0)

287.14976ms ago: executing program 5 (id=5376):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
close(0xffffffffffffffff) (async)

237.7371ms ago: executing program 3 (id=5377):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r0}, 0x18) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000040000000090000008500000011000000850000000700000095000000000000000000002dc553404afb42ba9f7e34df0d14296b9b983cba322354abe72f862abf3b0026251ff77df4f4379acfe88c36"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000540)=@req3={0x4, 0x9, 0x5, 0x1, 0x5, 0x26be, 0xf9e9}, 0x1c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000403400000000000008000000181100", @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18)
r6 = socket(0x2a, 0x2, 0x0) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0xd, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000000010002000000e37729ca964bd3a729d0115d604efca0288eea50ec10d77271e84c2e00"/54, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000220900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000b60000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x5, 0xc9, &(0x7f0000000ac0)=""/201, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x6, 0x5, 0x2}, 0x10, 0x238a2, r1, 0x8, &(0x7f0000000c80)=[0xffffffffffffffff, r4, r8, r4, r4, r4, r4], &(0x7f0000000cc0)=[{0x0, 0x5, 0x9, 0x6}, {0x0, 0x3, 0xf, 0x5}, {0x3, 0x3, 0xa, 0x5}, {0x0, 0x1, 0x7, 0xa}, {0x0, 0x4, 0x7, 0x4}, {0x2, 0x5, 0x8, 0x6}, {0x4, 0x3, 0x1, 0x3}, {0x2, 0x2, 0x5, 0x6}], 0x10, 0x2}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newtfilter={0x1bc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18c, 0x2, [@TCA_FLOWER_ACT={0x180, 0x3, [@m_gact={0x17c, 0x86e, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x4, 0x16d8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x3eae3549, 0x3, 0xffc0, 0x300000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c52, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa98, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xffffffff, 0x10000000, 0x8, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x17ca}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1901, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x10d3, 0x3}}]}, {0xd7, 0x6, "fbb39fe6e8f2610420ebe4eca0918966cf8291a1a16e2fe7cba0b4783399b539835178f38771ff3a03392ae07eb2aaa5650b4da993ee34863d84d302729e4cf2f0466c8757b760bede048908c0ce3a4b59a5c2f6eb81849d10a992e8af2227891edad3b45380252528b5de43a00930fbcb01b886a95322566f6dc319cedb0fb6a7e7c38d787253f6dda41cb60e8b928ef708814da5924fe906ed1dbf915ec3e9558eb21cc6acb15f6ea903d2fc653def8dd82ecba74b9c5512b02b098b7da59894ffcf045725bb6b0e513bc6be8c1aab2ff6df"}, {0xc, 0x7, {0x0, 0xf985a5885c301c29}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x1bc}}, 0x24000000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="a80000401200200625bd7000fbdbdf25079d6e6cc711bf65e61e37c34e1517e193baafb439794b00000011c78c2e03e82a4649458d2a", @ANYRES32=0x0, @ANYBLOB="880000008200000008002e00040000004c001a8048000a80050008000400000014000700fc00000000000000000000000000000014000700fc01000000000000000000000000000014000700fe800000000000000000000000000011340012800e000100697036677265746170000000200002800800050006000000060010004e200000040012000800140000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x890}, 0x81) (async)
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) (async)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8f02}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000500000009"], 0x48)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000340)={'macsec0\x00'})
sendmmsg$inet6(r3, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c9ad9", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2)

214.477064ms ago: executing program 5 (id=5378):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70ad2c, 0x25dfdbfe, {0x2, 0x80, 0x80, 0x9, 0xff, 0x4, 0x0, 0x4, 0x2000}, ["", "", ""]}, 0x1c}}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
unshare(0x22020400)
unshare(0x10000400)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r3, r2, 0x5}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002"], 0x30}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @mcast2, 0x2}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000940)="3c3a9763928b166b74b2768113cf3c37b7f6070f1c56cf8e1910f1f235f7a0c4160183b513ee0ed700cb0987973e9eb253d5d8e753769009cdc83859c3c7cde79940247299c39b6410876ecfffd279d5778004138bfa8872ccc296a2851d01888b4406739e97c1170ca506bec196fd5906d0f8c8d287560cec437e0b657e5e69b43bbed1090012a7bced50b14ccce133d2da5a5a", 0x94}, {&(0x7f0000000380)="46de1dcbeef6a819fd1b5fc8f3e67758a90700056e8d76db01fa79f45c2caa91834e42e7a56ba144979a188ab01eb6d8c753b90ddf93e4e57a9997eafc91886313227841a774a434b7526d950b8cb958bfb2cb4e5ab9c08270625bb04119726b1477540667fa5f824f347c492e0fc0f402edceb07130744e40205bcda92537da8a5d59f3b4bdf77008f43605cd8fec58543fb370ab97cf7ec1f8aa7040602d706dd3050000006ecee740b4e74f148f68cde17cfa268eb379de8cb57cbbbe5478c06c15d3342cd51459a80999e69aacffa82d767d54128a3997e3b550c9eefa29574ec319af934fe486740e9910999ea077cb2536f55a62c5f76fc801372c", 0xfe}, {&(0x7f0000000800)="46d3a215d652c90b70b7817681c9cfa7dd9bca1a327f16f28d3ec0c818ef072087ec4333fa833578f2399b5942db97d18841fae7c5cf808d436e3dc8f97ae38be6dbdb15b3cb95fbd8644a8cce18ff4918ac56b4fa3c17cab441c34fa33fb183082ee7735989889beb24149988952c12dfad1c9948052dac43d5341deb8c6cf4dc0d76b9b2e39caa6a90887651e301e6dd5dd6559014078b12fd6ec4629e2eb911356fa8538d9314c2e8605d990e2acf01e4055ea22f105b9edf22bf6ec7ee2a299e94337e1677c4ba0e5d7130324a57808baf3c68b15fb8207c2deff2ceac773a5bf40c50e14d28795e", 0xea}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/32, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x4004081)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc}, {0xfff9}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x44, 0x1}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0xf7, 0x1ff00, 0x1, 0x1, 0x80000000, 0x4}}, {0xc, 0x2, [0x5, 0x2, 0x7ff, 0x1ff]}}]}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc8c5)
pipe(&(0x7f0000000480))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xb, &(0x7f00000007c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18)
r7 = socket$inet(0x2, 0x80000, 0x2)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0x4)
socket$igmp(0x2, 0x3, 0x2)

177.16049ms ago: executing program 4 (id=5379):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)

175.292162ms ago: executing program 3 (id=5380):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x3, 0x20, "7b160cf2d27cf45044e6f0fb5e51dc115710c1323fcde55f87e5da5ab638ce32"})
sendmmsg$inet6(r2, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f8d9", 0x2}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x44, @local, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000700)="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", 0x1000}], 0x1, &(0x7f0000002f80)=ANY=[@ANYBLOB="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"], 0x180}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000580)="dc00a341d30a05a7aa434249d1c663590ad3a544e1d2d0b32923186afdcc4c6e22d1c7762f21471e8795daead6929a6f0f95a9f7fb07594045d5556ea3e855894897dabfff0ab523e51a6dd9042e25a66660bd948614f3cca12e7abe52f07b4f8b06b7cc0bec01a7633e44c4f4871aec1558988a", 0x74}, {&(0x7f0000001880)="70fd94d8b05ae10f3a08f3378c89212af505592f8bc49c2d5e5004e07a9198c0dd2607e45434a385e01b32de2d13bc4bbe6388d7efc5da8de62de4377cf1ec00b5b4f7e3cfdd796e287d31604046f05621d5433b5ab5f52073d3a9f58e559706db12efb395a854ff183c65f002c4d4e924da50ba18bb6526a27ccc3d0c5946d07fb8e0c456af89264deb549de7aab1a21d50c41afa33c65f1d5bba718d3027efcba3db24c3a5dd2dfcb13232bd40dfb6731bbfc04bba0f62bcdc3ac1c456b7de3dabed206e8dffc3c4bdb12d5d84400285bf0621085cddf31302a8c5968833fc4de55ff06d5d0f970db99b532d64b1dd2a52d1c9", 0xf4}, {&(0x7f0000001980)="f95d3dc2a9fdfc62568607d2e115c6664445678f35bfaa79dc7cac730382a255c8f12ce900bd9851ac27f8cce4ec155fc6f8fbb286475d5dbf8123e2e06e3e813c62938fc768ca816aa3346ccba07eb84ee58c1131bcdb3c5b427c07945c07cfdb2376229fafbfd28c1fdced8ceeb6a92fee", 0x72}, {&(0x7f0000001a00)="46cfc91d052a7410aab44dc8e22b0e54ec967a704a3d05b66f364528970a5e075e774bbc175d007e66677273329703b66d00e16fc8b280170a3ce8fe576b58349e18946d6936ddf32084bddba393a367258f7a", 0x53}, {&(0x7f0000001a80)="5bb3862660e3933e206b6924dafb6609ffa26c7433787b61811785dfbb6af602eeb1a5a58852cf14a6e999a08ddaa69127a9c233c068a2e05fe035003565074d6a3cc799a9e01c2e0439d91f4480de1be2bcb8a761d553da118731c604ba225101e2a76bf8df118907a900c84e75914266a5e91b3b052c58b8460c5c512a61b09da0325ebad0c7684a5bd355cc29cee2", 0x90}], 0x5, &(0x7f0000001bc0)=[@rthdr={{0x58, 0x29, 0x39, {0x88, 0x8, 0x1, 0x1, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @remote]}}}, @rthdr={{0x68, 0x29, 0x39, {0xc, 0xa, 0x1, 0x7f, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @local, @local]}}}, @tclass={{0x14, 0x29, 0x43, 0x200}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001cc0)="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", 0x1000}], 0x1, &(0x7f0000002d00)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x3a, 0xe, '\x00', [@ra={0x5, 0x2, 0x8}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x1000}, @generic={0x10, 0x4d, "a5f6e2e7ffa19b7160a3b893c7495f505636e61cf597959ef8df97e390bad66f5c35924920bca056f73e22df86bb23da7b452423b5e016b4b33063d181689fa2b8781d6be36d1128cdcb16222d"}, @enc_lim={0x4, 0x1, 0xff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0xa8}}], 0x4, 0x400c004)
sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2}, 0x8d0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000a200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x808020d8}, 0x94)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
write$6lowpan_control(r3, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000354b28ca3225b0e3ea103b9664a0ca71d732b95fdd8d7f425210de264953fa634fb7b31db86d22be9a39401b91464258064fd230a88ba3", @ANYRES32, @ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x8, 0xfffffff1, 0xcf9, 0x20c, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x3ff}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xf07a441538966e1a)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffdf4, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0x4c8c1)

174.549096ms ago: executing program 1 (id=5381):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0"], 0x1874}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x4)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d0000", 0x32}], 0x1, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0)
openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'gretap0\x00', <r6=>0x0, 0x7800, 0x7, 0x9, 0x80, {{0x1c, 0x4, 0x2, 0x0, 0x70, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, {[@rr={0x7, 0x1b, 0x6e, [@local, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x13}]}, @lsrr={0x83, 0x1b, 0x13, [@local, @rand_addr=0x64010102, @private=0xa010100, @multicast1, @loopback, @loopback]}, @ssrr={0x89, 0x13, 0x18, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @generic={0x83, 0x7, "a204b68f46"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x9, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xd, &(0x7f0000000380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000240)='GPL\x00', 0x5, 0xd3, &(0x7f0000000400)=""/211, 0x40f00, 0x11, '\x00', r6, @lirc_mode2, r5, 0x8, &(0x7f0000000600)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x2, 0xfffff001, 0x6}, 0x10, r7, r5, 0x7, 0x0, &(0x7f00000006c0)=[{0x2, 0x5, 0xf, 0x2}, {0x1, 0x3, 0xe}, {0x4, 0x1, 0x10, 0xc}, {0x1, 0x5, 0xa, 0x4}, {0x3, 0x2, 0xd, 0x5}, {0x0, 0x3, 0x10, 0x5}, {0x5, 0x4, 0x4, 0x5}], 0x10, 0x4}, 0x94)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xb, @mcast2, 0x44}, 0x1c)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r11, r10}, 0x6)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0x2c}, {0x74, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x1}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0xa4}}, 0x4000)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

77.907821ms ago: executing program 4 (id=5382):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
tee(r1, r1, 0x100000001, 0x6)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x6c840}, 0xc0)
r4 = socket$netlink(0x10, 0x3, 0x12)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000, 0x0, 0x13d8000}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000c7257fedf3"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x884)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='rxrpc_improper_term\x00', r6, 0x0, 0x9}, 0x18)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002d000100ba26bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

76.598727ms ago: executing program 4 (id=5383):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback={0xffffffffffff0000}}, 0x1c)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffdff}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', <r6=>0x0, 0x7800, 0x10, 0x3, 0x5, {{0x27, 0x4, 0x1, 0x1, 0x9c, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3c}, {[@cipso={0x86, 0x49, 0xffffffffffffffff, [{0x0, 0x10, "48deaabf593cb7b3c7ab3e51eb00"}, {0x2, 0x10, "79b0c4ac828f817b128612070102"}, {0x6, 0x5, "538a61"}, {0x6, 0x4, "f4e9"}, {0x1, 0x10, "e2727ce15bd97dc74e15d5b341e6"}, {0x0, 0xa, "3b01f4be258032ac"}]}, @generic={0x83, 0x4, "df38"}, @ssrr={0x89, 0xb, 0x18, [@dev={0xac, 0x14, 0x14, 0xd}, @remote]}, @timestamp_prespec={0x44, 0x14, 0x81, 0x3, 0x3, [{@rand_addr=0x64010101, 0xffffff7f}, {@broadcast, 0x6b57}]}, @end, @timestamp_addr={0x44, 0x14, 0x43, 0x1, 0x2, [{@rand_addr=0x40, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}]}, @ssrr={0x89, 0x7, 0x79, [@remote]}]}}}}}) (rerun: 64)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r6}, 0x14) (async, rerun: 64)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x0, @phonet={0x23, 0x7, 0x8, 0x5}, @phonet={0x23, 0x2, 0xff, 0x6}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x46, 0x0, 0x0, 0x0, 0x100, 0x0, 0xcb75, 0xb, 0xf88}) (async)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x20) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200000028000480240001800a00010072616e676500000014000280080001400000000808000240000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a47707ce92ea9244f691e120d69a7d6fcf16dcdf59fee8914f157af1b22e9d55700874c838d1be292e4fad7cd40e8fa703d2374adf1913fcde7ddb8babc7f2c655fd59faf550e65c6f5227e71229adc84c9c0e7e6f9e2660406516eee532d"], 0x7c}}, 0x0)

0s ago: executing program 3 (id=5384):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711239000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x400003}, 0x94)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100b3d4850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000380)={r3})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000000)="0e0673cac2368fd0e889ae19f31eba94fa3261e4286d8444be45c4915a308674ee7aa3fec1c56ddd8fb1e4f24c3dd9faa317e0a7d8b0590423275f3718ecaf80", &(0x7f00000000c0)=""/185, &(0x7f0000000040)="804998b7d4620ba2", &(0x7f0000000180)="3364d66363b06eb3522dcff0c2d7458da1baecff6346f3769609bc0155369f2667c24e006114241c1dab0d173e8e9611a6bfa250543de2a1de3ff7b0c6d6e4813bb9de995e8228c3e2c825ef298b81aac37faf64a193d0a843d165fb3e0ed084a4c681a725a1b6ceee27755dc34b17cace14a2259b7f99b83bd339d9562bf5e409d73b74e8728c7a65317b4a98af2c271cb7d036c0043fafc272b5c008a9a0f0a4c2b268b01b7dccb9220eb9048644be8eb45f469a3fb31dab780f2154f1cea20eadc40b6ebff1", 0x22b, r1, 0x4}, 0x38)

kernel console output (not intermixed with test programs):

nknown, defaulting to 1000
[  351.727286][T20439] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  351.756085][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4151'.
[  351.784976][T20441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4151'.
[  351.931185][T20453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'.
[  352.074109][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4159'.
[  352.084616][T20470] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4160'.
[  352.105377][T20470] batadv2: entered promiscuous mode
[  352.121870][T20470] batadv2: entered allmulticast mode
[  352.166504][T20469] lo speed is unknown, defaulting to 1000
[  352.203431][T20469] wg1 speed is unknown, defaulting to 1000
[  352.208613][T20483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4163'.
[  352.242276][T20485] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  352.403182][T20500] svc: failed to register nfsdv3 RPC service (errno 111).
[  352.412286][T20500] svc: failed to register nfsaclv3 RPC service (errno 111).
[  352.451590][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4163'.
[  352.479632][T20512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4166'.
[  352.624015][T20518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.651887][T20520] netlink: 'syz.1.4172': attribute type 1 has an invalid length.
[  352.773332][T20520] bond2: (slave gretap1): making interface the new active one
[  352.784159][T20520] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  352.816060][T20523] netlink: 'syz.4.4173': attribute type 11 has an invalid length.
[  352.832073][T20523] netlink: 'syz.4.4173': attribute type 11 has an invalid length.
[  352.841800][T17832] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  352.852376][T17832] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  352.871402][T17832] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  352.912110][T17832] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.051605][T20532] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  353.429743][T20551] netlink: 'syz.4.4182': attribute type 10 has an invalid length.
[  353.450485][T20552] vlan0: entered promiscuous mode
[  353.719287][T20569] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  354.229617][T20600] lo speed is unknown, defaulting to 1000
[  354.249119][T20600] wg1 speed is unknown, defaulting to 1000
[  354.264878][T20619] netlink: 'syz.1.4199': attribute type 13 has an invalid length.
[  354.313335][T20619] lo speed is unknown, defaulting to 1000
[  354.327312][T20619] wg1 speed is unknown, defaulting to 1000
[  354.352057][T20624] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  354.408952][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  354.565732][T20635] netlink: 'syz.0.4206': attribute type 5 has an invalid length.
[  354.862399][T20649] lo speed is unknown, defaulting to 1000
[  354.883071][T20649] wg1 speed is unknown, defaulting to 1000
[  354.940466][T20654] xfrm1: entered allmulticast mode
[  355.244177][T20673] openvswitch: netlink: Missing valid actions attribute.
[  355.255710][T20673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.717554][T20715] netlink: 'syz.5.4230': attribute type 1 has an invalid length.
[  355.732408][T20717] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  355.760814][T17830] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.779836][T17830] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.798857][T17830] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.844287][T17830] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.866334][T20728] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  356.004678][T20741] vlan3: entered promiscuous mode
[  356.169078][T20754] vlan2: entered allmulticast mode
[  356.174240][T20754] bridge_slave_0: entered allmulticast mode
[  356.246101][T20757] bridge0: port 3(erspan0) entered blocking state
[  356.266683][T20757] bridge0: port 3(erspan0) entered disabled state
[  356.286758][T20757] erspan0: entered allmulticast mode
[  356.303215][T20757] erspan0: entered promiscuous mode
[  356.320509][T20761] erspan0: left allmulticast mode
[  356.335799][T20761] erspan0: left promiscuous mode
[  356.358461][T20761] bridge0: port 3(erspan0) entered disabled state
[  356.369240][T20765] __nla_validate_parse: 211 callbacks suppressed
[  356.369258][T20765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4248'.
[  356.423492][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4242'.
[  356.438787][T20765] lo speed is unknown, defaulting to 1000
[  356.457784][T20765] wg1 speed is unknown, defaulting to 1000
[  356.486823][T20745] netlink: 'syz.1.4242': attribute type 13 has an invalid length.
[  356.535490][T20745] netlink: 'syz.1.4242': attribute type 17 has an invalid length.
[  356.632345][T20779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4251'.
[  356.632587][T20745] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.651170][T20745] 8021q: adding VLAN 0 to HW filter on device team0
[  356.704703][T20745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  356.750900][T20770] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4250'.
[  356.763665][T20781] lo speed is unknown, defaulting to 1000
[  356.806362][T20781] wg1 speed is unknown, defaulting to 1000
[  356.824148][T20791] netlink: 'syz.0.4253': attribute type 10 has an invalid length.
[  356.840219][T20791] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  356.859731][T20791] team0: Failed to send options change via netlink (err -105)
[  356.867410][T20791] team0: Port device dummy0 added
[  356.885636][T20775] IPVS: length: 24 != 55320
[  356.984528][T20794] geneve2: left promiscuous mode
[  356.999628][T20794] geneve2: left allmulticast mode
[  357.057481][T20794] vlan2: left allmulticast mode
[  357.073151][T20794] veth1: left allmulticast mode
[  357.144854][T20794] geneve3: left promiscuous mode
[  357.159864][T20794] geneve3: left allmulticast mode
[  357.256419][T17828] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.271081][T17828] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  357.284132][T20804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.291908][T20818] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  357.312652][T17425] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.328132][T17425] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  357.355851][T17425] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.365446][T17425] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  357.392367][T20830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.410494][T20804] tipc: Disabling bearer <eth:syzkaller0>
[  357.433773][T17425] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.460754][T17425] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  357.483211][T17832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.512586][T17832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.673315][T20850] !
: renamed from dummy0 (while UP)
[  357.798447][T20858] lo speed is unknown, defaulting to 1000
[  357.816606][T20858] wg1 speed is unknown, defaulting to 1000
[  357.900723][T20870] validate_nla: 35 callbacks suppressed
[  357.900741][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  357.917216][T20870] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4273'.
[  357.927550][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  357.939490][T20870] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4273'.
[  357.950148][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  357.957955][T20873] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4274'.
[  357.969568][T20870] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4273'.
[  357.979624][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  357.987440][T20870] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4273'.
[  358.000360][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  358.011928][T20870] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4273'.
[  358.022642][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  358.031091][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  358.039661][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  358.047541][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  358.056428][T20870] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  358.647938][T20915] lo speed is unknown, defaulting to 1000
[  358.666166][T20915] wg1 speed is unknown, defaulting to 1000
[  358.717884][T20920] IPVS: set_ctl: invalid protocol: 59 172.30.1.5:20001
[  358.886583][T20931] syzkaller1: entered promiscuous mode
[  358.893281][T20931] syzkaller1: entered allmulticast mode
[  358.924381][T20934] lo speed is unknown, defaulting to 1000
[  358.949325][T20934] wg1 speed is unknown, defaulting to 1000
[  359.294885][T20958] : renamed from team0
[  359.559633][T20977] syzkaller1: entered promiscuous mode
[  359.568219][T20977] syzkaller1: entered allmulticast mode
[  360.164702][T21044] sctp: [Deprecated]: syz.0.4318 (pid 21044) Use of struct sctp_assoc_value in delayed_ack socket option.
[  360.164702][T21044] Use struct sctp_sack_info instead
[  360.182040][T21034] block nbd0: NBD_DISCONNECT
[  360.186900][T21034] block nbd0: Send disconnect failed -32
[  360.193967][T21034] block nbd0: shutting down sockets
[  360.691367][T17826] bond1 (unregistering): Released all slaves
[  360.702323][T17826] bond2 (unregistering): Released all slaves
[  360.712150][T17826] bond3 (unregistering): Released all slaves
[  360.722104][T17826] bond0 (unregistering): Released all slaves
[  360.821195][T17826] tipc: Disabling bearer <udp:syz2>
[  360.836845][T17826] tipc: Left network mode
[  361.069667][T17826] team0: left promiscuous mode
[  361.111449][T21098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  361.345351][T21106] veth1: entered promiscuous mode
[  361.596421][T21114] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  362.047594][T17826] IPVS: stop unused estimator thread 0...
[  362.051500][T21152] lo speed is unknown, defaulting to 1000
[  362.060544][T21152] wg1 speed is unknown, defaulting to 1000
[  362.091973][T21156] __nla_validate_parse: 41 callbacks suppressed
[  362.091990][T21156] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4352'.
[  362.109123][T21156] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4352'.
[  362.164904][T21160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.187400][T21159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4348'.
[  362.209647][T21151] lo speed is unknown, defaulting to 1000
[  362.229203][T21151] wg1 speed is unknown, defaulting to 1000
[  362.235867][T21156] rdma_rxe: rxe_newlink: failed to add lo
[  362.349079][T21156] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.364250][T21156] 8021q: adding VLAN 0 to HW filter on device team0
[  362.377034][T21156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.618467][T21175] lo speed is unknown, defaulting to 1000
[  362.625039][T21175] wg1 speed is unknown, defaulting to 1000
[  362.893808][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4359'.
[  362.903148][T21187] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  362.910794][T21187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.954568][T21202] bridge2: entered promiscuous mode
[  362.960709][T21202] bridge2: entered allmulticast mode
[  362.977766][T21198] lo speed is unknown, defaulting to 1000
[  363.001661][T21202] syzkaller0: entered promiscuous mode
[  363.007217][T21202] syzkaller0: entered allmulticast mode
[  363.016926][T21198] wg1 speed is unknown, defaulting to 1000
[  363.093978][T21210] netlink: 34 bytes leftover after parsing attributes in process `syz.4.4365'.
[  363.163448][T21217] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4367'.
[  363.172839][T21217] 8021q: VLANs not supported on ipvlan1
[  363.183177][T21217] macsec1: entered promiscuous mode
[  363.190896][T21217] macsec1: entered allmulticast mode
[  363.291731][T21223] validate_nla: 26 callbacks suppressed
[  363.291752][T21223] netlink: 'syz.4.4370': attribute type 58 has an invalid length.
[  363.312563][T21223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4370'.
[  363.347259][T21226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.491769][T21242] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  363.565702][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4380'.
[  363.580946][T21248] Bluetooth: MGMT ver 1.23
[  363.611629][T21249] lo speed is unknown, defaulting to 1000
[  363.618014][T21249] wg1 speed is unknown, defaulting to 1000
[  363.655153][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4380'.
[  363.844539][T21260] vlan3: entered promiscuous mode
[  363.854182][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4385'.
[  363.934347][T21265] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  363.954488][T21267] lo speed is unknown, defaulting to 1000
[  363.961801][T21267] wg1 speed is unknown, defaulting to 1000
[  363.962385][T21265] netlink: 'syz.0.4387': attribute type 10 has an invalid length.
[  364.146064][T21281] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  364.384252][T21296] xt_socket: unknown flags 0x50
[  364.534697][T21302] vlan3: entered promiscuous mode
[  365.479603][T21348] FAULT_INJECTION: forcing a failure.
[  365.479603][T21348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.548876][T21348] CPU: 1 UID: 0 PID: 21348 Comm: syz.1.4409 Not tainted syzkaller #0 PREEMPT(full) 
[  365.548925][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  365.548951][T21348] Call Trace:
[  365.548958][T21348]  <TASK>
[  365.548967][T21348]  dump_stack_lvl+0x189/0x250
[  365.548992][T21348]  ? __pfx____ratelimit+0x10/0x10
[  365.549017][T21348]  ? __pfx_dump_stack_lvl+0x10/0x10
[  365.549036][T21348]  ? __pfx__printk+0x10/0x10
[  365.549057][T21348]  ? __might_fault+0xb0/0x130
[  365.549083][T21348]  ? rcu_is_watching+0x15/0xb0
[  365.549102][T21348]  should_fail_ex+0x414/0x560
[  365.549126][T21348]  _copy_from_iter+0x1db/0x16f0
[  365.549145][T21348]  ? rcu_is_watching+0x15/0xb0
[  365.549163][T21348]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  365.549186][T21348]  ? __pfx__copy_from_iter+0x10/0x10
[  365.549204][T21348]  ? __build_skb_around+0x257/0x3e0
[  365.549234][T21348]  ? netlink_sendmsg+0x642/0xb30
[  365.549249][T21348]  ? skb_put+0x11b/0x210
[  365.549267][T21348]  netlink_sendmsg+0x6b2/0xb30
[  365.549288][T21348]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.549305][T21348]  ? aa_sock_msg_perm+0xf1/0x1d0
[  365.549322][T21348]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  365.549341][T21348]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.549364][T21348]  __sock_sendmsg+0x21c/0x270
[  365.549388][T21348]  ____sys_sendmsg+0x505/0x830
[  365.549409][T21348]  ? __pfx_____sys_sendmsg+0x10/0x10
[  365.549431][T21348]  ? import_iovec+0x74/0xa0
[  365.549451][T21348]  ___sys_sendmsg+0x21f/0x2a0
[  365.549470][T21348]  ? __pfx____sys_sendmsg+0x10/0x10
[  365.549505][T21348]  ? __fget_files+0x2a/0x420
[  365.549520][T21348]  ? __fget_files+0x3a0/0x420
[  365.549540][T21348]  __x64_sys_sendmsg+0x19b/0x260
[  365.549560][T21348]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  365.549583][T21348]  ? __pfx_ksys_write+0x10/0x10
[  365.549623][T21348]  ? rcu_is_watching+0x15/0xb0
[  365.549642][T21348]  do_syscall_64+0xfa/0x3b0
[  365.549663][T21348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.549681][T21348]  ? clear_bhb_loop+0x60/0xb0
[  365.549700][T21348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.549721][T21348] RIP: 0033:0x7fb8faf8ebe9
[  365.549742][T21348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.549757][T21348] RSP: 002b:00007fb8fbe34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.549786][T21348] RAX: ffffffffffffffda RBX: 00007fb8fb1b5fa0 RCX: 00007fb8faf8ebe9
[  365.549800][T21348] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  365.549812][T21348] RBP: 00007fb8fbe34090 R08: 0000000000000000 R09: 0000000000000000
[  365.549824][T21348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.549836][T21348] R13: 00007fb8fb1b6038 R14: 00007fb8fb1b5fa0 R15: 00007ffcc0cb7dd8
[  365.549858][T21348]  </TASK>
[  365.938682][T21356] tun0: tun_chr_ioctl cmd 2147767520
[  365.982507][T21357] vlan3: entered promiscuous mode
[  366.392377][T21387] batman_adv: batadv0: Adding interface: dummy0
[  366.400531][T21387] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.484236][T21378] svc: failed to register nfsdv3 RPC service (errno 111).
[  366.499014][T21387] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  366.509046][T21378] svc: failed to register nfsaclv3 RPC service (errno 111).
[  366.517767][T21394] netlink: 'syz.5.4423': attribute type 1 has an invalid length.
[  366.565297][T21387] batman_adv: batadv0: Adding interface: ip6gretap2
[  366.572911][T21387] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.601696][T21387] batman_adv: batadv0: Interface activated: ip6gretap2
[  366.614400][T21396] vlan3: entered promiscuous mode
[  367.275477][T21411] lo speed is unknown, defaulting to 1000
[  367.283784][T21411] wg1 speed is unknown, defaulting to 1000
[  367.396859][T21434] __nla_validate_parse: 7 callbacks suppressed
[  367.396876][T21434] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4435'.
[  367.537285][T21451] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4436'.
[  367.571094][T21447] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4438'.
[  367.588450][T21450] bridge: RTM_NEWNEIGH with invalid ether address
[  367.815126][T21459] vlan3: entered promiscuous mode
[  367.891816][T21469] tipc: Started in network mode
[  367.910834][T21469] tipc: Node identity 1227badf9a4a, cluster identity 4711
[  367.924765][T21469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.946859][T21471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4444'.
[  367.951846][T21475] syzkaller0: entered promiscuous mode
[  367.964623][T21475] syzkaller0: entered allmulticast mode
[  367.980228][T21471] netlink: 'syz.4.4444': attribute type 10 has an invalid length.
[  367.988902][T21471] batman_adv: batadv0: Removing interface: dummy0
[  368.012233][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4446'.
[  368.027584][T21471] team0: Port device dummy0 added
[  368.106006][T21482] bond0: (slave wlan1): Releasing backup interface
[  368.133334][T21468] tipc: Resetting bearer <eth:syzkaller0>
[  368.152985][T21468] tipc: Disabling bearer <eth:syzkaller0>
[  368.198012][T21484] lo speed is unknown, defaulting to 1000
[  368.220055][T21484] wg1 speed is unknown, defaulting to 1000
[  368.329316][T21508] vlan3: entered promiscuous mode
[  368.343844][T21504] lo speed is unknown, defaulting to 1000
[  368.354323][T21504] wg1 speed is unknown, defaulting to 1000
[  368.426579][T21514] IPv6: NLM_F_REPLACE set, but no existing node found!
[  368.499974][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4458'.
[  368.643936][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4461'.
[  368.672485][T21531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.690296][T21531] syzkaller0: entered promiscuous mode
[  368.703276][T21531] syzkaller0: entered allmulticast mode
[  368.713825][T21531] tipc: Resetting bearer <eth:syzkaller0>
[  368.728455][T21529] tipc: Resetting bearer <eth:syzkaller0>
[  368.739009][T21529] tipc: Disabling bearer <eth:syzkaller0>
[  368.805149][T21535] netlink: 'syz.1.4462': attribute type 13 has an invalid length.
[  368.813976][T21535] netlink: 'syz.1.4462': attribute type 17 has an invalid length.
[  368.845239][T21535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.880636][T21535] lo speed is unknown, defaulting to 1000
[  368.887312][T21535] wg1 speed is unknown, defaulting to 1000
[  368.917908][T21542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4464'.
[  368.982329][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'.
[  369.021570][T21548] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  369.037327][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4466'.
[  369.216791][T21559] vlan3: entered promiscuous mode
[  369.242770][T21559] batadv0: entered promiscuous mode
[  369.330051][T21570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.344793][T21567] lo speed is unknown, defaulting to 1000
[  369.368828][T21570] tipc: Resetting bearer <eth:syzkaller0>
[  369.402297][T21576] netlink: 'syz.4.4477': attribute type 9 has an invalid length.
[  369.402719][T21574] bridge3: entered allmulticast mode
[  369.416387][T21567] wg1 speed is unknown, defaulting to 1000
[  369.432054][T21569] tipc: Disabling bearer <eth:syzkaller0>
[  369.442085][T21578] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  369.565338][T21586] veth0_vlan: entered allmulticast mode
[  369.672056][T21598] syz_tun: entered allmulticast mode
[  369.690255][T21598] dvmrp8: entered allmulticast mode
[  369.762486][T21603] vlan3: entered promiscuous mode
[  369.809784][T21608] syz_tun: left allmulticast mode
[  369.815094][T21608] dvmrp8: left allmulticast mode
[  369.852851][T21610] Set syz1 is full, maxelem 65536 reached
[  369.870177][T21612] IPVS: length: 182 != 8
[  369.933255][T21608] lo speed is unknown, defaulting to 1000
[  369.952691][T21608] wg1 speed is unknown, defaulting to 1000
[  370.147874][T21628] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  370.454820][T21636] netlink: 'syz.4.4498': attribute type 1 has an invalid length.
[  370.497117][T21641] netlink: 'syz.1.4497': attribute type 10 has an invalid length.
[  370.505706][T21641] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  370.507329][T21644] netlink: 'syz.4.4499': attribute type 1 has an invalid length.
[  370.522855][T21641] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  370.607068][T21647] vlan2: entered promiscuous mode
[  370.630182][T21648] 8021q: adding VLAN 0 to HW filter on device bond4
[  370.692537][T21648] veth5: entered promiscuous mode
[  370.745863][T21644] team0: Port device dummy0 removed
[  370.772849][T21644] bond0: (slave bond3): Releasing active interface
[  370.806051][T21644] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  370.816576][T21644] batman_adv: batadv0: Removing interface: ip6gretap2
[  370.827872][T21661] IPv4: Oversized IP packet from 127.202.26.0
[  370.848415][T21663] only policy match revision 0 supported
[  370.848431][T21663] unable to load match
[  370.897354][T21660] netlink: 'syz.1.4504': attribute type 1 has an invalid length.
[  371.070047][T21678] lo speed is unknown, defaulting to 1000
[  371.083883][T21678] wg1 speed is unknown, defaulting to 1000
[  371.107783][T21679] lo speed is unknown, defaulting to 1000
[  371.133698][T21687] netlink: 'syz.5.4510': attribute type 10 has an invalid length.
[  371.153763][T21679] wg1 speed is unknown, defaulting to 1000
[  371.166849][T21687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.177636][T21687] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  371.551106][T21707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  371.646691][T21711] syzkaller0: create flow: hash 1322920993 index 1
[  371.647902][T17830] syzkaller0: tun_net_xmit 76
[  371.682271][T17830] syzkaller0: tun_net_xmit 48
[  371.684617][T19912] syzkaller0: tun_net_xmit 76
[  371.735515][T21711] syzkaller0: delete flow: hash 1322920993 index 1
[  371.768353][T21717] netlink: 'syz.4.4519': attribute type 88 has an invalid length.
[  372.014946][T21739] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  372.027730][T21732] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  372.047206][T21733] bridge_slave_1: left allmulticast mode
[  372.079190][T21733] bridge_slave_1: left promiscuous mode
[  372.084925][T21733] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.126772][T21733] bridge_slave_0: left allmulticast mode
[  372.140005][T21733] bridge_slave_0: left promiscuous mode
[  372.156796][T21733] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.257087][T21733] vlan2 (unregistering): left promiscuous mode
[  372.271856][T21733] bridge0 (unregistering): left promiscuous mode
[  372.279271][T21733] bridge3: port 1(vlan2) entered disabled state
[  372.365129][T21741] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  372.481104][T21770] netlink: 'syz.1.4532': attribute type 1 has an invalid length.
[  372.631771][T21781] 8021q: adding VLAN 0 to HW filter on device bond3
[  372.653855][T21780] __nla_validate_parse: 15 callbacks suppressed
[  372.653874][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4535'.
[  372.688997][T21784] veth5: entered promiscuous mode
[  372.713782][T21770] bond0: (slave wlan1): Releasing backup interface
[  372.721104][T21770] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  372.769634][T21770] bond2: (slave gretap1): Releasing active interface
[  372.796526][T21780] syz_tun: entered allmulticast mode
[  372.805152][T21780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.816445][T21780] tipc: Resetting bearer <eth:syzkaller0>
[  372.824064][T21779] syz_tun: left allmulticast mode
[  372.857810][T21791] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4537'.
[  373.159668][T21811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4545'.
[  373.236428][T21816] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.4547'.
[  373.313233][T21828] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4545'.
[  373.394831][T21841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4551'.
[  373.625136][T21860] vlan3: entered promiscuous mode
[  373.670896][T21863] netlink: 20824 bytes leftover after parsing attributes in process `syz.5.4558'.
[  373.774213][T21876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4563'.
[  373.919157][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4566'.
[  373.946988][T21892] vlan3: entered promiscuous mode
[  374.042544][T21896] lo speed is unknown, defaulting to 1000
[  374.066745][T21896] wg1 speed is unknown, defaulting to 1000
[  374.098575][T21904] validate_nla: 2 callbacks suppressed
[  374.098592][T21904] netlink: 'syz.0.4572': attribute type 21 has an invalid length.
[  374.101119][T21903] macvtap1: entered allmulticast mode
[  374.111765][T21904] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4572'.
[  374.114784][T21903] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode
[  374.138691][T21903] batman_adv: batadv0: Adding interface: macvtap1
[  374.145512][T21903] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.176560][T21903] batman_adv: batadv0: Interface activated: macvtap1
[  374.309173][T21914] IPv6: sit1: Disabled Multicast RS
[  374.386488][T21922] netlink: 'syz.3.4579': attribute type 1 has an invalid length.
[  374.825861][T21940] vlan3: entered promiscuous mode
[  374.945092][T21948] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.031675][T21948] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.077830][T21948] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.133608][T21948] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.284661][T17832] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.341768][T17832] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.419713][T17826] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.477942][T17830] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.528436][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  378.145626][T21960] __nla_validate_parse: 1 callbacks suppressed
[  378.145645][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'.
[  378.165768][T21963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4589'.
[  378.175030][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'.
[  378.181142][T21961] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4588'.
[  378.259813][T21965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4592'.
[  378.312899][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4596'.
[  378.318641][T21972] lo speed is unknown, defaulting to 1000
[  378.373314][T21972] wg1 speed is unknown, defaulting to 1000
[  378.373357][T21983] tap0: tun_chr_ioctl cmd 2148553947
[  378.396820][T21986] tap0: tun_chr_ioctl cmd 1074025673
[  378.414912][T21975] sctp: [Deprecated]: syz.4.4593 (pid 21975) Use of int in maxseg socket option.
[  378.414912][T21975] Use struct sctp_assoc_value instead
[  378.419763][T21987] tap0: tun_chr_ioctl cmd 2148553947
[  378.615238][T22007] syzkaller0: entered promiscuous mode
[  378.621898][T22007] syzkaller0: entered allmulticast mode
[  378.697258][T22009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4604'.
[  378.924991][T22031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4610'.
[  378.946283][T22031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4610'.
[  379.145235][T22044] wireguard0: entered promiscuous mode
[  379.154604][T22044] wireguard0: entered allmulticast mode
[  379.474787][T22074] lo speed is unknown, defaulting to 1000
[  379.485459][T22074] wg1 speed is unknown, defaulting to 1000
[  379.494126][T22077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4623'.
[  379.662790][T22084] syzkaller1: entered promiscuous mode
[  379.668633][T22084] syzkaller1: entered allmulticast mode
[  380.024738][T22104] netlink: 'syz.0.4631': attribute type 1 has an invalid length.
[  380.233900][T22108] bond0: (slave gretap2): making interface the new active one
[  380.342512][T22108] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  380.361396][T22106] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.667649][T22143] bond0: option arp_validate: invalid value (18446744073491447809)
[  380.713090][T22137] tc_dump_action: action bad kind
[  380.731902][T17830] bond0: (slave gretap2): link status definitely down, disabling slave
[  380.746459][T17830] bond0: now running without any active interface!
[  380.827604][T22153] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  380.841053][T22149] netlink: 'syz.5.4643': attribute type 5 has an invalid length.
[  380.860270][T22153] veth1: entered promiscuous mode
[  380.865324][T22153] veth1: entered allmulticast mode
[  380.939248][T22153] sch_tbf: burst 127 is lower than device ipvlan0 mtu (1514) !
[  380.965042][T22153] sch_tbf: peakrate 3 is lower than or equals to rate 7238947008662393449 !
[  381.219740][T22165] lo speed is unknown, defaulting to 1000
[  381.245381][T22165] wg1 speed is unknown, defaulting to 1000
[  381.685277][T22178] smc: net device bond0 applied user defined pnetid SYZ2
[  381.921547][T22185] vlan3: entered allmulticast mode
[  381.926700][T22185] bond5: entered allmulticast mode
[  382.120714][T22188] syzkaller1: entered promiscuous mode
[  382.126330][T22188] syzkaller1: entered allmulticast mode
[  382.475561][T22198] netlink: 'syz.4.4655': attribute type 21 has an invalid length.
[  383.156979][T22216] ip6gretap1: left promiscuous mode
[  383.296887][T22216] veth1: left promiscuous mode
[  383.313358][T22216] veth5: left promiscuous mode
[  383.354861][T22228] hsr_slave_0: left promiscuous mode
[  383.389824][T22228] hsr_slave_1: left promiscuous mode
[  383.460138][T22233] __nla_validate_parse: 12 callbacks suppressed
[  383.460155][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4665'.
[  383.513102][T17831] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.544506][T17831] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.555176][T17831] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.565625][T22210] delete_channel: no stack
[  383.616317][T17831] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  383.686360][T22236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4666'.
[  383.711660][T22236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4666'.
[  383.832375][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'.
[  384.027405][T22258] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.4671'.
[  384.285133][T22074] Set syz1 is full, maxelem 65536 reached
[  384.385734][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4677'.
[  384.415594][T22270] nbd: must specify a size in bytes for the device
[  384.512175][T22276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4679'.
[  384.587706][T22274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.684784][T22274] batman_adv: batadv0: Interface deactivated: gretap2
[  384.743512][T17827] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.768751][T17827] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.795857][T17827] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.840292][T17827] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  384.948484][T22294] Set syz1 is full, maxelem 65536 reached
[  384.969220][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4685'.
[  385.009883][T22297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4685'.
[  385.051931][T22301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.137407][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4688'.
[  385.320447][T22310] tap0: tun_chr_ioctl cmd 1074025677
[  385.327816][T22310] tap0: linktype set to 768
[  385.463704][T22320] netlink: 'syz.0.4695': attribute type 9 has an invalid length.
[  385.586523][T22330] geneve2: entered promiscuous mode
[  385.613070][T22330] geneve2: entered allmulticast mode
[  385.646665][T17832] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  385.665497][T22332] bridge0: entered promiscuous mode
[  385.678357][T22332] vlan2: entered promiscuous mode
[  385.687449][T22332] bridge0: port 1(vlan2) entered blocking state
[  385.698902][T22332] bridge0: port 1(vlan2) entered disabled state
[  385.705432][T22332] vlan2: entered allmulticast mode
[  385.713412][T22332] bridge0: entered allmulticast mode
[  385.721964][T22332] vlan2: left allmulticast mode
[  385.727849][T22332] bridge0: left allmulticast mode
[  385.744585][T17830] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  385.753233][T17830] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  385.765592][T17830] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  385.879410][T22338] nbd: socks must be embedded in a SOCK_ITEM attr
[  385.890110][T22338] block nbd0: shutting down sockets
[  386.282024][T22375] vlan3: entered promiscuous mode
[  386.507112][T22377] netlink: 'syz.3.4713': attribute type 303 has an invalid length.
[  386.534509][T22390] gre0: entered allmulticast mode
[  386.571099][T22390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.577818][T22377] netlink: 'syz.3.4713': attribute type 4 has an invalid length.
[  386.593844][T22390] tipc: Resetting bearer <eth:syzkaller0>
[  386.620088][T22389] tipc: Disabling bearer <eth:syzkaller0>
[  386.682512][T22389] gre0: left allmulticast mode
[  386.719363][T22400] : Port device dummy0 removed
[  386.731895][T22400] : Port device bond2 removed
[  386.740795][T22400] bond0: (slave gretap2): Releasing backup interface
[  386.770816][T22402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.784865][T22402] syzkaller0: entered promiscuous mode
[  386.796521][T22402] syzkaller0: entered allmulticast mode
[  386.825378][T22402] tipc: Resetting bearer <eth:syzkaller0>
[  386.903992][T22399] tipc: Resetting bearer <eth:syzkaller0>
[  386.912731][T22399] tipc: Disabling bearer <eth:syzkaller0>
[  386.963215][T22412] vlan3: entered promiscuous mode
[  387.455903][T22435] netlink: 'syz.3.4733': attribute type 1 has an invalid length.
[  387.530799][T22435] 8021q: adding VLAN 0 to HW filter on device bond5
[  387.542235][T22435] bond4: (slave bond5): Enslaving as a backup interface with a down link
[  387.623072][T22446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.634552][T22446] syzkaller0: entered promiscuous mode
[  387.641569][T22446] syzkaller0: entered allmulticast mode
[  387.656747][T22445] tipc: Resetting bearer <eth:syzkaller0>
[  387.666902][T22445] tipc: Disabling bearer <eth:syzkaller0>
[  387.870438][T22454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.325095][T22502] 8021q: adding VLAN 0 to HW filter on device bond4
[  388.356674][T22502] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  388.365510][T22502] bond4: (slave macvlan2): Enslaving as a backup interface with an up link
[  388.428905][T17830] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  388.462592][T22515] netlink: 'syz.1.4760': attribute type 10 has an invalid length.
[  388.485790][T22515] __nla_validate_parse: 20 callbacks suppressed
[  388.485808][T22515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4760'.
[  388.522071][T22515] team0: Port device geneve0 added
[  388.529108][T17829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.543734][T17829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.558947][T17830] bond4: (slave macvlan2): link status up again after 0 ms
[  388.577135][T17830] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  388.591052][T17830] bond4: (slave macvlan2): link status up again after 0 ms
[  388.600333][T17829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.612371][T17829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.632110][T17829] bond4: (slave macvlan2): link status up again after 0 ms
[  388.640030][T17829] bond4: (slave macvlan2): failed to get link speed/duplex
[  388.757953][T17827] bond4: (slave macvlan2): failed to get link speed/duplex
[  388.810384][T22553] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4771'.
[  388.899002][T17832] bond4: (slave macvlan2): failed to get link speed/duplex
[  388.951363][T22561] _ÐZ`Ô€@: entered promiscuous mode
[  389.048541][T22568] sctp: [Deprecated]: syz.3.4776 (pid 22568) Use of int in maxseg socket option.
[  389.048541][T22568] Use struct sctp_assoc_value instead
[  389.081806][T22573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4777'.
[  389.211097][T22578] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  389.317254][T22584] lo speed is unknown, defaulting to 1000
[  389.344211][T22584] wg1 speed is unknown, defaulting to 1000
[  389.358924][T17827] net_ratelimit: 3 callbacks suppressed
[  389.358942][T17827] bond4: (slave macvlan2): failed to get link speed/duplex
[  389.471664][T22599] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  389.485041][T22593] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  389.495774][T22593] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  389.619659][T17829] bond4: (slave macvlan2): failed to get link speed/duplex
[  389.677143][T22608] netlink: 'syz.3.4787': attribute type 1 has an invalid length.
[  389.686375][T22608] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4787'.
[  389.687031][T22607] lo speed is unknown, defaulting to 1000
[  389.707313][T22607] wg1 speed is unknown, defaulting to 1000
[  389.840326][T17826] bond4: (slave macvlan2): failed to get link speed/duplex
[  389.912246][T22620] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  389.935842][T22622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4791'.
[  389.991964][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4791'.
[  390.058404][T17827] bond4: (slave macvlan2): failed to get link speed/duplex
[  390.198651][T17827] bond4: (slave macvlan2): failed to get link speed/duplex
[  390.257154][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4797'.
[  390.304045][T22642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4795'.
[  390.345140][T17826] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.354494][T17826] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.431925][T22648] netlink: 'syz.1.4799': attribute type 1 has an invalid length.
[  390.442941][T22648] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4799'.
[  390.442985][T17826] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.454262][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4799'.
[  390.472856][T17826] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.627709][T22659] syzkaller0: entered promiscuous mode
[  390.658400][T22659] syzkaller0: entered allmulticast mode
[  390.759907][T22665] lo speed is unknown, defaulting to 1000
[  390.791053][T22665] wg1 speed is unknown, defaulting to 1000
[  391.420965][T22706] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.429861][T22706] ip6gretap0: entered allmulticast mode
[  391.601516][T22720] netlink: 'syz.5.4821': attribute type 11 has an invalid length.
[  391.652945][T22723] netlink: 'syz.3.4822': attribute type 6 has an invalid length.
[  391.666495][T22723] netlink: 'syz.3.4822': attribute type 4 has an invalid length.
[  391.827118][T22735] openvswitch: netlink: Flow actions attr not present in new flow.
[  392.364899][T22764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.396201][T22764] syzkaller0: entered promiscuous mode
[  392.411978][T22764] syzkaller0: entered allmulticast mode
[  392.453252][T22764] tipc: Resetting bearer <eth:syzkaller0>
[  392.473090][T22763] netlink: 'syz.3.4832': attribute type 10 has an invalid length.
[  392.483899][T22760] tipc: Resetting bearer <eth:syzkaller0>
[  392.500630][T22760] tipc: Disabling bearer <eth:syzkaller0>
[  392.530138][T22763] 8021q: adding VLAN 0 to HW filter on device team0
[  392.544534][T22763] bond0: (slave team0): Enslaving as an active interface with an up link
[  392.629931][T22775] vlan3: entered promiscuous mode
[  392.685199][T22777] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  392.845095][T22792] lo speed is unknown, defaulting to 1000
[  392.880058][T22792] wg1 speed is unknown, defaulting to 1000
[  392.943843][T22800] svc: failed to register nfsdv3 RPC service (errno 111).
[  392.965021][T22800] svc: failed to register nfsaclv3 RPC service (errno 111).
[  393.441316][T22818] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.488751][T22818] bond0: (slave rose0): Enslaving as an active interface with an up link
[  393.644766][T22840] vlan2: entered promiscuous mode
[  393.836604][T22861] lo speed is unknown, defaulting to 1000
[  393.847783][T22861] wg1 speed is unknown, defaulting to 1000
[  393.876593][T22869] __nla_validate_parse: 16 callbacks suppressed
[  393.876611][T22869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4858'.
[  394.087652][T22880] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  394.097619][T22880] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  394.192929][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4862'.
[  394.247980][T22890] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4863'.
[  394.260771][T22883] lo speed is unknown, defaulting to 1000
[  394.277290][T22883] wg1 speed is unknown, defaulting to 1000
[  394.591934][T22913] netlink: 'syz.4.4867': attribute type 10 has an invalid length.
[  394.601736][T22915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4866'.
[  394.642999][T22909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4866'.
[  394.673883][T22909] netlink: 'syz.0.4866': attribute type 13 has an invalid length.
[  394.795541][T22928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4869'.
[  394.844192][T22930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4870'.
[  395.006100][T22940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4874'.
[  395.029690][T22940] lo speed is unknown, defaulting to 1000
[  395.050663][T22945] syzkaller1: entered promiscuous mode
[  395.062721][T22945] syzkaller1: entered allmulticast mode
[  395.086052][T22940] wg1 speed is unknown, defaulting to 1000
[  395.092178][T22945] netlink: 'syz.0.4875': attribute type 1 has an invalid length.
[  395.104746][T22945] bond4: entered promiscuous mode
[  395.110763][T22945] 8021q: adding VLAN 0 to HW filter on device bond4
[  395.134774][T22945] 8021q: adding VLAN 0 to HW filter on device bond4
[  395.143055][T22945] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  395.153470][T22945] bond4: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  395.165407][T22945] bond4: (slave vxcan1): making interface the new active one
[  395.172928][T22945] vxcan1: entered promiscuous mode
[  395.179386][T22945] bond4: (slave vxcan1): Enslaving as an active interface with an up link
[  395.192353][T22950] vlan2: entered promiscuous mode
[  395.226321][T22949] lo speed is unknown, defaulting to 1000
[  395.240832][T22949] wg1 speed is unknown, defaulting to 1000
[  395.525852][T22967] netlink: 'syz.3.4879': attribute type 1 has an invalid length.
[  395.559570][T22967] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4879'.
[  395.636473][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4880'.
[  395.969390][T22998] netlink: 'syz.3.4885': attribute type 1 has an invalid length.
[  396.008542][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  396.025910][T22998] bond6: (slave bridge0): making interface the new active one
[  396.041740][T22998] bond6: (slave bridge0): Enslaving as an active interface with an up link
[  396.281417][T23009] pim6reg1: entered promiscuous mode
[  396.286842][T23009] pim6reg1: entered allmulticast mode
[  396.352451][T23015] vlan2: entered promiscuous mode
[  396.421987][T23022] syzkaller0: entered promiscuous mode
[  396.439322][T23022] syzkaller0: entered allmulticast mode
[  396.454949][T23022] macsec0: entered promiscuous mode
[  396.473229][T23024] netlink: 'syz.4.4893': attribute type 2 has an invalid length.
[  396.573481][T23037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.689041][T23042] syz_tun: entered allmulticast mode
[  396.709771][T23042] syzkaller0: entered promiscuous mode
[  396.725870][T23042] syzkaller0: entered allmulticast mode
[  396.803130][T23041] syz_tun: left allmulticast mode
[  397.135241][T23070] smc: net device bond0 erased user defined pnetid SYZ2
[  397.181710][T23074] lo speed is unknown, defaulting to 1000
[  397.199100][T23074] wg1 speed is unknown, defaulting to 1000
[  397.434301][T23094] validate_nla: 1 callbacks suppressed
[  397.434319][T23094] netlink: 'syz.5.4917': attribute type 8 has an invalid length.
[  397.513775][T23095] tipc: Enabling of bearer <ib:wg0> rejected, failed to enable media
[  397.682887][T23116] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  397.749520][T23118] smc: net device bond0 applied user defined pnetid SYZ2
[  397.903929][T23118] smc: removing net device bond0 with user defined pnetid SYZ2
[  397.923710][T23118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.962376][T23118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.993356][T23118] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  398.080917][T23118] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  398.094853][T23118] bond0 (unregistering): (slave team0): Releasing backup interface
[  398.180279][T23118] bond0 (unregistering): Released all slaves
[  398.333183][T23130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.350689][T23130] syzkaller0: entered promiscuous mode
[  398.363688][T23130] syzkaller0: entered allmulticast mode
[  398.375264][T23132] netlink: 'syz.0.4932': attribute type 1 has an invalid length.
[  398.393162][T23130] tipc: Resetting bearer <eth:syzkaller0>
[  398.410025][T23134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.417928][T23129] tipc: Resetting bearer <eth:syzkaller0>
[  398.434199][T23129] tipc: Disabling bearer <eth:syzkaller0>
[  398.446095][T23134] syzkaller0: entered promiscuous mode
[  398.454648][T23134] syzkaller0: entered allmulticast mode
[  398.582559][T23141] : entered promiscuous mode
[  398.619774][T23141] netlink: 'syz.0.4935': attribute type 1 has an invalid length.
[  398.683786][T23141] bond5: entered promiscuous mode
[  398.720170][T23141] 8021q: adding VLAN 0 to HW filter on device bond5
[  398.891351][T23163] __nla_validate_parse: 14 callbacks suppressed
[  398.891369][T23163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4940'.
[  398.936647][T23165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4941'.
[  399.314447][T23191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4948'.
[  399.413294][ T5938] tipc: Node number set to 1593544424
[  399.422531][T23200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.543240][ T1006] bond0 (unregistering): Released all slaves
[  399.556225][ T1006] bond1 (unregistering): Released all slaves
[  399.567585][ T1006] bond2 (unregistering): Released all slaves
[  399.577219][ T1006] bond3 (unregistering): Released all slaves
[  399.591175][ T1006] bond4 (unregistering): Released all slaves
[  399.602565][ T1006] bond5 (unregistering): Released all slaves
[  399.614247][ T1006] bond6 (unregistering): Released all slaves
[  399.627283][ T1006] bond7 (unregistering): Released all slaves
[  399.640276][ T1006] bond8 (unregistering): Released all slaves
[  399.649658][T23181] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  399.659822][T23133] tipc: Resetting bearer <eth:syzkaller0>
[  399.673631][T23133] tipc: Disabling bearer <eth:syzkaller0>
[  399.729201][ T1006] k›*·]‘: left promiscuous mode
[  399.820902][ T1006] : left promiscuous mode
[  399.831200][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4954'.
[  399.891710][ T1006] tipc: Disabling bearer <udp:syz2>
[  399.897430][ T1006] tipc: Left network mode
[  399.903816][T23221] netlink: 'syz.4.4956': attribute type 1 has an invalid length.
[  399.916779][ T1006] IPVS: stopping backup sync thread 14181 ...
[  399.964131][T23205] bond0: (slave netdevsim0): Releasing backup interface
[  399.983220][T23234] bond6: (slave geneve3): making interface the new active one
[  399.984364][T23233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4960'.
[  399.991470][T23234] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  400.026320][T17411] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  400.043980][T23221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4956'.
[  400.054895][T23221] 8021q: adding VLAN 0 to HW filter on device bond6
[  400.073110][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4956'.
[  400.085781][T17411] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  400.113622][T17411] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  400.123997][T17411] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  400.137093][T23237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4961'.
[  400.154814][T23237] netlink: 'syz.3.4961': attribute type 15 has an invalid length.
[  400.164903][T23237] netlink: 'syz.3.4961': attribute type 1 has an invalid length.
[  400.173331][T23237] netlink: 'syz.3.4961': attribute type 4 has an invalid length.
[  400.181282][T23237] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4961'.
[  400.192311][T23237] netlink: 'syz.3.4961': attribute type 1 has an invalid length.
[  400.205420][T23237] netlink: 'syz.3.4961': attribute type 4 has an invalid length.
[  400.215668][T23237] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4961'.
[  400.232062][T23237] netlink: 'syz.3.4961': attribute type 10 has an invalid length.
[  400.269439][ T1006] hsr_slave_0: left promiscuous mode
[  400.275568][ T1006] hsr_slave_1: left promiscuous mode
[  400.757888][T23256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.775828][T23272] vlan3: entered promiscuous mode
[  400.829167][T23265] syzkaller0: entered promiscuous mode
[  400.840001][T23265] syzkaller0: entered allmulticast mode
[  400.870998][T23250] tipc: Resetting bearer <eth:syzkaller0>
[  400.890912][T23246] !
: entered allmulticast mode
[  400.921314][T23245] tipc: Resetting bearer <eth:syzkaller0>
[  400.946833][T23245] tipc: Disabling bearer <eth:syzkaller0>
[  400.961496][T23287] syz_tun: entered allmulticast mode
[  400.974187][T23287] syz_tun: left allmulticast mode
[  400.992172][T23289] lo speed is unknown, defaulting to 1000
[  401.010099][T23289] wg1 speed is unknown, defaulting to 1000
[  401.054663][T23293] lo speed is unknown, defaulting to 1000
[  401.084900][T23293] wg1 speed is unknown, defaulting to 1000
[  401.128288][ T5871] Bluetooth: hci3: command 0x0406 tx timeout
[  401.244216][T23316] lo speed is unknown, defaulting to 1000
[  401.251589][T23316] wg1 speed is unknown, defaulting to 1000
[  401.367238][T23327] vlan3: entered promiscuous mode
[  401.597501][T23349] syzkaller1: entered promiscuous mode
[  401.613401][T23349] syzkaller1: entered allmulticast mode
[  401.834533][ T1006] IPVS: stop unused estimator thread 0...
[  401.904734][T23359] svc: failed to register nfsdv3 RPC service (errno 111).
[  401.945060][T23359] svc: failed to register nfsaclv3 RPC service (errno 111).
[  402.173214][T23380] vlan3: entered promiscuous mode
[  402.360415][T23395] lo speed is unknown, defaulting to 1000
[  402.402927][T23403] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  402.457916][T23405] validate_nla: 3 callbacks suppressed
[  402.457936][T23405] netlink: 'syz.5.5008': attribute type 1 has an invalid length.
[  402.516026][T23405] 8021q: adding VLAN 0 to HW filter on device bond3
[  402.551486][T23395] wg1 speed is unknown, defaulting to 1000
[  402.585797][T23414] 8021q: adding VLAN 0 to HW filter on device bond3
[  402.600669][T23400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.612001][T23414] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  402.624866][T23414] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  402.651853][T23418] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  402.661733][T23418] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  402.694287][T23405] veth7: entered promiscuous mode
[  402.707231][T23405] bond3: (slave veth7): Enslaving as an active interface with a down link
[  402.968821][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  403.114270][T23446] lo speed is unknown, defaulting to 1000
[  403.147637][T23446] wg1 speed is unknown, defaulting to 1000
[  403.322877][T23455] svc: failed to register nfsdv3 RPC service (errno 111).
[  403.371745][T23455] svc: failed to register nfsaclv3 RPC service (errno 111).
[  403.443772][T23468] unknown channel width for channel at 909000KHz?
[  403.469125][T23468] macvtap1: entered promiscuous mode
[  403.475052][T23468] team0: entered promiscuous mode
[  403.481275][T23468] geneve0: entered promiscuous mode
[  403.487492][T23468] macvtap1: entered allmulticast mode
[  403.493402][T23468] team0: entered allmulticast mode
[  403.499209][T23468] geneve0: entered allmulticast mode
[  403.504925][T23468] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  403.517456][T23470] vlan2: entered promiscuous mode
[  403.683536][T23480] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  403.744324][T23486] syzkaller1: entered promiscuous mode
[  403.751226][T23486] syzkaller1: entered allmulticast mode
[  403.776328][T23488] netlink: 'syz.1.5033': attribute type 10 has an invalid length.
[  403.793461][T23488] bond0: (slave wlan1): Opening slave failed
[  403.933488][T23497] veth1: left promiscuous mode
[  403.939377][T23497] veth1: left allmulticast mode
[  403.953912][T23500] __nla_validate_parse: 19 callbacks suppressed
[  403.953930][T23500] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.5038'.
[  403.975994][T23497] bridge3: left allmulticast mode
[  404.030282][T23497] bond4: left promiscuous mode
[  404.035074][T23497] vxcan1: left promiscuous mode
[  404.060654][T23497] bond5: left promiscuous mode
[  404.105874][T23500] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5038'.
[  404.134618][T23503] lo speed is unknown, defaulting to 1000
[  404.159961][T23503] wg1 speed is unknown, defaulting to 1000
[  404.166029][T23494] lo speed is unknown, defaulting to 1000
[  404.201542][T17409] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.213031][T17409] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.279140][T23509] syzkaller1: entered promiscuous mode
[  404.284704][T23509] syzkaller1: entered allmulticast mode
[  404.305653][T23494] wg1 speed is unknown, defaulting to 1000
[  404.316421][T17409] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.330996][T17409] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.427508][T17409] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.443749][T17409] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.469886][T23533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5044'.
[  404.517694][T17409] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.533786][T17409] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.577715][T23540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5049'.
[  404.597188][T23538] netlink: 'syz.5.5048': attribute type 10 has an invalid length.
[  404.626988][T23538] bond0: (slave wlan1): Opening slave failed
[  404.649132][T17415] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  404.662349][T17415] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  404.675293][T17415] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  404.690822][T17415] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  404.780934][T23542] svc: failed to register nfsdv3 RPC service (errno 111).
[  404.807474][T23542] svc: failed to register nfsaclv3 RPC service (errno 111).
[  405.177749][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'.
[  405.241132][T17409] bond1 (unregistering): Released all slaves
[  405.267509][T17409] bond2 (unregistering): Released all slaves
[  405.278972][T17409] bond3 (unregistering): Released all slaves
[  405.287967][T17409] bond4 (unregistering): Released all slaves
[  405.304064][T17409] bond0 (unregistering): Released all slaves
[  405.314552][T17409] bond5 (unregistering): Released all slaves
[  405.327466][T17409] bond6 (unregistering): Released all slaves
[  405.337437][T17409] bond7 (unregistering): Released all slaves
[  405.347141][T23551] bond0: option all_slaves_active: invalid value (7)
[  405.386122][T23553] lo speed is unknown, defaulting to 1000
[  405.411589][T23553] wg1 speed is unknown, defaulting to 1000
[  405.472650][T17409] tipc: Left network mode
[  405.634382][T23585] netlink: 13 bytes leftover after parsing attributes in process `syz.5.5061'.
[  405.687906][T23591] netlink: 'syz.0.5063': attribute type 10 has an invalid length.
[  405.732542][T17409] hsr_slave_0: left promiscuous mode
[  405.740045][T23595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'.
[  405.761458][T17409] veth1_macvtap: left promiscuous mode
[  405.767154][T17409] veth0_macvtap: left promiscuous mode
[  405.773997][T17409] veth1_vlan: left promiscuous mode
[  405.782032][T17409] veth0_vlan: left promiscuous mode
[  406.156600][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5069'.
[  406.202433][T23611] syz_tun: entered allmulticast mode
[  406.221069][T23611] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  406.241116][T23618] lo speed is unknown, defaulting to 1000
[  406.253058][ T5857] Bluetooth: hci4: command 0x0406 tx timeout
[  406.269797][T23618] wg1 speed is unknown, defaulting to 1000
[  406.656664][T23608] syz_tun: left allmulticast mode
[  406.712977][T23659] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5079'.
[  406.769934][T23664] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5079'.
[  406.801975][T23659] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  407.055848][T23684] openvswitch: netlink: Flow key attr not present in new flow.
[  407.059539][T23686] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  407.120306][T23686] policy can only be matched on NF_INET_PRE_ROUTING
[  407.120323][T23686] unable to load match
[  407.294865][T17409] IPVS: stop unused estimator thread 0...
[  407.318808][T23703] sctp: [Deprecated]: syz.4.5094 (pid 23703) Use of struct sctp_assoc_value in delayed_ack socket option.
[  407.318808][T23703] Use struct sctp_sack_info instead
[  407.434705][T23716] nbd: device at index 64 is going down
[  407.559659][T23732] FAULT_INJECTION: forcing a failure.
[  407.559659][T23732] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  407.581108][T23732] CPU: 1 UID: 0 PID: 23732 Comm: syz.0.5101 Not tainted syzkaller #0 PREEMPT(full) 
[  407.581133][T23732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  407.581145][T23732] Call Trace:
[  407.581152][T23732]  <TASK>
[  407.581160][T23732]  dump_stack_lvl+0x189/0x250
[  407.581184][T23732]  ? __pfx____ratelimit+0x10/0x10
[  407.581208][T23732]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.581225][T23732]  ? __pfx__printk+0x10/0x10
[  407.581245][T23732]  ? __might_fault+0xb0/0x130
[  407.581268][T23732]  ? vfs_write+0x956/0xb30
[  407.581289][T23732]  ? rcu_is_watching+0x15/0xb0
[  407.581307][T23732]  should_fail_ex+0x414/0x560
[  407.581331][T23732]  _copy_from_user+0x2d/0xb0
[  407.581350][T23732]  __sys_bind+0x199/0x3e0
[  407.581374][T23732]  ? __pfx___sys_bind+0x10/0x10
[  407.581401][T23732]  ? __pfx_ksys_write+0x10/0x10
[  407.581420][T23732]  ? rcu_is_watching+0x15/0xb0
[  407.581439][T23732]  __x64_sys_bind+0x7a/0x90
[  407.581461][T23732]  do_syscall_64+0xfa/0x3b0
[  407.581477][T23732]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.581495][T23732]  ? clear_bhb_loop+0x60/0xb0
[  407.581515][T23732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.581532][T23732] RIP: 0033:0x7fb71c78ebe9
[  407.581548][T23732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.581562][T23732] RSP: 002b:00007fb71d661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  407.581581][T23732] RAX: ffffffffffffffda RBX: 00007fb71c9b5fa0 RCX: 00007fb71c78ebe9
[  407.581593][T23732] RDX: 0000000000000010 RSI: 0000200000000d40 RDI: 0000000000000003
[  407.581604][T23732] RBP: 00007fb71d661090 R08: 0000000000000000 R09: 0000000000000000
[  407.581615][T23732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.581626][T23732] R13: 00007fb71c9b6038 R14: 00007fb71c9b5fa0 R15: 00007fff0aef8478
[  407.581647][T23732]  </TASK>
[  407.584777][T23729] netlink: 'syz.4.5098': attribute type 10 has an invalid length.
[  407.585188][T23733] nbd: must specify at least one socket
[  408.249731][T23779] FAULT_INJECTION: forcing a failure.
[  408.249731][T23779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.261114][T23774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.266829][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  408.282029][T23765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.282297][T23779] CPU: 0 UID: 0 PID: 23779 Comm: syz.1.5113 Not tainted syzkaller #0 PREEMPT(full) 
[  408.282319][T23779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  408.282330][T23779] Call Trace:
[  408.282338][T23779]  <TASK>
[  408.282346][T23779]  dump_stack_lvl+0x189/0x250
[  408.282371][T23779]  ? __pfx____ratelimit+0x10/0x10
[  408.282395][T23779]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.282415][T23779]  ? __pfx__printk+0x10/0x10
[  408.282440][T23779]  ? rcu_is_watching+0x15/0xb0
[  408.282458][T23779]  should_fail_ex+0x414/0x560
[  408.282482][T23779]  _copy_to_user+0x31/0xb0
[  408.282503][T23779]  simple_read_from_buffer+0xe1/0x170
[  408.282529][T23779]  proc_fail_nth_read+0x1b3/0x220
[  408.282550][T23779]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  408.282569][T23779]  ? rw_verify_area+0x2a6/0x4d0
[  408.282590][T23779]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  408.282609][T23779]  vfs_read+0x1fd/0xa30
[  408.282629][T23779]  ? __pfx_aa_sk_perm+0x10/0x10
[  408.282653][T23779]  ? xsk_bind+0x1af/0xf90
[  408.282673][T23779]  ? __pfx_vfs_read+0x10/0x10
[  408.282695][T23779]  ? bpf_lsm_socket_bind+0x9/0x20
[  408.282714][T23779]  ? __sys_bind+0x2e9/0x3e0
[  408.282738][T23779]  ? __pfx___sys_bind+0x10/0x10
[  408.282762][T23779]  ksys_read+0x145/0x250
[  408.282784][T23779]  ? __pfx_ksys_read+0x10/0x10
[  408.282803][T23779]  ? rcu_is_watching+0x15/0xb0
[  408.282822][T23779]  ? rcu_is_watching+0x15/0xb0
[  408.282840][T23779]  do_syscall_64+0xfa/0x3b0
[  408.282856][T23779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.282873][T23779]  ? clear_bhb_loop+0x60/0xb0
[  408.282892][T23779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.282909][T23779] RIP: 0033:0x7fb8faf8d5fc
[  408.282924][T23779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  408.282939][T23779] RSP: 002b:00007fb8fbe34030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  408.282958][T23779] RAX: ffffffffffffffda RBX: 00007fb8fb1b5fa0 RCX: 00007fb8faf8d5fc
[  408.282972][T23779] RDX: 000000000000000f RSI: 00007fb8fbe340a0 RDI: 0000000000000004
[  408.282983][T23779] RBP: 00007fb8fbe34090 R08: 0000000000000000 R09: 0000000000000000
[  408.282995][T23779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.283014][T23779] R13: 00007fb8fb1b6038 R14: 00007fb8fb1b5fa0 R15: 00007ffcc0cb7dd8
[  408.283034][T23779]  </TASK>
[  408.620689][T23792] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  408.666635][T23796] netlink: 'syz.1.5120': attribute type 1 has an invalid length.
[  408.850224][T23812] lo speed is unknown, defaulting to 1000
[  408.856846][T23812] wg1 speed is unknown, defaulting to 1000
[  408.934135][T23821] syzkaller1: entered promiscuous mode
[  408.952171][T23821] syzkaller1: entered allmulticast mode
[  409.123272][T23839] pim6reg9: entered allmulticast mode
[  409.156517][T23844] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  409.210559][T23846] __nla_validate_parse: 10 callbacks suppressed
[  409.210578][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5134'.
[  409.278349][T23846] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5134'.
[  409.299842][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5134'.
[  409.383863][T23856] syzkaller1: entered promiscuous mode
[  409.403598][T23856] syzkaller1: entered allmulticast mode
[  409.427463][T23858] syzkaller1: entered promiscuous mode
[  409.446894][T23858] syzkaller1: entered allmulticast mode
[  409.495611][T23858] FAULT_INJECTION: forcing a failure.
[  409.495611][T23858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  409.516171][T23858] CPU: 0 UID: 0 PID: 23858 Comm: syz.4.5139 Not tainted syzkaller #0 PREEMPT(full) 
[  409.516198][T23858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  409.516210][T23858] Call Trace:
[  409.516217][T23858]  <TASK>
[  409.516225][T23858]  dump_stack_lvl+0x189/0x250
[  409.516252][T23858]  ? __pfx____ratelimit+0x10/0x10
[  409.516277][T23858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  409.516301][T23858]  ? __pfx__printk+0x10/0x10
[  409.516322][T23858]  ? __might_fault+0xb0/0x130
[  409.516348][T23858]  ? rcu_is_watching+0x15/0xb0
[  409.516367][T23858]  should_fail_ex+0x414/0x560
[  409.516392][T23858]  _copy_from_iter+0x1db/0x16f0
[  409.516411][T23858]  ? unwind_next_frame+0xa5/0x2390
[  409.516433][T23858]  ? unwind_next_frame+0xa5/0x2390
[  409.516451][T23858]  ? rcu_is_watching+0x15/0xb0
[  409.516468][T23858]  ? __pfx__copy_from_iter+0x10/0x10
[  409.516485][T23858]  ? is_bpf_text_address+0x26/0x2b0
[  409.516509][T23858]  ? rcu_is_watching+0x15/0xb0
[  409.516527][T23858]  ? rcu_is_watching+0x15/0xb0
[  409.516546][T23858]  tun_get_user+0x219/0x3e20
[  409.516566][T23858]  ? rcu_is_watching+0x15/0xb0
[  409.516583][T23858]  ? lock_release+0x4b/0x3e0
[  409.516609][T23858]  ? aa_file_perm+0x44d/0x1550
[  409.516628][T23858]  ? __pfx_tun_get_user+0x10/0x10
[  409.516651][T23858]  ? bpf_trace_run2+0x322/0x4b0
[  409.516671][T23858]  ? _parse_integer_limit+0x1ae/0x1f0
[  409.516699][T23858]  ? kstrtoull+0x12f/0x1d0
[  409.516725][T23858]  ? ref_tracker_alloc+0x318/0x460
[  409.516747][T23858]  ? get_pid_task+0x20/0x1f0
[  409.516769][T23858]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  409.516793][T23858]  ? tun_get+0x1c/0x2f0
[  409.516809][T23858]  ? tun_get+0x1c/0x2f0
[  409.516826][T23858]  ? rcu_is_watching+0x15/0xb0
[  409.516842][T23858]  ? tun_get+0x1c/0x2f0
[  409.516858][T23858]  ? lock_release+0x4b/0x3e0
[  409.516880][T23858]  ? common_file_perm+0x1b5/0x230
[  409.516896][T23858]  ? tun_get+0x1c/0x2f0
[  409.516914][T23858]  tun_chr_write_iter+0x113/0x200
[  409.516933][T23858]  vfs_write+0x5c9/0xb30
[  409.516957][T23858]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  409.516974][T23858]  ? __pfx_vfs_write+0x10/0x10
[  409.517000][T23858]  ? __fget_files+0x2a/0x420
[  409.517020][T23858]  ksys_write+0x145/0x250
[  409.517043][T23858]  ? __pfx_ksys_write+0x10/0x10
[  409.517063][T23858]  ? rcu_is_watching+0x15/0xb0
[  409.517082][T23858]  ? rcu_is_watching+0x15/0xb0
[  409.517101][T23858]  do_syscall_64+0xfa/0x3b0
[  409.517118][T23858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.517135][T23858]  ? clear_bhb_loop+0x60/0xb0
[  409.517155][T23858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.517172][T23858] RIP: 0033:0x7fafabd8ebe9
[  409.517189][T23858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.517204][T23858] RSP: 002b:00007fafacca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  409.517225][T23858] RAX: ffffffffffffffda RBX: 00007fafabfb5fa0 RCX: 00007fafabd8ebe9
[  409.517239][T23858] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  409.517251][T23858] RBP: 00007fafacca9090 R08: 0000000000000000 R09: 0000000000000000
[  409.517263][T23858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.517274][T23858] R13: 00007fafabfb6038 R14: 00007fafabfb5fa0 R15: 00007fff09abffa8
[  409.517295][T23858]  </TASK>
[  409.898004][T23863] syzkaller1: entered promiscuous mode
[  409.904898][T23863] syzkaller1: entered allmulticast mode
[  409.962606][T23863] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5140'.
[  410.026000][T23871] netlink: 'syz.5.5145': attribute type 2 has an invalid length.
[  410.035381][T23871] netlink: 119 bytes leftover after parsing attributes in process `syz.5.5145'.
[  410.137679][T23883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5149'.
[  410.182003][T23886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5150'.
[  410.194375][T23888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5147'.
[  410.305280][T23883] !
: renamed from dummy0
[  410.339039][T23892] lo speed is unknown, defaulting to 1000
[  410.356930][T23892] wg1 speed is unknown, defaulting to 1000
[  410.434043][T23895] syzkaller1: entered promiscuous mode
[  410.448147][T23895] syzkaller1: entered allmulticast mode
[  410.562391][T23908] syzkaller1: entered promiscuous mode
[  410.567893][T23908] syzkaller1: entered allmulticast mode
[  410.590951][T23909] syzkaller1: entered promiscuous mode
[  410.596444][T23909] syzkaller1: entered allmulticast mode
[  410.607838][T23908] FAULT_INJECTION: forcing a failure.
[  410.607838][T23908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  410.629390][T23908] CPU: 1 UID: 0 PID: 23908 Comm: syz.0.5157 Not tainted syzkaller #0 PREEMPT(full) 
[  410.629417][T23908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  410.629427][T23908] Call Trace:
[  410.629434][T23908]  <TASK>
[  410.629441][T23908]  dump_stack_lvl+0x189/0x250
[  410.629465][T23908]  ? __pfx____ratelimit+0x10/0x10
[  410.629489][T23908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  410.629509][T23908]  ? __pfx__printk+0x10/0x10
[  410.629529][T23908]  ? __might_fault+0xb0/0x130
[  410.629555][T23908]  ? rcu_is_watching+0x15/0xb0
[  410.629574][T23908]  should_fail_ex+0x414/0x560
[  410.629598][T23908]  _copy_from_iter+0x1db/0x16f0
[  410.629617][T23908]  ? unwind_next_frame+0xa5/0x2390
[  410.629638][T23908]  ? unwind_next_frame+0xa5/0x2390
[  410.629656][T23908]  ? rcu_is_watching+0x15/0xb0
[  410.629673][T23908]  ? __pfx__copy_from_iter+0x10/0x10
[  410.629689][T23908]  ? is_bpf_text_address+0x26/0x2b0
[  410.629712][T23908]  ? rcu_is_watching+0x15/0xb0
[  410.629730][T23908]  ? rcu_is_watching+0x15/0xb0
[  410.629751][T23908]  tun_get_user+0x488/0x3e20
[  410.629772][T23908]  ? rcu_is_watching+0x15/0xb0
[  410.629789][T23908]  ? lock_release+0x4b/0x3e0
[  410.629823][T23908]  ? aa_file_perm+0x44d/0x1550
[  410.629841][T23908]  ? __pfx_tun_get_user+0x10/0x10
[  410.629858][T23908]  ? _parse_integer_limit+0x1ae/0x1f0
[  410.629884][T23908]  ? kstrtoull+0x12f/0x1d0
[  410.629910][T23908]  ? ref_tracker_alloc+0x318/0x460
[  410.629932][T23908]  ? get_pid_task+0x20/0x1f0
[  410.629953][T23908]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  410.629978][T23908]  ? tun_get+0x1c/0x2f0
[  410.629994][T23908]  ? tun_get+0x1c/0x2f0
[  410.630009][T23908]  ? rcu_is_watching+0x15/0xb0
[  410.630025][T23908]  ? tun_get+0x1c/0x2f0
[  410.630041][T23908]  ? lock_release+0x4b/0x3e0
[  410.630062][T23908]  ? common_file_perm+0x1b5/0x230
[  410.630080][T23908]  ? tun_get+0x1c/0x2f0
[  410.630100][T23908]  tun_chr_write_iter+0x113/0x200
[  410.630118][T23908]  vfs_write+0x5c9/0xb30
[  410.630142][T23908]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  410.630159][T23908]  ? __pfx_vfs_write+0x10/0x10
[  410.630185][T23908]  ? __fget_files+0x2a/0x420
[  410.630204][T23908]  ksys_write+0x145/0x250
[  410.630227][T23908]  ? __pfx_ksys_write+0x10/0x10
[  410.630246][T23908]  ? rcu_is_watching+0x15/0xb0
[  410.630265][T23908]  ? rcu_is_watching+0x15/0xb0
[  410.630284][T23908]  do_syscall_64+0xfa/0x3b0
[  410.630301][T23908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.630319][T23908]  ? clear_bhb_loop+0x60/0xb0
[  410.630339][T23908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.630356][T23908] RIP: 0033:0x7fb71c78ebe9
[  410.630372][T23908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.630388][T23908] RSP: 002b:00007fb71d661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  410.630407][T23908] RAX: ffffffffffffffda RBX: 00007fb71c9b5fa0 RCX: 00007fb71c78ebe9
[  410.630421][T23908] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  410.630434][T23908] RBP: 00007fb71d661090 R08: 0000000000000000 R09: 0000000000000000
[  410.630446][T23908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.630457][T23908] R13: 00007fb71c9b6038 R14: 00007fb71c9b5fa0 R15: 00007fff0aef8478
[  410.630478][T23908]  </TASK>
[  410.974006][T23913] syzkaller1: entered promiscuous mode
[  410.979892][T23913] syzkaller1: entered allmulticast mode
[  411.036703][T23918] FAULT_INJECTION: forcing a failure.
[  411.036703][T23918] name failslab, interval 1, probability 0, space 0, times 0
[  411.049461][T23918] CPU: 1 UID: 0 PID: 23918 Comm: syz.5.5161 Not tainted syzkaller #0 PREEMPT(full) 
[  411.049485][T23918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  411.049496][T23918] Call Trace:
[  411.049503][T23918]  <TASK>
[  411.049512][T23918]  dump_stack_lvl+0x189/0x250
[  411.049535][T23918]  ? __pfx____ratelimit+0x10/0x10
[  411.049550][T23918]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.049561][T23918]  ? __pfx__printk+0x10/0x10
[  411.049576][T23918]  should_fail_ex+0x414/0x560
[  411.049590][T23918]  should_failslab+0xa8/0x100
[  411.049605][T23918]  kmem_cache_alloc_noprof+0x73/0x3c0
[  411.049618][T23918]  ? radix_tree_node_alloc+0x7e/0x3a0
[  411.049631][T23918]  radix_tree_node_alloc+0x7e/0x3a0
[  411.049644][T23918]  ? __sys_bpf+0x6dc/0x870
[  411.049657][T23918]  idr_get_free+0x2b3/0xa70
[  411.049673][T23918]  idr_alloc_u32+0x159/0x2d0
[  411.049697][T23918]  ? __pfx_idr_alloc_u32+0x10/0x10
[  411.049710][T23918]  ? do_raw_spin_lock+0x121/0x290
[  411.049722][T23918]  ? lock_acquire+0x5f/0x360
[  411.049736][T23918]  idr_alloc_cyclic+0x9b/0x1b0
[  411.049750][T23918]  bpf_link_prime+0x6b/0x220
[  411.049767][T23918]  tcx_link_attach+0x1e9/0x890
[  411.049784][T23918]  ? rcu_is_watching+0x15/0xb0
[  411.049802][T23918]  ? rcu_is_watching+0x15/0xb0
[  411.049818][T23918]  ? lock_release+0x4b/0x3e0
[  411.049839][T23918]  ? __pfx_tcx_link_attach+0x10/0x10
[  411.049857][T23918]  ? __might_fault+0xb0/0x130
[  411.049871][T23918]  ? __fget_files+0x3a0/0x420
[  411.049879][T23918]  ? __fget_files+0x2a/0x420
[  411.049888][T23918]  ? bpf_prog_attach_check_attach_type+0x1e5/0x540
[  411.049899][T23918]  link_create+0x528/0x850
[  411.049913][T23918]  __sys_bpf+0x6dc/0x870
[  411.049925][T23918]  ? __pfx___sys_bpf+0x10/0x10
[  411.049939][T23918]  ? ksys_write+0x22a/0x250
[  411.049952][T23918]  ? __pfx_ksys_write+0x10/0x10
[  411.049963][T23918]  ? rcu_is_watching+0x15/0xb0
[  411.049973][T23918]  __x64_sys_bpf+0x7c/0x90
[  411.049984][T23918]  do_syscall_64+0xfa/0x3b0
[  411.049994][T23918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.050003][T23918]  ? clear_bhb_loop+0x60/0xb0
[  411.050014][T23918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.050023][T23918] RIP: 0033:0x7f93ca98ebe9
[  411.050033][T23918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.050042][T23918] RSP: 002b:00007f93cb7ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  411.050054][T23918] RAX: ffffffffffffffda RBX: 00007f93cabb5fa0 RCX: 00007f93ca98ebe9
[  411.050061][T23918] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c
[  411.050068][T23918] RBP: 00007f93cb7ca090 R08: 0000000000000000 R09: 0000000000000000
[  411.050074][T23918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.050081][T23918] R13: 00007f93cabb6038 R14: 00007f93cabb5fa0 R15: 00007ffd4378bf48
[  411.050092][T23918]  </TASK>
[  411.551952][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5165'.
[  411.572284][T23937] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  411.624087][T23944] syzkaller1: entered promiscuous mode
[  411.632310][T23944] syzkaller1: entered allmulticast mode
[  411.704809][T23955] FAULT_INJECTION: forcing a failure.
[  411.704809][T23955] name failslab, interval 1, probability 0, space 0, times 0
[  411.706162][T23947] svc: failed to register nfsdv3 RPC service (errno 111).
[  411.725570][T23955] CPU: 1 UID: 0 PID: 23955 Comm: syz.1.5173 Not tainted syzkaller #0 PREEMPT(full) 
[  411.725595][T23955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  411.725605][T23955] Call Trace:
[  411.725612][T23955]  <TASK>
[  411.725619][T23955]  dump_stack_lvl+0x189/0x250
[  411.725644][T23955]  ? __pfx____ratelimit+0x10/0x10
[  411.725668][T23955]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.725686][T23955]  ? __pfx__printk+0x10/0x10
[  411.725716][T23955]  ? fs_reclaim_acquire+0x7d/0x100
[  411.725741][T23955]  ? __pfx___might_resched+0x10/0x10
[  411.725758][T23955]  ? lock_acquire+0x5f/0x360
[  411.725780][T23955]  should_fail_ex+0x414/0x560
[  411.725803][T23955]  should_failslab+0xa8/0x100
[  411.725826][T23955]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  411.725847][T23955]  ? __d_alloc+0x36/0x7a0
[  411.725865][T23955]  __d_alloc+0x36/0x7a0
[  411.725882][T23955]  d_alloc_pseudo+0x21/0xc0
[  411.725898][T23955]  alloc_file_pseudo+0xcc/0x210
[  411.725915][T23955]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  411.725930][T23955]  ? rcu_is_watching+0x15/0xb0
[  411.725947][T23955]  ? rcu_is_watching+0x15/0xb0
[  411.725963][T23955]  ? lock_release+0x4b/0x3e0
[  411.725987][T23955]  anon_inode_getfile+0xc5/0x1a0
[  411.726007][T23955]  bpf_link_prime+0xfc/0x220
[  411.726026][T23955]  tcx_link_attach+0x1e9/0x890
[  411.726048][T23955]  ? rcu_is_watching+0x15/0xb0
[  411.726066][T23955]  ? rcu_is_watching+0x15/0xb0
[  411.726081][T23955]  ? lock_release+0x4b/0x3e0
[  411.726102][T23955]  ? __pfx_tcx_link_attach+0x10/0x10
[  411.726124][T23955]  ? __might_fault+0xb0/0x130
[  411.726149][T23955]  ? __fget_files+0x3a0/0x420
[  411.726164][T23955]  ? __fget_files+0x2a/0x420
[  411.726181][T23955]  ? bpf_prog_attach_check_attach_type+0x1e5/0x540
[  411.726202][T23955]  link_create+0x528/0x850
[  411.726227][T23955]  __sys_bpf+0x6dc/0x870
[  411.726249][T23955]  ? __pfx___sys_bpf+0x10/0x10
[  411.726277][T23955]  ? ksys_write+0x22a/0x250
[  411.726299][T23955]  ? __pfx_ksys_write+0x10/0x10
[  411.726319][T23955]  ? rcu_is_watching+0x15/0xb0
[  411.726339][T23955]  __x64_sys_bpf+0x7c/0x90
[  411.726358][T23955]  do_syscall_64+0xfa/0x3b0
[  411.726376][T23955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.726394][T23955]  ? clear_bhb_loop+0x60/0xb0
[  411.726413][T23955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.726430][T23955] RIP: 0033:0x7fb8faf8ebe9
[  411.726446][T23955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.726462][T23955] RSP: 002b:00007fb8fbe34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  411.726482][T23955] RAX: ffffffffffffffda RBX: 00007fb8fb1b5fa0 RCX: 00007fb8faf8ebe9
[  411.726496][T23955] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c
[  411.726508][T23955] RBP: 00007fb8fbe34090 R08: 0000000000000000 R09: 0000000000000000
[  411.726520][T23955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.726532][T23955] R13: 00007fb8fb1b6038 R14: 00007fb8fb1b5fa0 R15: 00007ffcc0cb7dd8
[  411.726554][T23955]  </TASK>
[  411.727510][T23947] svc: failed to register nfsaclv3 RPC service (errno 111).
[  411.880551][T23965] netlink: 'syz.1.5175': attribute type 4 has an invalid length.
[  411.932973][T23967] netlink: 'syz.1.5175': attribute type 4 has an invalid length.
[  412.094475][T23973] syzkaller1: entered promiscuous mode
[  412.101113][T23973] syzkaller1: entered allmulticast mode
[  412.111446][T23973] openvswitch: netlink: IP tunnel dst address not specified
[  412.402713][T23988] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  412.533073][T23996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5185'.
[  412.550735][T23996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  412.558088][T23996] syzkaller0: entered promiscuous mode
[  412.563578][T23996] syzkaller0: entered allmulticast mode
[  412.580423][T23996] tipc: Resetting bearer <eth:syzkaller0>
[  412.621517][T23994] tipc: Resetting bearer <eth:syzkaller0>
[  412.630729][T23994] tipc: Disabling bearer <eth:syzkaller0>
[  412.677964][T24005] svc: failed to register nfsdv3 RPC service (errno 111).
[  412.696765][T24005] svc: failed to register nfsaclv3 RPC service (errno 111).
[  412.763490][T24015] lo speed is unknown, defaulting to 1000
[  412.770611][T24015] wg1 speed is unknown, defaulting to 1000
[  412.772041][T24012] lo speed is unknown, defaulting to 1000
[  412.792924][T24012] wg1 speed is unknown, defaulting to 1000
[  412.865876][T24016] svc: failed to register nfsdv3 RPC service (errno 111).
[  412.878827][T24016] svc: failed to register nfsaclv3 RPC service (errno 111).
[  413.299610][T24038] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  413.439439][T24049] smc: net device bond0 applied user defined pnetid SYZ2
[  413.505107][T24056] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  414.060981][T24072] svc: failed to register nfsdv3 RPC service (errno 111).
[  414.079777][T24072] svc: failed to register nfsaclv3 RPC service (errno 111).
[  414.405010][T24107] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  414.433902][T24099] __nla_validate_parse: 7 callbacks suppressed
[  414.433918][T24099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5212'.
[  414.462451][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5214'.
[  414.553898][T24122] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5219'.
[  414.571881][T24122] batadv1: entered promiscuous mode
[  414.577270][T24122] batadv1: entered allmulticast mode
[  414.596371][T24125] lo speed is unknown, defaulting to 1000
[  414.603720][T24125] wg1 speed is unknown, defaulting to 1000
[  414.683439][T24122] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5219'.
[  414.709864][T24141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5223'.
[  414.724306][T24137] svc: failed to register nfsdv3 RPC service (errno 111).
[  414.734237][T24137] svc: failed to register nfsaclv3 RPC service (errno 111).
[  414.755214][T24141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.762984][T24141] syzkaller0: entered promiscuous mode
[  414.776909][T24141] syzkaller0: entered allmulticast mode
[  414.823443][T24141] tipc: Resetting bearer <eth:syzkaller0>
[  414.833473][T24138] tipc: Resetting bearer <eth:syzkaller0>
[  414.843660][T24138] tipc: Disabling bearer <eth:syzkaller0>
[  414.883866][   T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  415.013529][T24155] lo speed is unknown, defaulting to 1000
[  415.021716][T24155] wg1 speed is unknown, defaulting to 1000
[  415.032169][T24159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5228'.
[  415.130439][T24172] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5230'.
[  415.145107][T24172] batadv2: entered promiscuous mode
[  415.150710][T24172] batadv2: entered allmulticast mode
[  415.194870][T24174] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5231'.
[  415.352896][T24187] vlan3: entered promiscuous mode
[  415.359304][T24187] bond0: entered promiscuous mode
[  415.364540][T24187] vlan3: entered allmulticast mode
[  415.370941][T24187] bond0: entered allmulticast mode
[  415.569001][T24200] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  415.720389][T24208] netlink: 'syz.5.5242': attribute type 2 has an invalid length.
[  415.723217][T24206] lo speed is unknown, defaulting to 1000
[  415.728771][T24211] netlink: 'syz.1.5243': attribute type 1 has an invalid length.
[  415.728789][T24211] netlink: 'syz.1.5243': attribute type 3 has an invalid length.
[  415.728802][T24211] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5243'.
[  415.764520][T24206] wg1 speed is unknown, defaulting to 1000
[  415.839008][T24206] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5241'.
[  416.123851][T24226] lo speed is unknown, defaulting to 1000
[  416.156075][T24226] wg1 speed is unknown, defaulting to 1000
[  416.176075][T24232] syzkaller1: entered promiscuous mode
[  416.186479][T24232] syzkaller1: entered allmulticast mode
[  416.202008][T24234] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  416.216461][T24232] FAULT_INJECTION: forcing a failure.
[  416.216461][T24232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  416.230107][T24232] CPU: 0 UID: 0 PID: 24232 Comm: syz.4.5248 Not tainted syzkaller #0 PREEMPT(full) 
[  416.230132][T24232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  416.230144][T24232] Call Trace:
[  416.230151][T24232]  <TASK>
[  416.230159][T24232]  dump_stack_lvl+0x189/0x250
[  416.230183][T24232]  ? __pfx____ratelimit+0x10/0x10
[  416.230205][T24232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.230224][T24232]  ? __pfx__printk+0x10/0x10
[  416.230244][T24232]  ? __might_fault+0xb0/0x130
[  416.230267][T24232]  ? set_page_refcounted+0xa0/0x1e0
[  416.230292][T24232]  ? rcu_is_watching+0x15/0xb0
[  416.230311][T24232]  should_fail_ex+0x414/0x560
[  416.230335][T24232]  _copy_from_iter+0x1db/0x16f0
[  416.230354][T24232]  ? sock_alloc_send_pskb+0x875/0x990
[  416.230377][T24232]  ? __pfx__copy_from_iter+0x10/0x10
[  416.230398][T24232]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  416.230420][T24232]  skb_copy_datagram_from_iter+0xf5/0x720
[  416.230444][T24232]  ? skb_put+0x11b/0x210
[  416.230462][T24232]  tun_get_user+0x1691/0x3e20
[  416.230483][T24232]  ? rcu_is_watching+0x15/0xb0
[  416.230500][T24232]  ? lock_release+0x4b/0x3e0
[  416.230527][T24232]  ? aa_file_perm+0x44d/0x1550
[  416.230545][T24232]  ? __pfx_tun_get_user+0x10/0x10
[  416.230562][T24232]  ? _parse_integer_limit+0x1ae/0x1f0
[  416.230588][T24232]  ? kstrtoull+0x12f/0x1d0
[  416.230615][T24232]  ? ref_tracker_alloc+0x318/0x460
[  416.230638][T24232]  ? get_pid_task+0x20/0x1f0
[  416.230659][T24232]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  416.230683][T24232]  ? tun_get+0x1c/0x2f0
[  416.230698][T24232]  ? tun_get+0x1c/0x2f0
[  416.230714][T24232]  ? rcu_is_watching+0x15/0xb0
[  416.230730][T24232]  ? tun_get+0x1c/0x2f0
[  416.230746][T24232]  ? lock_release+0x4b/0x3e0
[  416.230768][T24232]  ? common_file_perm+0x1b5/0x230
[  416.230785][T24232]  ? tun_get+0x1c/0x2f0
[  416.230803][T24232]  tun_chr_write_iter+0x113/0x200
[  416.230822][T24232]  vfs_write+0x5c9/0xb30
[  416.230846][T24232]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  416.230864][T24232]  ? __pfx_vfs_write+0x10/0x10
[  416.230889][T24232]  ? __fget_files+0x2a/0x420
[  416.230916][T24232]  ksys_write+0x145/0x250
[  416.230939][T24232]  ? __pfx_ksys_write+0x10/0x10
[  416.230959][T24232]  ? rcu_is_watching+0x15/0xb0
[  416.230979][T24232]  ? rcu_is_watching+0x15/0xb0
[  416.230997][T24232]  do_syscall_64+0xfa/0x3b0
[  416.231015][T24232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.231033][T24232]  ? clear_bhb_loop+0x60/0xb0
[  416.231052][T24232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.231071][T24232] RIP: 0033:0x7fafabd8ebe9
[  416.231087][T24232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.231102][T24232] RSP: 002b:00007fafacca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  416.231121][T24232] RAX: ffffffffffffffda RBX: 00007fafabfb5fa0 RCX: 00007fafabd8ebe9
[  416.231135][T24232] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  416.231147][T24232] RBP: 00007fafacca9090 R08: 0000000000000000 R09: 0000000000000000
[  416.231158][T24232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.231169][T24232] R13: 00007fafabfb6038 R14: 00007fafabfb5fa0 R15: 00007fff09abffa8
[  416.231190][T24232]  </TASK>
[  417.112818][T24246] netlink: 'syz.5.5253': attribute type 7 has an invalid length.
[  417.187710][T24249] netlink: 'syz.5.5253': attribute type 1 has an invalid length.
[  417.203568][T24249] netlink: 'syz.5.5253': attribute type 1 has an invalid length.
[  417.273397][T24256] netlink: 'syz.5.5255': attribute type 1 has an invalid length.
[  417.305846][T24251] svc: failed to register nfsdv3 RPC service (errno 111).
[  417.329991][T24256] 8021q: adding VLAN 0 to HW filter on device bond5
[  417.337599][T24251] svc: failed to register nfsaclv3 RPC service (errno 111).
[  417.351045][T24256] bond4: (slave bond5): making interface the new active one
[  417.372691][T24256] bond4: (slave bond5): Enslaving as an active interface with an up link
[  417.394946][T24256] netlink: 'syz.5.5255': attribute type 1 has an invalid length.
[  417.423291][T24259] 8021q: adding VLAN 0 to HW filter on device bond6
[  417.432533][T24259] bond4: (slave bond6): Enslaving as a backup interface with an up link
[  417.531055][T24268] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  417.545345][T24270] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  417.701648][T24278] syzkaller1: entered promiscuous mode
[  417.707143][T24278] syzkaller1: entered allmulticast mode
[  417.732977][T24278] FAULT_INJECTION: forcing a failure.
[  417.732977][T24278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.751189][T24278] CPU: 0 UID: 0 PID: 24278 Comm: syz.0.5261 Not tainted syzkaller #0 PREEMPT(full) 
[  417.751213][T24278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  417.751224][T24278] Call Trace:
[  417.751231][T24278]  <TASK>
[  417.751239][T24278]  dump_stack_lvl+0x189/0x250
[  417.751264][T24278]  ? __pfx____ratelimit+0x10/0x10
[  417.751288][T24278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  417.751309][T24278]  ? __pfx__printk+0x10/0x10
[  417.751338][T24278]  ? __might_fault+0xb0/0x130
[  417.751364][T24278]  ? rcu_is_watching+0x15/0xb0
[  417.751380][T24278]  should_fail_ex+0x414/0x560
[  417.751403][T24278]  _copy_from_iter+0x1db/0x16f0
[  417.751417][T24278]  ? __might_fault+0xb0/0x130
[  417.751435][T24278]  ? __might_fault+0xcc/0x130
[  417.751458][T24278]  ? __pfx__copy_from_iter+0x10/0x10
[  417.751473][T24278]  ? sock_alloc_send_pskb+0x875/0x990
[  417.751494][T24278]  ? __pfx__copy_from_iter+0x10/0x10
[  417.751511][T24278]  ? page_copy_sane+0x16a/0x280
[  417.751526][T24278]  copy_page_from_iter+0xdd/0x170
[  417.751545][T24278]  skb_copy_datagram_from_iter+0x306/0x720
[  417.751569][T24278]  tun_get_user+0x1691/0x3e20
[  417.751588][T24278]  ? rcu_is_watching+0x15/0xb0
[  417.751605][T24278]  ? lock_release+0x4b/0x3e0
[  417.751630][T24278]  ? aa_file_perm+0x44d/0x1550
[  417.751647][T24278]  ? __pfx_tun_get_user+0x10/0x10
[  417.751662][T24278]  ? _parse_integer_limit+0x1ae/0x1f0
[  417.751687][T24278]  ? kstrtoull+0x12f/0x1d0
[  417.751710][T24278]  ? ref_tracker_alloc+0x318/0x460
[  417.751731][T24278]  ? get_pid_task+0x20/0x1f0
[  417.751750][T24278]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  417.751772][T24278]  ? tun_get+0x1c/0x2f0
[  417.751797][T24278]  ? tun_get+0x1c/0x2f0
[  417.751811][T24278]  ? rcu_is_watching+0x15/0xb0
[  417.751826][T24278]  ? tun_get+0x1c/0x2f0
[  417.751841][T24278]  ? lock_release+0x4b/0x3e0
[  417.751862][T24278]  ? common_file_perm+0x1b5/0x230
[  417.751877][T24278]  ? tun_get+0x1c/0x2f0
[  417.751895][T24278]  tun_chr_write_iter+0x113/0x200
[  417.751913][T24278]  vfs_write+0x5c9/0xb30
[  417.751933][T24278]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  417.751949][T24278]  ? __pfx_vfs_write+0x10/0x10
[  417.751974][T24278]  ? __fget_files+0x2a/0x420
[  417.751994][T24278]  ksys_write+0x145/0x250
[  417.752016][T24278]  ? __pfx_ksys_write+0x10/0x10
[  417.752035][T24278]  ? rcu_is_watching+0x15/0xb0
[  417.752053][T24278]  ? rcu_is_watching+0x15/0xb0
[  417.752071][T24278]  do_syscall_64+0xfa/0x3b0
[  417.752088][T24278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.752106][T24278]  ? clear_bhb_loop+0x60/0xb0
[  417.752125][T24278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.752143][T24278] RIP: 0033:0x7fb71c78ebe9
[  417.752158][T24278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.752178][T24278] RSP: 002b:00007fb71d661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  417.752198][T24278] RAX: ffffffffffffffda RBX: 00007fb71c9b5fa0 RCX: 00007fb71c78ebe9
[  417.752211][T24278] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  417.752223][T24278] RBP: 00007fb71d661090 R08: 0000000000000000 R09: 0000000000000000
[  417.752234][T24278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.752246][T24278] R13: 00007fb71c9b6038 R14: 00007fb71c9b5fa0 R15: 00007fff0aef8478
[  417.752267][T24278]  </TASK>
[  417.766822][T24276] lo speed is unknown, defaulting to 1000
[  418.112942][T24276] wg1 speed is unknown, defaulting to 1000
[  418.112957][T24281] lo speed is unknown, defaulting to 1000
[  418.180204][T24281] wg1 speed is unknown, defaulting to 1000
[  418.281928][T24301] vlan2: entered promiscuous mode
[  418.449614][T24314] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  418.487803][T24313] netlink: 'syz.0.5271': attribute type 1 has an invalid length.
[  418.540003][T24313] 8021q: adding VLAN 0 to HW filter on device bond7
[  418.581555][T24327] bond7: (slave gretap3): making interface the new active one
[  418.591514][T24327] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  418.656047][T24330] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  418.674285][T24332] FAULT_INJECTION: forcing a failure.
[  418.674285][T24332] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.688678][T24332] CPU: 0 UID: 0 PID: 24332 Comm: syz.5.5276 Not tainted syzkaller #0 PREEMPT(full) 
[  418.688703][T24332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  418.688714][T24332] Call Trace:
[  418.688722][T24332]  <TASK>
[  418.688730][T24332]  dump_stack_lvl+0x189/0x250
[  418.688761][T24332]  ? __pfx____ratelimit+0x10/0x10
[  418.688786][T24332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.688807][T24332]  ? __pfx__printk+0x10/0x10
[  418.688827][T24332]  ? __might_fault+0xb0/0x130
[  418.688852][T24332]  ? rcu_is_watching+0x15/0xb0
[  418.688872][T24332]  should_fail_ex+0x414/0x560
[  418.688896][T24332]  _copy_from_iter+0x1db/0x16f0
[  418.688921][T24332]  ? __might_fault+0xb0/0x130
[  418.688942][T24332]  ? __might_fault+0xcc/0x130
[  418.688968][T24332]  ? __pfx__copy_from_iter+0x10/0x10
[  418.688984][T24332]  ? sock_alloc_send_pskb+0x875/0x990
[  418.689008][T24332]  ? __pfx__copy_from_iter+0x10/0x10
[  418.689025][T24332]  ? page_copy_sane+0x16a/0x280
[  418.689041][T24332]  copy_page_from_iter+0xdd/0x170
[  418.689059][T24332]  skb_copy_datagram_from_iter+0x306/0x720
[  418.689082][T24332]  tun_get_user+0x1691/0x3e20
[  418.689103][T24332]  ? rcu_is_watching+0x15/0xb0
[  418.689119][T24332]  ? lock_release+0x4b/0x3e0
[  418.689144][T24332]  ? aa_file_perm+0x44d/0x1550
[  418.689161][T24332]  ? __pfx_tun_get_user+0x10/0x10
[  418.689175][T24332]  ? _parse_integer_limit+0x1ae/0x1f0
[  418.689200][T24332]  ? kstrtoull+0x12f/0x1d0
[  418.689225][T24332]  ? ref_tracker_alloc+0x318/0x460
[  418.689247][T24332]  ? get_pid_task+0x20/0x1f0
[  418.689267][T24332]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  418.689291][T24332]  ? tun_get+0x1c/0x2f0
[  418.689307][T24332]  ? tun_get+0x1c/0x2f0
[  418.689323][T24332]  ? rcu_is_watching+0x15/0xb0
[  418.689338][T24332]  ? tun_get+0x1c/0x2f0
[  418.689354][T24332]  ? lock_release+0x4b/0x3e0
[  418.689375][T24332]  ? common_file_perm+0x1b5/0x230
[  418.689392][T24332]  ? tun_get+0x1c/0x2f0
[  418.689409][T24332]  tun_chr_write_iter+0x113/0x200
[  418.689428][T24332]  vfs_write+0x5c9/0xb30
[  418.689452][T24332]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  418.689469][T24332]  ? __pfx_vfs_write+0x10/0x10
[  418.689495][T24332]  ? __fget_files+0x2a/0x420
[  418.689515][T24332]  ksys_write+0x145/0x250
[  418.689537][T24332]  ? __pfx_ksys_write+0x10/0x10
[  418.689556][T24332]  ? rcu_is_watching+0x15/0xb0
[  418.689575][T24332]  ? rcu_is_watching+0x15/0xb0
[  418.689592][T24332]  do_syscall_64+0xfa/0x3b0
[  418.689608][T24332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.689624][T24332]  ? clear_bhb_loop+0x60/0xb0
[  418.689642][T24332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.689658][T24332] RIP: 0033:0x7f93ca98ebe9
[  418.689674][T24332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.689689][T24332] RSP: 002b:00007f93cb7a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  418.689708][T24332] RAX: ffffffffffffffda RBX: 00007f93cabb6090 RCX: 00007f93ca98ebe9
[  418.689721][T24332] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  418.689733][T24332] RBP: 00007f93cb7a9090 R08: 0000000000000000 R09: 0000000000000000
[  418.689744][T24332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.689755][T24332] R13: 00007f93cabb6128 R14: 00007f93cabb6090 R15: 00007ffd4378bf48
[  418.689775][T24332]  </TASK>
[  418.696638][T24335] netlink: 'syz.0.5279': attribute type 1 has an invalid length.
[  419.055378][T24324] syzkaller1: entered promiscuous mode
[  419.061177][T24324] syzkaller1: entered allmulticast mode
[  419.077614][T24343] erspan0: entered promiscuous mode
[  419.084848][T24343] erspan0: left promiscuous mode
[  419.205067][T24353] vlan2: entered promiscuous mode
[  419.264945][T24359] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  419.532695][T24383] __nla_validate_parse: 15 callbacks suppressed
[  419.532715][T24383] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5293'.
[  419.781854][T24409] vlan0: entered promiscuous mode
[  419.855227][T24417] dvmrp0: entered allmulticast mode
[  419.986094][T24425] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5303'.
[  420.126354][T24429] lo speed is unknown, defaulting to 1000
[  420.136494][T24429] wg1 speed is unknown, defaulting to 1000
[  420.254055][T24430] lo speed is unknown, defaulting to 1000
[  420.262800][T24433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.277252][T24433] syzkaller0: entered promiscuous mode
[  420.285544][T24433] syzkaller0: entered allmulticast mode
[  420.306795][T24433] tipc: Resetting bearer <eth:syzkaller0>
[  420.332239][T24431] tipc: Resetting bearer <eth:syzkaller0>
[  420.340248][T24431] tipc: Disabling bearer <eth:syzkaller0>
[  420.347973][T24430] wg1 speed is unknown, defaulting to 1000
[  420.489243][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  420.502823][T24443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.515186][T24443] syzkaller0: entered promiscuous mode
[  420.521931][T24443] syzkaller0: entered allmulticast mode
[  420.559340][T24443] tipc: Resetting bearer <eth:syzkaller0>
[  420.576751][T24443] tipc: Disabling bearer <eth:syzkaller0>
[  420.663176][T24457] IPVS: length: 49 != 24
[  420.696911][T24460] svc: failed to register nfsdv3 RPC service (errno 111).
[  420.704793][T24460] svc: failed to register nfsaclv3 RPC service (errno 111).
[  420.932953][T24485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.946466][T24485] validate_nla: 6 callbacks suppressed
[  420.946482][T24485] netlink: 'syz.5.5319': attribute type 1 has an invalid length.
[  420.965765][T24485] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5319'.
[  421.014262][T24489] netlink: 'syz.1.5320': attribute type 7 has an invalid length.
[  421.025141][T24489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5320'.
[  421.055486][T24489] syzkaller0: entered promiscuous mode
[  421.061656][T24489] syzkaller0: entered allmulticast mode
[  421.105408][T24492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5322'.
[  421.165876][T24496] netlink: 464 bytes leftover after parsing attributes in process `syz.5.5323'.
[  421.180571][T24496] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5323'.
[  421.192921][T24496] 0·: renamed from hsr0
[  421.201986][T24496] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  421.212959][T24496] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  421.224193][T24496] 0·: entered allmulticast mode
[  421.230734][T24496] hsr_slave_0: entered allmulticast mode
[  421.236866][T24496] hsr_slave_1: entered allmulticast mode
[  421.243981][T24496] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  421.355618][T24514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5330'.
[  421.391063][T24514] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5330'.
[  421.410441][T24514] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5330'.
[  421.584665][T24531] macvtap2: entered promiscuous mode
[  421.594635][T24531] bond0: entered promiscuous mode
[  421.603784][T24531] macvtap2: entered allmulticast mode
[  421.614453][T24531] bond0: entered allmulticast mode
[  421.622415][T24531] batadv0: entered allmulticast mode
[  421.633767][T24531] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  421.645334][T24534] bond0: left allmulticast mode
[  421.652887][T24534] batadv0: left allmulticast mode
[  421.657945][T24534] bond0: left promiscuous mode
[  421.732856][T24538] lo speed is unknown, defaulting to 1000
[  421.744041][T24538] wg1 speed is unknown, defaulting to 1000
[  421.745507][T24536] tipc: Cannot configure node identity twice
[  421.793149][T24551] syzkaller1: entered promiscuous mode
[  421.801522][T24551] syzkaller1: entered allmulticast mode
[  421.834208][T24554] netlink: 'syz.0.5338': attribute type 1 has an invalid length.
[  421.842791][T24554] netlink: 'syz.0.5338': attribute type 6 has an invalid length.
[  421.857429][T24554] netlink: 'syz.0.5338': attribute type 3 has an invalid length.
[  421.885462][T24557] lo speed is unknown, defaulting to 1000
[  421.892247][T24557] wg1 speed is unknown, defaulting to 1000
[  421.982204][T24557] nbd: couldn't find a device at index 0
[  422.172857][T24557] netlink: 'syz.5.5343': attribute type 13 has an invalid length.
[  422.183499][T24557] netlink: 'syz.5.5343': attribute type 17 has an invalid length.
[  422.196237][T24575] bond6: entered promiscuous mode
[  422.204132][T24575] bond6: entered allmulticast mode
[  422.209875][T24575] 8021q: adding VLAN 0 to HW filter on device bond6
[  422.274899][T24557] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.286403][T24557] 8021q: adding VLAN 0 to HW filter on device team0
[  422.294722][T24557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  422.400200][T24590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.435007][T24597] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  422.444763][T24588] tipc: Disabling bearer <eth:syzkaller0>
[  422.451237][T24595] FAULT_INJECTION: forcing a failure.
[  422.451237][T24595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  422.466746][T24595] CPU: 0 UID: 0 PID: 24595 Comm: syz.5.5353 Not tainted syzkaller #0 PREEMPT(full) 
[  422.466772][T24595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  422.466783][T24595] Call Trace:
[  422.466790][T24595]  <TASK>
[  422.466799][T24595]  dump_stack_lvl+0x189/0x250
[  422.466824][T24595]  ? __pfx____ratelimit+0x10/0x10
[  422.466849][T24595]  ? __pfx_dump_stack_lvl+0x10/0x10
[  422.466869][T24595]  ? __pfx__printk+0x10/0x10
[  422.466890][T24595]  ? __might_fault+0xb0/0x130
[  422.466930][T24595]  ? rcu_is_watching+0x15/0xb0
[  422.466954][T24595]  should_fail_ex+0x414/0x560
[  422.466979][T24595]  _copy_from_iter+0x1db/0x16f0
[  422.466998][T24595]  ? rcu_is_watching+0x15/0xb0
[  422.467015][T24595]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  422.467039][T24595]  ? __pfx__copy_from_iter+0x10/0x10
[  422.467057][T24595]  ? __build_skb_around+0x257/0x3e0
[  422.467076][T24595]  ? netlink_sendmsg+0x642/0xb30
[  422.467092][T24595]  ? skb_put+0x11b/0x210
[  422.467109][T24595]  netlink_sendmsg+0x6b2/0xb30
[  422.467126][T24595]  ? __pfx_netlink_sendmsg+0x10/0x10
[  422.467142][T24595]  ? aa_sock_msg_perm+0xf1/0x1d0
[  422.467160][T24595]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  422.467177][T24595]  ? __pfx_netlink_sendmsg+0x10/0x10
[  422.467193][T24595]  __sock_sendmsg+0x21c/0x270
[  422.467214][T24595]  ____sys_sendmsg+0x505/0x830
[  422.467230][T24595]  ? __pfx_____sys_sendmsg+0x10/0x10
[  422.467246][T24595]  ? import_iovec+0x74/0xa0
[  422.467261][T24595]  ___sys_sendmsg+0x21f/0x2a0
[  422.467293][T24595]  ? __pfx____sys_sendmsg+0x10/0x10
[  422.467324][T24595]  ? __fget_files+0x2a/0x420
[  422.467338][T24595]  ? __fget_files+0x3a0/0x420
[  422.467357][T24595]  __x64_sys_sendmsg+0x19b/0x260
[  422.467375][T24595]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  422.467397][T24595]  ? __pfx_ksys_write+0x10/0x10
[  422.467416][T24595]  ? rcu_is_watching+0x15/0xb0
[  422.467433][T24595]  ? rcu_is_watching+0x15/0xb0
[  422.467449][T24595]  do_syscall_64+0xfa/0x3b0
[  422.467465][T24595]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.467481][T24595]  ? clear_bhb_loop+0x60/0xb0
[  422.467497][T24595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.467511][T24595] RIP: 0033:0x7f93ca98ebe9
[  422.467525][T24595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  422.467538][T24595] RSP: 002b:00007f93cb7ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  422.467554][T24595] RAX: ffffffffffffffda RBX: 00007f93cabb5fa0 RCX: 00007f93ca98ebe9
[  422.467565][T24595] RDX: 0000000000008000 RSI: 00002000000005c0 RDI: 0000000000000007
[  422.467576][T24595] RBP: 00007f93cb7ca090 R08: 0000000000000000 R09: 0000000000000000
[  422.467594][T24595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.467605][T24595] R13: 00007f93cabb6038 R14: 00007f93cabb5fa0 R15: 00007ffd4378bf48
[  422.467623][T24595]  </TASK>
[  422.764771][T24595] lo speed is unknown, defaulting to 1000
[  422.773098][T24595] wg1 speed is unknown, defaulting to 1000
[  422.815279][T24601] dvmrp8: entered allmulticast mode
[  422.844383][T24606] netlink: 'syz.1.5355': attribute type 303 has an invalid length.
[  422.862923][T24601] dvmrp8: left allmulticast mode
[  422.901908][T24608] syzkaller1: entered promiscuous mode
[  422.910715][T24608] syzkaller1: entered allmulticast mode
[  423.008960][T24617] geneve2: entered promiscuous mode
[  423.014255][T24617] geneve2: entered allmulticast mode
[  423.026963][T24617] dvmrp0: left allmulticast mode
[  423.036723][T24617] !
: left allmulticast mode
[  423.051869][T17827] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.063487][T17827] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.081703][T24613] lo speed is unknown, defaulting to 1000
[  423.093823][T17827] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.105649][T17827] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.115793][T24612] lo speed is unknown, defaulting to 1000
[  423.127566][T24612] wg1 speed is unknown, defaulting to 1000
[  423.181838][T24613] wg1 speed is unknown, defaulting to 1000
[  423.406233][T24638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.417802][T24634] syzkaller0: entered promiscuous mode
[  423.429164][T24634] syzkaller0: entered allmulticast mode
[  423.464973][T24634] tipc: Resetting bearer <eth:syzkaller0>
[  423.502195][T24633] tipc: Resetting bearer <eth:syzkaller0>
[  423.511933][T24633] tipc: Disabling bearer <eth:syzkaller0>
[  423.794427][T24666] syzkaller1: entered promiscuous mode
[  423.800613][T24666] syzkaller1: entered allmulticast mode
[  423.811835][T24667] lo speed is unknown, defaulting to 1000
[  423.820766][T24667] wg1 speed is unknown, defaulting to 1000
[  423.834138][T24666] FAULT_INJECTION: forcing a failure.
[  423.834138][T24666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.851518][T24666] CPU: 1 UID: 0 PID: 24666 Comm: syz.5.5371 Not tainted syzkaller #0 PREEMPT(full) 
[  423.851543][T24666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  423.851554][T24666] Call Trace:
[  423.851562][T24666]  <TASK>
[  423.851570][T24666]  dump_stack_lvl+0x189/0x250
[  423.851595][T24666]  ? __pfx____ratelimit+0x10/0x10
[  423.851620][T24666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  423.851639][T24666]  ? __pfx__printk+0x10/0x10
[  423.851660][T24666]  ? __might_fault+0xb0/0x130
[  423.851686][T24666]  ? rcu_is_watching+0x15/0xb0
[  423.851705][T24666]  should_fail_ex+0x414/0x560
[  423.851728][T24666]  _copy_from_iter+0x1db/0x16f0
[  423.851745][T24666]  ? __might_fault+0xb0/0x130
[  423.851766][T24666]  ? __might_fault+0xcc/0x130
[  423.851791][T24666]  ? __pfx__copy_from_iter+0x10/0x10
[  423.851807][T24666]  ? sock_alloc_send_pskb+0x875/0x990
[  423.851830][T24666]  ? __pfx__copy_from_iter+0x10/0x10
[  423.851847][T24666]  ? page_copy_sane+0x16a/0x280
[  423.851865][T24666]  copy_page_from_iter+0xdd/0x170
[  423.851885][T24666]  skb_copy_datagram_from_iter+0x306/0x720
[  423.851912][T24666]  tun_get_user+0x1691/0x3e20
[  423.851932][T24666]  ? rcu_is_watching+0x15/0xb0
[  423.851949][T24666]  ? lock_release+0x4b/0x3e0
[  423.851976][T24666]  ? aa_file_perm+0x44d/0x1550
[  423.851993][T24666]  ? __pfx_tun_get_user+0x10/0x10
[  423.852010][T24666]  ? _parse_integer_limit+0x1ae/0x1f0
[  423.852037][T24666]  ? kstrtoull+0x12f/0x1d0
[  423.852062][T24666]  ? ref_tracker_alloc+0x318/0x460
[  423.852084][T24666]  ? get_pid_task+0x20/0x1f0
[  423.852105][T24666]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  423.852129][T24666]  ? tun_get+0x1c/0x2f0
[  423.852144][T24666]  ? tun_get+0x1c/0x2f0
[  423.852160][T24666]  ? rcu_is_watching+0x15/0xb0
[  423.852176][T24666]  ? tun_get+0x1c/0x2f0
[  423.852190][T24666]  ? lock_release+0x4b/0x3e0
[  423.852212][T24666]  ? common_file_perm+0x1b5/0x230
[  423.852236][T24666]  ? tun_get+0x1c/0x2f0
[  423.852254][T24666]  tun_chr_write_iter+0x113/0x200
[  423.852273][T24666]  vfs_write+0x5c9/0xb30
[  423.852296][T24666]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  423.852314][T24666]  ? __pfx_vfs_write+0x10/0x10
[  423.852339][T24666]  ? __fget_files+0x2a/0x420
[  423.852358][T24666]  ksys_write+0x145/0x250
[  423.852380][T24666]  ? __pfx_ksys_write+0x10/0x10
[  423.852401][T24666]  ? rcu_is_watching+0x15/0xb0
[  423.852418][T24666]  ? rcu_is_watching+0x15/0xb0
[  423.852435][T24666]  do_syscall_64+0xfa/0x3b0
[  423.852450][T24666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.852467][T24666]  ? clear_bhb_loop+0x60/0xb0
[  423.852484][T24666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.852500][T24666] RIP: 0033:0x7f93ca98ebe9
[  423.852515][T24666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.852529][T24666] RSP: 002b:00007f93cb7ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  423.852550][T24666] RAX: ffffffffffffffda RBX: 00007f93cabb5fa0 RCX: 00007f93ca98ebe9
[  423.852564][T24666] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  423.852575][T24666] RBP: 00007f93cb7ca090 R08: 0000000000000000 R09: 0000000000000000
[  423.852587][T24666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  423.852598][T24666] R13: 00007f93cabb6038 R14: 00007f93cabb5fa0 R15: 00007ffd4378bf48
[  423.852619][T24666]  </TASK>
[  424.294504][T24680] bridge0: entered promiscuous mode
[  424.303367][T24680] bridge0: entered allmulticast mode
[  424.311071][T24680] team0: Port device bridge0 added
[  424.333096][T24697] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  424.480263][T24709] lo speed is unknown, defaulting to 1000
[  424.501826][T24709] wg1 speed is unknown, defaulting to 1000
[  424.553496][T24718] syz.4.5383: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  424.591852][T24709] __nla_validate_parse: 26 callbacks suppressed
[  424.591869][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5378'.
[  424.608533][T24718] CPU: 0 UID: 0 PID: 24718 Comm: syz.4.5383 Not tainted syzkaller #0 PREEMPT(full) 
[  424.608558][T24718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  424.608570][T24718] Call Trace:
[  424.608577][T24718]  <TASK>
[  424.608585][T24718]  dump_stack_lvl+0x189/0x250
[  424.608609][T24718]  ? __pfx_dump_stack_lvl+0x10/0x10
[  424.608630][T24718]  ? __pfx__printk+0x10/0x10
[  424.608648][T24718]  ? lock_release+0x4b/0x3e0
[  424.608670][T24718]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  424.608689][T24718]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  424.608708][T24718]  warn_alloc+0x214/0x310
[  424.608734][T24718]  ? __pfx_warn_alloc+0x10/0x10
[  424.608762][T24718]  ? __get_vm_area_node+0x28f/0x300
[  424.608785][T24718]  ? hash_ipmark_create+0x3e6/0x1080
[  424.608809][T24718]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  424.608831][T24718]  ? do_syscall_64+0xfa/0x3b0
[  424.608860][T24718]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  424.608886][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.608903][T24718]  ? hash_ipmark_create+0x3e6/0x1080
[  424.608923][T24718]  ? hash_ipmark_create+0x3e6/0x1080
[  424.608943][T24718]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  424.608966][T24718]  ? hash_ipmark_create+0x3e6/0x1080
[  424.608988][T24718]  ? hash_ipmark_create+0x387/0x1080
[  424.609011][T24718]  hash_ipmark_create+0x3e6/0x1080
[  424.609033][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.609050][T24718]  ? __nla_parse+0x40/0x60
[  424.609074][T24718]  ? __pfx_hash_ipmark_create+0x10/0x10
[  424.609097][T24718]  ip_set_create+0xa97/0x1940
[  424.609118][T24718]  ? ip_set_create+0x4a2/0x1940
[  424.609142][T24718]  ? __pfx_ip_set_create+0x10/0x10
[  424.609172][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.609189][T24718]  ? lock_release+0x4b/0x3e0
[  424.609210][T24718]  ? __nla_parse+0x40/0x60
[  424.609235][T24718]  nfnetlink_rcv_msg+0xb4a/0x1130
[  424.609258][T24718]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  424.609288][T24718]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  424.609321][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.609339][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.609362][T24718]  netlink_rcv_skb+0x205/0x470
[  424.609393][T24718]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  424.609415][T24718]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  424.609444][T24718]  ? bpf_lsm_capable+0x9/0x20
[  424.609467][T24718]  ? security_capable+0x7e/0x2e0
[  424.609494][T24718]  nfnetlink_rcv+0x26a/0x2520
[  424.609515][T24718]  ? is_bpf_text_address+0x26/0x2b0
[  424.609541][T24718]  ? kernel_text_address+0xa5/0xe0
[  424.609564][T24718]  ? __kernel_text_address+0xd/0x40
[  424.609585][T24718]  ? unwind_get_return_address+0x4d/0x90
[  424.609605][T24718]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  424.609624][T24718]  ? arch_stack_walk+0xfc/0x150
[  424.609651][T24718]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  424.609673][T24718]  ? stack_depot_save_flags+0x40/0x860
[  424.609694][T24718]  ? __pfx_stack_trace_save+0x10/0x10
[  424.609716][T24718]  ? kasan_save_track+0x4f/0x80
[  424.609735][T24718]  ? kasan_save_track+0x3e/0x80
[  424.609754][T24718]  ? __kasan_slab_alloc+0x6c/0x80
[  424.609774][T24718]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  424.609795][T24718]  ? kmalloc_reserve+0xbd/0x290
[  424.609811][T24718]  ? __netlink_lookup+0xbd/0x810
[  424.609827][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.609844][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.609861][T24718]  ? lock_release+0x4b/0x3e0
[  424.609888][T24718]  ? net_generic+0x1e/0x240
[  424.609907][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.609923][T24718]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.609946][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.609962][T24718]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.609986][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.610002][T24718]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.610025][T24718]  ? lock_release+0x4b/0x3e0
[  424.610046][T24718]  ? net_generic+0x1e/0x240
[  424.610065][T24718]  ? net_generic+0x1e/0x240
[  424.610088][T24718]  netlink_unicast+0x82f/0x9e0
[  424.610113][T24718]  ? __pfx_netlink_unicast+0x10/0x10
[  424.610136][T24718]  ? netlink_sendmsg+0x642/0xb30
[  424.610151][T24718]  ? skb_put+0x11b/0x210
[  424.610169][T24718]  netlink_sendmsg+0x805/0xb30
[  424.610189][T24718]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.610205][T24718]  ? futex_unqueue+0x22/0x240
[  424.610223][T24718]  ? aa_sock_msg_perm+0xf1/0x1d0
[  424.610241][T24718]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  424.610259][T24718]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.610275][T24718]  __sock_sendmsg+0x21c/0x270
[  424.610297][T24718]  ____sys_sendmsg+0x505/0x830
[  424.610317][T24718]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.610340][T24718]  ? import_iovec+0x74/0xa0
[  424.610360][T24718]  ___sys_sendmsg+0x21f/0x2a0
[  424.610379][T24718]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.610405][T24718]  ? futex_wait+0x285/0x360
[  424.610440][T24718]  ? __fget_files+0x2a/0x420
[  424.610455][T24718]  ? __fget_files+0x3a0/0x420
[  424.610475][T24718]  __x64_sys_sendmsg+0x19b/0x260
[  424.610494][T24718]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.610517][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.610536][T24718]  ? rcu_is_watching+0x15/0xb0
[  424.610554][T24718]  do_syscall_64+0xfa/0x3b0
[  424.610571][T24718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.610587][T24718]  ? clear_bhb_loop+0x60/0xb0
[  424.610606][T24718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.610623][T24718] RIP: 0033:0x7fafabd8ebe9
[  424.610639][T24718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.610654][T24718] RSP: 002b:00007fafacca9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.610673][T24718] RAX: ffffffffffffffda RBX: 00007fafabfb5fa0 RCX: 00007fafabd8ebe9
[  424.610686][T24718] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  424.610697][T24718] RBP: 00007fafabe11e19 R08: 0000000000000000 R09: 0000000000000000
[  424.610708][T24718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  424.610719][T24718] R13: 00007fafabfb6038 R14: 00007fafabfb5fa0 R15: 00007fff09abffa8
[  424.610741][T24718]  </TASK>
[  424.610760][T24718] Mem-Info:
[  424.630427][T24709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5378'.
[  424.642600][T24718] active_anon:11751 inactive_anon:0 isolated_anon:0
[  424.642600][T24718]  active_file:3916 inactive_file:39980 isolated_file:0
[  424.642600][T24718]  unevictable:768 dirty:518 writeback:0
[  424.642600][T24718]  slab_reclaimable:13272 slab_unreclaimable:202018
[  424.642600][T24718]  mapped:31833 shmem:2505 pagetables:1433
[  424.642600][T24718]  sec_pagetables:0 bounce:0
[  424.642600][T24718]  kernel_misc_reclaimable:0
[  424.642600][T24718]  free:1207365 free_pcp:12526 free_cma:0
[  424.648050][    C1] ==================================================================
[  425.250621][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  425.258518][    C1] Read of size 2 at addr ffff88805400ac2a by task kworker/u8:1/13
[  425.266315][    C1] 
[  425.268628][    C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  425.268648][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  425.268660][    C1] Workqueue: netns cleanup_net
[  425.268677][    C1] Call Trace:
[  425.268685][    C1]  <IRQ>
[  425.268693][    C1]  dump_stack_lvl+0x189/0x250
[  425.268714][    C1]  ? rcu_is_watching+0x15/0xb0
[  425.268731][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.268748][    C1]  ? rcu_is_watching+0x15/0xb0
[  425.268763][    C1]  ? lock_release+0x4b/0x3e0
[  425.268786][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  425.268806][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  425.268827][    C1]  print_report+0xca/0x240
[  425.268842][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  425.268863][    C1]  kasan_report+0x118/0x150
[  425.268886][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  425.268911][    C1]  rose_timer_expiry+0x471/0x4b0
[  425.268934][    C1]  call_timer_fn+0x17e/0x5f0
[  425.268955][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  425.268975][    C1]  ? call_timer_fn+0xbe/0x5f0
[  425.268997][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  425.269021][    C1]  ? rcu_is_watching+0x15/0xb0
[  425.269041][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  425.269063][    C1]  __run_timer_base+0x61a/0x860
[  425.269083][    C1]  ? ktime_get+0x3e/0x1f0
[  425.269105][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  425.269123][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  425.269148][    C1]  run_timer_softirq+0xb7/0x180
[  425.269168][    C1]  handle_softirqs+0x283/0x870
[  425.269185][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  425.269202][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  425.269219][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  425.269240][    C1]  __irq_exit_rcu+0xca/0x1f0
[  425.269254][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  425.269273][    C1]  irq_exit_rcu+0x9/0x30
[  425.269288][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  425.269311][    C1]  </IRQ>
[  425.269317][    C1]  <TASK>
[  425.269323][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  425.269340][    C1] RIP: 0010:smp_call_function_single+0x3ae/0x590
[  425.269358][    C1] Code: e6 01 31 ff e8 83 79 0b 00 41 83 e6 01 75 11 e8 38 75 0b 00 4d 89 fe eb 3f e8 2e 75 0b 00 eb 3c 4d 89 fe f3 90 43 0f b6 04 2c <84> c0 75 0f f7 03 01 00 00 00 74 1d e8 11 75 0b 00 eb e6 89 d9 80
[  425.269373][    C1] RSP: 0018:ffffc90000127520 EFLAGS: 00000293
[  425.269387][    C1] RAX: 0000000000000000 RBX: ffffc90000127568 RCX: ffff88801ce98000
[  425.269399][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  425.269409][    C1] RBP: ffffc90000127610 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6
[  425.269421][    C1] R10: dffffc0000000000 R11: ffffffff81705100 R12: 1ffff92000024ead
[  425.269434][    C1] R13: dffffc0000000000 R14: 1ffff92000024ea8 R15: 1ffff92000024ea8
[  425.269448][    C1]  ? __pfx_native_send_call_func_single_ipi+0x10/0x10
[  425.269475][    C1]  ? __pfx_rcu_barrier_handler+0x10/0x10
[  425.269493][    C1]  ? __pfx_smp_call_function_single+0x10/0x10
[  425.269509][    C1]  ? __pfx_rcu_barrier_handler+0x10/0x10
[  425.269527][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  425.269550][    C1]  ? __init_swait_queue_head+0xa9/0x150
[  425.269570][    C1]  rcu_barrier+0x360/0x570
[  425.269591][    C1]  netdev_run_todo+0x327/0xea0
[  425.269611][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  425.269632][    C1]  ? __pfx_netdev_run_todo+0x10/0x10
[  425.269650][    C1]  ? unregister_netdevice_queue+0x1b3/0x380
[  425.269670][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  425.269693][    C1]  default_device_exit_batch+0x81e/0x890
[  425.269720][    C1]  ? __pfx___might_resched+0x10/0x10
[  425.269735][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  425.269760][    C1]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  425.269781][    C1]  ? net_generic+0x1e/0x240
[  425.269798][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  425.269822][    C1]  ops_undo_list+0x525/0x990
[  425.269839][    C1]  ? __pfx_ops_undo_list+0x10/0x10
[  425.269854][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  425.269875][    C1]  cleanup_net+0x4c5/0x800
[  425.269889][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  425.269904][    C1]  ? rcu_is_watching+0x15/0xb0
[  425.269918][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  425.269933][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  425.269949][    C1]  process_scheduled_works+0xae1/0x17b0
[  425.269974][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  425.269996][    C1]  worker_thread+0x8a0/0xda0
[  425.270022][    C1]  kthread+0x70e/0x8a0
[  425.270046][    C1]  ? __pfx_worker_thread+0x10/0x10
[  425.270061][    C1]  ? __pfx_kthread+0x10/0x10
[  425.270080][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.270100][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.270121][    C1]  ? __pfx_kthread+0x10/0x10
[  425.270139][    C1]  ret_from_fork+0x3f9/0x770
[  425.270156][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  425.270174][    C1]  ? __switch_to_asm+0x39/0x70
[  425.270193][    C1]  ? __switch_to_asm+0x33/0x70
[  425.270211][    C1]  ? __pfx_kthread+0x10/0x10
[  425.270229][    C1]  ret_from_fork_asm+0x1a/0x30
[  425.270255][    C1]  </TASK>
[  425.270261][    C1] 
[  425.757465][    C1] Allocated by task 24417:
[  425.761860][    C1]  kasan_save_track+0x3e/0x80
[  425.766527][    C1]  __kasan_kmalloc+0x93/0xb0
[  425.771102][    C1]  __kmalloc_noprof+0x27a/0x4f0
[  425.775937][    C1]  copy_splice_read+0x143/0xa50
[  425.780778][    C1]  splice_direct_to_actor+0x4d0/0xcc0
[  425.786138][    C1]  do_splice_direct+0x181/0x270
[  425.790988][    C1]  do_sendfile+0x4da/0x7e0
[  425.795383][    C1]  __se_sys_sendfile64+0x13e/0x190
[  425.800484][    C1]  do_syscall_64+0xfa/0x3b0
[  425.804992][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.810867][    C1] 
[  425.813171][    C1] Freed by task 24417:
[  425.817213][    C1]  kasan_save_track+0x3e/0x80
[  425.821877][    C1]  kasan_save_free_info+0x46/0x50
[  425.826881][    C1]  __kasan_slab_free+0x5b/0x80
[  425.831633][    C1]  kfree+0x18e/0x440
[  425.835512][    C1]  copy_splice_read+0x903/0xa50
[  425.840385][    C1]  splice_direct_to_actor+0x4d0/0xcc0
[  425.845744][    C1]  do_splice_direct+0x181/0x270
[  425.850585][    C1]  do_sendfile+0x4da/0x7e0
[  425.854987][    C1]  __se_sys_sendfile64+0x13e/0x190
[  425.860087][    C1]  do_syscall_64+0xfa/0x3b0
[  425.864574][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.870459][    C1] 
[  425.872766][    C1] The buggy address belongs to the object at ffff88805400ac00
[  425.872766][    C1]  which belongs to the cache kmalloc-512 of size 512
[  425.886812][    C1] The buggy address is located 42 bytes inside of
[  425.886812][    C1]  freed 512-byte region [ffff88805400ac00, ffff88805400ae00)
[  425.900530][    C1] 
[  425.902842][    C1] The buggy address belongs to the physical page:
[  425.909240][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54008
[  425.917995][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  425.926567][    C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  425.934623][    C1] page_type: f5(slab)
[  425.938614][    C1] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  425.947211][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  425.955784][    C1] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  425.964444][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  425.973097][    C1] head: 00fff00000000002 ffffea0001500201 00000000ffffffff 00000000ffffffff
[  425.981756][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  425.990407][    C1] page dumped because: kasan: bad access detected
[  425.996810][    C1] page_owner tracks the page as allocated
[  426.002502][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5864, tgid 5864 (syz-executor), ts 58145010091, free_ts 14677958692
[  426.023849][    C1]  post_alloc_hook+0x240/0x2a0
[  426.028610][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  426.034154][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  426.039970][    C1]  alloc_pages_mpol+0x232/0x4a0
[  426.044823][    C1]  allocate_slab+0x8a/0x370
[  426.049321][    C1]  ___slab_alloc+0xbeb/0x1410
[  426.053991][    C1]  __kmalloc_noprof+0x305/0x4f0
[  426.058827][    C1]  ieee80211_txq_setup_flows+0x1bc/0xee0
[  426.064445][    C1]  ieee80211_register_hw+0x2fcd/0x4080
[  426.069891][    C1]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  426.075604][    C1]  hwsim_new_radio_nl+0xea4/0x1b10
[  426.080701][    C1]  genl_family_rcv_msg_doit+0x212/0x300
[  426.086267][    C1]  genl_rcv_msg+0x60e/0x790
[  426.090756][    C1]  netlink_rcv_skb+0x205/0x470
[  426.095512][    C1]  genl_rcv+0x28/0x40
[  426.099479][    C1]  netlink_unicast+0x82f/0x9e0
[  426.104231][    C1] page last free pid 1 tgid 1 stack trace:
[  426.110021][    C1]  __free_frozen_pages+0xbc4/0xd30
[  426.115131][    C1]  free_contig_range+0x1bd/0x4a0
[  426.120055][    C1]  destroy_args+0x64/0x4a0
[  426.124460][    C1]  debug_vm_pgtable+0x39f/0x3b0
[  426.129296][    C1]  do_one_initcall+0x233/0x820
[  426.134050][    C1]  do_initcall_level+0x104/0x190
[  426.138972][    C1]  do_initcalls+0x59/0xa0
[  426.143286][    C1]  kernel_init_freeable+0x334/0x4b0
[  426.148479][    C1]  kernel_init+0x1d/0x1d0
[  426.152791][    C1]  ret_from_fork+0x3f9/0x770
[  426.157361][    C1]  ret_from_fork_asm+0x1a/0x30
[  426.162122][    C1] 
[  426.164425][    C1] Memory state around the buggy address:
[  426.170038][    C1]  ffff88805400ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  426.178130][    C1]  ffff88805400ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  426.186176][    C1] >ffff88805400ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  426.194216][    C1]                                   ^
[  426.199610][    C1]  ffff88805400ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  426.207651][    C1]  ffff88805400ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  426.215696][    C1] ==================================================================
[  426.223772][T24718] Node 0 active_anon:47004kB inactive_anon:0kB active_file:15664kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127332kB dirty:2072kB writeback:0kB shmem:8484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15876kB pagetables:5592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  426.223818][T24718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  426.255640][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  426.255661][    C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  426.255682][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  426.255696][    C1] Workqueue: netns cleanup_net
[  426.255720][    C1] Call Trace:
[  426.255731][    C1]  <IRQ>
[  426.255742][    C1]  dump_stack_lvl+0x99/0x250
[  426.255769][    C1]  ? __asan_memcpy+0x40/0x70
[  426.255792][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  426.255814][    C1]  ? __pfx__printk+0x10/0x10
[  426.255848][    C1]  vpanic+0x281/0x750
[  426.255872][    C1]  ? __pfx_vpanic+0x10/0x10
[  426.255893][    C1]  ? rcu_is_watching+0x15/0xb0
[  426.255917][    C1]  panic+0xb9/0xc0
[  426.255939][    C1]  ? __pfx_panic+0x10/0x10
[  426.255960][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  426.255989][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  426.256020][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  426.256048][    C1]  check_panic_on_warn+0x89/0xb0
[  426.256075][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  426.256101][    C1]  end_report+0x78/0x160
[  426.256128][    C1]  kasan_report+0x129/0x150
[  426.256170][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  426.256202][    C1]  rose_timer_expiry+0x471/0x4b0
[  426.256230][    C1]  call_timer_fn+0x17e/0x5f0
[  426.256258][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  426.256284][    C1]  ? call_timer_fn+0xbe/0x5f0
[  426.256311][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  426.256343][    C1]  ? rcu_is_watching+0x15/0xb0
[  426.256362][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  426.256390][    C1]  __run_timer_base+0x61a/0x860
[  426.256415][    C1]  ? ktime_get+0x3e/0x1f0
[  426.256442][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  426.256467][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  426.256499][    C1]  run_timer_softirq+0xb7/0x180
[  426.256525][    C1]  handle_softirqs+0x283/0x870
[  426.256546][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  426.256568][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  426.256591][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  426.256616][    C1]  __irq_exit_rcu+0xca/0x1f0
[  426.256635][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  426.256659][    C1]  irq_exit_rcu+0x9/0x30
[  426.256677][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  426.256707][    C1]  </IRQ>
[  426.256714][    C1]  <TASK>
[  426.256723][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  426.256745][    C1] RIP: 0010:smp_call_function_single+0x3ae/0x590
[  426.256768][    C1] Code: e6 01 31 ff e8 83 79 0b 00 41 83 e6 01 75 11 e8 38 75 0b 00 4d 89 fe eb 3f e8 2e 75 0b 00 eb 3c 4d 89 fe f3 90 43 0f b6 04 2c <84> c0 75 0f f7 03 01 00 00 00 74 1d e8 11 75 0b 00 eb e6 89 d9 80
[  426.256787][    C1] RSP: 0018:ffffc90000127520 EFLAGS: 00000293
[  426.256805][    C1] RAX: 0000000000000000 RBX: ffffc90000127568 RCX: ffff88801ce98000
[  426.256821][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  426.256833][    C1] RBP: ffffc90000127610 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6
[  426.256850][    C1] R10: dffffc0000000000 R11: ffffffff81705100 R12: 1ffff92000024ead
[  426.256866][    C1] R13: dffffc0000000000 R14: 1ffff92000024ea8 R15: 1ffff92000024ea8
[  426.256886][    C1]  ? __pfx_native_send_call_func_single_ipi+0x10/0x10
[  426.256919][    C1]  ? __pfx_rcu_barrier_handler+0x10/0x10
[  426.256943][    C1]  ? __pfx_smp_call_function_single+0x10/0x10
[  426.256963][    C1]  ? __pfx_rcu_barrier_handler+0x10/0x10
[  426.256987][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  426.257016][    C1]  ? __init_swait_queue_head+0xa9/0x150
[  426.257041][    C1]  rcu_barrier+0x360/0x570
[  426.257068][    C1]  netdev_run_todo+0x327/0xea0
[  426.257094][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  426.257121][    C1]  ? __pfx_netdev_run_todo+0x10/0x10
[  426.257143][    C1]  ? unregister_netdevice_queue+0x1b3/0x380
[  426.257177][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  426.257207][    C1]  default_device_exit_batch+0x81e/0x890
[  426.257241][    C1]  ? __pfx___might_resched+0x10/0x10
[  426.257260][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  426.257291][    C1]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  426.257318][    C1]  ? net_generic+0x1e/0x240
[  426.257341][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  426.257371][    C1]  ops_undo_list+0x525/0x990
[  426.257392][    C1]  ? __pfx_ops_undo_list+0x10/0x10
[  426.257412][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  426.257439][    C1]  cleanup_net+0x4c5/0x800
[  426.257458][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  426.257477][    C1]  ? rcu_is_watching+0x15/0xb0
[  426.257495][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  426.257515][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  426.257535][    C1]  process_scheduled_works+0xae1/0x17b0
[  426.257569][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  426.257596][    C1]  worker_thread+0x8a0/0xda0
[  426.257628][    C1]  kthread+0x70e/0x8a0
[  426.257653][    C1]  ? __pfx_worker_thread+0x10/0x10
[  426.257673][    C1]  ? __pfx_kthread+0x10/0x10
[  426.257704][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  426.257729][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  426.257757][    C1]  ? __pfx_kthread+0x10/0x10
[  426.257784][    C1]  ret_from_fork+0x3f9/0x770
[  426.257806][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  426.257829][    C1]  ? __switch_to_asm+0x39/0x70
[  426.257855][    C1]  ? __switch_to_asm+0x33/0x70
[  426.257879][    C1]  ? __pfx_kthread+0x10/0x10
[  426.257902][    C1]  ret_from_fork_asm+0x1a/0x30
[  426.257936][    C1]  </TASK>
[  426.285662][    C1] Kernel Offset: disabled