last executing test programs:

16m12.979759796s ago: executing program 3 (id=47):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

16m11.926510904s ago: executing program 3 (id=53):
socket(0xa, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8000007, 'syz0\x00'})
shutdown(r1, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40010)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000008c0)={0xac, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "b23595cc0e70a6e8ce171c8d2cd3d82535b3b1aa9de5a4c74f9ee9fa61da82f7aa92a0f1e86c69870e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfe6}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x10)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {0x3}}, 0x14}}, 0x48000)

16m11.497876415s ago: executing program 3 (id=57):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f00000003c0)=0x8, 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

16m10.554243941s ago: executing program 3 (id=59):
socket$tipc(0x1e, 0x5, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

16m9.568851843s ago: executing program 3 (id=64):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmmsg$inet6(r0, &(0x7f00000008c0), 0x0, 0x408c0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

16m7.548500123s ago: executing program 3 (id=74):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)

16m7.17562984s ago: executing program 32 (id=74):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)

9.444980803s ago: executing program 5 (id=5399):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f00000000000000d641000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x80}, 0x8)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8)
sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0xc03, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c)
r9 = socket$kcm(0xa, 0x2, 0x0)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r7)

7.636580897s ago: executing program 5 (id=5409):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "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"}}, 0xfca)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000140000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(r2)
listen(0xffffffffffffffff, 0xffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unshare(0x6a060000)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffe}]}}}]}, 0x38}}, 0x28000000)

7.431914423s ago: executing program 2 (id=5410):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)
recvfrom$l2tp(r1, &(0x7f00000001c0)=""/223, 0xdf, 0x40, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xa4}}, 0x0)

7.363738286s ago: executing program 2 (id=5412):
vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba4", 0x7}], 0x1, 0x6)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xda02})
close(r0)
socket$inet_udp(0x2, 0x2, 0x0)
preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0)

7.124292711s ago: executing program 2 (id=5415):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b75a9ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c9eaacb5793498be490de32baba49172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19411e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb97800763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f60"}}, 0xfca)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000140000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(r2)
listen(0xffffffffffffffff, 0xffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
unshare(0x6a060000)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x28000000)

4.624208688s ago: executing program 2 (id=5423):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r4 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket(0x1d, 0x2, 0x6)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r8, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r9 = socket$igmp(0x2, 0x3, 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, &(0x7f0000000840)=0x7ffffffa, 0x4)
getsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, 0x0, &(0x7f00000001c0)=0x5c)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

4.439917392s ago: executing program 1 (id=5424):
socket(0x11, 0x800000003, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x13, &(0x7f0000000640)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x9, 0x1, 0x4, 0x100, 0x4}], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x46}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000600)=0x681, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6}, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

4.362437101s ago: executing program 4 (id=5425):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.90967641s ago: executing program 4 (id=5427):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r5}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)

3.824666454s ago: executing program 0 (id=5428):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x241)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10)
unshare(0x22020600)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
pread64(r2, 0x0, 0x0, 0x100000000)
write(r0, &(0x7f0000000100)="520003000100b8", 0x7)

3.663389233s ago: executing program 5 (id=5429):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xc}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xe}}]}}]}, 0x3c}}, 0x1f71a0b5d0ef8eff)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.59165899s ago: executing program 2 (id=5430):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b", 0x21}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r5, 0x0, 0x9}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
poll(&(0x7f00000002c0)=[{r5, 0x12}, {r4, 0xba}, {r4}], 0x3, 0x7ae6)
sendmmsg$alg(r3, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dce3", 0x3}, {&(0x7f0000000500)="82c3e4", 0xffffff57}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000)

3.513549978s ago: executing program 0 (id=5431):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b", 0x21}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r5, 0x0, 0x9}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
poll(&(0x7f00000002c0)=[{r5, 0x12}, {r4, 0xba}, {r4}], 0x3, 0x7ae6)
sendmmsg$alg(r3, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dce3", 0x3}, {&(0x7f0000000500)="82c3e4", 0xffffff57}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000)

3.333501069s ago: executing program 5 (id=5432):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}], 0x1}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req={0x6, 0x5, 0x1, 0x1}, 0x10)
recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, 0x0, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)

3.207868067s ago: executing program 1 (id=5433):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

2.781589367s ago: executing program 4 (id=5434):
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r8}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)

2.385223012s ago: executing program 0 (id=5435):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000000100), 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x44004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8844}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

2.29682217s ago: executing program 2 (id=5436):
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58"], 0x58}}, 0x0)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.619688174s ago: executing program 4 (id=5437):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.379107872s ago: executing program 0 (id=5438):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x40084)

1.3621254s ago: executing program 5 (id=5439):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r8}, 0x10)
ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10)
connect$llc(r11, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

1.33608604s ago: executing program 4 (id=5440):
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r8}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)

1.192108947s ago: executing program 0 (id=5441):
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="f0c15f579c77", 0x6}], 0x1}}], 0x1, 0x24044c41)
socket$alg(0x26, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x4000, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x0, 0x4, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

834.078116ms ago: executing program 1 (id=5442):
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/236, &(0x7f0000000540)=0xec)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="0187000000000000000067000000080001000c0000000c00990009"], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

579.609841ms ago: executing program 1 (id=5443):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000100))
writev(r2, &(0x7f0000000240), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

260.0574ms ago: executing program 0 (id=5444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x24}}, 0x0)

250.21769ms ago: executing program 4 (id=5445):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b", 0x21}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r5, 0x0, 0x9}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
poll(&(0x7f00000002c0)=[{r5, 0x12}, {r4, 0xba}, {r4}], 0x3, 0x7ae6)
sendmmsg$alg(r3, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dce3", 0x3}, {&(0x7f0000000500)="82c3e4", 0xffffff57}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000)

136.149582ms ago: executing program 5 (id=5446):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044810}, 0x20044002)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x1, 0x4}}]}, 0x40}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0)

103.718165ms ago: executing program 1 (id=5447):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
syz_emit_ethernet(0x9d, &(0x7f0000000140)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864, 0x30, 0x0, [], "a9e30205c05481cd37808b64a6b35486f934a965830cfc16bbed02013b48c8ac3f454dec5278a5ddaff09e9ac607652d"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x80]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2, {0x10000000}}}, {0x8, 0x6558, 0x0, "859d0aee92"}}}}}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
read$alg(r1, &(0x7f00000009c0)=""/75, 0x4b)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x68, 0xe, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x10)
connect$rxrpc(r1, &(0x7f00000003c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24)

0s ago: executing program 1 (id=5448):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba724a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e993ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d74df524b760ab92efcce7dd1574052c73596f860221156437f4d6b76ecc4b35bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

kernel console output (not intermixed with test programs):

n process `syz.1.3831'.
[  794.838265][T22617] netlink: 'syz.2.3840': attribute type 39 has an invalid length.
[  795.196964][T22627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3843'.
[  795.300910][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3845'.
[  795.421033][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'.
[  795.503936][T22643] syzkaller0: entered allmulticast mode
[  795.548388][T22643] syzkaller0 (unregistering): left allmulticast mode
[  795.626075][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3848'.
[  796.067919][T22660] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3855'.
[  796.154591][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'.
[  796.154760][T22663] netlink: 'syz.0.3857': attribute type 1 has an invalid length.
[  796.173717][T22663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3857'.
[  796.215863][T22663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'.
[  796.290454][T22668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3857'.
[  796.382510][T22669] 8021q: adding VLAN 0 to HW filter on device bond5
[  796.407318][T22674] macsec2: entered promiscuous mode
[  796.413493][T22674] bond5: entered promiscuous mode
[  796.439231][T22674] macsec2: entered allmulticast mode
[  796.489234][T22674] bond5: entered allmulticast mode
[  796.508820][T22674] bond5: left allmulticast mode
[  796.515342][T22674] bond5: left promiscuous mode
[  796.726441][T22693] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  796.735447][T22693] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  796.892388][T22700] syzkaller1: entered promiscuous mode
[  796.901415][T22700] syzkaller1: entered allmulticast mode
[  796.980379][T22700] wg1 speed is unknown, defaulting to 1000
[  797.001476][T22700] lo speed is unknown, defaulting to 1000
[  797.221949][T22713] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  797.288075][T22714] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  797.309767][T22714] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  797.356604][T22708] macvlan0: entered promiscuous mode
[  797.364072][T22708] macvlan0: entered allmulticast mode
[  797.370904][T22708] bond5: (slave macvlan0): Error -98 calling set_mac_address
[  797.509707][T22712] wg1 speed is unknown, defaulting to 1000
[  797.535804][T22712] lo speed is unknown, defaulting to 1000
[  797.684741][T22725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  797.692177][T22725] IPv6: NLM_F_CREATE should be set when creating new route
[  797.696377][T22719] wg1 speed is unknown, defaulting to 1000
[  797.708053][T22719] lo speed is unknown, defaulting to 1000
[  798.047497][T22737] wg1 speed is unknown, defaulting to 1000
[  798.059090][T22737] lo speed is unknown, defaulting to 1000
[  798.137022][T22733] wg1 speed is unknown, defaulting to 1000
[  798.176843][T22740] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  798.219937][T22733] lo speed is unknown, defaulting to 1000
[  800.180492][T22789] syzkaller0: entered allmulticast mode
[  800.328748][T22789] syzkaller0 (unregistering): left allmulticast mode
[  801.174275][T22800] netlink: 'syz.2.3897': attribute type 1 has an invalid length.
[  801.328630][T22800] bond6 (unregistering): Released all slaves
[  801.492404][T22811] tipc: Resetting bearer <eth:syzkaller0>
[  801.675422][T22813] __nla_validate_parse: 4 callbacks suppressed
[  801.675443][T22813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3900'.
[  802.598195][T22842] netlink: 'syz.0.3909': attribute type 1 has an invalid length.
[  802.628247][T22843] wg1 speed is unknown, defaulting to 1000
[  802.637082][T22843] lo speed is unknown, defaulting to 1000
[  802.650517][T22838] wg1 speed is unknown, defaulting to 1000
[  802.668605][T22838] lo speed is unknown, defaulting to 1000
[  802.751130][T22848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3910'.
[  802.768140][T22842] bond7 (unregistering): Released all slaves
[  802.882154][T22845] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  804.499269][T22892] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  805.239046][T22886] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  805.371801][T22903] netlink: 'syz.1.3924': attribute type 1 has an invalid length.
[  805.419854][T22903] bond6 (unregistering): Released all slaves
[  805.641369][T22918] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3925'.
[  805.730103][T22912] wg1 speed is unknown, defaulting to 1000
[  805.739111][T22912] lo speed is unknown, defaulting to 1000
[  805.880352][T22921] netlink: 'syz.2.3926': attribute type 1 has an invalid length.
[  806.035923][T22921] bond6 (unregistering): Released all slaves
[  806.255707][T22909] syzkaller1: entered promiscuous mode
[  806.281876][T22909] syzkaller1: entered allmulticast mode
[  806.698388][T22942] wg1 speed is unknown, defaulting to 1000
[  806.706818][T22942] lo speed is unknown, defaulting to 1000
[  807.287884][T22938] netlink: 'syz.0.3927': attribute type 6 has an invalid length.
[  807.553618][T22956] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  807.829319][T22955] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  808.331669][T22993] wg1 speed is unknown, defaulting to 1000
[  808.344924][T22993] lo speed is unknown, defaulting to 1000
[  808.891448][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3944'.
[  809.285280][   T30] audit: type=1804 audit(1758126362.395:13): pid=23031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3949" name="/newroot/770/cgroup.controllers" dev="tmpfs" ino=4004 res=1 errno=0
[  809.343673][   T30] audit: type=1800 audit(1758126362.395:14): pid=23031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3949" name="cgroup.controllers" dev="tmpfs" ino=4004 res=0 errno=0
[  809.682428][T23046] tipc: Resetting bearer <eth:syzkaller0>
[  809.709772][T23048] netlink: 'syz.4.3953': attribute type 1 has an invalid length.
[  809.737996][T23048] bond6 (unregistering): Released all slaves
[  809.953829][    C0] vcan0: j1939_tp_rxtimer: 0xffff888053c58000: rx timeout, send abort
[  809.962488][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053c58000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  810.750921][T23079] netlink: 'syz.4.3963': attribute type 1 has an invalid length.
[  810.874934][T23079] bond6 (unregistering): Released all slaves
[  810.974770][T23088] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  811.056391][T23088] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  811.782620][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3973'.
[  811.836078][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3975'.
[  812.041040][T23132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3973'.
[  812.608961][T23151] wg1 speed is unknown, defaulting to 1000
[  812.654283][T23151] lo speed is unknown, defaulting to 1000
[  813.019824][T23161] netlink: 'syz.2.3983': attribute type 1 has an invalid length.
[  813.039733][T23137] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  813.086357][T23161] bond6 (unregistering): Released all slaves
[  814.028546][T23185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3989'.
[  814.048905][T23190] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3990'.
[  814.154271][T23185] bond1: entered promiscuous mode
[  814.176563][T23185] 8021q: adding VLAN 0 to HW filter on device bond1
[  814.218198][T23189] 8021q: adding VLAN 0 to HW filter on device bond1
[  814.226141][T23189] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  814.238852][T23189] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  814.265057][T23192] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  814.333644][T23187] wg1 speed is unknown, defaulting to 1000
[  814.351015][T23187] lo speed is unknown, defaulting to 1000
[  814.844134][T23217] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  814.893138][T23217] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  814.928027][T23217] tipc: Resetting bearer <eth:syzkaller0>
[  815.485684][T23236] wg1 speed is unknown, defaulting to 1000
[  815.496671][T23233] atm:sigd_send: bad message type 36
[  815.504260][T23236] lo speed is unknown, defaulting to 1000
[  815.655463][T23238] wg1 speed is unknown, defaulting to 1000
[  815.671140][T23238] lo speed is unknown, defaulting to 1000
[  815.832230][T23246] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  816.175091][T23256] wg1 speed is unknown, defaulting to 1000
[  816.185117][T23256] lo speed is unknown, defaulting to 1000
[  816.395546][T23261] wg1 speed is unknown, defaulting to 1000
[  816.405444][T23261] lo speed is unknown, defaulting to 1000
[  816.936750][T23266] netlink: 'syz.4.4006': attribute type 6 has an invalid length.
[  817.037837][T23269] tipc: Resetting bearer <eth:syzkaller0>
[  817.820100][T23308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  817.909571][T23314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  818.130696][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'.
[  818.189176][T23322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4020'.
[  818.656783][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4022'.
[  820.093877][T23351] tipc: Resetting bearer <ib:ip6gre0>
[  820.167506][T23347] wg1 speed is unknown, defaulting to 1000
[  820.174270][ T6100] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  820.193062][ T6100] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  820.229721][T23347] lo speed is unknown, defaulting to 1000
[  820.280416][ T6100] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  820.297152][ T6100] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  820.320030][T23349] wg1 speed is unknown, defaulting to 1000
[  820.329501][T23349] lo speed is unknown, defaulting to 1000
[  820.329530][T23358] wg1 speed is unknown, defaulting to 1000
[  820.394279][T23358] lo speed is unknown, defaulting to 1000
[  820.846097][T23374] netlink: 'syz.1.4032': attribute type 1 has an invalid length.
[  820.962452][T23374] bond6 (unregistering): Released all slaves
[  821.363960][ T6637] page_pool_release_retry() stalled pool shutdown: id 117, 3329 inflight 60 sec
[  821.381455][T23389] netlink: del zone limit has 4 unknown bytes
[  821.450730][T23387] tipc: Resetting bearer <eth:syzkaller0>
[  821.609987][T23393] netlink: 'syz.5.4039': attribute type 1 has an invalid length.
[  821.826917][T23393] bond3 (unregistering): Released all slaves
[  822.692763][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4046'.
[  822.771328][T23428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4046'.
[  822.942058][T23432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  822.998167][T23436] netlink: 'syz.5.4052': attribute type 1 has an invalid length.
[  823.101638][T23436] bond3 (unregistering): Released all slaves
[  823.259811][T23432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  823.925140][T23452] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  824.219073][T23468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4062'.
[  824.246296][T23466] netlink: 'syz.1.4061': attribute type 9 has an invalid length.
[  824.272196][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4062'.
[  825.238175][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4068'.
[  825.307063][T23493] netlink: 'syz.0.4067': attribute type 1 has an invalid length.
[  825.409432][T23493] bond7 (unregistering): Released all slaves
[  825.574462][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4068'.
[  825.627678][T23498] wg1 speed is unknown, defaulting to 1000
[  825.656385][T23498] lo speed is unknown, defaulting to 1000
[  825.972266][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'.
[  826.155582][T23523] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  826.178114][T23523] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  826.340373][T23529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4075'.
[  826.450914][T23533] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  826.459066][T23533] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  826.467633][T23533] tipc: Resetting bearer <eth:syzkaller0>
[  826.490353][T23533] tipc: Resetting bearer <eth:syzkaller0>
[  826.671184][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4079'.
[  826.989378][T23561] tipc: Resetting bearer <eth:syzkaller0>
[  827.019027][T23561] tipc: Resetting bearer <eth:syzkaller0>
[  827.039593][T23561] tipc: Resetting bearer <eth:syzkaller0>
[  827.230187][T23568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4083'.
[  827.847940][T23581] netlink: 'syz.1.4087': attribute type 1 has an invalid length.
[  827.980711][T23581] bond6 (unregistering): Released all slaves
[  828.150357][T23596] macsec0: entered promiscuous mode
[  828.157199][T23596] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  828.169115][T23596] mac80211_hwsim hwsim33 wlan1: left promiscuous mode
[  828.238710][T23594] wg1 speed is unknown, defaulting to 1000
[  828.247912][T23594] lo speed is unknown, defaulting to 1000
[  829.407357][T23624] syzkaller0: entered allmulticast mode
[  829.512388][T23626] syzkaller0 (unregistering): left allmulticast mode
[  830.367261][T23641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  830.427686][T23641] wg1 speed is unknown, defaulting to 1000
[  830.437031][T23641] lo speed is unknown, defaulting to 1000
[  831.207546][T23663] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  831.215170][T23663] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  831.224845][T23663] tipc: Resetting bearer <eth:syzkaller0>
[  831.497707][T23672] syzkaller0: entered allmulticast mode
[  831.541215][T23677] ip6gretap0: entered promiscuous mode
[  831.559889][T23677] batman_adv: batadv0: Adding interface: macvlan0
[  831.573769][T23677] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  831.606858][T23677] batman_adv: batadv0: Interface activated: macvlan0
[  831.669507][T23678] syzkaller0 (unregistering): left allmulticast mode
[  831.723049][T23682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4110'.
[  832.180773][T23692] netlink: 'syz.2.4115': attribute type 1 has an invalid length.
[  832.241783][T23692] 8021q: adding VLAN 0 to HW filter on device bond6
[  832.287131][T23700] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  832.332763][T23692] vlan4: entered promiscuous mode
[  832.341317][T23692] bond6: entered promiscuous mode
[  832.347602][T23692] vlan4: entered allmulticast mode
[  832.353580][T23692] bond6: entered allmulticast mode
[  832.406471][T23692] bond6: (slave gretap3): making interface the new active one
[  832.414757][T23692] gretap3: entered promiscuous mode
[  832.420189][T23692] gretap3: entered allmulticast mode
[  832.428509][T23692] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  832.553766][T23704] syzkaller0: entered allmulticast mode
[  832.609024][T23704] syzkaller0 (unregistering): left allmulticast mode
[  832.786356][T23687] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  832.943767][T23711] batman_adv: batadv0: Interface deactivated: macvlan0
[  832.961004][T23711] batman_adv: batadv0: Removing interface: macvlan0
[  833.152370][T23711] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  833.183264][T23718] syzkaller1: entered promiscuous mode
[  833.189594][T23718] syzkaller1: entered allmulticast mode
[  833.243625][T23722] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  833.252726][T23717] wg1 speed is unknown, defaulting to 1000
[  833.257472][T23722] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  833.266864][T23722] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  833.275310][T23722] tipc: Resetting bearer <eth:syzkaller0>
[  833.281673][T23717] lo speed is unknown, defaulting to 1000
[  833.714978][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4124'.
[  833.960168][T23745] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  833.976412][T23743] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  833.996866][T23743] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  834.030665][T23743] tipc: Resetting bearer <eth:syzkaller0>
[  834.286578][T23752] netlink: 'syz.5.4129': attribute type 1 has an invalid length.
[  834.318978][T23754] netlink: 'syz.4.4130': attribute type 5 has an invalid length.
[  834.377275][T23758] netlink: 'syz.4.4130': attribute type 1 has an invalid length.
[  834.386482][T23758] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4130'.
[  834.389634][T23752] bond3 (unregistering): Released all slaves
[  834.395635][T23758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4130'.
[  834.455529][T23757] tipc: Resetting bearer <eth:syzkaller0>
[  834.668333][T23770] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  834.688053][T23770] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1806) !
[  834.825673][T23777] tipc: Resetting bearer <eth:syzkaller0>
[  835.049020][T23790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4138'.
[  835.072506][T23792] tipc: Resetting bearer <eth:syzkaller0>
[  835.108396][T23792] tipc: Resetting bearer <eth:syzkaller0>
[  835.151743][T23792] tipc: Resetting bearer <eth:syzkaller0>
[  835.372689][T23800] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  835.511480][T23803] netlink: 'syz.2.4141': attribute type 1 has an invalid length.
[  835.562574][T23803] bond7 (unregistering): Released all slaves
[  835.611749][T23806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.622006][T23806] syzkaller0: entered promiscuous mode
[  835.628363][T23806] syzkaller0: entered allmulticast mode
[  835.774144][T23806] tipc: Resetting bearer <eth:syzkaller0>
[  835.842311][T23805] tipc: Resetting bearer <eth:syzkaller0>
[  835.896806][T23805] tipc: Disabling bearer <eth:syzkaller0>
[  836.007804][T23815] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  836.026978][T23815] tipc: Resetting bearer <eth:syzkaller0>
[  836.307472][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4146'.
[  836.457961][T23828] netlink: 'syz.2.4149': attribute type 1 has an invalid length.
[  836.527468][T23828] bond7 (unregistering): Released all slaves
[  836.649183][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'.
[  836.897965][T23842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.906953][T23842] syzkaller0: entered promiscuous mode
[  836.914338][T23842] syzkaller0: entered allmulticast mode
[  836.954171][T23842] tipc: Resetting bearer <eth:syzkaller0>
[  836.966956][T23841] tipc: Resetting bearer <eth:syzkaller0>
[  836.999373][T23841] tipc: Disabling bearer <eth:syzkaller0>
[  837.390045][T23851] vlan0: entered promiscuous mode
[  837.398532][T23851] bond0: entered promiscuous mode
[  837.611220][T23861] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  837.622427][T23861] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  837.631685][T23861] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  837.645784][T23861] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  837.708788][T23866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4157'.
[  838.054550][T23878] wg1 speed is unknown, defaulting to 1000
[  838.324005][T23878] lo speed is unknown, defaulting to 1000
[  838.633615][T23887] wg1 speed is unknown, defaulting to 1000
[  838.665701][T23887] lo speed is unknown, defaulting to 1000
[  838.718267][T23892] netlink: 'syz.1.4164': attribute type 1 has an invalid length.
[  838.898707][T23894] bond6 (unregistering): Released all slaves
[  839.710410][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4170'.
[  839.805719][T23923] vlan0: entered promiscuous mode
[  839.905960][T23915] wg1 speed is unknown, defaulting to 1000
[  839.915977][T23915] lo speed is unknown, defaulting to 1000
[  839.922101][T23916] wg1 speed is unknown, defaulting to 1000
[  839.972227][T23916] lo speed is unknown, defaulting to 1000
[  840.127638][T23934] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  840.137652][T23934] CPU: 1 UID: 0 PID: 23934 Comm: syz.1.4173 Not tainted syzkaller #0 PREEMPT(full) 
[  840.137672][T23934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  840.137680][T23934] Call Trace:
[  840.137685][T23934]  <TASK>
[  840.137690][T23934]  dump_stack_lvl+0x189/0x250
[  840.137716][T23934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  840.137733][T23934]  ? __pfx__printk+0x10/0x10
[  840.137755][T23934]  ? kernfs_path_from_node+0x2f/0x290
[  840.137770][T23934]  ? kernfs_path_from_node+0x250/0x290
[  840.137784][T23934]  ? kernfs_path_from_node+0x2f/0x290
[  840.137804][T23934]  sysfs_warn_dup+0x8e/0xa0
[  840.137818][T23934]  sysfs_do_create_link_sd+0xc0/0x110
[  840.137834][T23934]  device_add_class_symlinks+0x1cf/0x240
[  840.137852][T23934]  device_add+0x475/0xb50
[  840.137871][T23934]  wiphy_register+0x1c81/0x2aa0
[  840.137900][T23934]  ? __pfx_wiphy_register+0x10/0x10
[  840.137915][T23934]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  840.137940][T23934]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  840.137960][T23934]  ieee80211_register_hw+0x3442/0x40a0
[  840.137990][T23934]  ? ieee80211_register_hw+0x13a1/0x40a0
[  840.138016][T23934]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  840.138038][T23934]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  840.138064][T23934]  ? __hrtimer_setup+0x187/0x210
[  840.138076][T23934]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  840.138092][T23934]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  840.138133][T23934]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  840.138151][T23934]  ? trace_kmalloc+0x1f/0xd0
[  840.138166][T23934]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  840.138183][T23934]  ? kstrndup+0xbf/0x160
[  840.138204][T23934]  hwsim_new_radio_nl+0xea4/0x1b10
[  840.138226][T23934]  ? __pfx___nla_validate_parse+0x10/0x10
[  840.138257][T23934]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  840.138306][T23934]  ? __nla_parse+0x40/0x60
[  840.138334][T23934]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  840.138367][T23934]  genl_family_rcv_msg_doit+0x212/0x300
[  840.138392][T23934]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  840.138421][T23934]  ? bpf_lsm_capable+0x9/0x20
[  840.138438][T23934]  ? security_capable+0x7e/0x2e0
[  840.138463][T23934]  genl_rcv_msg+0x60e/0x790
[  840.138488][T23934]  ? __pfx_genl_rcv_msg+0x10/0x10
[  840.138506][T23934]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  840.138544][T23934]  netlink_rcv_skb+0x208/0x470
[  840.138557][T23934]  ? __lock_acquire+0xab9/0xd20
[  840.138576][T23934]  ? __pfx_genl_rcv_msg+0x10/0x10
[  840.138596][T23934]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  840.138625][T23934]  ? down_read+0x1ad/0x2e0
[  840.138641][T23934]  genl_rcv+0x28/0x40
[  840.138659][T23934]  netlink_unicast+0x82c/0x9e0
[  840.138679][T23934]  ? __pfx_netlink_unicast+0x10/0x10
[  840.138693][T23934]  ? netlink_sendmsg+0x642/0xb30
[  840.138707][T23934]  ? skb_put+0x11b/0x210
[  840.138727][T23934]  netlink_sendmsg+0x805/0xb30
[  840.138749][T23934]  ? __pfx_netlink_sendmsg+0x10/0x10
[  840.138767][T23934]  ? aa_sock_msg_perm+0xf1/0x1d0
[  840.138782][T23934]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  840.138798][T23934]  ? __pfx_netlink_sendmsg+0x10/0x10
[  840.138814][T23934]  __sock_sendmsg+0x219/0x270
[  840.138829][T23934]  ____sys_sendmsg+0x505/0x830
[  840.138851][T23934]  ? __pfx_____sys_sendmsg+0x10/0x10
[  840.138875][T23934]  ? import_iovec+0x74/0xa0
[  840.138894][T23934]  ___sys_sendmsg+0x21f/0x2a0
[  840.138913][T23934]  ? __pfx____sys_sendmsg+0x10/0x10
[  840.138958][T23934]  ? __fget_files+0x2a/0x420
[  840.138968][T23934]  ? __fget_files+0x3a0/0x420
[  840.138987][T23934]  __x64_sys_sendmsg+0x19b/0x260
[  840.139007][T23934]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  840.139032][T23934]  ? rcu_is_watching+0x15/0xb0
[  840.139048][T23934]  ? do_syscall_64+0xbe/0x3b0
[  840.139065][T23934]  do_syscall_64+0xfa/0x3b0
[  840.139077][T23934]  ? lockdep_hardirqs_on+0x9c/0x150
[  840.139089][T23934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.139102][T23934]  ? clear_bhb_loop+0x60/0xb0
[  840.139118][T23934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.139129][T23934] RIP: 0033:0x7f8ac5f8eba9
[  840.139142][T23934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  840.139153][T23934] RSP: 002b:00007f8ac6ed3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  840.139168][T23934] RAX: ffffffffffffffda RBX: 00007f8ac61d5fa0 RCX: 00007f8ac5f8eba9
[  840.139177][T23934] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  840.139185][T23934] RBP: 00007f8ac6011e19 R08: 0000000000000000 R09: 0000000000000000
[  840.139192][T23934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  840.139200][T23934] R13: 00007f8ac61d6038 R14: 00007f8ac61d5fa0 R15: 00007ffe68d5b7f8
[  840.139221][T23934]  </TASK>
[  840.735106][T23942] netlink: 'syz.2.4171': attribute type 6 has an invalid length.
[  840.783742][T23929] wg1 speed is unknown, defaulting to 1000
[  840.995244][T23929] lo speed is unknown, defaulting to 1000
[  841.208600][T23957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  841.229538][T23957] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  841.466130][T23962] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4178'.
[  841.486347][T23964] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  841.492562][   T30] audit: type=1800 audit(1758126394.595:15): pid=23961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4179" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4196 res=0 errno=0
[  841.644460][T23968] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  841.814873][T23976] wg1 speed is unknown, defaulting to 1000
[  841.868591][T23976] lo speed is unknown, defaulting to 1000
[  842.456266][T23996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  842.497888][T23996] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  842.763712][T23996] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  843.016819][T24004] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.087690][T24009] syzkaller1: entered promiscuous mode
[  843.113639][T24009] syzkaller1: entered allmulticast mode
[  843.216291][T24009] wg1 speed is unknown, defaulting to 1000
[  843.241390][T24009] lo speed is unknown, defaulting to 1000
[  843.386485][T24018] wg1 speed is unknown, defaulting to 1000
[  843.432032][T24018] lo speed is unknown, defaulting to 1000
[  843.449935][T24019] wg1 speed is unknown, defaulting to 1000
[  843.486298][T24019] lo speed is unknown, defaulting to 1000
[  844.047946][T24027] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  844.605365][T24042] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  845.007621][T24052] wg1 speed is unknown, defaulting to 1000
[  845.069661][T24052] lo speed is unknown, defaulting to 1000
[  845.504174][T24065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  845.880702][T24076] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4206'.
[  846.020890][T24082] netlink: 'syz.4.4208': attribute type 1 has an invalid length.
[  846.126256][T24082] bond6 (unregistering): Released all slaves
[  846.894152][T24098] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  846.964886][T24103] netlink: 'syz.4.4213': attribute type 1 has an invalid length.
[  846.994365][T24103] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4213'.
[  847.034020][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'.
[  847.091759][T24103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4213'.
[  847.824022][T24138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4218'.
[  847.849089][T24136] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  847.860715][T24136] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  849.470022][T24167] wg1 speed is unknown, defaulting to 1000
[  849.502741][T24167] lo speed is unknown, defaulting to 1000
[  849.904409][T24173] netlink: 'syz.0.4227': attribute type 1 has an invalid length.
[  849.922673][T24173] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4227'.
[  850.064003][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4227'.
[  850.146267][T24177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4227'.
[  850.198582][T24170] netlink: 'syz.1.4226': attribute type 6 has an invalid length.
[  851.354595][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'.
[  851.789099][T24208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  851.816910][T24206] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4234'.
[  851.823841][T24208] syzkaller0: entered promiscuous mode
[  851.831834][T24208] syzkaller0: entered allmulticast mode
[  852.251585][T24216] tipc: Resetting bearer <eth:syzkaller0>
[  852.300005][T24207] tipc: Resetting bearer <eth:syzkaller0>
[  852.354958][T24207] tipc: Disabling bearer <eth:syzkaller0>
[  852.638642][T24230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.668051][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4239'.
[  853.128674][T24238] dvmrp1: entered allmulticast mode
[  853.679276][T24251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  853.949132][T24257] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  854.001657][T24261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  854.048304][T24268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4247'.
[  854.086381][T24269] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  854.380024][T24277] netlink: 'syz.5.4251': attribute type 1 has an invalid length.
[  854.438376][T24277] bond3 (unregistering): Released all slaves
[  856.035179][T24326] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.4260'.
[  856.208846][T24331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  856.257374][T24331] netlink: 'syz.4.4262': attribute type 10 has an invalid length.
[  856.486188][T24335] wg1 speed is unknown, defaulting to 1000
[  856.496120][T24335] lo speed is unknown, defaulting to 1000
[  856.595107][T24333] wg1 speed is unknown, defaulting to 1000
[  856.607757][T24336] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  856.660517][T24333] lo speed is unknown, defaulting to 1000
[  856.910070][T24343] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  857.080748][T24350] netlink: 'syz.4.4267': attribute type 1 has an invalid length.
[  857.146466][T24346] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  857.284999][T24352] bond6 (unregistering): Released all slaves
[  858.093734][T24372] wg1 speed is unknown, defaulting to 1000
[  858.356771][T24372] lo speed is unknown, defaulting to 1000
[  858.457375][T24386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4275'.
[  858.983961][T24398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'.
[  859.501951][T24410] netlink: 'syz.2.4279': attribute type 10 has an invalid length.
[  859.529910][T24411] wg1 speed is unknown, defaulting to 1000
[  859.550089][T24410] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  859.575791][T24410] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  859.597545][T24411] lo speed is unknown, defaulting to 1000
[  859.695227][T24416] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  859.783724][T24413] wg1 speed is unknown, defaulting to 1000
[  859.792600][T24420] netlink: 'syz.4.4281': attribute type 1 has an invalid length.
[  859.808907][T24420] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4281'.
[  859.823445][T24413] lo speed is unknown, defaulting to 1000
[  859.844755][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'.
[  859.905080][T24421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4281'.
[  860.368018][T24432] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  860.383445][T24432] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  860.699631][T24443] dvmrp8: entered allmulticast mode
[  860.943758][T24450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4287'.
[  860.970360][T24450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  860.977736][T24450] IPv6: NLM_F_CREATE should be set when creating new route
[  861.034860][T24441] syzkaller1: entered promiscuous mode
[  861.046879][T24441] syzkaller1: entered allmulticast mode
[  861.069220][T24444] wg1 speed is unknown, defaulting to 1000
[  861.096636][T24445] wg1 speed is unknown, defaulting to 1000
[  861.106816][T24445] lo speed is unknown, defaulting to 1000
[  861.125767][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'.
[  861.135509][T24444] lo speed is unknown, defaulting to 1000
[  861.496083][T24435] dvmrp8: left allmulticast mode
[  861.773424][T24471] tipc: Resetting bearer <eth:syzkaller0>
[  861.856438][T24471] tipc: Resetting bearer <eth:syzkaller0>
[  861.918126][T24471] tipc: Resetting bearer <eth:syzkaller0>
[  862.087909][T24470] wg1 speed is unknown, defaulting to 1000
[  862.117313][T24470] lo speed is unknown, defaulting to 1000
[  862.147791][T24474] syzkaller1: entered promiscuous mode
[  862.154690][T24474] syzkaller1: entered allmulticast mode
[  862.232756][T24485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4292'.
[  862.371526][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4293'.
[  862.500527][T24495] netlink: 'syz.2.4296': attribute type 1 has an invalid length.
[  862.516133][T24495] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4296'.
[  862.556453][T24496] netlink: 'syz.0.4295': attribute type 5 has an invalid length.
[  862.620807][T24492] wg1 speed is unknown, defaulting to 1000
[  862.746098][T24492] lo speed is unknown, defaulting to 1000
[  862.829032][T24505] wg1 speed is unknown, defaulting to 1000
[  862.839707][T24505] lo speed is unknown, defaulting to 1000
[  863.364834][T24510] netlink: 'syz.2.4299': attribute type 6 has an invalid length.
[  863.668928][T24518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  863.814191][T24518] syzkaller0: entered promiscuous mode
[  863.820107][T24518] syzkaller0: entered allmulticast mode
[  863.931702][T24518] tipc: Resetting bearer <eth:syzkaller0>
[  864.046041][T24517] tipc: Resetting bearer <eth:syzkaller0>
[  864.244842][T24517] tipc: Disabling bearer <eth:syzkaller0>
[  864.307962][T24533] syzkaller1: entered promiscuous mode
[  864.321960][T24533] syzkaller1: entered allmulticast mode
[  864.340241][T24529] wg1 speed is unknown, defaulting to 1000
[  864.349091][T24529] lo speed is unknown, defaulting to 1000
[  864.475545][T24542] __nla_validate_parse: 2 callbacks suppressed
[  864.475567][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4306'.
[  864.561787][T24544] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  864.693621][T24544] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  864.826250][T24544] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  864.882084][T24554] syzkaller1: entered promiscuous mode
[  864.906804][T24554] syzkaller1: entered allmulticast mode
[  864.961569][T24544] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  865.108039][T24549] wg1 speed is unknown, defaulting to 1000
[  865.116898][T24549] lo speed is unknown, defaulting to 1000
[  865.128625][T24546] delete_channel: no stack
[  865.150695][T24561] wg1 speed is unknown, defaulting to 1000
[  865.184890][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  865.234850][T24565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4311'.
[  865.298146][T24561] lo speed is unknown, defaulting to 1000
[  865.334516][T24565] batadv0: entered promiscuous mode
[  865.345970][T24565] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  865.358722][T24565] batadv0: left promiscuous mode
[  865.460214][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  865.511102][T16748] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  865.612370][T24544] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  865.660979][T24574] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  865.685285][T24544] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  865.695507][T24575] netlink: 'syz.0.4313': attribute type 11 has an invalid length.
[  865.695535][T24575] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4313'.
[  865.729437][T24572] wg1 speed is unknown, defaulting to 1000
[  865.741169][T24572] lo speed is unknown, defaulting to 1000
[  865.914641][T24544] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  865.931805][T24581] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  865.998596][T24578] wg1 speed is unknown, defaulting to 1000
[  866.034347][T24578] lo speed is unknown, defaulting to 1000
[  866.061932][T24583] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  867.413922][T24614] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  867.771374][T24620] wg1 speed is unknown, defaulting to 1000
[  867.785177][T24625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4326'.
[  867.855596][T24620] lo speed is unknown, defaulting to 1000
[  868.021529][T24613] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  868.065422][T24628] netlink: 'syz.5.4327': attribute type 1 has an invalid length.
[  868.136332][T24628] 8021q: adding VLAN 0 to HW filter on device bond3
[  868.173503][T24634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4328'.
[  868.567540][T24633] 8021q: adding VLAN 0 to HW filter on device bond3
[  868.582502][T24633] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  868.596874][T24633] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  868.660428][T24628] bond3: (slave bridge14): Enslaving as an active interface with an up link
[  868.970101][T24641] tipc: Resetting bearer <eth:team0>
[  869.256857][T24655] bond3: (slave bridge14): Releasing backup interface
[  869.388363][T24660] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  869.470058][T24665] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  869.515987][T24650] wg1 speed is unknown, defaulting to 1000
[  869.526846][T24650] lo speed is unknown, defaulting to 1000
[  870.090619][T24685] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  870.241504][T24693] syz.2.4337: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  870.318095][T24693] CPU: 1 UID: 0 PID: 24693 Comm: syz.2.4337 Not tainted syzkaller #0 PREEMPT(full) 
[  870.318127][T24693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  870.318141][T24693] Call Trace:
[  870.318150][T24693]  <TASK>
[  870.318159][T24693]  dump_stack_lvl+0x189/0x250
[  870.318210][T24693]  ? __pfx_dump_stack_lvl+0x10/0x10
[  870.318237][T24693]  ? __pfx__printk+0x10/0x10
[  870.318266][T24693]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  870.318293][T24693]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  870.318321][T24693]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  870.318351][T24693]  warn_alloc+0x214/0x310
[  870.318386][T24693]  ? stack_depot_save_flags+0x40/0x860
[  870.318423][T24693]  ? __pfx_warn_alloc+0x10/0x10
[  870.318457][T24693]  ? kasan_save_track+0x4f/0x80
[  870.318486][T24693]  ? xskq_create+0x56/0x170
[  870.318503][T24693]  ? xsk_init_queue+0xb0/0x110
[  870.318531][T24693]  ? xsk_setsockopt+0x4dc/0x8d0
[  870.318560][T24693]  ? do_sock_setsockopt+0x179/0x1b0
[  870.318586][T24693]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  870.318610][T24693]  ? do_syscall_64+0xfa/0x3b0
[  870.318632][T24693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.318663][T24693]  __vmalloc_node_range_noprof+0x125/0x12f0
[  870.318735][T24693]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  870.318777][T24693]  ? __kasan_kmalloc+0x93/0xb0
[  870.318810][T24693]  vmalloc_user_noprof+0xad/0xf0
[  870.318842][T24693]  ? xskq_create+0xbf/0x170
[  870.318864][T24693]  xskq_create+0xbf/0x170
[  870.318889][T24693]  xsk_init_queue+0xb0/0x110
[  870.318926][T24693]  xsk_setsockopt+0x4dc/0x8d0
[  870.318962][T24693]  ? __pfx_xsk_setsockopt+0x10/0x10
[  870.318993][T24693]  ? __pfx_aa_sk_perm+0x10/0x10
[  870.319033][T24693]  ? aa_sock_opt_perm+0xff/0x1b0
[  870.319059][T24693]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  870.319083][T24693]  ? __pfx_xsk_setsockopt+0x10/0x10
[  870.319116][T24693]  do_sock_setsockopt+0x179/0x1b0
[  870.319151][T24693]  __x64_sys_setsockopt+0x13f/0x1b0
[  870.319198][T24693]  do_syscall_64+0xfa/0x3b0
[  870.319220][T24693]  ? lockdep_hardirqs_on+0x9c/0x150
[  870.319242][T24693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.319263][T24693]  ? clear_bhb_loop+0x60/0xb0
[  870.319290][T24693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.319310][T24693] RIP: 0033:0x7f6971d8eba9
[  870.319332][T24693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  870.319351][T24693] RSP: 002b:00007f6972c6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  870.319375][T24693] RAX: ffffffffffffffda RBX: 00007f6971fd6090 RCX: 00007f6971d8eba9
[  870.319391][T24693] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  870.319405][T24693] RBP: 00007f6971e11e19 R08: 0000000000000004 R09: 0000000000000000
[  870.319417][T24693] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  870.319430][T24693] R13: 00007f6971fd6128 R14: 00007f6971fd6090 R15: 00007ffd5bc15968
[  870.319467][T24693]  </TASK>
[  870.319476][T24693] Mem-Info:
[  870.676699][T24693] active_anon:14250 inactive_anon:0 isolated_anon:0
[  870.676699][T24693]  active_file:3409 inactive_file:40182 isolated_file:0
[  870.676699][T24693]  unevictable:768 dirty:375 writeback:0
[  870.676699][T24693]  slab_reclaimable:12765 slab_unreclaimable:154852
[  870.676699][T24693]  mapped:37523 shmem:6291 pagetables:1180
[  870.676699][T24693]  sec_pagetables:0 bounce:0
[  870.676699][T24693]  kernel_misc_reclaimable:0
[  870.676699][T24693]  free:1248800 free_pcp:15190 free_cma:0
[  870.814390][T24693] Node 0 active_anon:54600kB inactive_anon:0kB active_file:13636kB inactive_file:160528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150092kB dirty:1500kB writeback:0kB shmem:21128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12392kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  870.865571][T24693] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  870.906687][T24693] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  871.023599][T24693] lowmem_reserve[]: 0 2497 2499 2499 2499
[  871.043557][T24693] Node 0 DMA32 free:1081188kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49652kB inactive_anon:0kB active_file:13636kB inactive_file:158948kB unevictable:1536kB writepending:1528kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:65900kB local_pcp:29196kB free_cma:0kB
[  871.141954][T24693] lowmem_reserve[]: 0 0 1 1 1
[  871.147326][T24693] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  871.202862][T24693] lowmem_reserve[]: 0 0 0 0 0
[  871.207761][T24693] Node 1 Normal free:3899980kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10112kB local_pcp:0kB free_cma:0kB
[  871.266836][T24693] lowmem_reserve[]: 0 0 0 0 0
[  871.271650][T24693] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  871.286931][T24693] Node 0 DMA32: 1112*4kB (UME) 1360*8kB (UME) 1148*16kB (UME) 368*32kB (UME) 244*64kB (UME) 170*128kB (UME) 194*256kB (UM) 130*512kB (UM) 70*1024kB (UME) 10*2048kB (UM) 195*4096kB (UM) = 1089952kB
[  871.310476][T24693] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  871.333437][T24693] Node 1 Normal: 189*4kB (UME) 47*8kB (UME) 44*16kB (UME) 193*32kB (UME) 60*64kB (UME) 18*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3899980kB
[  871.364489][T24693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  871.376386][T24693] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  871.394725][T24693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  871.406159][T24693] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  871.417248][T24693] 45221 total pagecache pages
[  871.422419][T24693] 0 pages in swap cache
[  871.429781][T24693] Free swap  = 124996kB
[  871.448511][T24693] Total swap = 124996kB
[  871.459465][T24693] 2097051 pages RAM
[  871.474774][T24693] 0 pages HighMem/MovableOnly
[  871.479634][T24693] 425671 pages reserved
[  871.485034][T24693] 0 pages cma reserved
[  871.544835][T24714] netlink: 'syz.5.4342': attribute type 1 has an invalid length.
[  871.649466][T24714] bond4 (unregistering): Released all slaves
[  871.770754][T24716] tipc: Resetting bearer <eth:syzkaller0>
[  871.888566][T24713] wg1 speed is unknown, defaulting to 1000
[  871.897989][T24713] lo speed is unknown, defaulting to 1000
[  872.088318][T24728] netlink: 'syz.2.4345': attribute type 1 has an invalid length.
[  872.133698][T24728] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4345'.
[  872.251866][T24731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4345'.
[  872.358017][T24734] netlink: 'syz.1.4347': attribute type 1 has an invalid length.
[  872.371334][T24728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4345'.
[  872.431640][T24734] bond6 (unregistering): Released all slaves
[  872.527587][T24726] netlink: 'syz.4.4343': attribute type 6 has an invalid length.
[  873.010987][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4351'.
[  873.325335][T24762] wg1 speed is unknown, defaulting to 1000
[  873.337127][T24762] lo speed is unknown, defaulting to 1000
[  874.064331][T24778] netlink: 'syz.4.4358': attribute type 1 has an invalid length.
[  874.192524][T24778] bond6 (unregistering): Released all slaves
[  874.430877][T24787] macsec0: entered promiscuous mode
[  874.522555][T24787] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  874.590749][T24787] mac80211_hwsim hwsim33 wlan1: left promiscuous mode
[  874.691228][T24785] wg1 speed is unknown, defaulting to 1000
[  875.075304][T24785] lo speed is unknown, defaulting to 1000
[  875.276166][T24813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4362'.
[  875.650478][T24826] syzkaller1: entered promiscuous mode
[  875.658913][T24826] syzkaller1: entered allmulticast mode
[  875.771956][T24828] syzkaller0: entered allmulticast mode
[  875.807139][   T30] audit: type=1800 audit(1758126428.915:16): pid=24818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4364" name="cgroup.controllers" dev="tmpfs" ino=4451 res=0 errno=0
[  875.833672][T24826] wg1 speed is unknown, defaulting to 1000
[  875.857858][T24828] syzkaller0 (unregistering): left allmulticast mode
[  876.014841][T24834] netlink: 'syz.4.4369': attribute type 1 has an invalid length.
[  876.108415][T24826] lo speed is unknown, defaulting to 1000
[  876.182126][T24836] bond6 (unregistering): Released all slaves
[  877.410193][T24862] netlink: 'syz.0.4375': attribute type 29 has an invalid length.
[  877.420834][T24862] netlink: 'syz.0.4375': attribute type 29 has an invalid length.
[  877.515517][T24857] IPVS: Scheduler module ip_vs_sip not found
[  877.521965][T24863] IPVS: length: 141 != 8
[  877.744947][T24872] IPVS: Unknown mcast interface: bridge0
[  878.238938][T24888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  878.262525][T24888] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  878.312904][T24888] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  879.078391][T24905] netlink: 'syz.0.4383': attribute type 1 has an invalid length.
[  879.462136][T24905] bond7 (unregistering): Released all slaves
[  879.975408][T24918] netlink: 'syz.5.4386': attribute type 5 has an invalid length.
[  880.009718][T24917] wg1 speed is unknown, defaulting to 1000
[  880.063677][T24917] lo speed is unknown, defaulting to 1000
[  880.603837][T24938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4389'.
[  880.640112][T24938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4389'.
[  880.653937][T24934] 8021q: adding VLAN 0 to HW filter on device bond7
[  880.722385][T24938] !
: entered promiscuous mode
[  880.740619][T24938] !
: left promiscuous mode
[  880.885429][T24951] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4390'.
[  881.058084][T24951] veth35: entered promiscuous mode
[  881.580449][  T920] page_pool_release_retry() stalled pool shutdown: id 117, 3329 inflight 120 sec
[  881.763475][T24959] netlink: 'syz.2.4394': attribute type 5 has an invalid length.
[  881.843713][T24955] wg1 speed is unknown, defaulting to 1000
[  881.940699][T24955] lo speed is unknown, defaulting to 1000
[  881.941740][T24958] wg1 speed is unknown, defaulting to 1000
[  882.063928][T24972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  882.081226][T24958] lo speed is unknown, defaulting to 1000
[  882.196024][T24972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  882.885414][T24991] syzkaller1: entered promiscuous mode
[  882.891316][T24991] syzkaller1: entered allmulticast mode
[  882.969150][T24991] wg1 speed is unknown, defaulting to 1000
[  883.010198][T24991] lo speed is unknown, defaulting to 1000
[  883.527561][T25013] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  884.069538][T25019] wg1 speed is unknown, defaulting to 1000
[  884.133812][T25019] lo speed is unknown, defaulting to 1000
[  884.489138][T25031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  884.609357][T25032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  885.196240][T25042] IPv6: sit1: Disabled Multicast RS
[  885.434501][T25053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4413'.
[  885.578652][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4413'.
[  885.640351][T25059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4414'.
[  886.109201][T25055] wg1 speed is unknown, defaulting to 1000
[  886.122305][T25055] lo speed is unknown, defaulting to 1000
[  886.251305][T25071] netlink: 'syz.5.4416': attribute type 1 has an invalid length.
[  886.264812][T25071] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4416'.
[  886.489190][T25075] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  886.530747][T25079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  886.641617][T25081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4417'.
[  886.727576][T25083] netlink: zone id is out of range
[  886.733813][T25083] netlink: zone id is out of range
[  886.740269][T25083] netlink: zone id is out of range
[  887.304218][T25095] wg1 speed is unknown, defaulting to 1000
[  887.315852][T25092] wg1 speed is unknown, defaulting to 1000
[  887.324136][T25095] lo speed is unknown, defaulting to 1000
[  887.358786][T25092] lo speed is unknown, defaulting to 1000
[  888.142716][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4425'.
[  888.737245][T25131] 8021q: adding VLAN 0 to HW filter on device bond7
[  888.802471][T25131] macvlan2: entered promiscuous mode
[  888.810564][T25131] macvlan2: entered allmulticast mode
[  888.826001][T25131] bond7: entered promiscuous mode
[  888.842473][T25131] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  888.864823][T25131] bond7: left promiscuous mode
[  889.656727][T25154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  889.676837][T25154] syzkaller0: entered promiscuous mode
[  889.682637][T25154] syzkaller0: entered allmulticast mode
[  889.820128][T25155] tipc: Resetting bearer <eth:syzkaller0>
[  889.867575][T25157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4434'.
[  889.888189][T25153] tipc: Resetting bearer <eth:syzkaller0>
[  889.956281][T25153] tipc: Disabling bearer <eth:syzkaller0>
[  890.056797][T25159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4434'.
[  890.195215][T25164] wg1 speed is unknown, defaulting to 1000
[  890.232112][T25161] wg1 speed is unknown, defaulting to 1000
[  890.243855][T25161] lo speed is unknown, defaulting to 1000
[  890.269952][T25164] lo speed is unknown, defaulting to 1000
[  890.428148][   T30] audit: type=1800 audit(1758126443.535:17): pid=25174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4435" name="memory.events" dev="tmpfs" ino=4483 res=0 errno=0
[  890.923941][T25193] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  891.939320][T25209] netlink: 'syz.4.4444': attribute type 5 has an invalid length.
[  891.995061][T25205] wg1 speed is unknown, defaulting to 1000
[  892.009815][T25205] lo speed is unknown, defaulting to 1000
[  892.248076][T25220] net_ratelimit: 21 callbacks suppressed
[  892.248108][T25220] netlink: zone id is out of range
[  892.259863][T25220] netlink: zone id is out of range
[  892.265696][T25220] netlink: zone id is out of range
[  892.271148][T25220] netlink: zone id is out of range
[  892.279632][T25220] netlink: zone id is out of range
[  892.285722][T25220] netlink: zone id is out of range
[  892.291698][T25220] netlink: zone id is out of range
[  892.313476][T25220] netlink: zone id is out of range
[  892.339243][T25220] netlink: zone id is out of range
[  892.409974][T25221] netlink: del zone limit has 4 unknown bytes
[  894.011518][T25254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4454'.
[  894.166863][T25256] wg1 speed is unknown, defaulting to 1000
[  894.186275][T25256] lo speed is unknown, defaulting to 1000
[  894.198269][T25263] netlink: 'syz.1.4457': attribute type 5 has an invalid length.
[  895.284954][T25292] wg1: left promiscuous mode
[  895.289722][T25292] wg1: left allmulticast mode
[  895.330042][T25292] vlan0: left promiscuous mode
[  895.361362][T25292] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  895.401382][T25292] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  895.448834][T25292] ipvlan3: left promiscuous mode
[  895.478033][T25292] veth7: left promiscuous mode
[  895.514185][T25292] bridge3: left promiscuous mode
[  895.564749][T25292] bridge3: left allmulticast mode
[  895.676282][T25292] veth35: left promiscuous mode
[  895.756831][T16749] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  895.772696][T16749] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  895.795484][T16749] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  895.833348][T16749] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  896.297328][T25324] wg1 speed is unknown, defaulting to 1000
[  896.315713][T25325] netlink: 'syz.0.4469': attribute type 5 has an invalid length.
[  896.345089][T25324] lo speed is unknown, defaulting to 1000
[  896.794537][T25337] wg1 speed is unknown, defaulting to 1000
[  896.803523][T25337] lo speed is unknown, defaulting to 1000
[  897.016067][T25340] netlink: 'syz.2.4472': attribute type 1 has an invalid length.
[  897.033751][T25340] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4472'.
[  897.056905][T25340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4472'.
[  897.120588][T25343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4472'.
[  897.376606][T25350] net_ratelimit: 14 callbacks suppressed
[  897.376628][T25350] netlink: zone id is out of range
[  897.400650][T25350] netlink: zone id is out of range
[  897.407962][T25350] netlink: zone id is out of range
[  897.415104][T25350] netlink: zone id is out of range
[  897.420746][T25350] netlink: zone id is out of range
[  897.429075][T25350] netlink: zone id is out of range
[  897.440685][T25350] netlink: zone id is out of range
[  897.448260][T25350] netlink: zone id is out of range
[  897.473876][T25350] netlink: zone id is out of range
[  897.483841][T25350] netlink: zone id is out of range
[  897.582295][T25357] netlink: 'syz.2.4476': attribute type 1 has an invalid length.
[  897.706411][T25357] bond8 (unregistering): Released all slaves
[  897.915673][T25362] wg1 speed is unknown, defaulting to 1000
[  897.967422][T25362] lo speed is unknown, defaulting to 1000
[  898.647609][T25389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4480'.
[  898.691454][T25389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4480'.
[  898.811751][T25394] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4480'.
[  898.829966][T25392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4480'.
[  899.347004][T25406] wg1 speed is unknown, defaulting to 1000
[  899.378643][T25406] lo speed is unknown, defaulting to 1000
[  900.145662][T25421] syzkaller1: entered promiscuous mode
[  900.151209][T25421] syzkaller1: entered allmulticast mode
[  900.292535][T25421] wg1 speed is unknown, defaulting to 1000
[  900.301511][T25421] lo speed is unknown, defaulting to 1000
[  900.642615][T25432] wg1 speed is unknown, defaulting to 1000
[  900.662247][T25432] lo speed is unknown, defaulting to 1000
[  901.984947][   T30] audit: type=1800 audit(1758126455.085:18): pid=25445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4488" name="memory.events" dev="tmpfs" ino=4537 res=0 errno=0
[  903.330264][T25491] netlink: 'syz.2.4494': attribute type 1 has an invalid length.
[  903.550797][T25491] bond8 (unregistering): Released all slaves
[  904.289470][T25506] netlink: 'syz.4.4496': attribute type 13 has an invalid length.
[  904.298290][T25506] netlink: 'syz.4.4496': attribute type 17 has an invalid length.
[  904.313939][T25509] syzkaller1: entered promiscuous mode
[  904.343542][T25509] syzkaller1: entered allmulticast mode
[  904.383079][T25506] net_ratelimit: 6 callbacks suppressed
[  904.383092][T25506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  904.499843][T25509] wg1 speed is unknown, defaulting to 1000
[  904.509074][T25509] lo speed is unknown, defaulting to 1000
[  904.720812][T25506] wg1 speed is unknown, defaulting to 1000
[  904.731467][T25506] lo speed is unknown, defaulting to 1000
[  905.538455][T25535] netlink: 'syz.5.4502': attribute type 4 has an invalid length.
[  905.692442][   T30] audit: type=1804 audit(1758126458.795:19): pid=25523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4500" name="/newroot/888/cgroup.controllers" dev="tmpfs" ino=4613 res=1 errno=0
[  905.723693][T25532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4502'.
[  905.793424][   T30] audit: type=1800 audit(1758126458.795:20): pid=25523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4500" name="cgroup.controllers" dev="tmpfs" ino=4613 res=0 errno=0
[  905.991055][T25547] netlink: 'syz.1.4504': attribute type 13 has an invalid length.
[  906.006639][T25547] netlink: 'syz.1.4504': attribute type 17 has an invalid length.
[  906.287745][T25552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  906.366408][T25547] 8021q: adding VLAN 0 to HW filter on device team0
[  906.374710][T25547] tipc: Resetting bearer <eth:team0>
[  906.449823][T25547] tipc: Resetting bearer <eth:team0>
[  906.467388][T25547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  906.504621][T25550] ip6gretap0: Device is already in use.
[  906.642650][T25548] wg1 speed is unknown, defaulting to 1000
[  906.697076][T25548] lo speed is unknown, defaulting to 1000
[  906.775720][   T30] audit: type=1800 audit(1758126459.885:21): pid=25541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4503" name="cgroup.controllers" dev="tmpfs" ino=4659 res=0 errno=0
[  907.623172][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4509'.
[  908.136317][T25578] syzkaller1: entered promiscuous mode
[  908.141942][T25578] syzkaller1: entered allmulticast mode
[  908.178518][T25580] wg1 speed is unknown, defaulting to 1000
[  908.187235][T25580] lo speed is unknown, defaulting to 1000
[  908.327898][T25586] netlink: 'syz.2.4512': attribute type 1 has an invalid length.
[  908.414409][T25583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4511'.
[  908.430753][T25586] bond8 (unregistering): Released all slaves
[  908.713467][T25591] wg1: entered promiscuous mode
[  908.718485][T25591] wg1: entered allmulticast mode
[  909.614744][ T6098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.626307][ T6098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.950384][T25611] wg1 speed is unknown, defaulting to 1000
[  909.980727][T25611] lo speed is unknown, defaulting to 1000
[  910.506179][T25627] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  911.664231][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4524'.
[  911.821647][T25653] wg1 speed is unknown, defaulting to 1000
[  911.847794][T25658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4524'.
[  911.861572][T25653] lo speed is unknown, defaulting to 1000
[  913.652346][T25677] wg1 speed is unknown, defaulting to 1000
[  913.685939][T25677] lo speed is unknown, defaulting to 1000
[  914.244876][T25699] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4534'.
[  914.261260][T25699] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  914.305132][T25691] wg1 speed is unknown, defaulting to 1000
[  914.314728][T25691] lo speed is unknown, defaulting to 1000
[  914.875620][T25714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4536'.
[  915.018043][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4536'.
[  915.349871][T25733] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  915.511697][T25737] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  915.631979][T25745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4542'.
[  915.922380][T25754] wg1 speed is unknown, defaulting to 1000
[  915.975803][T25754] lo speed is unknown, defaulting to 1000
[  916.327024][ T5876] Bluetooth: hci4: command tx timeout
[  917.023668][T25788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4547'.
[  917.037353][T25769] wg1 speed is unknown, defaulting to 1000
[  917.323834][T25769] lo speed is unknown, defaulting to 1000
[  917.391275][T25794] netlink: 'syz.5.4548': attribute type 5 has an invalid length.
[  917.519893][T25793] wg1 speed is unknown, defaulting to 1000
[  917.572699][T25793] lo speed is unknown, defaulting to 1000
[  917.684008][T25802] wg1 speed is unknown, defaulting to 1000
[  917.832035][T25802] lo speed is unknown, defaulting to 1000
[  918.199307][T25816] netlink: 'syz.4.4551': attribute type 6 has an invalid length.
[  918.649340][T25821] netlink: 'syz.2.4554': attribute type 39 has an invalid length.
[  918.957435][T25831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4555'.
[  919.255200][T25835] can: request_module (can-proto-0) failed.
[  919.296034][T25842] wg1 speed is unknown, defaulting to 1000
[  919.345490][T25842] lo speed is unknown, defaulting to 1000
[  919.610057][T25858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'.
[  919.866235][T25869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4559'.
[  920.760928][T25888] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  920.940546][T25892] wg1 speed is unknown, defaulting to 1000
[  921.027937][T25876] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  921.043821][T25892] lo speed is unknown, defaulting to 1000
[  921.068725][T25890] wg1 speed is unknown, defaulting to 1000
[  921.127027][T25890] lo speed is unknown, defaulting to 1000
[  921.261639][T25899] netlink: 'syz.0.4565': attribute type 1 has an invalid length.
[  921.422121][T25899] bond8 (unregistering): Released all slaves
[  921.841309][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4566'.
[  922.219206][T25917] wg1 speed is unknown, defaulting to 1000
[  922.289793][T25917] lo speed is unknown, defaulting to 1000
[  922.605511][T25934] wg1 speed is unknown, defaulting to 1000
[  922.674488][T25934] lo speed is unknown, defaulting to 1000
[  922.874317][T25931] netlink: 'syz.1.4567': attribute type 6 has an invalid length.
[  922.978382][T25943] wg1 speed is unknown, defaulting to 1000
[  922.987729][T25943] lo speed is unknown, defaulting to 1000
[  923.007399][T25946] netlink: 'syz.5.4573': attribute type 1 has an invalid length.
[  923.086240][T25946] bond4 (unregistering): Released all slaves
[  923.726274][T25959] netlink: 'syz.1.4574': attribute type 1 has an invalid length.
[  923.765102][T25959] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4574'.
[  923.824913][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4574'.
[  923.917284][T25967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4574'.
[  924.897752][T25994] rdma_rxe: rxe_newlink: failed to add lo
[  925.115499][T25983] pimreg: left allmulticast mode
[  925.208290][T25987] wg1 speed is unknown, defaulting to 1000
[  925.240559][T25987] lo speed is unknown, defaulting to 1000
[  925.569365][T26004] netlink: 'syz.4.4582': attribute type 1 has an invalid length.
[  925.725204][T26014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4581'.
[  925.893937][T26010] bond6 (unregistering): Released all slaves
[  926.329260][T26006] wg1 speed is unknown, defaulting to 1000
[  926.546816][T26006] lo speed is unknown, defaulting to 1000
[  926.630716][T26035] netlink: 'syz.4.4585': attribute type 1 has an invalid length.
[  926.987843][T26038] bond6 (unregistering): Released all slaves
[  927.251129][T26032] wg1 speed is unknown, defaulting to 1000
[  927.306624][T26032] lo speed is unknown, defaulting to 1000
[  927.415468][T26052] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  927.469607][T26053] netlink: 'syz.5.4584': attribute type 6 has an invalid length.
[  927.925192][T26048] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  928.336926][T26060] wg1 speed is unknown, defaulting to 1000
[  928.356216][T26066] netlink: 'syz.0.4589': attribute type 5 has an invalid length.
[  928.485760][T26060] lo speed is unknown, defaulting to 1000
[  928.687162][T26065] wg1 speed is unknown, defaulting to 1000
[  928.737160][T26065] lo speed is unknown, defaulting to 1000
[  930.181266][T26090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4594'.
[  930.197307][T26092] netlink: 'syz.2.4595': attribute type 1 has an invalid length.
[  930.244754][T26090] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4594'.
[  930.290863][T26094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4594'.
[  930.386668][T26092] bond8 (unregistering): Released all slaves
[  931.500271][T26117] 
: renamed from bond_slave_0
[  931.756917][T26127] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4598'.
[  932.022413][T26132] wg1 speed is unknown, defaulting to 1000
[  932.199936][T26132] lo speed is unknown, defaulting to 1000
[  932.269688][T26121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4598'.
[  932.805035][T26147] wg1 speed is unknown, defaulting to 1000
[  932.863722][T26147] lo speed is unknown, defaulting to 1000
[  934.023615][T26170] netlink: 'syz.1.4603': attribute type 5 has an invalid length.
[  934.107806][T26169] xfrm0: left promiscuous mode
[  934.112705][T26169] xfrm0: left allmulticast mode
[  934.134012][T26173] netlink: 'syz.2.4604': attribute type 1 has an invalid length.
[  934.136605][T26167] wg1 speed is unknown, defaulting to 1000
[  934.144339][T26173] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4604'.
[  934.153475][T26167] lo speed is unknown, defaulting to 1000
[  934.187201][T26176] netlink: 'syz.0.4605': attribute type 1 has an invalid length.
[  934.190729][T26169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'.
[  934.220870][T26176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4605'.
[  934.246019][T26169] netlink: 'syz.2.4604': attribute type 5 has an invalid length.
[  934.257725][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'.
[  934.312597][T26177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4605'.
[  934.502424][T26182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  935.906532][T26224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4612'.
[  935.951706][T26224] wg1 speed is unknown, defaulting to 1000
[  935.989917][T26224] lo speed is unknown, defaulting to 1000
[  936.001731][T26233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4616'.
[  936.264440][T26243] wg1 speed is unknown, defaulting to 1000
[  936.284617][T26243] lo speed is unknown, defaulting to 1000
[  936.471184][T26245] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  936.990828][T26257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4617'.
[  937.180739][T26262] netlink: 'syz.5.4618': attribute type 10 has an invalid length.
[  937.189258][T26262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4618'.
[  937.228825][T26262] team0: Port device geneve0 added
[  937.287448][ T6118] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  937.313788][ T6118] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  937.385416][ T6118] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  937.394371][ T6118] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  937.599134][T26270] netlink: 'syz.5.4620': attribute type 1 has an invalid length.
[  937.627195][T26270] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4620'.
[  937.648715][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4620'.
[  937.726512][T26273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4620'.
[  938.181725][T26292] netlink: 'syz.5.4624': attribute type 1 has an invalid length.
[  938.257932][T26292] bond4 (unregistering): Released all slaves
[  939.117033][T26317] wg1 speed is unknown, defaulting to 1000
[  939.177495][T26317] lo speed is unknown, defaulting to 1000
[  939.288787][T26325] netlink: 'syz.5.4628': attribute type 10 has an invalid length.
[  939.299510][T26325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4628'.
[  939.544198][T26329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4629'.
[  939.885779][T26325] tipc: Resetting bearer <ib:ip6gre0>
[  940.201719][T26325] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  940.244957][T26325] tipc: Resetting bearer <eth:syzkaller0>
[  940.437987][T26359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4632'.
[  940.703665][T26351] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  940.886615][ T6118] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  940.911736][ T6118] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  940.948793][T26376] netlink: 'syz.5.4635': attribute type 13 has an invalid length.
[  940.960203][ T6118] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  940.960273][T26359] smc: net device bond0 applied user defined pnetid SYZ2
[  940.978168][ T6118] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  941.003550][T26351] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  941.011956][T26370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4634'.
[  941.031422][T26376] netlink: 'syz.5.4635': attribute type 17 has an invalid length.
[  941.096274][T26363] smc: net device bond0 erased user defined pnetid SYZ2
[  941.460024][T26390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.512677][T26376] ip6gretap0: left promiscuous mode
[  941.566593][T26376] 8021q: adding VLAN 0 to HW filter on device bond0
[  941.597714][T26376] 8021q: adding VLAN 0 to HW filter on device team0
[  941.611469][T26390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.627549][T26376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  941.683622][T26336] page_pool_release_retry() stalled pool shutdown: id 117, 3329 inflight 180 sec
[  941.795320][T26376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.838988][T26395] tipc: Resetting bearer <eth:syzkaller0>
[  941.862506][T26379] wg1 speed is unknown, defaulting to 1000
[  941.884362][T26379] lo speed is unknown, defaulting to 1000
[  942.604104][T26420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  942.845642][T26429] wg1 speed is unknown, defaulting to 1000
[  942.856549][T26429] lo speed is unknown, defaulting to 1000
[  943.661597][T26452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4648'.
[  943.809734][T26454] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4648'.
[  944.418007][T26471] tipc: Resetting bearer <eth:syzkaller0>
[  944.470694][T26470] wg1 speed is unknown, defaulting to 1000
[  944.504537][T26470] lo speed is unknown, defaulting to 1000
[  944.617274][T26475] netlink: 'syz.4.4655': attribute type 1 has an invalid length.
[  944.766148][T26475] bond6 (unregistering): Released all slaves
[  945.625364][   T30] audit: type=1800 audit(1758126498.735:22): pid=26488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4658" name="cgroup.controllers" dev="tmpfs" ino=4790 res=0 errno=0
[  946.501909][T26516] syzkaller0: entered allmulticast mode
[  946.528108][T26518] syzkaller0 (unregistering): left allmulticast mode
[  946.877541][T26532] netlink: 'syz.4.4674': attribute type 1 has an invalid length.
[  946.909225][T26530] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  946.912357][T26537] netlink: 'syz.1.4675': attribute type 1 has an invalid length.
[  946.922872][T26532] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4674'.
[  946.927937][T26538] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4673'.
[  946.938909][T26537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4675'.
[  946.980611][T26532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4674'.
[  946.997505][T26540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4675'.
[  947.043876][T26539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4674'.
[  947.065935][T26537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4675'.
[  947.157566][T26543] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4676'.
[  947.178492][T26543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  947.204906][T26550] netlink: 'syz.0.4678': attribute type 8 has an invalid length.
[  947.597791][T26562] syzkaller1: entered promiscuous mode
[  947.613996][T26562] syzkaller1: entered allmulticast mode
[  947.954866][T26562] wg1 speed is unknown, defaulting to 1000
[  948.046055][T26562] lo speed is unknown, defaulting to 1000
[  948.220849][T26571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4686'.
[  948.650350][T26581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4689'.
[  948.673860][T26578] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  949.129595][T26596] netlink: 'syz.2.4692': attribute type 1 has an invalid length.
[  949.147313][T26572] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  949.389268][T26602] syzkaller1: entered promiscuous mode
[  949.426009][T26602] syzkaller1: entered allmulticast mode
[  949.568459][T26602] wg1 speed is unknown, defaulting to 1000
[  949.827210][T26602] lo speed is unknown, defaulting to 1000
[  950.729855][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.744207][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.984882][T26666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  952.398121][T26678] syzkaller1: entered promiscuous mode
[  952.421801][T26678] syzkaller1: entered allmulticast mode
[  952.628019][T26678] wg1 speed is unknown, defaulting to 1000
[  952.666237][T26678] lo speed is unknown, defaulting to 1000
[  953.753177][T26700] wg1 speed is unknown, defaulting to 1000
[  953.761593][T26700] lo speed is unknown, defaulting to 1000
[  953.761659][T26698] wg1 speed is unknown, defaulting to 1000
[  953.861915][T26698] lo speed is unknown, defaulting to 1000
[  953.898802][T26710] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  954.045069][T26712] wg1 speed is unknown, defaulting to 1000
[  954.058238][T26715] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  954.208463][T26719] syzkaller0: entered allmulticast mode
[  954.310151][T26712] lo speed is unknown, defaulting to 1000
[  954.748228][   T30] audit: type=1800 audit(1758126507.845:23): pid=26718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4719" name="cgroup.controllers" dev="tmpfs" ino=4794 res=0 errno=0
[  955.108517][T26734] netlink: 'syz.2.4718': attribute type 6 has an invalid length.
[  955.597480][T26742] syzkaller1: entered promiscuous mode
[  955.608592][T26742] syzkaller1: entered allmulticast mode
[  955.721192][T26742] wg1 speed is unknown, defaulting to 1000
[  955.732467][T26742] lo speed is unknown, defaulting to 1000
[  956.460875][T26758] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  956.477557][T26758] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  956.511002][T26763] __nla_validate_parse: 10 callbacks suppressed
[  956.511023][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4728'.
[  956.544811][T26758] tipc: Resetting bearer <eth:syzkaller0>
[  956.881002][ T6111] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  956.935887][T26779] netlink: 'syz.5.4736': attribute type 1 has an invalid length.
[  957.090790][T26779] bond4 (unregistering): Released all slaves
[  957.221263][T26793] wg1 speed is unknown, defaulting to 1000
[  957.256998][T26796] tipc: Resetting bearer <eth:syzkaller0>
[  957.286459][T26793] lo speed is unknown, defaulting to 1000
[  957.292550][T26787] wg1 speed is unknown, defaulting to 1000
[  957.388622][T26787] lo speed is unknown, defaulting to 1000
[  957.888285][T26815] netlink: 'syz.5.4744': attribute type 1 has an invalid length.
[  957.957844][T26793] netlink: 'syz.4.4740': attribute type 6 has an invalid length.
[  958.128939][T26815] bond4 (unregistering): Released all slaves
[  958.264341][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4745'.
[  958.431123][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4745'.
[  958.665320][T26824] wg1 speed is unknown, defaulting to 1000
[  958.718675][T26824] lo speed is unknown, defaulting to 1000
[  959.531748][T26865] netlink: 'syz.4.4754': attribute type 1 has an invalid length.
[  959.578976][T26865] bond6 (unregistering): Released all slaves
[  959.674616][T26861] wg1 speed is unknown, defaulting to 1000
[  959.743956][T26861] lo speed is unknown, defaulting to 1000
[  959.799449][T26862] wg1 speed is unknown, defaulting to 1000
[  960.123291][T26862] lo speed is unknown, defaulting to 1000
[  960.268735][T26886] syzkaller1: entered promiscuous mode
[  960.283766][T26886] syzkaller1: entered allmulticast mode
[  960.547516][T26886] wg1 speed is unknown, defaulting to 1000
[  960.664510][T26886] lo speed is unknown, defaulting to 1000
[  960.981200][T26898] wg1 speed is unknown, defaulting to 1000
[  961.022280][T26898] lo speed is unknown, defaulting to 1000
[  961.628978][T16748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  961.658038][T16748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  961.754476][T26928] netlink: 'syz.1.4767': attribute type 1 has an invalid length.
[  961.770040][T26928] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4767'.
[  961.806286][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4767'.
[  961.883920][T26936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4767'.
[  961.942124][T26938] netlink: 'syz.5.4769': attribute type 1 has an invalid length.
[  962.380013][T26942] bond4 (unregistering): Released all slaves
[  962.660482][T26965] syzkaller0: entered promiscuous mode
[  962.666623][T26965] syzkaller0: entered allmulticast mode
[  963.349631][T26979] netlink: 'syz.2.4774': attribute type 3 has an invalid length.
[  963.492269][T26984] syzkaller1: entered promiscuous mode
[  963.513321][T26984] syzkaller1: entered allmulticast mode
[  963.601066][T26984] wg1 speed is unknown, defaulting to 1000
[  963.637052][T26984] lo speed is unknown, defaulting to 1000
[  964.497618][T27007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  964.553672][T27012] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  964.788600][T26976] infiniband syz2: set down
[  964.819777][T26976] infiniband syz2: added ipvlan0
[  964.934460][T26976] syz2: rxe_create_cq: returned err = -12
[  964.990343][T26976] infiniband syz2: Couldn't create ib_mad CQ
[  965.014907][T26976] infiniband syz2: Couldn't open port 1
[  965.118091][T26976] RDS/IB: syz2: added
[  965.122206][T26976] smc: adding ib device syz2 with port count 1
[  965.152099][T27024] tipc: Resetting bearer <eth:syzkaller0>
[  965.163538][T26976] smc:    ib device syz2 port 1 has no pnetid
[  966.027463][T27055] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4794'.
[  966.105555][T27055] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4794'.
[  966.171563][T27059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4794'.
[  967.739790][T27089] wg1 speed is unknown, defaulting to 1000
[  967.805969][T27087] wg1 speed is unknown, defaulting to 1000
[  967.825804][T27089] lo speed is unknown, defaulting to 1000
[  967.856999][T27087] lo speed is unknown, defaulting to 1000
[  969.176031][T27125] netlink: 'syz.4.4809': attribute type 1 has an invalid length.
[  969.371132][T27129] bond6 (unregistering): Released all slaves
[  969.639281][T27138] wg1 speed is unknown, defaulting to 1000
[  969.648318][T27138] lo speed is unknown, defaulting to 1000
[  970.662259][T27157] tipc: Resetting bearer <eth:syzkaller0>
[  972.082329][T27169] wg1 speed is unknown, defaulting to 1000
[  972.094894][T27169] lo speed is unknown, defaulting to 1000
[  972.729503][T27206] syzkaller1: entered promiscuous mode
[  972.756326][T27206] syzkaller1: entered allmulticast mode
[  972.898953][T27206] wg1 speed is unknown, defaulting to 1000
[  972.910607][T27206] lo speed is unknown, defaulting to 1000
[  975.104876][T27254] wg1 speed is unknown, defaulting to 1000
[  975.156354][T27252] wg1 speed is unknown, defaulting to 1000
[  975.183316][T27254] lo speed is unknown, defaulting to 1000
[  975.192182][T27252] lo speed is unknown, defaulting to 1000
[  976.837779][ T6111] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  977.330371][T27296] dvmrp1: left allmulticast mode
[  977.412182][T27290] wg1 speed is unknown, defaulting to 1000
[  977.506758][T27290] lo speed is unknown, defaulting to 1000
[  977.754718][T27310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4849'.
[  978.053871][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4853'.
[  978.203283][T27319] IPVS: Unknown mcast interface: vcan0
[  978.334441][T27309] wg1 speed is unknown, defaulting to 1000
[  978.342412][T27309] lo speed is unknown, defaulting to 1000
[  979.035150][T27328] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  979.394399][T27334] wg1 speed is unknown, defaulting to 1000
[  979.484390][T27334] lo speed is unknown, defaulting to 1000
[  979.756191][T27344] syzkaller0: entered allmulticast mode
[  979.834358][T27347] syzkaller0 (unregistering): left allmulticast mode
[  980.423948][T27353] netlink: 'syz.1.4863': attribute type 1 has an invalid length.
[  980.432360][T27353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4863'.
[  980.447395][T27353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4863'.
[  980.507617][T27353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4863'.
[  980.844871][T27359] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4864'.
[  981.194068][T27376] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4870'.
[  981.354551][T27380] netlink: 'syz.5.4872': attribute type 1 has an invalid length.
[  981.402131][T27380] bond4 (unregistering): Released all slaves
[  982.043907][T27398] syzkaller1: entered promiscuous mode
[  982.065318][T27398] syzkaller1: entered allmulticast mode
[  982.195161][T27398] wg1 speed is unknown, defaulting to 1000
[  982.231729][T27398] lo speed is unknown, defaulting to 1000
[  982.306538][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4878'.
[  983.205814][T27434] syzkaller1: entered promiscuous mode
[  983.211365][T27434] syzkaller1: entered allmulticast mode
[  983.244578][T27431] wg1 speed is unknown, defaulting to 1000
[  983.338600][T27444] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  983.343135][T27447] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4890'.
[  983.361344][T27431] lo speed is unknown, defaulting to 1000
[  983.381351][T27441] wg1 speed is unknown, defaulting to 1000
[  983.467085][T27450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  983.735253][T27437] wg1 speed is unknown, defaulting to 1000
[  983.741688][T27441] lo speed is unknown, defaulting to 1000
[  983.761827][T27437] lo speed is unknown, defaulting to 1000
[  984.569538][   T30] audit: type=1800 audit(1758126537.675:24): pid=27462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4894" name="cgroup.controllers" dev="tmpfs" ino=4995 res=0 errno=0
[  985.458443][T27492] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  985.915578][T27479] wg1 speed is unknown, defaulting to 1000
[  986.033982][T27479] lo speed is unknown, defaulting to 1000
[  986.209917][T27517] netlink: 'syz.1.4904': attribute type 1 has an invalid length.
[  986.226856][T27517] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4904'.
[  986.559284][T27515] wg1 speed is unknown, defaulting to 1000
[  986.720691][T27515] lo speed is unknown, defaulting to 1000
[  987.860331][T27553] netlink: 'syz.0.4911': attribute type 1 has an invalid length.
[  987.925457][T27553] bond8 (unregistering): Released all slaves
[  988.176257][T27568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4915'.
[  988.679862][T27577] netlink: 'syz.5.4914': attribute type 6 has an invalid length.
[  988.783447][T27576] wg1 speed is unknown, defaulting to 1000
[  988.913859][T27576] lo speed is unknown, defaulting to 1000
[  989.571767][T27596] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  989.801320][T27612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4922'.
[  990.466459][   T30] audit: type=1800 audit(1758126543.575:25): pid=27616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4923" name="cgroup.controllers" dev="tmpfs" ino=5071 res=0 errno=0
[  990.499180][T27630] syzkaller0: entered allmulticast mode
[  990.530527][T27628] netlink: 'syz.5.4926': attribute type 1 has an invalid length.
[  990.606358][T27628] bond4 (unregistering): Released all slaves
[  990.660110][T27635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'.
[  990.820312][T27627] syzkaller0 (unregistering): left allmulticast mode
[  991.129789][T27647] netlink: 'syz.2.4933': attribute type 1 has an invalid length.
[  991.150590][T27647] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4933'.
[  991.181546][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4933'.
[  991.242471][T27650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4933'.
[  991.556122][T27654] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  991.838675][T27663] netlink: 'syz.5.4930': attribute type 6 has an invalid length.
[  992.403632][T27678] netlink: 'syz.5.4940': attribute type 1 has an invalid length.
[  992.478477][T27678] bond4 (unregistering): Released all slaves
[  993.158497][T27700] wg1 speed is unknown, defaulting to 1000
[  993.191866][T27700] lo speed is unknown, defaulting to 1000
[  993.507754][T27716] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  993.799783][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4951'.
[  993.847164][T27723] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4951'.
[  993.859630][T27723] netlink: 34 bytes leftover after parsing attributes in process `syz.5.4951'.
[  993.931408][T27698] netlink: 'syz.0.4942': attribute type 6 has an invalid length.
[  993.963933][T27732] syzkaller0: entered allmulticast mode
[  994.149746][T27732] syzkaller0 (unregistering): left allmulticast mode
[  994.286094][T27743] netlink: 'syz.0.4955': attribute type 1 has an invalid length.
[  994.773732][T27744] bond8 (unregistering): Released all slaves
[  994.923447][T27740] tipc: Resetting bearer <eth:syzkaller0>
[  995.816864][T27764] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  995.867754][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4961'.
[  996.008822][T27775] netlink: 'syz.0.4965': attribute type 1 has an invalid length.
[  996.063708][T27775] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4965'.
[  996.134948][T27775] netlink: 'syz.0.4965': attribute type 2 has an invalid length.
[  996.178064][T27775] netlink: 'syz.0.4965': attribute type 1 has an invalid length.
[  996.206935][T27782] netlink: 'syz.4.4968': attribute type 1 has an invalid length.
[  996.224184][T27782] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4968'.
[  996.259466][T27782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4968'.
[  996.326565][T27787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4968'.
[  996.358163][T27789] netlink: 'syz.0.4971': attribute type 1 has an invalid length.
[  996.367551][T27789] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4971'.
[  996.388121][T27789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4971'.
[  996.459958][T27792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4971'.
[  996.595893][T27793] tipc: Resetting bearer <eth:syzkaller0>
[  996.831893][T27803] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  996.863986][T27802] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  996.928571][T27807] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  997.111605][T27815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4980'.
[  997.257365][T27823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4980'.
[  997.522050][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.543604][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  997.547258][T27832] netlink: 'syz.2.4985': attribute type 1 has an invalid length.
[  997.589606][T27835] netlink: 'syz.4.4986': attribute type 1 has an invalid length.
[  997.651635][T27835] bond6 (unregistering): Released all slaves
[  997.847153][T27850] tipc: Resetting bearer <eth:syzkaller0>
[  998.289814][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  998.300496][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  998.680506][T27885] nbd: socks must be embedded in a SOCK_ITEM attr
[  998.867466][T27887] netlink: 'syz.5.5002': attribute type 1 has an invalid length.
[  998.935621][T27887] bond4 (unregistering): Released all slaves
[  999.285025][T27894] syzkaller0: entered allmulticast mode
[  999.429905][T27895] syzkaller0 (unregistering): left allmulticast mode
[  999.976570][T27923] netlink: 'syz.4.5012': attribute type 1 has an invalid length.
[ 1000.009746][T27926] netlink: 'syz.1.5009': attribute type 1 has an invalid length.
[ 1000.049312][T27923] bond6 (unregistering): Released all slaves
[ 1000.071760][T27916] wg1 speed is unknown, defaulting to 1000
[ 1000.080513][T27916] lo speed is unknown, defaulting to 1000
[ 1000.442468][T27943] netlink: 'syz.2.5016': attribute type 1 has an invalid length.
[ 1000.528542][T27943] bond8 (unregistering): Released all slaves
[ 1000.569155][T27945] veth0: entered promiscuous mode
[ 1000.579660][T27944] veth0: left promiscuous mode
[ 1000.734166][T27951] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1001.227428][T27973] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1001.368208][T27976] __nla_validate_parse: 10 callbacks suppressed
[ 1001.368230][T27976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5027'.
[ 1001.435600][T27978] netlink: 'syz.0.5028': attribute type 1 has an invalid length.
[ 1001.532210][T27985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'.
[ 1001.563864][T27981] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1001.810576][T27987] bond8 (unregistering): Released all slaves
[ 1002.162492][T27992] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1002.409023][T28008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1002.487936][T28012] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1002.780158][T28024] netlink: 'syz.4.5041': attribute type 1 has an invalid length.
[ 1002.821371][T28023] wg1 speed is unknown, defaulting to 1000
[ 1002.826671][T26338] page_pool_release_retry() stalled pool shutdown: id 117, 3329 inflight 241 sec
[ 1002.848726][T28023] lo speed is unknown, defaulting to 1000
[ 1002.971542][T28027] bond6 (unregistering): Released all slaves
[ 1003.740687][T28032] netlink: 'syz.0.5042': attribute type 6 has an invalid length.
[ 1004.303372][   T30] audit: type=1800 audit(1758126557.375:26): pid=28056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5043" name="cgroup.controllers" dev="tmpfs" ino=5191 res=0 errno=0
[ 1004.844892][T28068] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1005.914018][T28099] syzkaller0: entered allmulticast mode
[ 1005.973424][T28102] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.121625][T28104] team0: Port device geneve0 removed
[ 1006.166127][T28096] syzkaller0 (unregistering): left allmulticast mode
[ 1006.281774][T28102] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.296235][T28102] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.333130][T28104] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1006.858699][T28127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1007.616061][T28149] wg1 speed is unknown, defaulting to 1000
[ 1007.626204][T28149] lo speed is unknown, defaulting to 1000
[ 1007.745016][T28157] wg1 speed is unknown, defaulting to 1000
[ 1007.754151][T28157] lo speed is unknown, defaulting to 1000
[ 1007.937864][T28155] syzkaller1: entered promiscuous mode
[ 1007.973341][T28155] syzkaller1: entered allmulticast mode
[ 1008.211670][T28162] netlink: 'syz.5.5071': attribute type 1 has an invalid length.
[ 1008.231518][T28162] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5071'.
[ 1008.268135][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5071'.
[ 1008.333178][T28163] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5071'.
[ 1008.506918][T28168] netlink: 'syz.0.5068': attribute type 6 has an invalid length.
[ 1009.242489][T28178] syzkaller0: entered allmulticast mode
[ 1009.504874][T28181] syzkaller0 (unregistering): left allmulticast mode
[ 1009.999158][T28194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1011.750450][T28240] tipc: Resetting bearer <eth:syzkaller0>
[ 1011.916949][T28248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5094'.
[ 1012.046704][T28248] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5094'.
[ 1013.428857][T28284] wg1 speed is unknown, defaulting to 1000
[ 1013.449581][T28284] lo speed is unknown, defaulting to 1000
[ 1013.457518][T28278] wg1 speed is unknown, defaulting to 1000
[ 1013.469420][T28278] lo speed is unknown, defaulting to 1000
[ 1014.210690][T28305] netlink: 'syz.4.5107': attribute type 1 has an invalid length.
[ 1014.459396][T28309] bond6 (unregistering): Released all slaves
[ 1014.788598][T28322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5111'.
[ 1014.816815][T28328] netlink: 'syz.1.5113': attribute type 1 has an invalid length.
[ 1014.885415][T28328] bond6 (unregistering): Released all slaves
[ 1015.573918][T28352] syzkaller1: entered promiscuous mode
[ 1015.590378][T28352] syzkaller1: entered allmulticast mode
[ 1015.725293][T28352] wg1 speed is unknown, defaulting to 1000
[ 1015.751221][T28352] lo speed is unknown, defaulting to 1000
[ 1016.250451][   T30] audit: type=1800 audit(1758126569.355:27): pid=28354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5119" name="cgroup.controllers" dev="tmpfs" ino=5252 res=0 errno=0
[ 1018.097060][T28416] netlink: 'syz.0.5136': attribute type 1 has an invalid length.
[ 1018.128728][T28416] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5136'.
[ 1018.164256][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5136'.
[ 1018.241345][T28420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5136'.
[ 1018.369922][T28426] tipc: Resetting bearer <eth:syzkaller0>
[ 1018.685959][   T30] audit: type=1800 audit(1758126571.795:28): pid=28423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5137" name="cgroup.controllers" dev="tmpfs" ino=5275 res=0 errno=0
[ 1019.034111][T28446] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5142'.
[ 1019.637672][T28483] wg1 speed is unknown, defaulting to 1000
[ 1019.648437][T28483] lo speed is unknown, defaulting to 1000
[ 1020.375548][T28491] wg1 speed is unknown, defaulting to 1000
[ 1020.400340][T28491] lo speed is unknown, defaulting to 1000
[ 1020.543708][T28498] netlink: 'syz.5.5151': attribute type 1 has an invalid length.
[ 1020.551509][T28498] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5151'.
[ 1020.651478][T28502] netlink: 'syz.0.5150': attribute type 1 has an invalid length.
[ 1020.680242][T28502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5150'.
[ 1020.732166][T28502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5150'.
[ 1020.784006][T28505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5150'.
[ 1021.215098][T28516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5154'.
[ 1021.394307][T28521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5155'.
[ 1021.464024][T28521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5155'.
[ 1021.464086][ T6118] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.493720][ T6118] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.507083][ T6118] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.524177][ T6118] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.704656][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5158'.
[ 1023.295705][T28555] syzkaller0: entered promiscuous mode
[ 1023.303337][T28555] syzkaller0: entered allmulticast mode
[ 1023.565268][T28561] syzkaller1: entered promiscuous mode
[ 1023.585844][T28561] syzkaller1: entered allmulticast mode
[ 1023.684452][T28561] wg1 speed is unknown, defaulting to 1000
[ 1023.704121][T28561] lo speed is unknown, defaulting to 1000
[ 1025.346897][T28589] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1026.660427][T28633] syzkaller1: entered promiscuous mode
[ 1026.683743][T28633] syzkaller1: entered allmulticast mode
[ 1026.768035][T28633] wg1 speed is unknown, defaulting to 1000
[ 1026.784552][T28633] lo speed is unknown, defaulting to 1000
[ 1026.922691][   T30] audit: type=1800 audit(1758126580.025:29): pid=28630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5176" name="cgroup.controllers" dev="tmpfs" ino=5414 res=0 errno=0
[ 1027.467092][T28643] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1027.490752][T28643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1027.564414][T28651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5183'.
[ 1027.723583][T28657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5183'.
[ 1027.864201][T28663] tipc: Resetting bearer <eth:team0>
[ 1027.871226][T28663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1028.010100][T28663] tipc: Resetting bearer <eth:team0>
[ 1028.053630][T28663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1028.346946][T28673] netlink: 'syz.4.5189': attribute type 1 has an invalid length.
[ 1028.374048][T28673] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5189'.
[ 1028.412084][T28673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5189'.
[ 1028.480167][T28678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5189'.
[ 1028.807177][T28687] IPVS: Error connecting to the multicast addr
[ 1028.809799][T28688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5194'.
[ 1028.929741][T28693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5194'.
[ 1029.857952][T28714] syzkaller1: entered promiscuous mode
[ 1029.865678][T28714] syzkaller1: entered allmulticast mode
[ 1030.027785][T28716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5200'.
[ 1030.121253][T28719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5200'.
[ 1030.213568][T28729] netlink: 'syz.5.5201': attribute type 1 has an invalid length.
[ 1030.224525][T28729] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5201'.
[ 1030.239795][T28718] wg1 speed is unknown, defaulting to 1000
[ 1030.258910][T28718] lo speed is unknown, defaulting to 1000
[ 1031.673631][T28765] tipc: Resetting bearer <eth:syzkaller0>
[ 1032.475080][T28785] netlink: 'syz.0.5216': attribute type 1 has an invalid length.
[ 1032.576768][T28793] __nla_validate_parse: 4 callbacks suppressed
[ 1032.576790][T28793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5216'.
[ 1032.717425][ T6098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1032.725941][ T6098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1032.914684][T28801] netlink: 'syz.4.5222': attribute type 1 has an invalid length.
[ 1033.312128][T28801] bond6 (unregistering): Released all slaves
[ 1034.238650][T28830] netlink: 'syz.4.5225': attribute type 1 has an invalid length.
[ 1034.266927][T28830] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5225'.
[ 1034.320638][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5225'.
[ 1034.376157][T28834] wg1 speed is unknown, defaulting to 1000
[ 1034.395261][T28834] lo speed is unknown, defaulting to 1000
[ 1034.416224][T28830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5225'.
[ 1034.616641][T28844] netlink: 'syz.5.5228': attribute type 1 has an invalid length.
[ 1034.625109][T28844] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5228'.
[ 1034.686959][ T4577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1034.701572][ T4577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1034.916862][T28858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5234'.
[ 1035.643387][T28875] nbd3: detected capacity change from 0 to 127
[ 1035.673340][ T5876] block nbd3: Receive control failed (result -32)
[ 1036.125909][T28896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5243'.
[ 1036.748590][T28909] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5247'.
[ 1036.824650][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5246'.
[ 1036.951574][T28922] syzkaller1: entered promiscuous mode
[ 1036.960311][T28922] syzkaller1: entered allmulticast mode
[ 1036.998480][T28926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5246'.
[ 1037.100291][T28922] wg1 speed is unknown, defaulting to 1000
[ 1037.117261][T28922] lo speed is unknown, defaulting to 1000
[ 1037.498537][T28941] wg1 speed is unknown, defaulting to 1000
[ 1037.518304][T28941] lo speed is unknown, defaulting to 1000
[ 1039.153944][T28958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5259'.
[ 1039.237269][T28958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5259'.
[ 1039.437803][T28961] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5260'.
[ 1039.529329][T28967] ªªªªªª: renamed from wg2
[ 1039.589496][T28971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1039.832623][   T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1039.833272][T28974] wg1 speed is unknown, defaulting to 1000
[ 1039.941961][T28974] lo speed is unknown, defaulting to 1000
[ 1040.495885][T28983] netlink: 'syz.1.5265': attribute type 6 has an invalid length.
[ 1041.682135][T29000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5272'.
[ 1041.746871][T29002] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5272'.
[ 1041.979432][T29008] netlink: 'syz.2.5271': attribute type 1 has an invalid length.
[ 1041.999819][T29008] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5271'.
[ 1042.097716][T29008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5271'.
[ 1042.144522][T29010] wg1 speed is unknown, defaulting to 1000
[ 1042.166829][T29016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5271'.
[ 1042.258951][T29021] netlink: 'syz.4.5273': attribute type 1 has an invalid length.
[ 1042.297801][T29021] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5273'.
[ 1042.418042][T29010] lo speed is unknown, defaulting to 1000
[ 1042.673824][   T30] audit: type=1800 audit(1758126595.765:30): pid=29024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5274" name="cgroup.controllers" dev="tmpfs" ino=5382 res=0 errno=0
[ 1042.730141][T29029] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1043.035324][T29037] netlink: 'syz.0.5277': attribute type 1 has an invalid length.
[ 1043.311565][T29037] bond9 (unregistering): Released all slaves
[ 1043.823705][   T30] audit: type=1800 audit(1758126596.455:31): pid=29039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5278" name="cgroup.controllers" dev="tmpfs" ino=5388 res=0 errno=0
[ 1043.935530][T29050] sctp: [Deprecated]: syz.2.5280 (pid 29050) Use of int in max_burst socket option deprecated.
[ 1043.935530][T29050] Use struct sctp_assoc_value instead
[ 1044.227230][T29055] wg1 speed is unknown, defaulting to 1000
[ 1044.243645][T29055] lo speed is unknown, defaulting to 1000
[ 1044.940728][T29074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5284'.
[ 1044.998457][T29077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5284'.
[ 1045.471532][T29092] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1046.502376][T29116] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[ 1046.531199][T29114] tipc: Resetting bearer <eth:syzkaller0>
[ 1046.654985][T29120] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1046.707897][T29124] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1046.727055][T29124] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1046.851717][T29131] wg1 speed is unknown, defaulting to 1000
[ 1046.861057][T29131] lo speed is unknown, defaulting to 1000
[ 1046.909763][T29135] macsec0: entered promiscuous mode
[ 1046.921681][T29135] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[ 1046.997807][T29135] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[ 1047.401080][T29152] netlink: 'syz.0.5300': attribute type 1 has an invalid length.
[ 1047.534163][T29152] bond9 (unregistering): Released all slaves
[ 1047.687475][T29157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5301'.
[ 1047.709268][T29157] netlink: 'syz.5.5301': attribute type 30 has an invalid length.
[ 1047.797247][T29157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5301'.
[ 1047.813477][T29157] netlink: 'syz.5.5301': attribute type 30 has an invalid length.
[ 1047.827335][T16748] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1047.857709][T16748] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1047.917905][T16748] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1047.957569][T16748] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1048.168954][T29176] netlink: 'syz.4.5302': attribute type 1 has an invalid length.
[ 1048.179368][T29166] wg1 speed is unknown, defaulting to 1000
[ 1048.181386][T29176] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5302'.
[ 1048.296161][T29166] lo speed is unknown, defaulting to 1000
[ 1048.497334][T29182] syzkaller1: entered promiscuous mode
[ 1048.513546][T29182] syzkaller1: entered allmulticast mode
[ 1048.692565][T29181] wg1 speed is unknown, defaulting to 1000
[ 1048.716989][T29181] lo speed is unknown, defaulting to 1000
[ 1049.155610][T29199] tipc: Resetting bearer <eth:syzkaller0>
[ 1049.183994][T29199] tipc: Resetting bearer <eth:syzkaller0>
[ 1049.193160][T29199] tipc: Resetting bearer <eth:syzkaller0>
[ 1049.247752][T29199] tipc: Resetting bearer <eth:syzkaller0>
[ 1049.737790][T29208] wg1 speed is unknown, defaulting to 1000
[ 1049.868425][T29208] lo speed is unknown, defaulting to 1000
[ 1049.946562][T29217] tipc: Resetting bearer <eth:team0>
[ 1049.965798][T29217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1051.590498][T29257] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 1051.612300][T29257] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 1051.630766][T29257] tipc: Resetting bearer <eth:syzkaller0>
[ 1051.638287][T29259] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1052.396694][T29278] tipc: Resetting bearer <eth:syzkaller0>
[ 1053.173719][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5328'.
[ 1053.209417][T29299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5329'.
[ 1053.339296][T29302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5329'.
[ 1054.001917][T29327] netlink: 'syz.2.5333': attribute type 1 has an invalid length.
[ 1054.021795][T29327] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5333'.
[ 1054.046611][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5333'.
[ 1054.104831][T29334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5333'.
[ 1054.350214][T29345] IPVS: stopping backup sync thread 12792 ...
[ 1054.585982][T29331] wg1 speed is unknown, defaulting to 1000
[ 1054.605323][T29331] lo speed is unknown, defaulting to 1000
[ 1054.790185][T29355] wg1 speed is unknown, defaulting to 1000
[ 1054.798848][T29355] lo speed is unknown, defaulting to 1000
[ 1055.159033][T29362] netlink: 'syz.4.5338': attribute type 1 has an invalid length.
[ 1055.188588][T29362] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5338'.
[ 1055.390523][T29375] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1055.411310][T29368] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 1055.419632][T29368] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 1055.431037][T29368] tipc: Resetting bearer <eth:syzkaller0>
[ 1055.774302][T29380] netlink: 'syz.2.5344': attribute type 1 has an invalid length.
[ 1055.928529][T29380] bond8 (unregistering): Released all slaves
[ 1056.609936][T29392] wg1 speed is unknown, defaulting to 1000
[ 1056.645151][T29392] lo speed is unknown, defaulting to 1000
[ 1058.128674][T29431] syzkaller1: entered promiscuous mode
[ 1058.136846][T29431] syzkaller1: entered allmulticast mode
[ 1058.146993][T29432] wg1 speed is unknown, defaulting to 1000
[ 1058.158745][T29432] lo speed is unknown, defaulting to 1000
[ 1058.337126][T29439] syzkaller1: entered promiscuous mode
[ 1058.343006][T29439] syzkaller1: entered allmulticast mode
[ 1058.545230][T29439] wg1 speed is unknown, defaulting to 1000
[ 1058.554547][T29439] lo speed is unknown, defaulting to 1000
[ 1059.541424][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5361'.
[ 1059.682260][T29470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5361'.
[ 1060.809979][T29497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5368'.
[ 1060.862175][T29502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5368'.
[ 1061.525844][T29515] wg1 speed is unknown, defaulting to 1000
[ 1061.545787][T29515] lo speed is unknown, defaulting to 1000
[ 1061.622242][T29519] netlink: 'syz.2.5373': attribute type 1 has an invalid length.
[ 1061.648122][T29519] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5373'.
[ 1061.854527][T29525] netlink: 'syz.1.5374': attribute type 1 has an invalid length.
[ 1062.106303][T29525] bond6 (unregistering): Released all slaves
[ 1062.647876][T29536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5376'.
[ 1062.750536][T29538] wg1 speed is unknown, defaulting to 1000
[ 1062.846366][T29538] lo speed is unknown, defaulting to 1000
[ 1063.470695][T29558] wg1 speed is unknown, defaulting to 1000
[ 1063.486583][T29558] lo speed is unknown, defaulting to 1000
[ 1063.632021][T29568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5385'.
[ 1063.653627][T29569] netlink: 'syz.5.5382': attribute type 1 has an invalid length.
[ 1063.662099][T29569] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5382'.
[ 1063.679517][T29568] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5385'.
[ 1063.843747][T26337] page_pool_release_retry() stalled pool shutdown: id 117, 3329 inflight 302 sec
[ 1064.712607][T29579] syzkaller1: entered promiscuous mode
[ 1064.718440][T29579] syzkaller1: entered allmulticast mode
[ 1064.721870][T29591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5391'.
[ 1064.787802][T29595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5391'.
[ 1065.481784][T29617] wg1 speed is unknown, defaulting to 1000
[ 1065.501513][T29617] lo speed is unknown, defaulting to 1000
[ 1065.544841][T29625] netlink: 'syz.2.5397': attribute type 1 has an invalid length.
[ 1065.632543][T29625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5397'.
[ 1066.126594][T29634] netlink: 'syz.4.5401': attribute type 1 has an invalid length.
[ 1066.264272][T29634] bond6 (unregistering): Released all slaves
[ 1066.503357][T29651] tipc: Resetting bearer <eth:syzkaller0>
[ 1066.549323][T29651] tipc: Resetting bearer <eth:syzkaller0>
[ 1066.993355][T29657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'.
[ 1067.220484][T29663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5406'.
[ 1067.334266][T29668] dvmrp0: entered allmulticast mode
[ 1067.380084][   T30] audit: type=1800 audit(1758126620.485:32): pid=29655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5405" name="cgroup.controllers" dev="tmpfs" ino=5698 res=0 errno=0
[ 1067.481556][T29673] syzkaller1: entered promiscuous mode
[ 1067.516031][T29673] syzkaller1: entered allmulticast mode
[ 1067.620309][T29679] tipc: Resetting bearer <eth:syzkaller0>
[ 1067.644377][T29681] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[ 1067.661297][T29681] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[ 1067.683811][T29681] tipc: Resetting bearer <eth:syzkaller0>
[ 1067.707782][T29673] wg1 speed is unknown, defaulting to 1000
[ 1067.717254][T29673] lo speed is unknown, defaulting to 1000
[ 1068.152202][T29693] wg1 speed is unknown, defaulting to 1000
[ 1068.175413][T29693] lo speed is unknown, defaulting to 1000
[ 1068.480057][T29702] netlink: 'syz.4.5416': attribute type 1 has an invalid length.
[ 1068.837774][T29703] bond6 (unregistering): Released all slaves
[ 1069.047965][T29712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5418'.
[ 1069.134472][T29713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5418'.
[ 1070.795256][T29752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5423'.
[ 1071.480945][T29769] netlink: 'syz.2.5430': attribute type 1 has an invalid length.
[ 1071.557688][T29772] netlink: 'syz.0.5431': attribute type 1 has an invalid length.
[ 1071.892798][T29785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5433'.
[ 1072.112236][T29769] bond8 (unregistering): Released all slaves
[ 1072.420037][T29776] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[ 1072.536970][T29785] bond6: entered promiscuous mode
[ 1072.552028][T29785] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1072.577699][T29784] netlink: 'syz.5.5432': attribute type 6 has an invalid length.
[ 1072.634310][T29786] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1072.660618][T29786] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[ 1072.708032][T29786] bond6: (slave wireguard0): Error -95 calling set_mac_address
[ 1072.791175][T29798] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[ 1073.130531][T29783] wg1 speed is unknown, defaulting to 1000
[ 1073.135523][T29810] netlink: 'syz.2.5436': attribute type 1 has an invalid length.
[ 1073.147093][T29783] lo speed is unknown, defaulting to 1000
[ 1073.181822][T29798] tipc: Resetting bearer <eth:syzkaller0>
[ 1073.199521][T29810] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5436'.
[ 1073.222349][T29802] wg1 speed is unknown, defaulting to 1000
[ 1073.252665][T29802] lo speed is unknown, defaulting to 1000
[ 1073.599788][T29816] veth0: entered promiscuous mode
[ 1073.616723][T29815] veth0: left promiscuous mode
[ 1074.714819][T29840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5444'.
[ 1074.918117][ T6118] smc: removing ib device syz2
[ 1074.955912][T29851] netlink: 'syz.4.5445': attribute type 1 has an invalid length.
[ 1075.381431][T23335] ==================================================================
[ 1075.389731][T23335] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[ 1075.398628][T23335] Read of size 8 at addr ffff8880778062e8 by task kworker/0:0/23335
[ 1075.406713][T23335] 
[ 1075.409064][T23335] CPU: 0 UID: 0 PID: 23335 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1075.409091][T23335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1075.409105][T23335] Workqueue: events smc_ib_port_event_work
[ 1075.409130][T23335] Call Trace:
[ 1075.409141][T23335]  <TASK>
[ 1075.409161][T23335]  dump_stack_lvl+0x189/0x250
[ 1075.409187][T23335]  ? rcu_is_watching+0x15/0xb0
[ 1075.409207][T23335]  ? __kasan_check_byte+0x12/0x40
[ 1075.409235][T23335]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1075.409257][T23335]  ? rcu_is_watching+0x15/0xb0
[ 1075.409277][T23335]  ? lock_release+0x4b/0x3e0
[ 1075.409307][T23335]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1075.409332][T23335]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1075.409357][T23335]  print_report+0xca/0x240
[ 1075.409386][T23335]  ? __ethtool_get_link_ksettings+0x6e/0x190
[ 1075.409412][T23335]  kasan_report+0x118/0x150
[ 1075.409439][T23335]  ? __ethtool_get_link_ksettings+0x6e/0x190
[ 1075.409470][T23335]  __ethtool_get_link_ksettings+0x6e/0x190
[ 1075.409499][T23335]  ib_get_eth_speed+0x15e/0x7b0
[ 1075.409528][T23335]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 1075.409560][T23335]  ? do_raw_spin_unlock+0x122/0x240
[ 1075.409600][T23335]  rxe_query_port+0x93/0x3b0
[ 1075.409633][T23335]  ib_query_port+0x16d/0x830
[ 1075.409664][T23335]  smc_ib_port_event_work+0x15a/0x940
[ 1075.409689][T23335]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1075.409718][T23335]  ? process_scheduled_works+0x9ef/0x17b0
[ 1075.409737][T23335]  ? process_scheduled_works+0x9ef/0x17b0
[ 1075.409757][T23335]  process_scheduled_works+0xae1/0x17b0
[ 1075.409792][T23335]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1075.409820][T23335]  worker_thread+0x8a0/0xda0
[ 1075.409842][T23335]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1075.409876][T23335]  ? __kthread_parkme+0x7b/0x200
[ 1075.409904][T23335]  kthread+0x70e/0x8a0
[ 1075.409930][T23335]  ? __pfx_worker_thread+0x10/0x10
[ 1075.409952][T23335]  ? __pfx_kthread+0x10/0x10
[ 1075.409977][T23335]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1075.410007][T23335]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1075.410026][T23335]  ? __pfx_kthread+0x10/0x10
[ 1075.410052][T23335]  ret_from_fork+0x436/0x7d0
[ 1075.410081][T23335]  ? __pfx_ret_from_fork+0x10/0x10
[ 1075.410106][T23335]  ? __switch_to_asm+0x39/0x70
[ 1075.410131][T23335]  ? __switch_to_asm+0x33/0x70
[ 1075.410156][T23335]  ? __pfx_kthread+0x10/0x10
[ 1075.410181][T23335]  ret_from_fork_asm+0x1a/0x30
[ 1075.410217][T23335]  </TASK>
[ 1075.410225][T23335] 
[ 1075.647155][T23335] Allocated by task 5866:
[ 1075.651497][T23335]  kasan_save_track+0x3e/0x80
[ 1075.656214][T23335]  __kasan_kmalloc+0x93/0xb0
[ 1075.660878][T23335]  __kvmalloc_node_noprof+0x30d/0x5f0
[ 1075.666535][T23335]  alloc_netdev_mqs+0xa3/0x11b0
[ 1075.671876][T23335]  rtnl_create_link+0x31f/0xd10
[ 1075.676834][T23335]  rtnl_newlink_create+0x25c/0xb00
[ 1075.681971][T23335]  rtnl_newlink+0x16d6/0x1c70
[ 1075.686666][T23335]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1075.691637][T23335]  netlink_rcv_skb+0x208/0x470
[ 1075.696416][T23335]  netlink_unicast+0x82c/0x9e0
[ 1075.701200][T23335]  netlink_sendmsg+0x805/0xb30
[ 1075.706074][T23335]  __sock_sendmsg+0x219/0x270
[ 1075.710970][T23335]  __sys_sendto+0x3bd/0x520
[ 1075.715529][T23335]  __x64_sys_sendto+0xde/0x100
[ 1075.720316][T23335]  do_syscall_64+0xfa/0x3b0
[ 1075.724836][T23335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1075.730832][T23335] 
[ 1075.733166][T23335] Freed by task 29840:
[ 1075.737243][T23335]  kasan_save_track+0x3e/0x80
[ 1075.741941][T23335]  kasan_save_free_info+0x46/0x50
[ 1075.747252][T23335]  __kasan_slab_free+0x5b/0x80
[ 1075.752038][T23335]  kfree+0x18e/0x440
[ 1075.755951][T23335]  device_release+0x99/0x1c0
[ 1075.761002][T23335]  kobject_put+0x22b/0x480
[ 1075.765572][T23335]  netdev_run_todo+0xd2e/0xea0
[ 1075.770375][T23335]  rtnl_dellink+0x537/0x710
[ 1075.774899][T23335]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1075.779869][T23335]  netlink_rcv_skb+0x208/0x470
[ 1075.784850][T23335]  netlink_unicast+0x82c/0x9e0
[ 1075.789735][T23335]  netlink_sendmsg+0x805/0xb30
[ 1075.794620][T23335]  __sock_sendmsg+0x219/0x270
[ 1075.799409][T23335]  ____sys_sendmsg+0x505/0x830
[ 1075.804198][T23335]  ___sys_sendmsg+0x21f/0x2a0
[ 1075.809508][T23335]  __x64_sys_sendmsg+0x19b/0x260
[ 1075.814545][T23335]  do_syscall_64+0xfa/0x3b0
[ 1075.819054][T23335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1075.824950][T23335] 
[ 1075.827285][T23335] The buggy address belongs to the object at ffff888077806000
[ 1075.827285][T23335]  which belongs to the cache kmalloc-cg-4k of size 4096
[ 1075.841605][T23335] The buggy address is located 744 bytes inside of
[ 1075.841605][T23335]  freed 4096-byte region [ffff888077806000, ffff888077807000)
[ 1075.855662][T23335] 
[ 1075.858099][T23335] The buggy address belongs to the physical page:
[ 1075.864768][T23335] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77800
[ 1075.873618][T23335] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1075.882461][T23335] memcg:ffff88803233a881
[ 1075.886730][T23335] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1075.894363][T23335] page_type: f5(slab)
[ 1075.898522][T23335] raw: 00fff00000000040 ffff88801a44b500 dead000000000100 dead000000000122
[ 1075.907190][T23335] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88803233a881
[ 1075.916124][T23335] head: 00fff00000000040 ffff88801a44b500 dead000000000100 dead000000000122
[ 1075.925150][T23335] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88803233a881
[ 1075.934167][T23335] head: 00fff00000000003 ffffea0001de0001 00000000ffffffff 00000000ffffffff
[ 1075.943016][T23335] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1075.951707][T23335] page dumped because: kasan: bad access detected
[ 1075.958201][T23335] page_owner tracks the page as allocated
[ 1075.963919][T23335] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5880, tgid 5880 (syz-executor), ts 89218313200, free_ts 61250037042
[ 1075.987546][T23335]  post_alloc_hook+0x240/0x2a0
[ 1075.992347][T23335]  get_page_from_freelist+0x21e4/0x22c0
[ 1075.998068][T23335]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1076.003872][T23335]  alloc_pages_mpol+0x232/0x4a0
[ 1076.008732][T23335]  allocate_slab+0x8a/0x370
[ 1076.013243][T23335]  ___slab_alloc+0xbeb/0x1420
[ 1076.018141][T23335]  __kvmalloc_node_noprof+0x429/0x5f0
[ 1076.023607][T23335]  alloc_netdev_mqs+0xa3/0x11b0
[ 1076.028560][T23335]  rtnl_create_link+0x31f/0xd10
[ 1076.033500][T23335]  rtnl_newlink_create+0x25c/0xb00
[ 1076.038713][T23335]  rtnl_newlink+0x16d6/0x1c70
[ 1076.043391][T23335]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1076.048417][T23335]  netlink_rcv_skb+0x208/0x470
[ 1076.053275][T23335]  netlink_unicast+0x82c/0x9e0
[ 1076.058215][T23335]  netlink_sendmsg+0x805/0xb30
[ 1076.063073][T23335]  __sock_sendmsg+0x219/0x270
[ 1076.067750][T23335] page last free pid 5660 tgid 5660 stack trace:
[ 1076.074341][T23335]  __free_frozen_pages+0xbc4/0xd30
[ 1076.079804][T23335]  __put_partials+0x156/0x1a0
[ 1076.084473][T23335]  put_cpu_partial+0x17c/0x250
[ 1076.089232][T23335]  __slab_free+0x2d5/0x3c0
[ 1076.093649][T23335]  qlist_free_all+0x97/0x140
[ 1076.098246][T23335]  kasan_quarantine_reduce+0x148/0x160
[ 1076.103798][T23335]  __kasan_slab_alloc+0x22/0x80
[ 1076.108921][T23335]  __kmalloc_noprof+0x224/0x4f0
[ 1076.114038][T23335]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1076.119582][T23335]  tomoyo_path_perm+0x213/0x4b0
[ 1076.124436][T23335]  security_inode_getattr+0x12f/0x330
[ 1076.129810][T23335]  __x64_sys_newfstat+0xfc/0x200
[ 1076.134746][T23335]  do_syscall_64+0xfa/0x3b0
[ 1076.139248][T23335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.145224][T23335] 
[ 1076.147567][T23335] Memory state around the buggy address:
[ 1076.153305][T23335]  ffff888077806180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1076.161551][T23335]  ffff888077806200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1076.169709][T23335] >ffff888077806280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1076.177776][T23335]                                                           ^
[ 1076.185316][T23335]  ffff888077806300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1076.193376][T23335]  ffff888077806380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1076.201699][T23335] ==================================================================
[ 1076.279329][T23335] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1076.286845][T23335] CPU: 0 UID: 0 PID: 23335 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1076.296326][T23335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1076.306417][T23335] Workqueue: events smc_ib_port_event_work
[ 1076.312392][T23335] Call Trace:
[ 1076.315690][T23335]  <TASK>
[ 1076.318881][T23335]  dump_stack_lvl+0x99/0x250
[ 1076.323603][T23335]  ? __asan_memcpy+0x40/0x70
[ 1076.328256][T23335]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1076.333494][T23335]  ? __pfx__printk+0x10/0x10
[ 1076.338125][T23335]  vpanic+0x281/0x750
[ 1076.342140][T23335]  ? preempt_schedule+0xae/0xc0
[ 1076.347275][T23335]  ? __pfx_vpanic+0x10/0x10
[ 1076.351889][T23335]  ? preempt_schedule_common+0x83/0xd0
[ 1076.357468][T23335]  ? preempt_schedule+0xae/0xc0
[ 1076.362337][T23335]  ? __pfx_preempt_schedule+0x10/0x10
[ 1076.367733][T23335]  panic+0xb9/0xc0
[ 1076.371483][T23335]  ? __pfx_panic+0x10/0x10
[ 1076.375936][T23335]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1076.381870][T23335]  ? __ethtool_get_link_ksettings+0x6e/0x190
[ 1076.387973][T23335]  check_panic_on_warn+0x89/0xb0
[ 1076.392946][T23335]  ? __ethtool_get_link_ksettings+0x6e/0x190
[ 1076.399126][T23335]  end_report+0x78/0x160
[ 1076.403400][T23335]  kasan_report+0x129/0x150
[ 1076.407946][T23335]  ? __ethtool_get_link_ksettings+0x6e/0x190
[ 1076.414152][T23335]  __ethtool_get_link_ksettings+0x6e/0x190
[ 1076.420019][T23335]  ib_get_eth_speed+0x15e/0x7b0
[ 1076.425082][T23335]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 1076.430496][T23335]  ? do_raw_spin_unlock+0x122/0x240
[ 1076.435994][T23335]  rxe_query_port+0x93/0x3b0
[ 1076.440628][T23335]  ib_query_port+0x16d/0x830
[ 1076.445356][T23335]  smc_ib_port_event_work+0x15a/0x940
[ 1076.450843][T23335]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1076.456168][T23335]  ? process_scheduled_works+0x9ef/0x17b0
[ 1076.461919][T23335]  ? process_scheduled_works+0x9ef/0x17b0
[ 1076.467757][T23335]  process_scheduled_works+0xae1/0x17b0
[ 1076.473524][T23335]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1076.479541][T23335]  worker_thread+0x8a0/0xda0
[ 1076.484143][T23335]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1076.490691][T23335]  ? __kthread_parkme+0x7b/0x200
[ 1076.495722][T23335]  kthread+0x70e/0x8a0
[ 1076.499798][T23335]  ? __pfx_worker_thread+0x10/0x10
[ 1076.504997][T23335]  ? __pfx_kthread+0x10/0x10
[ 1076.509583][T23335]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1076.514967][T23335]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1076.520248][T23335]  ? __pfx_kthread+0x10/0x10
[ 1076.524853][T23335]  ret_from_fork+0x436/0x7d0
[ 1076.529452][T23335]  ? __pfx_ret_from_fork+0x10/0x10
[ 1076.534916][T23335]  ? __switch_to_asm+0x39/0x70
[ 1076.539684][T23335]  ? __switch_to_asm+0x33/0x70
[ 1076.544554][T23335]  ? __pfx_kthread+0x10/0x10
[ 1076.549238][T23335]  ret_from_fork_asm+0x1a/0x30
[ 1076.554197][T23335]  </TASK>
[ 1076.557526][T23335] Kernel Offset: disabled
[ 1076.561854][T23335] Rebooting in 86400 seconds..