last executing test programs:

14.222536718s ago: executing program 2 (id=2743):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r1 = socket(0x10, 0x3, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x200, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2c}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x20040000)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010028bd70c210d4f18027ef26d5", @ANYRES32=0x0, @ANYBLOB="570da8000103000014000300626f6e6430"], 0x34}}, 0x0)
r11 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x35, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, 0x0, 0x8)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmmsg(r13, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

12.78651155s ago: executing program 2 (id=2747):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
read(r1, &(0x7f00000000c0)=""/102, 0x66)
socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0xe6cecfb4f094927d, {{0x41, 0x3}, 0x4}}, 0x10)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000012081f19eb4ccfa46a00010029bd700040c3f8eaa6c3e209160a427641ed3f75ee83505a216e64f9be00a4ef20af496eec3e952059b30c432cedbb12e947a510697a5782a3e5225c8f34d94dbdc1bdfa673a4d4bc13658bbb4c43e1493158aad0415cdd35b5140c6b44ffb7f736f65d3d45f05106fc9d678ad064fa0efec9ea4fdecf842a6d4170b9a47180976", @ANYRES32=0x0, @ANYBLOB="0000000004010000140003006e657464657673696d3000000000000014001680100001800c000400480300000001000004001400"], 0x4c}, 0x1, 0x0, 0x0, 0x40c1}, 0x8840)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r7 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}})

12.16433391s ago: executing program 0 (id=2751):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x14, r4, 0x301, 0xf0bd29, 0x25dfdafc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4b64}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, r7, 0x0, 0x45000}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_WEIGHT={0x8, 0xf, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, &(0x7f0000000300)={0x2, 0x0, 0x2cc, 0x1, 0xe3c, 0x1})

10.549140212s ago: executing program 2 (id=2753):
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x12, 0xffffffffffffffff, 0xe124c000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x4, [0x8, 0x4, 0x401, 0x2]}, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r1, 0xda90)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, &(0x7f0000000080))
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x0, @local}})
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@private, @local, @broadcast}, &(0x7f0000000380)=0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x20000000)
socket(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000100)="e9f584f2300b82e8ab4522c5a3bc374e", 0x10)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0)
ioctl$sock_proto_private(r5, 0x89e2, &(0x7f0000000680)="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")
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005d00)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x400c445}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
socket$rxrpc(0x21, 0x2, 0x2)

9.156403568s ago: executing program 2 (id=2759):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r7, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x82}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}]}, 0x30}}, 0x20004000)

8.439805568s ago: executing program 0 (id=2761):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x801)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2e2a02, 0x0) (async)
read(r0, &(0x7f0000000080), 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x8, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x20000}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{0x0}], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) (async)
write(r6, &(0x7f0000000000)="41000200010007", 0x7)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r9=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r9, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)

8.121838737s ago: executing program 3 (id=2764):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40b}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff)
r3 = openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
mkdirat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_type(r4, &(0x7f00000000c0), 0x9)
r5 = socket$inet(0x2, 0x3, 0x100)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4)
bind$inet(r5, &(0x7f0000000000)={0x2, 0xffe0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
writev(r5, &(0x7f0000002880)=[{&(0x7f00000006c0)}, {&(0x7f0000000780)}, {&(0x7f00000001c0)="7ce13b0f5f6fbc2814f7be4f300e126eb56f9fea5de0f044992e06dafa6fee314381743e31555f9f3d25d81386c0e025bc5c9dbc9644c30605226b147d8f7f6b", 0x40}, {&(0x7f0000000800)="f668fe32da97892565011e1e8f6a1fdb6e3191", 0x13}, {&(0x7f0000000840)="cf1f88f0ad9a15db563d4f89a4b340362495ffd88c22524c2b64e92448498916506c7943fafd07295bb3692573e3f07e393ed2eb27b080db4e5802bf2f602d12e967289794eeba53af04bbc38823b09c221d9e", 0x53}, {&(0x7f0000001880)="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", 0x187}], 0x6)
r6 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000140), 0x9)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000800)={&(0x7f0000000040), 0xc, &(0x7f00000007c0)={&(0x7f0000000080)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x5}, 0xf9, 0x5, 0x6, 0x9a, 0x10, 'syz0\x00', "0cacc484eda1bfb0c7519166e621c6d37f84c148a8d00eecd06daea3d0c9e6bb", "853eb487531096882c7d66ea3007645805d20d15e72197548f7d386eef197b1b", [{0x6, 0x4, {0x1, 0x2a09}}, {0x9, 0x1000, {0x1, 0x9}}, {0x1, 0x1, {0x1, 0x4}}, {0xdc49, 0x1ff, {0x2, 0x9}}, {0x8, 0x4, {0x0, 0x437}}, {0x6, 0xc, {0x1, 0x1}}, {0x6, 0x7, {0x3, 0x5}}, {0x28, 0x7}, {0x8001, 0x3, {0x3, 0xffffff79}}, {0x8000, 0x2fe, {0x2, 0x10000}}, {0x1000, 0x10, {0x0, 0x1}}, {0x3, 0x2, {0x1, 0x5}}, {0xf7, 0x2, {0x0, 0xadfa}}, {0x5, 0x7, {0x2, 0x4}}, {0x4, 0xa, {0x1, 0x5d}}, {0x8000, 0x5, {0x3, 0x4}}, {0x0, 0x800, {0x3, 0x4}}, {0x37f, 0x5, {0x1, 0xfffffffc}}, {0x100, 0x3, {0x3, 0x6}}, {0xff, 0x8056, {0x2}}, {0x0, 0x8}, {0x80, 0x3, {0x3, 0x401}}, {0x3, 0x9, {0x2, 0x80000000}}, {0x7, 0x7fff, {0x2, 0x7f5e}}, {0x80, 0x81, {0x0, 0xffffaf0e}}, {0x0, 0xb6a3, {0x0, 0x6}}, {0x0, 0x400, {0x0, 0x5}}, {0x6, 0x6, {0x3, 0x2}}, {0x3, 0x6, {0x1, 0x9}}, {0x3, 0x62eb, {0x6, 0x8263}}, {0x7, 0x0, {0x1, 0x7}}, {0x4, 0x4, {0x2}}, {0x8, 0x7, {0x1, 0x2}}, {0xac, 0xe, {0x2, 0xf}}, {0xc73, 0x7975, {0x0, 0x3}}, {0x1, 0x3, {0x0, 0x3ff}}, {0x3, 0x1ff, {0x3, 0x2}}, {0x8, 0x40, {0x0, 0xa}}, {0x7fff, 0x1000, {0x1, 0x56}}, {0x0, 0x5, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x4, 0x5, 0x81, 0x1, 0x28, 'syz1\x00', "e1956c8f4d7b3f6d40d45c7c34a3cfa1b0d4769e6106b2f9010ba8ac926bc394", "0ce38d6c40e67fcc17ccfce51a751826561010282f1e917fe0d0efc6876ee2d3", [{0x1, 0xffff, {0x2, 0x7fffffff}}, {0x2, 0x7, {0x2, 0x8}}, {0xffff, 0x0, {0x2, 0xf}}, {0x4, 0x7, {0x0, 0x4}}, {0x8, 0xa4be, {0x0, 0x80000001}}, {0x4, 0x6, {0x0, 0x5}}, {0xff, 0x274e, {0x3, 0xbe56}}, {0x0, 0xe, {0x3, 0x5fec429c}}, {0x1, 0x6, {0x0, 0x8}}, {0xe59, 0x6, {0x0, 0x2}}, {0x9, 0x0, {0x1, 0xb2d1}}, {0x8, 0xdc, {0x0, 0x7}}, {0x4, 0x4, {0x0, 0x5}}, {0x3, 0x100, {0x3, 0x80000000}}, {0x0, 0x0, {0x1, 0x2}}, {0x9, 0x5, {0x1, 0x8}}, {0x5, 0xd}, {0x4, 0x0, {0x2, 0x9}}, {0x8000, 0x2c12, {0x0, 0x9}}, {0x3, 0x2, {0x1, 0x5}}, {0x9, 0xb, {0x2, 0x9}}, {0x4, 0xeb0, {0x3, 0x8}}, {0x2, 0x2, {0x3, 0x8}}, {0x3, 0xffff, {0x3, 0x6}}, {0x4, 0x7, {0x3, 0x2}}, {0x9, 0x0, {0x0, 0xe}}, {0xb, 0x8, {0x1, 0xfffffffb}}, {0x1, 0x0, {0x0, 0x8}}, {0x101, 0x400, {0x2, 0x4}}, {0x3, 0x3, {0x2, 0x7}}, {0x4, 0x6, {0x2, 0xa}}, {0xcae, 0x2, {0x1, 0x6}}, {0x74, 0x2, {0x0, 0x9}}, {0xc, 0x8000, {0x3}}, {0x7ff, 0x30, {0x2, 0x3}}, {0x3, 0x9, {0x2}}, {0x6, 0x4}, {0x6, 0xd0, {0x1, 0x7}}, {0x8, 0x8c1, {0x1, 0x10000}}, {0x5, 0x6, {0x0, 0x9449}}]}}}, {{0x254, 0x1, {{0x1, 0x400}, 0x7, 0x81, 0x6, 0x9, 0x22, 'syz1\x00', "f1658cdbb2eb53b4ab85b2be5f8785ccef57e2aee8ef95527b2c4bc468833198", "d00847a4750c230f920f53238cbede1eb0c5c3611b67ce718d4b36f6234212e6", [{0x8, 0x1, {0x2, 0xffff4cc6}}, {0x84, 0x2, {0x2, 0xfff}}, {0xed, 0xb7b0, {0x1, 0xffffff64}}, {0x5, 0x9, {0x3, 0x5}}, {0x1, 0xf4, {0x1, 0x8}}, {0x7ff, 0x0, {0x2, 0x1}}, {0x0, 0xbc9, {0x2, 0x8}}, {0x9, 0x1ff, {0x3, 0x9}}, {0x3ff, 0x7dbd, {0x2}}, {0x2, 0x9, {0x3, 0x80}}, {0x7fff, 0xfffb, {0x3, 0x5}}, {0x8000, 0x4, {0x2, 0x7}}, {0x6000, 0xb, {0x1, 0x2}}, {0xa, 0x60, {0x2, 0x40d}}, {0x1000, 0x0, {0x0, 0x100}}, {0x1, 0xff, {0x3}}, {0x5, 0xf000, {0x3, 0x9}}, {0x2, 0x3, {0x2, 0xb8}}, {0x488, 0x200, {0x5e044f4fe612f8db, 0x10000}}, {0x0, 0x7f, {0x1, 0x2}}, {0x8c, 0x1, {0x3, 0x2}}, {0x27da, 0x2, {0x3, 0x5}}, {0x401, 0xfff, {0x3, 0x1}}, {0x0, 0xc26a, {0x1, 0x9}}, {0x5, 0x9, {0x2, 0x8}}, {0x8, 0x9, {0x0, 0x4}}, {0xbb, 0x9, {0x1, 0x5}}, {0x2, 0x1, {0x2, 0xc9}}, {0x3, 0xfff3, {0x1, 0x7}}, {0x6, 0x2, {0x1, 0xfffffffd}}, {0xfffe, 0x1, {0x2, 0x8}}, {0x1, 0x3, {0x2, 0x5}}, {0x0, 0x0, {0x2, 0x9}}, {0x5, 0x8, {0x0, 0xac}}, {0x0, 0x6, {0x0, 0x35}}, {0x51, 0x3ff, {0x3, 0xcf}}, {0x6, 0x6, {0x0, 0x2f}}, {0x1, 0x6, {0x3, 0x400}}, {0xe53, 0xfb33, {0x1, 0x9}}, {0xfff9, 0x4, {0x0, 0x1}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)

8.07463914s ago: executing program 2 (id=2765):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}, [@FRA_FLOW={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4c084)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="140001800800010000000200050006"], 0x2c}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000400)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x34}}, 0x4040004)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})
ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000))
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000002000000850000007d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_buf(r12, 0x29, 0x45, 0x0, &(0x7f00000002c0)=0x1e)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010700000018000000006700000008003e"], 0x1c}}, 0x0)

7.507245739s ago: executing program 3 (id=2767):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff02000000020000203c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000200000dd020000000000000000000000000000000100000000000084010500fc010000000000000000000000000001000000002b00000000000000ac141418000000000000000000000000000000000000fb0000000000493f0d510000000000000000000000000000000000000001000004d22b00000002000000fc02000000000000000000000000000102350000000000000000000007000000fcffffffffffffff000000000000000000000000000000003c00000002000000ffffffff000000000000000000000000fcffffff0103000000000000d62c000000000000ff020000000000000000000000000001000000003c0000000200001aac1414bb0000000000000000000000000000000002000000040000000300000000000000883a3496000000000000000000000000000000002b"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0)

7.119124952s ago: executing program 3 (id=2769):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x9}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32=r6], 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008014) (async)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='wg1\x00') (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
close(r7)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40814}, 0x8000) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) (async)
sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

6.958605157s ago: executing program 0 (id=2771):
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r0, @ANYBLOB="01980000000ab800060012800b000100627269646765000e004b00004a66c72acdeb8f588cd8ea88954956d3c0f1589602790e35920e8a90c92a66f44523eee04793f5e3711fdf6a702fe33f6f41085e734bb04b02bba728dc128d7517ef9a7f2d86f7edb6327c2333cdb29f7f4446a8c78a"], 0x34}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0) (rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async, rerun: 32)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) (rerun: 32)
setsockopt$inet6_buf(r4, 0x29, 0xd3, &(0x7f0000000080)="f036fbd05e51e1a41aec73c75abe43011252f748b8e787850527d9264b47f742a5b05a02da0d2d", 0x27)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000214010023bd7000fddbdf080800010000000000090002007379"], 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) (async)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x80010, r7, 0x1000) (async)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x9, 0x12, 0xffffffffffffffff, 0xfffff000) (async)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
connect$802154_dgram(r4, &(0x7f0000000200)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xec, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x199}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x23}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) (async, rerun: 64)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

6.01846854s ago: executing program 1 (id=2774):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRESHEX=r1], 0x10b8}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)=ANY=[@ANYRES16=r0], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008d0000000000000003fa000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00006a00000086000000bf0920000000000055090100ffffffff950000000000000018000000000000000000000007000000bf91000000000000b702000003000000850000002a000000b70000000000003e9500"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r3 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x8e, &(0x7f00000003c0)=""/142, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000540)=[{0x1, 0x3, 0x6, 0x8}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x3, 0xa}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0xab, 0x0, &(0x7f0000000740)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb55", 0x0, 0x3, 0x0, 0x8}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r11=>0x0})
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000500))
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r11, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r10, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r12, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="18000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a7ab04869600"], 0x20)
socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')

6.017754044s ago: executing program 0 (id=2775):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @broadcast}})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="04ecfffffb00e1ff3118ce2515000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000060010000000100006002030000125f627744144f70"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840)
close(0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x42, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0x7}, {0x6, 0xfd}]}, 0x10)
r3 = syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000225bd7000fddbdf25380000000c00580020000000000000000c0058004200000000000000a76935bb848b39977f0ad1c01a038cc9e8dd9d9a90e66400a427bb1a6053557fbee381f087233d20d5a81362d4267a8fb517ca543ec0899fbffcd6039d8c79074a314d93dcb49b16de0123149b88200c8699ceabc73fc6a6386b39683f97bfcd9bc97e5484aa0ff2c0302a5c7261925aaeb098f827d693c497e78a7ebdf5ede852aab06c02bd394b1d319f3ce6bf078c2b"], 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYRES8=r8, @ANYRES8=r5, @ANYRESHEX=r4, @ANYRES32=r3], &(0x7f0000000040)=""/238, 0x46, 0xee, 0x11}, 0x28)
r10 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r10, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="18000072a7b44da218ccf998fdb8000400000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94)
socket(0x1d, 0x2, 0x6)

5.99410219s ago: executing program 3 (id=2776):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x8000}}, @ptr={0x0, 0x0, 0x0, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x56}, 0x28)
r1 = socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004001001000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000005c0)=r0, 0x4)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f00367f830022c4556ec4456f46f96100bd2dca8a9848a3c728f1c56b7b31afdc1338d5e801e0b00900000056ea610db2ac3bc6", 0x55}], 0x1}, 0x4040050)

5.719483706s ago: executing program 3 (id=2777):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000c00)={{<r2=>r0, &(0x7f00000000c0)='\x00', 0x42040, &(0x7f0000000100)={@align=0x9, {0x9, 0x11, 0x5, 0x3}}, 0xd, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000002c0)=0x7}, 0x5, &(0x7f0000000b40)=[{0x1, 0x3ff, &(0x7f0000000300)='GPL\x00', &(0x7f0000000500)="29707a52d23f640bcc5d50f3d46534cace3ed6435d6983fd0996f8f5c6acebe88ab83957491a80136ee5c1acdd68b2618b744bf8c44acb4ddc81af9d1ecae9ee9ce8411391ace342112e60bd8e569456d702a2a6b61ce29afbe165792a5d2afab4b01a4cc4292e0cb06a02967723f64b8ca887324dee5188dc7484d87b06d99c159d8aee96bb5dd4e8c0fe98f4f29c0e5a0903393d9458f505ee7d6137c0208d8824272a508f321a57107a95b5eb9e630897c444977f603d5f425ac395b54ca5df3e4a0d0fa2435ffcca5c5cdfcad1db7b236cd33b116f19b0f4d3fcd776135ce00082c546642508b154b69a369253405cb208", 0xf3, 0xa}, {0x2, 0xff, &(0x7f0000000600)='\x00', &(0x7f0000000740)="68e65d99837158100148e0653df8d440e597def2705305f3f6983b613587d4b139bbe317027399e1d2ed08f35ae9d9d21c79fac14a5991fc94b9c7ccb6e5f832fccd4777cfd9c7296f8bd61b9e0c402bfa0aeba0b5f28773aa41cfca7af2d1d7957cde0f", 0x64}, {0x3, 0x5, &(0x7f00000007c0)='GPL\x00', &(0x7f0000000800)="acdb36ba62798e24931daee12559528a34297d8b390bc7f53ec0c540629665c357df3456f177dd344c98fb7e3fb39fe3eca96ff41d40b86dbdfd17753c3b31316e6a9fac527bf13785bcf28e7b39228b1dc6ba3442c3890bfa3f4b54cbbc0cf59b53ec70be17b4ded8184b3bafdc3b1713abc670c619b9f0776c517a41ebe17f8b85168dbbf1b987872330b491a27db9f015b702cdd264cca3209f6a30e82cf1b178642d8b06443f79189370d741e368545a", 0xb2, 0x22}, {0x3, 0x3ff, &(0x7f00000008c0)='GPL\x00', &(0x7f0000000900)="01fe757577a47757c3eceb5c6d479a490e3ed2f6ccdbc9ef04410af938e02ffd1e76857c413ac59026deb9614db5355803fbcb88eead0a4965f14a55f5a94d77f6a78397e3282b425d069c7d0e9b661ce00cc09c686c858494551b1865380c7a74c2cf52d2dd565ea9c2f633efcdeca716d87ca587424ee4e0f46201e4c2647f5dbb2888c600cab38b968fa319c41022d8248f1d02c122ffeddc5aafd5bf463330abe276ac9516169838d8c4d4046668a3dde0c7d7934fa6620bb582d9af26170be553edfd4c", 0xc6, 0x30}, {0x3, 0x8, &(0x7f0000000a00)='\xff\xff', &(0x7f0000000a40)="e87ede80da4016f02cf050d8c3a8aeb97f66dd489fe0d252bf1bcc6625275a69865d3bf82feadfd757fe1d6104cfba9af45166cb8d7183b52855d2b907cb0ca21f3f1bd63218c2c44427a1d72b518303126c1db7a2704c65d817754564b8a9f2e5cdb891e207f423380ec450b6f4a608f23c3d5eb0de103a8f036ac4856a3fe30a7c4b73830a92c4c050260405eeff02e76c10219c57482f80577311ffb6665f31e16802f33f8ecdaa74c056976f40b6181ea116ea93e8616cbce9f6a4f839a0645e9b", 0xc3}]})
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="00000080", @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf2501000000060006004e21000014000200776731000000000000000000000000000800050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40085}, 0x801)
r4 = socket$inet6(0xa, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000ec0)=<r6=>0x0)
recvfrom(r1, &(0x7f0000000dc0)=""/219, 0xdb, 0x100, &(0x7f0000000f00)=@nfc_llcp={0x27, r6, 0xffffffffffffffff, 0x2, 0x8, 0xd, "890633030d758763ae4be72d7e26e9e1a5294758b9612bb9d0150d3ca5801800696aa30e65e739af02c9422cf0eefeeaca845dc0d8466000c6076a7c9538e1", 0x1}, 0x80)
listen(r5, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r7, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0xffffffff000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, 0x0, &(0x7f00000002c0)=0x51)
ioctl$SIOCSIFHWADDR(r10, 0xff03, 0x0)

4.550515028s ago: executing program 1 (id=2779):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10001})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="462ec91ab4c2038aba767f8e5ba8d90fae0cb1491bd46054a7cff69afa014545caee351f08e95585bf0b2f54d0ea0b270b0696e5b6969085eee895aeee07f9dc5ffe6988a0f1cd0eba454c99ed9a3611d80ec8f7cae277cb44e6e54be82a79cc4302cbf5a8c45ecb97d67faf1d823ecc5ca71361d015c254620dcec8a9b9af309dcaa6f4be2e6e834d552e48f2bed30b17d82728151fbcdda485999313144ea8a0f29dc458f6d5c0ff8b402cb4786474e8615613cd2b1dc457937b41ea0fbd1a791f2a03140cba635f5b9a72f6154e6e9e0938b651f462583d1dcf67539c397927e399f4cb16316db59b552b2bfeada163f896c15dd9"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="dbdf2513004b00"/24], 0x18}, 0x1, 0x0, 0x0, 0x24044830}, 0x4c484)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c004)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
bind$rds(r5, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10)
pipe(&(0x7f00000000c0)={<r7=>0xffffffffffffffff})
epoll_pwait(r7, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0)
r8 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0xfffffffffffffecf}, 0x1, 0x0, 0x0, 0x20000080}, 0x20801)
sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @local}}, 0xffffff49, 0x1, 0x1, 0x6, 0x0, 0x1, 0x6}, &(0x7f0000000640)=0x9c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f00000000c0), 0x12)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b3000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

4.491677419s ago: executing program 4 (id=2780):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002003700b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90)

4.426867819s ago: executing program 3 (id=2781):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, 0x0)

4.010744428s ago: executing program 4 (id=2782):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

3.725921423s ago: executing program 4 (id=2783):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000a000000850000007000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14002e9510"], 0x17d4}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400006aaf7552c54d1cfe3000010000104000000000000000014ce2e86391f33d9621385452cb35b521c4b0589aa75dcf0be6b6aef483f4b6d3a5247d4bc10594b0966686c16180cd0eda549e9fc14ba318841a200ce72", @ANYRES32=0x0, @ANYBLOB="00030000000000001800128008000100677470000c000280050005000100000008000a00", @ANYRES32=r5, @ANYBLOB], 0x40}}, 0x40)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020004}, 0x10)

2.534280539s ago: executing program 1 (id=2784):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x12, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}}]}, 0x50}}, 0x4040004)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)={0x120, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x10f, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072", @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}, @nested={0x65, 0xf1, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @ipv6=@empty}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x120}], 0x1, 0x0, 0x0, 0x20000080}, 0x0)

2.377983821s ago: executing program 4 (id=2785):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x900, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000180)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x1}, 0xfe}, 0x18) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1000, 0x11}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000380)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', <r7=>r6, 0x29, 0x81, 0xa, 0x3, 0x22, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7, 0xff, 0x6}}) (async)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.time\x00', 0x0, 0x0)
connect$rxrpc(r8, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000500)=0xbfaa7d49556b224e)
setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000000540)=0x4, 0x4) (async)
connect$inet(r8, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8000}, 0x40014) (async)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r0)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000700)={0x36c, r9, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3bd8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @private2, 0xae64}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2b2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xca}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x48c2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc6}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x322}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff34}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x90}, 0x200040c0) (async)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000e80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b40)={0x2d4, 0x0, 0x1, 0x70bd29, 0x6, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x34}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "16ee5c252961267a217a959c005795d99dc4f3e43e211af38324792e"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "e2bede489eeb437ca791551cc843846eabfef591027dccaeba0d5678f7e0986a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "f7e147ffe01a3fe1961d1217e40597412321e308c43ddf98ee"}}, @TIPC_NLA_NODE_ID={0x9, 0x3, "92bb587ccc"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "6df6f1cf59d724b6dd92a9f91e1aad934523e2c9bd573a077f835477a4b6e5c7e47cfe93"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x61}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private2, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xf100, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @empty, 0x7e66}}}}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000001}, 0x80)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@map=<r10=>r8, 0x2f, 0x0, 0x39, &(0x7f0000000ec0)=[0x0], 0x1, 0x0, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r0) (rerun: 64)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001280)={&(0x7f0000001000), 0xc, &(0x7f0000001240)={&(0x7f0000001080)={0x188, r11, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4044801}, 0x34008080) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, r12, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x2, &(0x7f0000001400)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000001440)='syzkaller\x00', 0x2, 0x7b, &(0x7f0000001480)=""/123, 0x41000, 0x10, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x10, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001580)=[r8, r10], &(0x7f00000015c0)=[{0x3, 0x5, 0xa, 0x6}], 0x10, 0x4}, 0x94)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r13, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000040) (async)
sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000001ac0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001840)={0x238, 0xb, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x13, 0x1a, 'broadcast-link\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_DATA={0x7c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_COMMENT={0x11, 0x1a, 'veth0_to_hsr\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}}]}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x17f6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_team\x00'}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xd, 0x1a, 'pim6reg1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x238}, 0x1, 0x0, 0x0, 0x10}, 0x20000090)

2.255417795s ago: executing program 0 (id=2786):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xd1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x80)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3c, 0x7ff, 0xf83, 0x2}, 0x1c)
r2 = socket(0x11, 0xa, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_NH_ID={0x8, 0x1e, 0x1ff}, @RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x2c}}, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4)
sendmmsg$alg(r5, &(0x7f00000025c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98842fbbe56b0438f46affa3becb758c2e56d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157652c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b482418", 0xce}], 0x3, &(0x7f00000008c0)=[@iv={0xc0, 0x117, 0x2, 0xaa, "945a83a2ab5f710f83cccf0580ff4fc6125588ecadda9778a416b8d69400245561aa7db184ff9f97d560fe6f53cdca66c78f06a2ebca8bda225271f18eede3786ee9a759dfc9e3096ad59f39ab4d4954818325864be9db09b89632ed433ba34cd7bea3ac65141d89488b85e0c43eea3fae9096cded963e5d28d557c81a8fcee2c4560dc3725feea04a829007f9ea9ba0c00d0f319da1fcef19122b0d990379101677d69aec9484ea4256"}], 0xc0, 0x4040000}, {0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001080)="9f05310923634194359f69879592814898107eb13c554bd2b4573891909eec82d7aee3261b63c13e638bea7f5aa839a9b2a3ecfd48592f277f0d6b24a43ee71e110ea21c56022763df6ea074feaef677ad7de44a87b651675330a7971f26deac6af516c14f8df4e5669e4ee8346f27442d1be48c23a08ac68e9e32279072b7157f1c780c5601fae3796c6f2008a3402a3e5ce89c8818d6efc101329163b4dcb89f823ee900a283f9be65d70adf5b787edfdf4dcb121054d10b456daebf194c52ebf45a39e8099e8a8829e5a2d8b64fb478b069680988c9ff96a3d3e5fcfb38d1ad355290ea859aea55b4821cbb0d517b5b1cacb0a52bc50479f7c80e1b43bebe6032757f5fbc74249631440d041c8692f3a1521838fc4b615add7f56fa50a2b72c39e5b3eed8cbf7f6dad857e2540ef91aff185cb52e6db9fb075f76a58841383d4eed26ce2e8674f6d64ec0176104828fcb9fec29939429aa19a94204b17ac06b064261ed9d9c7f10d181b892f04b6f9b24bda0c09386feef6f191a83b56e1973e80150905b94f5c6325cfd9c1da0aeb2eb4888032d749d43343c7a9c4301ecd63e9294d7edf09d766c968c1505603b29af060bb90522824985782c92cc08521657846384e8a455f660a7182c719d4bf282caba38585d6c54eef174a97ba11a3f52d2bcd9fa17b6e20e12bc8c55db02b5b7a027302431e834a936064242583b5765d442e3926f00a8c6ce87b1c8a8d3dcea7a00044081b30ed6dfd4a4d2091cd050ca276f0116db2f3da2d663bec201a6cd846743f5d2b693979ae66713f2aff509182a88c3c871330c1ed64d3f75d6bd27914368dfd1cccab65192ebfaf3a387c1d4c24f6b28c9c913a13ed486f913d0e9b87eb7387051d7486311567f73221e7e4bd90381d1ea8adaef73c3bc5e20bd5fe649aabf8314023156003b833cb1bc55089e8b2b90540be3a83b2893baaf6aba88194b295543cd1d03b5b2f3b2ca3140705699adeb8821986dac9cba10356efae4a8040eaf32f32888388ae4861c686b8e21bc323bd7d8c40ef918eaa6e07628ef5bd4afead9b814a07571690e7b84f3a1a0c9b31ef04e0bb41661bac1371aa431e65338647b4615758ea0fd1b93c73624630aa3ca09dcf478b88af48782cd39b8d3b03900ad7f02229ed19c907037f85e6eeddee0286a16b456f3b88f4dcca1babd564dc74268fb1a391a0bfed60832a7f000dd0467fd0fc355af728ce645dada0dbf9bcc83a7486a9b8f773e264db59da6578230672bafa0456664788d2136db0008713bcdf2e95194fc05f49c6faa86b47830347aea50f26e624006cc7d5c4132321f543b6db426adeca35326b6ac1c76b7e7a865154fd696a6fe634defeee030e920acdbf83bb3f0610ad4831e6f4b7504980475654f2624552a923907b0f3924e31cf7f0b153eaa3d19d77c1e08bdc749c54c60454ea1b67bd2a5382a8bfe5ba6ec366775c63747e2690dd78f9f08b5cff78d5bdced2ea1ff3d490d1692f15cbb670f1ef8ce6921332c0ec7d5a0f692cec8f0e3bb91bfaff4ac9e4528d8208e921fc714d1a11df6984bf3e6b3a0e49d50c64e70083783cc01c2dfdbc08233ab308191133ddde36728b98f5d370f02490ed677fcc0491ece5a5178e4f4d11de19c2939c4ffc695075958146e97396064c4d1e26ed911bf9ed471dbb1c300edef9349fcff303be3dd6955e48d8d521e919d5be81e4f0ff3fa34e6b6230f6e2bd3af283980ae78612c15192081cc3bc8e4b2bb0a36b5e7af77adc02b91e305b9f53587ad07a7bb5061a792dc4f8e104f7ebddf85da63b450673ef7c94137a72108f09e081a7e490353a92e9dd6789ae19809927557ffe272d302f29f7bd273470cc37f2a81846425b886865ab178a5b3ae8ef73ee8e307c8810cd90d85efc5fbca41b8a2a8f75c07301902272338ca79e941b10f151f86b77eb159830e8be48737d6b54194867ec523ca1d56a711e4e63e4ffb8b6d07b5956e5caf3b5c97efe3b2830f83f6ffe3e7f06aeac2b0dd52400bc07c51a3dbb41c89c0e9a6e11051f7b7b18b134b6af44ad9aad347e3e46af1eecd98b1fa0ef390934ff53b2968675fdd2d69de8f66baaa8271720c04d8ad158256df8f642f4ebec8918ea742b7a83cd055ee89fd20067cab7ca15c9a3b69b9322669029758992ab2a2ad5e59abcf42819e121af38f89613c0b911d7fed531dd9f099041e6a54dfaa510c7c8dc558cbcbb8b66d6d92b2d3d4ddd675beeb1de84ba5c8f58fd1aa887be318bf62626c3701df5d774afd21b2059be3552b8dac8c458f8e18e7f699128302be3a51ae37251fd6771884db57cd99e8be3112ad9399572f63101d82b41fc560132a6d390340a2a65f1a843c70d7c89b6a7610fc8d82b17b73f23e88be93db9d0830eb88fde0d22a87902345f8abb4d4b3cf5981f4ef487d00fb1c83edc04c9c89ae0766181622705eabeed7f15bb94cde5372396ab16eb4a4669fd9858805d4ea5700d5f68fb1ac8fa48f2ac5551720a6fc3e7c180c00a2375c620edfa5511c5753209a29594d7c226832d23b769308863becacca61dfdd87306a0283839522c2b42dee1927cd012919b296cb81f5c3728e48c88e3c7e87c2ec235542298095096858c3a5131dd352cf9c4b210c300ec0674d72b1ebf5e06438dafe4d89f0fd64248cd3afb47ce498a99630faecbcb19f95b3ec90d02eb14bcf18674e2bd08b873a0385f4a05dd659e59482a86da64bbbc5a312ecb1cf9ae548fd8b04f2e3a2a8ef65d5f858c3691d1bea9b8fefacdec42c69b501e72283399cb0a9fc775c0e58c15a3e092cc5fdbe95819a48108a69f330c0ec4c56661dfcccb2a46c60b868873bea621c1d347d379a6583c176f3f0979b345215014f2efe338044474e1600c7870c9074cfbe8cb583c65759b94f24643a388b8c1826e52d1c772663cec68943afa3530ca88e49bb169724ad05f5082fc68ddb049b7dac918d4801549313836bb445f1045e926c10c00c29d1eda522f2a3a3c27dd73987d5ea273575d4aedd6c19121db4338907fb58c863608994811ae312e0f188a415e8b613eb10a43ec92e2c5b0bb75b88e41fb862ca3a2209a6014625216e3f4625cbe9b63e0a2450be0a1d28104aee902c112f451e3d0a8dc7f7d47d12623de85282051283ad13f26b1916daa1db21bd999cbe770777955f1b3f6a6feed7605b290ddc1836ba0e719e94606ac32ceffdc6378008237c35fc22de983878e4cd99a870762323169c13fb2182233232e82cd6be217878effb23c9d02109017fbc4dbf88d206b417a655d9d36ca051a2ae8884901bf469821c1ba5dcb6e90e057a5c32af5bf01dacb2dae0602f9b846ab6470d5121b80e576cb4ba7fa9315efe0500cac872ceeccf220afc76133ecd1bca535cf008bc63ac08dd341959c6dc7e94101038655a4be7f6ac563648d22b07be8ace2e9b4ddf6c0568b15777f5e94835e24bd1420ea4f4bbb8120e590aca358c1299f56834d84a3b321125588fd9fb3fcef565eb2e92a82d07f2eb84a82cc7de2280fb19360c706ac59200cc026b710ad30869b425c5324721e75543f0638f3537b40ea25ec0a360592c6338725675fb89e20e340b0d155fd7a412446e30d0a837b6c45a11b213c37bd8288a382519546c65736ecb74ef4b0a7c8b2b5f132d45ba0c540a6d4fc4a210490a9458eda809cb845043c061c93a85a3e1c718052c39f893cd15deb1939fa3717b9482b185bae44540d165ff5d6d6d7c428c39a52ebc91b64d8fca28a61f476f37ae9fcae541b08079672e2032739120e4bdacd2840dddcc27cf8a0851ddfedb1dc423d6c7846b1b5b779ca2738088d3669d68fa48dba1f20bde6cdf919addaab5b21c87a16e13e8831c9daaadf9189f2b3876440d8547ca4e2d4e8e1c3dae21d6fe6599b56cf30b370f0446b1af33f3bf5cd8bac7f9eef2c1cb7f5fe83bee222d7b645fa3d55a039dc5e169e5f41f63498b48bc4406289a1153534817a226cf798f56d06eb9fab9bbd6debfc6052f94ee022b1346d7ee0824ea76420a4f6749e7fa1a3674886ec8e96c40275d3640a5a9745885dca5d0030459663c96c55d633b1940fdd2c5e26809f039f54ea79bc4f49fc7b599b290a267b94a54fb81373e9d4b8db8627b7b19895443e1cefcf81bdbd80041786ec6419c6dd0b13d4d186ed7cdcbb14ce13f8d2718ed36ba2cbd5e0bb8488e8c0e92bc3c1485f30e273a087c97fb66ff48a56a65dacb3b029c9753bdf3803752f5cb03f0408049b28a2e31f8f115f5d81d967f2fa8793684c994e56aa82a6c58403a22a684ee714b19608a6ab44521f0a944c034cf6f731ba04dfc7c374599ebb66e506cd29d2ba4170544bcd96544fb13fc8e8640e6fb751e94125421bc1daf913af6d2f1e34e298b973060f16e9d1d19e057bd49b0a98a2b36bc8cd85ea96bab3d7d6a482de488b662a4dd1bcbcd816687de3710667b9c6e6a6fa8aa4a10a60a7ca6c31ba34cb9c97fc34e2cc4e00a06180411332e3aa006fdc369fc5ebbfe1c88d023f6a30883df4502af34c5a84b44f217845ccf9aecc2f0fa35f0d3f8eb45740da306c981d65e9e38f38d6ace487054d28ea114e3617ca47c94b63c292391fff3fa2f02715a490bce025cbd66790275456a1f60b2bc44ab13efa5c39a02b6eabe4fb9b1cb1383a4b1a98e7ef1f1c35b9699432661f1d4edc728d3ae8dfc929c509fa1af010df84b03af98bfe708fe9ef16d097c4a25bdb7307d321e72c942dd4abcd5ce033824406b11b9ba728aa29c7105d73895fd5c7f568c39ab35970c0ca2223ca999e4784d6437f137017fc6afdb424bb212d8a71aac2f26d810d3aa0199328a587d1dc33ee3ffff7bb9caa0c3377da1da6952e85e6dc67a400ab8f80f3cef88753889074fe4be8333d2436ce5713c641e003ec484ee7608baa24d1b47f770ea98665f49262c1375eda6bdceae7dfddcfc1728722292d7bb430480d913bc8cd8f60f6498bb41c8226f9fa59faa88473e11d16d5365e6a7029e36d4404312b33bd09e00d5b282e1bb57107b414412d63cf06cf7d0e2b06af11c0b00838098aa1f3735892cdc6a5e233aaed6a2fc022a6adcb19da54c09f630d011ddd4028e32ed532fd553efb0219327f7905fc20df3350b53cccc09aa133b2612b2c4c442f6f34983ae5ee7e90bd15a9bdfdccd417292b0c4393275c99b7d8a22b7ed171baddf77572adeecd786956ad423cf3887d91986ce9cb2d69304bb1d2a4a0497962961f003f5ea18bf5e35185e249850cc859f310064bfc4dcbd1c2d9f7e81e950b96a48a6b7a168610a42d53b08d5fa7e07d76535d4cab8cfd75d8693b039757298a129b5e0a73671bf9c9b4d0a98dd25efbb139715625b243e26dd6dbb2d6fce7feb4695b0b355151b6cabea7ac757c76e82d5bc61f0cfe872b4b34255f04fe7199fbec7ca9509d63dd4c0647b55560e3abe0298b22da871209b4d5d3fd596f7322ddc37fba8744f66b4964a1452196dad92a010738066de55e52e29ad7b1e11c7a4011fd7717eb338922d17d60e5a5e861d553a589c250fbdba5e572d7b2c6ce22193bebd853524625b64932156df84252a2a9d14e20f6a09a40834170119f45da81dbff3dc1de74dbf2da7cde6769d6e61f6ed5f7440a5f80a6aaf6a303a73082f391678b124fbcdf41eac662e5c2b9b6b7c214dd24d9888e352a8e60a6f2d09605583f813adb7ce521651347471f213730b7b9e3e15fdec00a6544619d4ccad65f39c9f654719a872f9", 0x1000}, {&(0x7f0000002080)="9fab339dec845934a1cc1dd50ff806c1bfc8b207e83506871de35e605a7011046e4cc415b6e639ed28e19180d8403d8f11e2e731ce67316d6f7094903af2fcea5edd3543ff4a8a608f1b5204ea6b8a5765cca87e31a0e626024899acf5aa6bf28df44eb710f8efb922e8a4559d2e9b56a6057dbd53de6734068433f76835f92a7e57d6bfd330630a8e2c55326c416724e41172785afff1049231fd319b9994d90e", 0xa1}, {&(0x7f0000002140)="fbea8cfd87312373d2e06b92286c91b7e5a54c475e4c7652a6498b3772ac06b8f37348ed7bc0785817d69a7d4a0a0b13c2a7ff3aa9d32df3b775771e914846902ff136cea7b273eb7d6055cc0a9b5303760065b7fd7332045ecbec96e55a6cde65585c63420436d5", 0x68}, {&(0x7f00000021c0)="c3f159167b43a326c196ac0ef21118ce0040c7a0183cbdffbe56f540e5f40baa867607eeedcb978d705fe87d2dcee3d91ab4009efac8e4c98c92ad9772fdf6206bb8ddc87bd8affde075aa88fdef6433e21fd34e7e3b9291b50f74fc4def4b9abadaa6930c7fda8ef99060bc65b91983f165e0c37f56060c0fa627208055a70a8f21b085b3f7ced8d75af4e0eb7c8094809192a41289ce7f57e3e7162c5b4914b2eb", 0xa2}, {&(0x7f0000002280)="87d25b0ab0c0c3518ba8eec6f0af8ae6f23d4171561b06d5aad4c5b8a455ce9977b1f87e12dd1bddeb392c", 0x2b}], 0x5, &(0x7f0000002340)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x400}], 0x48, 0x4004010}, {0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000023c0)="f1d674a65cf67e9cb4c9fc270aee89a5f4dd0a805f10f8548278a6ffef8dc4929c917573591f8f609af7223d2d4a27f59c34d1ad7625485736287f1c78897af96969d6a26d4ce8248114", 0x4a}], 0x1, &(0x7f0000002480)=[@assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf0, 0x117, 0x2, 0xd7, "98bf17eb7bb50032e49eac938097f6f526f2abd1db37b3411aaf996dd557be004f08079ebb4af2b8c8b7da22e095a5f6a894d44d1192e787737b803ab75b725191696d56f484fd812f67f2acf9ca5707d8fa4d3a10d6b26ff482a07c940cd6c73ca1a63a8dc124778c7df25515617f26ff95cb6d6cddc5597248f689126f0aa3ff430f7a14a1c9dabb86ab6710881f535d108c73e88f35a2db1b40a2e413cfbba9869e3e57ec4ddc1f5685d9684481fedc6f38fa30e2ef3d1dd3f3d34924e63f016ed410a77d183dca8540d7690f2a1df5f00afaa1873a"}, @op={0x18, 0x117, 0x3, 0x1}], 0x138, 0x40}], 0x3, 0x801)
recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x104}, 0xe)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000600)={r7, r7, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000340)={0x2, &(0x7f0000000380)=[{}, {@none}]})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newsa={0x160, 0x1a, 0x2, 0x0, 0x25dfdbfd, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, {0x323, 0x0, 0x0, 0xc0, 0x4000}, {0x0, 0x0, 0x10000}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@algo_auth={0x54, 0x1, {{'rmd256\x00'}, 0x60, "972869798e1209f7bda4d38b"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd26, 0x70bd2d, 0x70bd2d, 0x70bd27}}]}, 0x160}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

1.826283754s ago: executing program 0 (id=2787):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x1, 0x4, 0x2, 0x40, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r2, 0x2f}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x1, 0x4, 0x4, 0x0, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, 0x1}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000062010e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r2, r4, 0x36, 0x18, 0x4, @void, @value=r2}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x4000)
r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r8, 0x80705864, &(0x7f0000000300))
socket$kcm(0x23, 0x2, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002900)=r10, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)

1.630628959s ago: executing program 1 (id=2788):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4)
epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0)

1.47843888s ago: executing program 4 (id=2789):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfffffffd) (async, rerun: 64)
r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64)
recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xfb, 0xa4, 0xfd, 0x0, 0x0, 0x1, 0x28, 0x0, 0x0, 0x7, 0xf7}, 0xe) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (rerun: 32)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
listen(r7, 0x5) (async)
connect$inet(r8, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) (async)
accept(r7, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000020), 0x4) (async, rerun: 64)
setsockopt$inet_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) (rerun: 64)

1.139249373s ago: executing program 2 (id=2790):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket$kcm(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r3)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000036ae8eacc76df2e842a397e396222118b9b9ca3cf4a6bf202e233817a1626f63db91ded5dd5be8d57f6b9a8450b5ae9e74d00b06ce69490c580a9a", @ANYRES16=r4, @ANYBLOB="01002bbd7000fed3df2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048855}, 0x200408c0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in=@private=0xa010101, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x62, 0x0, 0xee01}, {0xbc15, 0x2, 0x1, 0x0, 0x0, 0x3, 0x200}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x9, 0x3}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

1.03864888s ago: executing program 1 (id=2791):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000)
r2 = socket$inet(0x2, 0x2, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYBLOB="04891404"], 0x24}}, 0x0)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000002000)}}], 0x2, 0x2004000)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c010000130a0101000000000000000000000001fb0008000d156c10b6c7f913713610de5a21ab5b5f7efd97076ffb3adcbc37e63457b7d12367550586d162fb12205f302bb8ee2b4746550dd4b084c88e4a5ed0bdebb37497f12b4fb1f3ae38492fddc8aa3cb844330ddb830aadd84699d0052443391cc83d46a96c09576e6878c158e68279daad764959fea21db9a4abd7fa7648c21babff822e9efcac58ab73ed95ac257d4e341026fa4516bc71469833a31147c482094ee2387776f960ceee27bcfd19e2f9fe1540ec6e61f0d7d8836f286b560d55b85e8d3aae4afb83601aefb9f109f1d66899a97adb567e78eaf44fa571acfff0cef62ec97584e68d724342497c0af45dd65807b0a3015fd9005f7eaced6e04c81d96c0f40008000340000000040c00064000000000000000014c000800ec7db93c1f9f463ad1896f593e257eb1482b46d1d326eab07778c6a88285f2a3d15ea0848b9b304772be274f23dc1f4ae627b9792e0fedb9e4958f9993978603eb79f13034168bb20900020073797a3100000000"], 0x17c}, 0x1, 0x0, 0x0, 0x20010010}, 0x48c0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200))

214.653559ms ago: executing program 4 (id=2792):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ec0)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x558, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_DESC={0x474, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x19c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ee4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x524}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff896}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb6000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd07}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x204}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x232}]}]}, @NFTA_SET_DESC_CONCAT={0x198, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x394}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3bc2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb657}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5ea9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd238}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5411}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x53a0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ff4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x221e}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}]}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_USERDATA={0x90, 0xd, 0x1, 0x0, "7624119e4ed468d8226cde80d3ccc6c74414764c117bbb147f7be9f5b9610dc5a97d3ee212eba1bcdfd676477fc0a6750060b7576d87bc0bd314ab5c81e25d8da9978277fdab50a7de00d0d583a1983045f789b034ce046336ae55b8c4e8fda48677f0eb92113c717361539589e92110204b8e82f387336448d1305ae76897d8934bdd61caf3f66f1e2a0b40"}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x2f5e49c9c6b4049f}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x27}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x81}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x5e8}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x4, 0x28}, 0x50)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000f00)={{<r4=>r2, &(0x7f0000000340)=':[/\x00', 0x224440, &(0x7f0000000380)={@align=0x3, {0x5, 0xffff, 0x800, 0x8}}, 0x7, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x3}, 0x5, &(0x7f0000000e40)=[{0x2, 0x9, &(0x7f0000000740)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000840)="0ab901a43a8c738a41e4f5c3852bb2d002992b4b7ff6a852a04e0ffd2f4c1ff6266066c4ca63f94e8d86a93e9e99725ae58e31c0939f28e8b77b6bdb227943e2bdf9de696df55a48f1c0f072777082cc3e5d32ad91b9978596e67bd2adfee2a6f10b6da9fa0794b291a7c5cf6ebffa6d4fd7e248ba1747fe605c94268bf5f7f00dabbd7cb3959c84a7ac959a957f0d73460e63b90ba9ba7620cbd7dff2c54080e22689ba99006568b261e2156d7c559352aadb476601664fca1f48ba0e6dfad9c167e9114e562cc72924cd14ab9dd1ce4cf88a224c93ba3087dd00572f241c49ded7de0621", 0xe5, 0x30}, {0x3, 0xc58, &(0x7f0000000940)=',]+\x00', &(0x7f0000000980)="e3b8d44d6a84516eece8d151272873dd7febf3d485162808192e27f21b1f8dc2662ce687e037e1c747b4907be615aa368117cdd776ea5adbd103714a5f693b044cd4452984d5906f89e2eba154f69c0c7c19cd7a4d37a2b107e247bf2af18e1006d5b3010db3bc1e2ce41b315ddc0673ac0ad40066fc62c9942ad262d5488d716c092fc7b90d633d5c8807250ec5c406d12ac25bfde88ba348d9d936d60bf586b3a73fa6918df0f33c0b108b7e8029dd8d83272c226404d0cca17469008a6427", 0xc0, 0x18}, {0x1, 0x0, &(0x7f0000000a40)=',\x00', &(0x7f0000000a80)="b4764e8388bc2532cb500bbe42fe9fc0ff456d0fa445ac16b650529cb723b7a06e86f5fbf2241a5f84469ffa405d30ea718b1cd24126b4d8c69852444927856f1e9d87d8ccc294a890e877a3e0fd5cc2bf2bae89d7c70ba3eb9dc0219ea73dbe9369ace84665b17d7ee218175047833a2590127c48767a42e38fdce06a264d610e91ff78e972b3a00d923f2199e0b055e4b13159d3b2448c4be0fbc0d5540032b3139eff6fbdae225c93f574707529e8750ae9325045fb56667092041f0df7921b35d26e6b58e2a60b87c78fa37b1c9a2312548f6f97e44878ba858614db6e3549f69ae25e711fa384", 0xe9, 0x38}, {0x1, 0x9, &(0x7f0000000c80)='ip6erspan0\x00', &(0x7f0000000d40)="8f453e566f79f4ab21859958cde744c1946814c3099f4bbb85ea0c24abb000a215b2ea64379857f2fdb7540307eed7e9299462f6cbe682499595f627078755b78637baa41073ac62e8e5e5fe79ae637075cdabf415a06b87970a8a584e78a0199aae3caa1d8f3855f32712d0af3a70c1a160468c27d0", 0x76, 0x22}, {0x3, 0x80000001, &(0x7f0000000dc0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000e00)="413594a7288103a1db9229b2cce4ff0d97", 0x11, 0x48}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000f819000000000000a9ac8b65d08f5b", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r5}, 0xc) (async)
r6 = socket$unix(0x1, 0x1, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r7, 0x0) (async)
shutdown(r6, 0x0) (async)
connect$unix(r6, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r8)
sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r9, 0x601, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400048c0}, 0x200000c0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0)
r10 = accept(r7, 0x0, 0x0)
sendto$inet6(r10, &(0x7f00000004c0)="cf9ed288", 0x4, 0x940, 0x0, 0x0) (async)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000000000002004920e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14142800"/528], 0x210) (async)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000018c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000001740)=[{&(0x7f00000011c0)="2159080014b0d73a0613e9b12ed82dc579b7bb30d90cc0f2881b7b1f851cb30abf9c37e008fd79a16707c544e97b0576cf33ed8a58da2652863cac776363d9bef955681a486cbc92554c89f80f78e686a952", 0x52}, {&(0x7f0000001240)="4589a890de368850a8f6b69d526ba6875418ab843e86081e71e3a562568a9f0d25e4e54f0177435830debd6c74eb16ab32c30acc", 0x34}, {&(0x7f0000001280)="c2cdc28a4ec0da2dbe5273c952934d3415ff38b713445e8dbd3f0285d24c79fcf76fff247529f01c1c0b76d49bd1555ffd34570ce155e8d31348bca457123650", 0x40}, {&(0x7f00000013c0)="cd8a99c2f229c7e075966be0faf39956d4af62bb5a15f986fbcd7527b326e1c129feb3105040e75a4d0e787bebd23c6ef7e3e328c44654dbf211d0f73ca698393ee291f1ed488d6a5cc01aee58e777cfc8a7d829dbd35dc9e50a5a7e039898711a204e9519760392238fd5fe3c0e5f0b4ab526a2677f04fcabebde0994bb24f742", 0x81}, {&(0x7f0000001480)="076604f2a69e79f83af9b28d99710d8a19ae264340fc93e6245f3ad18b19931e5128d0e9aea2ac460d5dd5f71a5f0666fd4b6f0ec9cb4d7a26a6c9a6ab69618a8c8233c9cd9525e142e0db6771c7f9de6a6513469adc224388a4d7a198fd9f", 0x5f}, {&(0x7f0000001500)="c9c900aeaa80795380ff1587605d4f68af162e2459ba67a033c8fe35635989afa6716e713b1244e7dbfb6ae0abb429c731f8d61b8ec24dc8fdc454cd8ba37c7983b4832d4631722238daa2a3a18d383739a2c27b1f14a1b1dfa5da6d035563", 0x5f}, {&(0x7f0000001580)="5348b17a480c43c8ff4f902d6dedc26301e8badad49b1c27c3c653cac6cdd9b7ce979499eabad864d4e675391603310ceb9282151f7533d4831a97c6ebbbaa8629270bea7ebba677189cdcbe74b73d3ef8ba882b2713267806502c3d63266f19cb5c78b36b41124591285074264ea17151b668f02f89634cc74e4d91bfd772c1950577c5de898087a001", 0x8a}, {&(0x7f0000001640)="f83fc51e1a1e1df1bac76110c4485012afeebcd67912aa94309a8e3feb6845f38278754d3f35b39feb3725616c11ff6a754c95662f9c9d13977ef13573207a05bb72b03d013a7bd412aa66492bbbd8727c3afb4b6a69c3d84c00b4d7982c1861bb7b0887d0a74229e2225c50cb94bea944ad0d3e93d17e12d608ec873055d668aca951e1667f02787d8d11539912835634ce38fa6cc8b4cd6ef2f1d72581ade0bf54d58544bf47bfcc7c026387f7c57afd5e7e1a640e6ee85be42ab766435b0c40969d98fa1e479116f5e559a98dc9060222", 0xd2}], 0x8, &(0x7f00000017c0)=[{0xd8, 0x10f, 0x800, "f0552326da7b4b04b32d65dfbd69ea29e1c50127b4a4ff8e94ad01eef1b410c4d41ead730e0c810381c35b5d60d9e3d6ebe66497135916a34760d31d4e62ff39f32fb8695f370acf0226a7d209b96ec36c2618f985421074e2528568d20f4bda831660b4aac243dc3e2a5a97fdacfc3885404562e37d5caf791b2d4309253e86c2d4d86eadf167b0ee99b276045b782b847cb731502196a9e138e4b129e427595adc32984e381e469f0721eb89df850e1d18c21d78c4e95479f8f1ff4d3c4a882d"}], 0xd8}, 0x1) (async)
sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

0s ago: executing program 1 (id=2793):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1)
sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000015002927000000000000008b0500"], 0x38}}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
pipe(0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, 0x0, 0x5f)
write$cgroup_int(r6, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r6, r5, 0x0, 0xf03a0005)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000340)={'batadv_slave_1\x00', {0x2, 0x3, @private=0xa010102}})
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a00000005000100"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800)

kernel console output (not intermixed with test programs):

][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.430615][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.431007][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.432680][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.432835][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.433081][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.433465][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.433638][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.435289][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  276.447815][T11823] xt_CT: You must specify a L4 protocol and not use inversions on it
[  276.943816][T11841] batman_adv: batadv0: Adding interface: macvtap1
[  276.943838][T11841] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.943872][T11841] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  278.094359][T11889] batman_adv: batadv0: Removing interface: macvtap1
[  278.325293][T11881] team0: entered allmulticast mode
[  278.325320][T11881] team_slave_0: entered allmulticast mode
[  278.325338][T11881] team_slave_1: entered allmulticast mode
[  278.326185][T11881] 8021q: adding VLAN 0 to HW filter on device team0
[  278.353147][T11881] team0: Cannot enslave team device to itself
[  278.533742][T11892] 8021q: adding VLAN 0 to HW filter on device bond6
[  278.679874][T11919] xt_LOG: prefix is not null-terminated
[  280.068331][T11973] 8021q: adding VLAN 0 to HW filter on device bond4
[  280.245090][T11969] ±ÿ: renamed from lo
[  280.492502][T11998] netlink: 'syz.2.1496': attribute type 1 has an invalid length.
[  280.513840][T11998] netlink: 'syz.2.1496': attribute type 1 has an invalid length.
[  280.601950][T12003] x_tables: unsorted underflow at hook 2
[  280.605244][T12002] x_tables: unsorted underflow at hook 2
[  281.054091][T12022] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  281.054123][T12022] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  281.112713][T12028] sock: sock_timestamping_bind_phc: sock not bind to device
[  281.385085][T12037] netlink: 'syz.3.1502': attribute type 11 has an invalid length.
[  281.385108][T12037] netlink: 'syz.3.1502': attribute type 4 has an invalid length.
[  281.385122][T12037] __nla_validate_parse: 68 callbacks suppressed
[  281.385135][T12037] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1502'.
[  281.421948][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1503'.
[  281.855031][T12046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1504'.
[  282.264804][T12064] sctp: [Deprecated]: syz.3.1508 (pid 12064) Use of struct sctp_assoc_value in delayed_ack socket option.
[  282.264804][T12064] Use struct sctp_sack_info instead
[  282.265321][T12064] netlink: 'syz.3.1508': attribute type 1 has an invalid length.
[  282.363745][T12064] 8021q: adding VLAN 0 to HW filter on device bond4
[  282.491413][T12069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.534459][T12064] bond4: (slave geneve2): making interface the new active one
[  282.538021][T12064] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  282.541215][ T8133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.541433][ T8133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.541547][ T8133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.599974][ T8122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.791179][T12080] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1509'.
[  286.873025][T12191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1529'.
[  286.873064][T12191] netlink: 'syz.4.1529': attribute type 7 has an invalid length.
[  286.873080][T12191] netlink: 'syz.4.1529': attribute type 8 has an invalid length.
[  286.873094][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'.
[  287.343219][T12195] netlink: 'syz.2.1530': attribute type 4 has an invalid length.
[  287.366220][T12207] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  287.366250][T12207] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  287.436143][T12213] netlink: 'syz.1.1531': attribute type 1 has an invalid length.
[  288.933027][T12251] 0: reclassify loop, rule prio 0, protocol 800
[  289.064531][T12255] wg2 speed is unknown, defaulting to 1000
[  289.434527][T12266] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  289.434556][T12266] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  290.627880][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1545'.
[  290.998726][T12295] netlink: 'syz.4.1550': attribute type 2 has an invalid length.
[  291.171353][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'.
[  291.210563][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'.
[  291.585457][T12314] netlink: 'syz.1.1557': attribute type 5 has an invalid length.
[  291.585482][T12314] netlink: 'syz.1.1557': attribute type 9 has an invalid length.
[  291.585498][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'.
[  291.897188][T12324] xt_hashlimit: size too large, truncated to 1048576
[  291.962333][T12327] syz_tun: entered allmulticast mode
[  292.289062][T12351] netlink: 'syz.1.1563': attribute type 1 has an invalid length.
[  293.574473][T12374] netlink: 'syz.3.1567': attribute type 3 has an invalid length.
[  293.574632][T12373] netlink: 'syz.3.1567': attribute type 3 has an invalid length.
[  293.709804][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709830][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709846][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709861][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709876][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709891][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709905][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709920][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709935][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.709950][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'.
[  293.858486][T12387] bridge_slave_1: left allmulticast mode
[  293.858514][T12387] bridge_slave_1: left promiscuous mode
[  293.861331][T12387] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.913769][T12387] bridge_slave_0: left allmulticast mode
[  293.913800][T12387] bridge_slave_0: left promiscuous mode
[  293.914923][T12387] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.042099][T12392] netlink: Invalid conntrack helper
[  294.042134][T12392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.047945][T12393] netlink: Invalid conntrack helper
[  294.047976][T12393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.680937][T12459] netlink: 'syz.3.1590': attribute type 1 has an invalid length.
[  295.910268][T12459] 8021q: adding VLAN 0 to HW filter on device bond5
[  296.026596][T12473] bond5: (slave ip6erspan0): making interface the new active one
[  296.059124][T12473] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  296.257754][T12471] wg2 speed is unknown, defaulting to 1000
[  297.362728][T12492] syzkaller1: entered promiscuous mode
[  297.362754][T12492] syzkaller1: entered allmulticast mode
[  299.094662][T12545] __nla_validate_parse: 8 callbacks suppressed
[  299.094684][T12545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1606'.
[  299.556855][T12561] netlink: 'syz.4.1610': attribute type 7 has an invalid length.
[  299.556882][T12561] netlink: 'syz.4.1610': attribute type 3 has an invalid length.
[  299.556897][T12561] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1610'.
[  300.058889][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'.
[  300.126927][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'.
[  300.930991][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'.
[  301.120637][T12574] hsr_slave_1 (unregistering): left promiscuous mode
[  301.402901][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'.
[  301.402926][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'.
[  301.402941][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'.
[  301.402955][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'.
[  301.402970][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'.
[  301.551957][T12622] FAULT_INJECTION: forcing a failure.
[  301.551957][T12622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.551996][T12622] CPU: 1 UID: 0 PID: 12622 Comm: syz.3.1628 Not tainted syzkaller #0 PREEMPT(full) 
[  301.552030][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  301.552058][T12622] Call Trace:
[  301.552068][T12622]  <TASK>
[  301.552078][T12622]  dump_stack_lvl+0xe8/0x150
[  301.552117][T12622]  should_fail_ex+0x410/0x560
[  301.552149][T12622]  _copy_from_user+0x2d/0xb0
[  301.552183][T12622]  __sys_bpf+0x2e7/0xd90
[  301.552220][T12622]  ? __pfx___sys_bpf+0x10/0x10
[  301.552259][T12622]  ? __fget_files+0x2a/0x420
[  301.552310][T12622]  ? ksys_write+0x242/0x270
[  301.552348][T12622]  ? __pfx_ksys_write+0x10/0x10
[  301.552388][T12622]  __x64_sys_bpf+0xba/0xd0
[  301.552415][T12622]  do_syscall_64+0x166/0x520
[  301.552440][T12622]  ? trace_irq_disable+0x3b/0x140
[  301.552462][T12622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.552486][T12622]  ? clear_bhb_loop+0x70/0xc0
[  301.552515][T12622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.552539][T12622] RIP: 0033:0x7f03a119e159
[  301.552559][T12622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.552579][T12622] RSP: 002b:00007f039f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  301.552605][T12622] RAX: ffffffffffffffda RBX: 00007f03a1425fa0 RCX: 00007f03a119e159
[  301.552622][T12622] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000005
[  301.552638][T12622] RBP: 00007f039f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  301.552653][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.552667][T12622] R13: 00007f03a1426038 R14: 00007f03a1425fa0 R15: 00007ffcebcec678
[  301.552704][T12622]  </TASK>
[  302.107177][T12631] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  302.175246][T12633] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  302.197186][T12633] bond7 (unregistering): Released all slaves
[  303.010747][T12671] netlink: 'syz.3.1640': attribute type 11 has an invalid length.
[  304.302308][T12700] __nla_validate_parse: 17 callbacks suppressed
[  304.302331][T12700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1645'.
[  304.475537][T12712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.010866][T12726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1650'.
[  305.096649][T12729] x_tables: duplicate entry at hook 1
[  305.248707][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1651'.
[  305.250346][T12729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1651'.
[  305.431364][T12735] vlan0: entered promiscuous mode
[  305.471066][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'.
[  306.511026][T12779] netlink: 'syz.1.1662': attribute type 1 has an invalid length.
[  306.514069][T12779] openvswitch: netlink: VXLAN extension message has 5 unknown bytes.
[  306.994669][T12794] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  307.117576][T12802] ip_tables: iptables: counters copy to user failed while replacing table
[  307.477039][T12820] netlink: 'syz.2.1674': attribute type 1 has an invalid length.
[  307.578329][T12820] 8021q: adding VLAN 0 to HW filter on device bond4
[  307.579630][T12826] Bluetooth: ISO socket layer initialized
[  307.833509][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'.
[  307.833538][T12841] netlink: 'syz.3.1677': attribute type 1 has an invalid length.
[  307.983591][T12826] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  308.057652][T12844] veth0_to_bridge: entered promiscuous mode
[  308.060193][T12844] macvtap1: entered allmulticast mode
[  308.060252][T12844] veth0_to_bridge: entered allmulticast mode
[  308.097235][T12844] veth0_to_bridge: left allmulticast mode
[  308.097279][T12844] veth0_to_bridge: left promiscuous mode
[  308.292827][T12852] dvmrp8: entered allmulticast mode
[  308.314335][T12853] syzkaller0: entered promiscuous mode
[  308.314359][T12853] syzkaller0: entered allmulticast mode
[  308.416168][T12852] sctp: [Deprecated]: syz.2.1681 (pid 12852) Use of int in max_burst socket option.
[  308.416168][T12852] Use struct sctp_assoc_value instead
[  308.653746][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'.
[  308.696937][T12871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.697741][T12869] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  308.900359][T12878] x_tables: duplicate underflow at hook 2
[  309.019010][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'.
[  309.026547][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'.
[  309.071885][T12888] netlink: 'syz.0.1690': attribute type 4 has an invalid length.
[  309.071909][T12888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1690'.
[  309.196836][T12898] netlink: 'syz.4.1692': attribute type 3 has an invalid length.
[  309.286140][T12886] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  309.287923][T12886] bond7 (unregistering): Released all slaves
[  309.360554][T12888] .`: renamed from bond0 (while UP)
[  309.425869][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'.
[  309.441229][T12906] xfrm1: entered allmulticast mode
[  309.447820][T12903] netlink: 'syz.3.1694': attribute type 10 has an invalid length.
[  309.450078][T12903] netlink: 'syz.3.1694': attribute type 10 has an invalid length.
[  309.476214][T12903] team0: Port device netdevsim1 removed
[  309.485381][T12903] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  309.574777][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'.
[  309.574815][T12903] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  309.575144][T12903] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  309.575303][T12913] netlink: 'syz.3.1694': attribute type 10 has an invalid length.
[  309.575934][T12903] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  309.630886][T12911] netlink: 'syz.3.1694': attribute type 10 has an invalid length.
[  309.672761][T12912] xfrm2: entered allmulticast mode
[  309.745237][T12913] bond0: (slave netdevsim1): Releasing backup interface
[  309.793226][T12913] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  309.793412][T12913] netdevsim netdevsim3 netdevsim1: left allmulticast mode
[  309.828359][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  309.846547][T12913] team0: Port device netdevsim1 added
[  309.915601][T12911] team0: Port device netdevsim1 removed
[  309.926690][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'.
[  309.926712][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'.
[  309.926727][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'.
[  309.926742][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'.
[  309.926756][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'.
[  309.926770][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'.
[  309.926784][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'.
[  309.926799][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'.
[  310.002965][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  310.004677][T12911] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  310.005002][T12911] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  310.005845][T12911] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  310.104090][T12930] FAULT_INJECTION: forcing a failure.
[  310.104090][T12930] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  310.104128][T12930] CPU: 0 UID: 0 PID: 12930 Comm: syz.1.1698 Not tainted syzkaller #0 PREEMPT(full) 
[  310.104153][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  310.104172][T12930] Call Trace:
[  310.104181][T12930]  <TASK>
[  310.104191][T12930]  dump_stack_lvl+0xe8/0x150
[  310.104230][T12930]  should_fail_ex+0x410/0x560
[  310.104261][T12930]  prepare_alloc_pages+0x223/0x600
[  310.104292][T12930]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  310.104322][T12930]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  310.104355][T12930]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  310.104384][T12930]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  310.104413][T12930]  ? __pfx_policy_nodemask+0x10/0x10
[  310.104446][T12930]  __alloc_pages_noprof+0x10/0x100
[  310.104472][T12930]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  310.104506][T12930]  ? alloc_pages_noprof+0x140/0x2b0
[  310.104538][T12930]  __kasan_populate_vmalloc+0xb7/0x1c0
[  310.104569][T12930]  alloc_vmap_area+0xd1a/0x1420
[  310.104615][T12930]  ? __pfx_alloc_vmap_area+0x10/0x10
[  310.104644][T12930]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  310.104669][T12930]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  310.104693][T12930]  ? __get_vm_area_node+0x155/0x2f0
[  310.104728][T12930]  __get_vm_area_node+0x200/0x2f0
[  310.104768][T12930]  __vmalloc_node_range_noprof+0x343/0x1540
[  310.104802][T12930]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  310.104829][T12930]  ? __lock_acquire+0x747/0x2de0
[  310.104878][T12930]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  310.104923][T12930]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  310.104947][T12930]  __vmalloc_noprof+0xd2/0x120
[  310.104980][T12930]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  310.105009][T12930]  bpf_prog_alloc_no_stats+0x47/0x560
[  310.105034][T12930]  ? bpf_prog_alloc+0x2a/0x1a0
[  310.105063][T12930]  bpf_prog_alloc+0x3c/0x1a0
[  310.105091][T12930]  bpf_prog_load+0x7f8/0x1c20
[  310.105128][T12930]  ? __pfx_bpf_prog_load+0x10/0x10
[  310.105176][T12930]  __sys_bpf+0xd0d/0xd90
[  310.105208][T12930]  ? __pfx___sys_bpf+0x10/0x10
[  310.105243][T12930]  ? __fget_files+0x2a/0x420
[  310.105289][T12930]  ? ksys_write+0x242/0x270
[  310.105324][T12930]  ? __pfx_ksys_write+0x10/0x10
[  310.105371][T12930]  __x64_sys_bpf+0xba/0xd0
[  310.105397][T12930]  do_syscall_64+0x166/0x520
[  310.105420][T12930]  ? trace_irq_disable+0x3b/0x140
[  310.105443][T12930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.105467][T12930]  ? clear_bhb_loop+0x70/0xc0
[  310.105494][T12930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.105517][T12930] RIP: 0033:0x7fd6a759e159
[  310.105538][T12930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.105558][T12930] RSP: 002b:00007fd6a8389028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  310.105583][T12930] RAX: ffffffffffffffda RBX: 00007fd6a7825fa0 RCX: 00007fd6a759e159
[  310.105600][T12930] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000005
[  310.105614][T12930] RBP: 00007fd6a8389090 R08: 0000000000000000 R09: 0000000000000000
[  310.105628][T12930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.105641][T12930] R13: 00007fd6a7826038 R14: 00007fd6a7825fa0 R15: 00007ffcfaefe518
[  310.105675][T12930]  </TASK>
[  310.175997][T12930] syz.1.1698: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  310.179672][T12930] CPU: 0 UID: 0 PID: 12930 Comm: syz.1.1698 Not tainted syzkaller #0 PREEMPT(full) 
[  310.179745][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  310.179787][T12930] Call Trace:
[  310.179815][T12930]  <TASK>
[  310.179831][T12930]  dump_stack_lvl+0xe8/0x150
[  310.179934][T12930]  warn_alloc+0x24d/0x270
[  310.180006][T12930]  ? lockdep_hardirqs_on+0x7b/0x110
[  310.180081][T12930]  ? __pfx_warn_alloc+0x10/0x10
[  310.180134][T12930]  ? kfree+0x1c5/0x650
[  310.180246][T12930]  ? __get_vm_area_node+0x219/0x2f0
[  310.180286][T12930]  __vmalloc_node_range_noprof+0x36b/0x1540
[  310.180321][T12930]  ? __lock_acquire+0x747/0x2de0
[  310.180377][T12930]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  310.180461][T12930]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  310.180549][T12930]  __vmalloc_noprof+0xd2/0x120
[  310.180649][T12930]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  310.180723][T12930]  bpf_prog_alloc_no_stats+0x47/0x560
[  310.180794][T12930]  ? bpf_prog_alloc+0x2a/0x1a0
[  310.180861][T12930]  bpf_prog_alloc+0x3c/0x1a0
[  310.180942][T12930]  bpf_prog_load+0x7f8/0x1c20
[  310.181046][T12930]  ? __pfx_bpf_prog_load+0x10/0x10
[  310.181182][T12930]  __sys_bpf+0xd0d/0xd90
[  310.181273][T12930]  ? __pfx___sys_bpf+0x10/0x10
[  310.181377][T12930]  ? __fget_files+0x2a/0x420
[  310.181504][T12930]  ? ksys_write+0x242/0x270
[  310.181598][T12930]  ? __pfx_ksys_write+0x10/0x10
[  310.181701][T12930]  __x64_sys_bpf+0xba/0xd0
[  310.181773][T12930]  do_syscall_64+0x166/0x520
[  310.181829][T12930]  ? trace_irq_disable+0x3b/0x140
[  310.181892][T12930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.181969][T12930]  ? clear_bhb_loop+0x70/0xc0
[  310.182049][T12930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.182118][T12930] RIP: 0033:0x7fd6a759e159
[  310.182171][T12930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.182228][T12930] RSP: 002b:00007fd6a8389028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  310.182292][T12930] RAX: ffffffffffffffda RBX: 00007fd6a7825fa0 RCX: 00007fd6a759e159
[  310.182343][T12930] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000005
[  310.182386][T12930] RBP: 00007fd6a8389090 R08: 0000000000000000 R09: 0000000000000000
[  310.182427][T12930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.182468][T12930] R13: 00007fd6a7826038 R14: 00007fd6a7825fa0 R15: 00007ffcfaefe518
[  310.182562][T12930]  </TASK>
[  310.287059][T12930] Mem-Info:
[  310.287107][T12930] active_anon:5947 inactive_anon:0 isolated_anon:0
[  310.287107][T12930]  active_file:0 inactive_file:43646 isolated_file:0
[  310.287107][T12930]  unevictable:0 dirty:198 writeback:0
[  310.287107][T12930]  slab_reclaimable:11076 slab_unreclaimable:108369
[  310.287107][T12930]  mapped:30075 shmem:522 pagetables:3586
[  310.287107][T12930]  sec_pagetables:0 bounce:0
[  310.287107][T12930]  kernel_misc_reclaimable:0
[  310.287107][T12930]  free:1295451 free_pcp:10503 free_cma:0
[  310.287265][T12930] Node 0 active_anon:23788kB inactive_anon:0kB active_file:0kB inactive_file:174384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120300kB dirty:788kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15280kB pagetables:14216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  310.287434][T12930] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  310.287661][T12930] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.287850][T12930] lowmem_reserve[]: 0 2486 2486 2486 2486
[  310.290825][T12930] Node 0 DMA32 free:1231796kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23788kB inactive_anon:0kB active_file:0kB inactive_file:174384kB unevictable:0kB writepending:788kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:42012kB local_pcp:20064kB free_cma:0kB
[  310.291114][T12930] lowmem_reserve[]: 0 0 0 0 0
[  310.291229][T12930] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.353596][T12930] lowmem_reserve[]: 0 0 0 0 0
[  310.353742][T12930] Node 1 Normal free:3934648kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.353910][T12930] lowmem_reserve[]: 0 0 0 0 0
[  310.354033][T12930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  310.354597][T12930] Node 0 DMA32: 438*4kB (UM) 526*8kB (UM) 848*16kB (UME) 665*32kB (UME) 658*64kB (UME) 558*128kB (UM) 391*256kB (UM) 255*512kB (UME) 155*1024kB (UME) 10*2048kB (UME) 163*4096kB (UM) = 1231848kB
[  310.355083][T12930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  310.399736][T12930] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 7*16kB (UM) 8*32kB (UM) 6*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3934648kB
[  310.400357][T12930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  310.400411][T12930] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  310.400488][T12930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  310.400546][T12930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  310.400603][T12930] 44164 total pagecache pages
[  310.400632][T12930] 0 pages in swap cache
[  310.400654][T12930] Free swap  = 124996kB
[  310.400675][T12930] Total swap = 124996kB
[  310.400705][T12930] 2097051 pages RAM
[  310.400727][T12930] 0 pages HighMem/MovableOnly
[  310.400748][T12930] 428782 pages reserved
[  310.400770][T12930] 0 pages cma reserved
[  311.446610][T12947] netlink: 'syz.3.1702': attribute type 10 has an invalid length.
[  311.636241][T12949] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.706370][T12949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.747742][T12971] Bluetooth: MGMT ver 1.23
[  311.828037][T12949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.832372][T12949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.863960][T12949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  311.863989][T12949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.891445][T12949] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  311.927686][T12947] team0 (unregistering): Port device team_slave_0 removed
[  311.947065][T12947] team0 (unregistering): Port device team_slave_1 removed
[  311.993909][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.994018][ T8151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.062045][T11323] wg2 speed is unknown, defaulting to 1000
[  312.062106][T11323] syz2: Port: 1 Link ACTIVE
[  312.331289][T12976] netlink: 'syz.2.1709': attribute type 1 has an invalid length.
[  312.331311][T12976] netlink: 'syz.2.1709': attribute type 3 has an invalid length.
[  312.897807][T12998] trusted_key: syz.1.1713 sent an empty control message without MSG_MORE.
[  314.279548][T13010] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  314.295332][T13019] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.295622][T13019] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.383240][T13021] bond4: (slave syz_tun): Removing an active aggregator
[  314.403929][T13021] bond4: (slave syz_tun): Releasing backup interface
[  314.491425][T13021] bond3: (slave dummy0): Releasing active interface
[  314.507270][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  314.533153][T13021] bridge_slave_0: left allmulticast mode
[  314.533182][T13021] bridge_slave_0: left promiscuous mode
[  314.533584][T13021] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.578551][T13021] bridge_slave_1: left allmulticast mode
[  314.578579][T13021] bridge_slave_1: left promiscuous mode
[  314.578813][T13021] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.626091][T13021] bond0: (slave bond_slave_0): Releasing backup interface
[  314.669732][T13021] team0: Port device team_slave_0 removed
[  314.736062][T13021] team0: Port device team_slave_1 removed
[  314.737879][T13021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.737904][T13021] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.767815][T13021] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  314.874731][T13028] 8021q: VLANs not supported on syzkaller0
[  315.031408][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  315.216805][T13050] netlink: Unknown conntrack attr (type=4854, max=9)
[  315.217705][T13050] __nla_validate_parse: 50 callbacks suppressed
[  315.217723][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'.
[  315.217853][T13050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.519904][T13050] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.618276][T13059] bridge0: entered promiscuous mode
[  315.618737][T13059] macvlan2: entered promiscuous mode
[  315.729788][T13069] netlink: 'syz.4.1737': attribute type 2 has an invalid length.
[  315.759829][T13069] bond0: (slave bond_slave_0): Releasing backup interface
[  315.944832][T13069] bond0: (slave bond_slave_1): Releasing backup interface
[  315.957710][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1738'.
[  316.211273][T13069] team0: Port device team_slave_0 removed
[  316.264903][T13069] team0: Port device team_slave_1 removed
[  316.285421][T13069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  317.161710][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  317.416118][T13097] ip6gre2: left allmulticast mode
[  318.216649][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.216750][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.216841][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.216928][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.217019][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.217105][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.217200][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.217288][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.217376][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.217463][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.285185][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.285296][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.285383][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.285471][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.337724][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.337834][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.337923][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.338012][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.338326][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.338422][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.338509][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.338729][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.338958][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.339176][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.416892][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.416988][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417104][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417225][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417339][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417428][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417525][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417662][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417748][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417861][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.417949][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.418149][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.418274][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.498255][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.498362][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.498489][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.498577][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.498667][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.498756][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.498873][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.498963][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499052][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499148][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499265][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499352][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499443][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499530][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499647][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499736][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499824][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.499911][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500027][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500114][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500210][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500297][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500410][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500496][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500585][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500673][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.500790][T13156] syzkaller1: tun_chr_ioctl cmd 1074025673
[  318.797779][T13163] netlink: 'syz.1.1761': attribute type 1 has an invalid length.
[  318.924487][T13163] 8021q: adding VLAN 0 to HW filter on device bond7
[  318.954605][T13175] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1761'.
[  319.029244][T13163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1761'.
[  319.556341][T13197] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  319.556372][T13197] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  320.679790][T13215] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  320.679841][T13215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.826510][T13219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1776'.
[  321.686459][T13224] syzkaller0: entered promiscuous mode
[  321.686484][T13224] syzkaller0: entered allmulticast mode
[  321.814311][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'.
[  321.871811][T13242] ip6gre2: entered promiscuous mode
[  321.871835][T13242] ip6gre2: entered allmulticast mode
[  321.873964][T13248] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  321.878001][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'.
[  321.956456][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'.
[  322.068292][ T8155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.068346][ T8155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.068386][ T8155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.068425][ T8155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.142176][T13256] tipc: New replicast peer: 127.0.0.1
[  322.143149][T13256] tipc: Enabled bearer <udp:syz0>, priority 26
[  322.523698][T13264] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  322.523728][T13264] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  322.575714][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1786'.
[  322.854175][T13275] bridge0: port 4(bond0) entered blocking state
[  322.854322][T13275] bridge0: port 4(bond0) entered forwarding state
[  322.874481][T13275] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.892420][T13275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.991993][T13275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.994901][T13275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.014195][T13275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  323.017908][T13275] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  323.142326][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.142459][ T7641] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.173833][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.173969][ T7641] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.804481][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'.
[  323.869995][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1799'.
[  323.901299][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1799'.
[  324.703272][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1808'.
[  324.857986][T13367] veth11: entered promiscuous mode
[  324.858012][T13367] veth11: entered allmulticast mode
[  324.872608][T13367] bridge6: port 1(veth11) entered blocking state
[  324.872732][T13367] bridge6: port 1(veth11) entered disabled state
[  324.906797][T13367] bridge6: port 1(veth11) entered blocking state
[  324.906923][T13367] bridge6: port 1(veth11) entered forwarding state
[  324.965743][ T8155] bridge6: port 1(veth11) entered disabled state
[  325.005911][T13376] veth13: entered promiscuous mode
[  325.005929][T13376] veth13: entered allmulticast mode
[  325.006718][T13376] bridge6: port 2(veth13) entered blocking state
[  325.006806][T13376] bridge6: port 2(veth13) entered disabled state
[  325.039314][T13376] bridge6: port 2(veth13) entered blocking state
[  325.039400][T13376] bridge6: port 2(veth13) entered forwarding state
[  325.047816][ T7641] bridge6: port 2(veth13) entered disabled state
[  325.677982][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'.
[  325.707320][T13407] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  326.134395][T13425] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  327.020976][T13461] __nla_validate_parse: 16 callbacks suppressed
[  327.021002][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1831'.
[  327.254050][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.254075][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.254091][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.254107][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.254121][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.254137][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.254152][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.254167][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.254182][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'.
[  327.401457][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  327.846699][T13480] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  327.860785][T13480] bond0 (unregistering): Released all slaves
[  330.304383][T13563] netlink: 'syz.1.1849': attribute type 12 has an invalid length.
[  330.331365][T13563] netlink: 'syz.1.1849': attribute type 12 has an invalid length.
[  335.546356][T13642] __nla_validate_parse: 30 callbacks suppressed
[  335.546382][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'.
[  338.111598][T13609] team0: Cannot enslave team device to itself
[  338.211734][T13629] pimreg: tun_chr_ioctl cmd 1074025677
[  338.211859][T13629] pimreg: linktype set to 270
[  338.660332][T13647] netlink: 'syz.4.1865': attribute type 15 has an invalid length.
[  338.699743][T13647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1865'.
[  340.055362][T13668] netlink: 'syz.3.1868': attribute type 6 has an invalid length.
[  340.893732][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'.
[  340.893888][T13704] netlink: 'syz.1.1879': attribute type 21 has an invalid length.
[  340.896997][T13704] openvswitch: netlink: IP tunnel dst address not specified
[  341.071966][T13706] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1880'.
[  341.071994][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'.
[  341.341455][T13706] xfrm2: entered allmulticast mode
[  341.431099][T13708] ip_tables: iptables: counters copy to user failed while replacing table
[  341.466980][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1882'.
[  341.865364][T13714] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1883'.
[  341.965292][T13717] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1883'.
[  342.251747][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1884'.
[  342.744191][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'.
[  342.774812][T13741] xt_TCPMSS: Only works on TCP SYN packets
[  342.924879][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1889'.
[  342.956672][T13744] C: renamed from veth1_to_team (while UP)
[  342.994706][T13744] netlink: 'syz.1.1890': attribute type 1 has an invalid length.
[  342.994730][T13744] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1890'.
[  342.995134][T13744] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  343.254644][T13750] bond3: (slave lo): Releasing backup interface
[  343.284882][T13750] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  343.434756][T13750] 
: left allmulticast mode
[  343.436399][T13750] 
: left promiscuous mode
[  343.436868][T13750] bridge0: port 3(
) entered disabled state
[  343.540066][T13750] bridge_slave_0: left allmulticast mode
[  343.540095][T13750] bridge_slave_0: left promiscuous mode
[  343.540333][T13750] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.914843][T13759] netlink: 'syz.4.1894': attribute type 1 has an invalid length.
[  344.917959][T13750] bond2: (slave veth0_to_bond): Releasing active interface
[  344.961572][T13750] .`: (slave bond_slave_0): Releasing backup interface
[  345.006864][T13750] .`: (slave bond_slave_1): Releasing backup interface
[  345.076165][T13750] team0: Port device team_slave_0 removed
[  345.137502][T13750] team0: Port device team_slave_1 removed
[  345.141352][T13750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.141447][T13750] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.146742][T13750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  345.841992][T13774] FAULT_INJECTION: forcing a failure.
[  345.841992][T13774] name failslab, interval 1, probability 0, space 0, times 0
[  345.842032][T13774] CPU: 1 UID: 0 PID: 13774 Comm: syz.0.1899 Not tainted syzkaller #0 PREEMPT(full) 
[  345.842059][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  345.842073][T13774] Call Trace:
[  345.842082][T13774]  <TASK>
[  345.842093][T13774]  dump_stack_lvl+0xe8/0x150
[  345.842133][T13774]  should_fail_ex+0x410/0x560
[  345.842166][T13774]  should_failslab+0xa8/0x100
[  345.842199][T13774]  __kmalloc_cache_node_noprof+0xaa/0x620
[  345.842224][T13774]  ? unwind_get_return_address+0x4d/0x90
[  345.842253][T13774]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  345.842277][T13774]  ? __get_vm_area_node+0x155/0x2f0
[  345.842309][T13774]  ? __get_vm_area_node+0x155/0x2f0
[  345.842349][T13774]  __get_vm_area_node+0x155/0x2f0
[  345.842397][T13774]  __vmalloc_node_range_noprof+0x343/0x1540
[  345.842439][T13774]  ? bpf_prog_calc_tag+0x51/0x370
[  345.842467][T13774]  ? __sys_bpf+0xcd1/0xd90
[  345.842491][T13774]  ? __x64_sys_bpf+0xba/0xd0
[  345.842512][T13774]  ? do_syscall_64+0x166/0x520
[  345.842544][T13774]  ? __kasan_kmalloc+0x93/0xb0
[  345.842572][T13774]  ? bpf_prog_load+0x14d6/0x1c20
[  345.842597][T13774]  ? __sys_bpf+0xd0d/0xd90
[  345.842620][T13774]  ? __x64_sys_bpf+0xba/0xd0
[  345.842658][T13774]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  345.842707][T13774]  ? bpf_prog_calc_tag+0x51/0x370
[  345.842733][T13774]  __vmalloc_noprof+0xd2/0x120
[  345.842768][T13774]  ? bpf_prog_calc_tag+0x51/0x370
[  345.842799][T13774]  bpf_prog_calc_tag+0x51/0x370
[  345.842826][T13774]  ? __pfx_cmp_subprogs+0x10/0x10
[  345.842859][T13774]  check_and_resolve_insns+0xbb/0x21d0
[  345.842890][T13774]  ? __pfx_bpf_check_btf_info+0x10/0x10
[  345.842917][T13774]  ? add_subprog+0x2e2/0x3f0
[  345.842947][T13774]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  345.842987][T13774]  bpf_check+0x180a/0x2e10
[  345.843026][T13774]  ? ktime_get_with_offset+0x93/0x2d0
[  345.843055][T13774]  ? __pfx_bpf_check+0x10/0x10
[  345.843084][T13774]  ? bpf_obj_name_cpy+0x194/0x1e0
[  345.843123][T13774]  bpf_prog_load+0x14d6/0x1c20
[  345.843164][T13774]  ? __pfx_bpf_prog_load+0x10/0x10
[  345.843222][T13774]  __sys_bpf+0xd0d/0xd90
[  345.843258][T13774]  ? __pfx___sys_bpf+0x10/0x10
[  345.843298][T13774]  ? __fget_files+0x2a/0x420
[  345.843350][T13774]  ? ksys_write+0x242/0x270
[  345.843395][T13774]  ? __pfx_ksys_write+0x10/0x10
[  345.843437][T13774]  __x64_sys_bpf+0xba/0xd0
[  345.843464][T13774]  do_syscall_64+0x166/0x520
[  345.843489][T13774]  ? trace_irq_disable+0x3b/0x140
[  345.843513][T13774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.843539][T13774]  ? clear_bhb_loop+0x70/0xc0
[  345.843568][T13774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.843592][T13774] RIP: 0033:0x7f0bf8b9e159
[  345.843614][T13774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  345.843635][T13774] RSP: 002b:00007f0bf9af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  345.843660][T13774] RAX: ffffffffffffffda RBX: 00007f0bf8e25fa0 RCX: 00007f0bf8b9e159
[  345.843678][T13774] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000005
[  345.843693][T13774] RBP: 00007f0bf9af0090 R08: 0000000000000000 R09: 0000000000000000
[  345.843709][T13774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  345.843723][T13774] R13: 00007f0bf8e26038 R14: 00007f0bf8e25fa0 R15: 00007fff12522d98
[  345.843760][T13774]  </TASK>
[  346.262785][T13774] syz.0.1899: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  346.262875][T13774] CPU: 1 UID: 0 PID: 13774 Comm: syz.0.1899 Not tainted syzkaller #0 PREEMPT(full) 
[  346.262905][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  346.262921][T13774] Call Trace:
[  346.262932][T13774]  <TASK>
[  346.262944][T13774]  dump_stack_lvl+0xe8/0x150
[  346.262988][T13774]  warn_alloc+0x24d/0x270
[  346.263015][T13774]  ? __kasan_kmalloc+0x22/0xb0
[  346.263051][T13774]  ? __pfx_warn_alloc+0x10/0x10
[  346.263076][T13774]  ? __get_vm_area_node+0x155/0x2f0
[  346.263127][T13774]  ? __get_vm_area_node+0x2a9/0x2f0
[  346.263174][T13774]  __vmalloc_node_range_noprof+0x36b/0x1540
[  346.263215][T13774]  ? __sys_bpf+0xcd1/0xd90
[  346.263241][T13774]  ? __x64_sys_bpf+0xba/0xd0
[  346.263264][T13774]  ? do_syscall_64+0x166/0x520
[  346.263300][T13774]  ? __kasan_kmalloc+0x93/0xb0
[  346.263329][T13774]  ? bpf_prog_load+0x14d6/0x1c20
[  346.263357][T13774]  ? __sys_bpf+0xd0d/0xd90
[  346.263383][T13774]  ? __x64_sys_bpf+0xba/0xd0
[  346.263432][T13774]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  346.263487][T13774]  ? bpf_prog_calc_tag+0x51/0x370
[  346.263516][T13774]  __vmalloc_noprof+0xd2/0x120
[  346.263554][T13774]  ? bpf_prog_calc_tag+0x51/0x370
[  346.263589][T13774]  bpf_prog_calc_tag+0x51/0x370
[  346.263619][T13774]  ? __pfx_cmp_subprogs+0x10/0x10
[  346.263656][T13774]  check_and_resolve_insns+0xbb/0x21d0
[  346.263691][T13774]  ? __pfx_bpf_check_btf_info+0x10/0x10
[  346.263721][T13774]  ? add_subprog+0x2e2/0x3f0
[  346.263756][T13774]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  346.263799][T13774]  bpf_check+0x180a/0x2e10
[  346.263842][T13774]  ? ktime_get_with_offset+0x93/0x2d0
[  346.263875][T13774]  ? __pfx_bpf_check+0x10/0x10
[  346.263908][T13774]  ? bpf_obj_name_cpy+0x194/0x1e0
[  346.263951][T13774]  bpf_prog_load+0x14d6/0x1c20
[  346.263998][T13774]  ? __pfx_bpf_prog_load+0x10/0x10
[  346.264062][T13774]  __sys_bpf+0xd0d/0xd90
[  346.264102][T13774]  ? __pfx___sys_bpf+0x10/0x10
[  346.264146][T13774]  ? __fget_files+0x2a/0x420
[  346.264205][T13774]  ? ksys_write+0x242/0x270
[  346.264248][T13774]  ? __pfx_ksys_write+0x10/0x10
[  346.264295][T13774]  __x64_sys_bpf+0xba/0xd0
[  346.264325][T13774]  do_syscall_64+0x166/0x520
[  346.264353][T13774]  ? trace_irq_disable+0x3b/0x140
[  346.264378][T13774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.264413][T13774]  ? clear_bhb_loop+0x70/0xc0
[  346.264446][T13774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.264472][T13774] RIP: 0033:0x7f0bf8b9e159
[  346.264496][T13774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.264519][T13774] RSP: 002b:00007f0bf9af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  346.264546][T13774] RAX: ffffffffffffffda RBX: 00007f0bf8e25fa0 RCX: 00007f0bf8b9e159
[  346.264566][T13774] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000005
[  346.264584][T13774] RBP: 00007f0bf9af0090 R08: 0000000000000000 R09: 0000000000000000
[  346.264600][T13774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  346.264616][T13774] R13: 00007f0bf8e26038 R14: 00007f0bf8e25fa0 R15: 00007fff12522d98
[  346.264658][T13774]  </TASK>
[  346.316832][T13774] Mem-Info:
[  346.316848][T13774] active_anon:5979 inactive_anon:0 isolated_anon:0
[  346.316848][T13774]  active_file:0 inactive_file:43660 isolated_file:0
[  346.316848][T13774]  unevictable:0 dirty:173 writeback:0
[  346.316848][T13774]  slab_reclaimable:11272 slab_unreclaimable:108394
[  346.316848][T13774]  mapped:29893 shmem:520 pagetables:3587
[  346.316848][T13774]  sec_pagetables:0 bounce:0
[  346.316848][T13774]  kernel_misc_reclaimable:0
[  346.316848][T13774]  free:1295455 free_pcp:10259 free_cma:0
[  346.316917][T13774] Node 0 active_anon:23916kB inactive_anon:0kB active_file:0kB inactive_file:174440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119572kB dirty:688kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15460kB pagetables:14220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  346.316986][T13774] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  346.317054][T13774] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  346.329169][T13774] lowmem_reserve[]: 0 2486 2486 2486 2486
[  346.329229][T13774] Node 0 DMA32 free:1231812kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23916kB inactive_anon:0kB active_file:0kB inactive_file:174440kB unevictable:0kB writepending:688kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:41016kB local_pcp:20408kB free_cma:0kB
[  346.329311][T13774] lowmem_reserve[]: 0 0 0 0 0
[  346.329359][T13774] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  346.329446][T13774] lowmem_reserve[]: 0 0 0 0 0
[  346.329494][T13774] Node 1 Normal free:3934648kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  346.329569][T13774] lowmem_reserve[]: 0 0 0 0 0
[  346.329616][T13774] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  346.329773][T13774] Node 0 DMA32: 1255*4kB (UM) 705*8kB (UME) 1056*16kB (UM) 455*32kB (UME) 571*64kB (UME) 561*128kB (UME) 390*256kB (UME) 257*512kB (UM) 154*1024kB (UM) 12*2048kB (UME) 163*4096kB (UM) = 1231812kB
[  346.329992][T13774] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  346.330125][T13774] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 7*16kB (UM) 8*32kB (UM) 6*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3934648kB
[  346.849755][T13774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  346.849776][T13774] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  346.849796][T13774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  346.849815][T13774] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  346.849833][T13774] 44176 total pagecache pages
[  346.849843][T13774] 0 pages in swap cache
[  346.849851][T13774] Free swap  = 124996kB
[  346.849860][T13774] Total swap = 124996kB
[  346.849869][T13774] 2097051 pages RAM
[  346.849878][T13774] 0 pages HighMem/MovableOnly
[  346.849886][T13774] 428782 pages reserved
[  346.849895][T13774] 0 pages cma reserved
[  347.263031][T13790] gtp1: entered promiscuous mode
[  347.263056][T13790] gtp1: entered allmulticast mode
[  347.783791][T13781] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  348.054609][T13805] __nla_validate_parse: 34 callbacks suppressed
[  348.054634][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054652][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054668][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054682][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054696][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054712][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054726][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054742][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054757][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.054771][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'.
[  348.463095][T13814] hsr_slave_1 (unregistering): left promiscuous mode
[  349.740582][T13847] netlink: 'syz.2.1914': attribute type 12 has an invalid length.
[  349.800306][T13853] netlink: 'syz.0.1915': attribute type 15 has an invalid length.
[  349.919740][T13853] netlink: 'syz.0.1915': attribute type 15 has an invalid length.
[  349.988996][ T1155] netdevsim netdevsim0 netdevsim0: set [0, 2] type 1 family 0 port 2816 - 0
[  349.990600][ T8156] netdevsim netdevsim0 netdevsim1: set [0, 2] type 1 family 0 port 2816 - 0
[  349.990704][ T8156] netdevsim netdevsim0 netdevsim2: set [0, 2] type 1 family 0 port 2816 - 0
[  349.998651][ T7641] netdevsim netdevsim0 netdevsim3: set [0, 2] type 1 family 0 port 2816 - 0
[  350.298728][T13858] ip_tables: iptables: counters copy to user failed while replacing table
[  350.960708][T13874] FAULT_INJECTION: forcing a failure.
[  350.960708][T13874] name failslab, interval 1, probability 0, space 0, times 0
[  350.960749][T13874] CPU: 1 UID: 0 PID: 13874 Comm: syz.0.1922 Not tainted syzkaller #0 PREEMPT(full) 
[  350.960777][T13874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  350.960792][T13874] Call Trace:
[  350.960887][T13874]  <TASK>
[  350.960938][T13874]  dump_stack_lvl+0xe8/0x150
[  350.961103][T13874]  should_fail_ex+0x410/0x560
[  350.961215][T13874]  should_failslab+0xa8/0x100
[  350.961277][T13874]  __kmalloc_cache_noprof+0xa3/0x600
[  350.961309][T13874]  ? do_raw_spin_lock+0x12b/0x2f0
[  350.961393][T13874]  ? bcm_rx_setup+0x46e/0x1f70
[  350.961510][T13874]  ? bcm_rx_setup+0x46e/0x1f70
[  350.961561][T13874]  bcm_rx_setup+0x46e/0x1f70
[  350.961610][T13874]  bcm_sendmsg+0x2b9/0x7a0
[  350.961646][T13874]  ? __pfx_bcm_sendmsg+0x10/0x10
[  350.961692][T13874]  ? apparmor_socket_sendmsg+0x98/0x360
[  350.961774][T13874]  ? __pfx_bcm_sendmsg+0x10/0x10
[  350.961804][T13874]  sock_sendmsg_nosec+0x13a/0x180
[  350.961916][T13874]  ____sys_sendmsg+0x54e/0x850
[  350.961953][T13874]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.961995][T13874]  ? import_iovec+0x73/0xa0
[  350.962059][T13874]  ___sys_sendmsg+0x2a5/0x360
[  350.962089][T13874]  ? __lock_acquire+0x747/0x2de0
[  350.962118][T13874]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.962189][T13874]  ? __fget_files+0x2a/0x420
[  350.962233][T13874]  ? __fget_files+0x3a2/0x420
[  350.962277][T13874]  __x64_sys_sendmsg+0x1b1/0x290
[  350.962312][T13874]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  350.962369][T13874]  do_syscall_64+0x166/0x520
[  350.962454][T13874]  ? trace_irq_disable+0x3b/0x140
[  350.962494][T13874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.962541][T13874]  ? clear_bhb_loop+0x70/0xc0
[  350.962571][T13874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.962595][T13874] RIP: 0033:0x7f0bf8b9e159
[  350.962624][T13874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.962645][T13874] RSP: 002b:00007f0bf9af0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.962700][T13874] RAX: ffffffffffffffda RBX: 00007f0bf8e25fa0 RCX: 00007f0bf8b9e159
[  350.962719][T13874] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  350.962733][T13874] RBP: 00007f0bf9af0090 R08: 0000000000000000 R09: 0000000000000000
[  350.962748][T13874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.962763][T13874] R13: 00007f0bf8e26038 R14: 00007f0bf8e25fa0 R15: 00007fff12522d98
[  350.962800][T13874]  </TASK>
[  351.965591][T13886] x_tables: duplicate underflow at hook 2
[  352.400463][T13892] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  352.547327][T13901] netlink: 'syz.3.1930': attribute type 12 has an invalid length.
[  352.823356][T13903] syzkaller1: entered promiscuous mode
[  352.823385][T13903] syzkaller1: entered allmulticast mode
[  352.982278][T13910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.270490][T13923] FAULT_INJECTION: forcing a failure.
[  353.270490][T13923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.270529][T13923] CPU: 1 UID: 0 PID: 13923 Comm: syz.4.1935 Not tainted syzkaller #0 PREEMPT(full) 
[  353.270556][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  353.270570][T13923] Call Trace:
[  353.270580][T13923]  <TASK>
[  353.270590][T13923]  dump_stack_lvl+0xe8/0x150
[  353.270632][T13923]  should_fail_ex+0x410/0x560
[  353.270678][T13923]  _copy_from_iter+0x1d3/0x1660
[  353.270717][T13923]  ? __pfx__copy_from_iter+0x10/0x10
[  353.270744][T13923]  ? __kasan_kmalloc+0x93/0xb0
[  353.270773][T13923]  ? __kmalloc_cache_noprof+0x321/0x600
[  353.270797][T13923]  ? __kmalloc_cache_noprof+0x14d/0x600
[  353.270841][T13923]  ? __raw_spin_lock_init+0x45/0x100
[  353.270878][T13923]  bcm_rx_setup+0x7c0/0x1f70
[  353.270927][T13923]  bcm_sendmsg+0x2b9/0x7a0
[  353.270963][T13923]  ? __pfx_bcm_sendmsg+0x10/0x10
[  353.271008][T13923]  ? apparmor_socket_sendmsg+0x98/0x360
[  353.271038][T13923]  ? __pfx_bcm_sendmsg+0x10/0x10
[  353.271068][T13923]  sock_sendmsg_nosec+0x13a/0x180
[  353.271110][T13923]  ____sys_sendmsg+0x54e/0x850
[  353.271148][T13923]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.271190][T13923]  ? import_iovec+0x73/0xa0
[  353.271223][T13923]  ___sys_sendmsg+0x2a5/0x360
[  353.271253][T13923]  ? __lock_acquire+0x747/0x2de0
[  353.271282][T13923]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.271365][T13923]  ? __fget_files+0x2a/0x420
[  353.271401][T13923]  ? __fget_files+0x3a2/0x420
[  353.271445][T13923]  __x64_sys_sendmsg+0x1b1/0x290
[  353.271479][T13923]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.271536][T13923]  do_syscall_64+0x166/0x520
[  353.271561][T13923]  ? trace_irq_disable+0x3b/0x140
[  353.271585][T13923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.271610][T13923]  ? clear_bhb_loop+0x70/0xc0
[  353.271640][T13923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.271665][T13923] RIP: 0033:0x7f6e2ab9e159
[  353.271686][T13923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.271707][T13923] RSP: 002b:00007f6e2ba67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.271732][T13923] RAX: ffffffffffffffda RBX: 00007f6e2ae25fa0 RCX: 00007f6e2ab9e159
[  353.271750][T13923] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  353.271765][T13923] RBP: 00007f6e2ba67090 R08: 0000000000000000 R09: 0000000000000000
[  353.271780][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.271796][T13923] R13: 00007f6e2ae26038 R14: 00007f6e2ae25fa0 R15: 00007ffcec4ddf48
[  353.271833][T13923]  </TASK>
[  353.857793][T13907] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  353.857840][T13907] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  354.473553][T13947] FAULT_INJECTION: forcing a failure.
[  354.473553][T13947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.473592][T13947] CPU: 1 UID: 0 PID: 13947 Comm: syz.3.1941 Not tainted syzkaller #0 PREEMPT(full) 
[  354.473620][T13947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  354.473635][T13947] Call Trace:
[  354.473644][T13947]  <TASK>
[  354.473655][T13947]  dump_stack_lvl+0xe8/0x150
[  354.473704][T13947]  should_fail_ex+0x410/0x560
[  354.473737][T13947]  _copy_to_user+0x31/0xb0
[  354.473849][T13947]  simple_read_from_buffer+0xe1/0x170
[  354.473890][T13947]  proc_fail_nth_read+0x1bb/0x230
[  354.473941][T13947]  ? common_file_perm+0x20e/0x2b0
[  354.473973][T13947]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  354.474014][T13947]  ? rw_verify_area+0x24a/0x4c0
[  354.474052][T13947]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  354.474089][T13947]  vfs_read+0x213/0xa80
[  354.474137][T13947]  ? __pfx___mutex_lock+0x10/0x10
[  354.474201][T13947]  ? __pfx_vfs_read+0x10/0x10
[  354.474241][T13947]  ? __fget_files+0x2a/0x420
[  354.474279][T13947]  ? __fget_files+0x3a2/0x420
[  354.474310][T13947]  ? __fget_files+0x2a/0x420
[  354.474353][T13947]  ksys_read+0x150/0x270
[  354.474391][T13947]  ? __pfx_ksys_read+0x10/0x10
[  354.474424][T13947]  ? fput+0xa0/0xd0
[  354.474463][T13947]  do_syscall_64+0x166/0x520
[  354.474489][T13947]  ? trace_irq_disable+0x3b/0x140
[  354.474512][T13947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.474537][T13947]  ? clear_bhb_loop+0x70/0xc0
[  354.474566][T13947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.474591][T13947] RIP: 0033:0x7f03a115e98e
[  354.474613][T13947] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  354.474634][T13947] RSP: 002b:00007f039f3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  354.474659][T13947] RAX: ffffffffffffffda RBX: 00007f039f3f66c0 RCX: 00007f03a115e98e
[  354.474677][T13947] RDX: 000000000000000f RSI: 00007f039f3f60a0 RDI: 0000000000000004
[  354.474806][T13947] RBP: 00007f039f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  354.474822][T13947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.474837][T13947] R13: 00007f03a1426038 R14: 00007f03a1425fa0 R15: 00007ffcebcec678
[  354.474876][T13947]  </TASK>
[  355.663449][T13975] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  355.663480][T13975] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  355.925274][T13981] __nla_validate_parse: 29 callbacks suppressed
[  355.925452][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'.
[  355.957018][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'.
[  356.083832][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'.
[  356.113597][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'.
[  357.144060][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'.
[  357.144085][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'.
[  357.144100][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'.
[  357.144114][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'.
[  357.144128][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'.
[  357.144143][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'.
[  361.517686][T14071] __nla_validate_parse: 14 callbacks suppressed
[  361.517711][T14071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1978'.
[  361.517741][T14071] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1978'.
[  361.601424][T14071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1978'.
[  361.923110][T14083] netlink: 'syz.0.1979': attribute type 10 has an invalid length.
[  362.382209][T14070] syzkaller0: entered promiscuous mode
[  362.382237][T14070] syzkaller0: entered allmulticast mode
[  362.488883][T14083] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  363.003091][T14088] macsec1: entered promiscuous mode
[  364.294510][T14115] netlink: 'syz.4.1989': attribute type 11 has an invalid length.
[  364.754503][T14127] syzkaller0: entered promiscuous mode
[  364.754532][T14127] syzkaller0: entered allmulticast mode
[  364.977423][T14131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.996394][T14127] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1993'.
[  365.504919][T14126] tipc: Resetting bearer <eth:syzkaller0>
[  365.702700][T14126] tipc: Disabling bearer <eth:syzkaller0>
[  365.955061][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'.
[  365.955217][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'.
[  365.999164][T14150] x_tables: duplicate underflow at hook 1
[  366.048378][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'.
[  366.048478][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'.
[  366.134589][T14159] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1999'.
[  367.236823][T14139] tipc: Resetting bearer <eth:syz_tun>
[  367.307727][T14139] bridge0: port 4(bond0) entered disabled state
[  367.310296][T14139] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.311407][T14139] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.955511][T14139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.029483][T14139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.861133][ T8140] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.861187][ T8140] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.861226][ T8140] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.861265][ T8140] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.956432][T14161] wg2 speed is unknown, defaulting to 1000
[  369.295655][   T30] audit: type=1804 audit(1789654085.156:5): pid=14186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2003" name="/newroot/394/cgroup.controllers" dev="tmpfs" ino=2055 res=1 errno=0
[  369.321482][   T30] audit: type=1800 audit(1789654085.186:6): pid=14186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2003" name="cgroup.controllers" dev="tmpfs" ino=2055 res=0 errno=0
[  369.393641][   T30] audit: type=1800 audit(1789654085.256:7): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2003" name="cgroup.controllers" dev="tmpfs" ino=2055 res=0 errno=0
[  369.425725][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2004'.
[  369.626600][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2004'.
[  370.217924][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2009'.
[  370.264286][T14215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2009'.
[  370.355818][T14219] IPVS: length: 36 != 24
[  370.665795][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'.
[  370.668262][T14225] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2012'.
[  370.669929][T14227] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2012'.
[  370.671692][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'.
[  371.099105][T14244] §: renamed from sit0 (while UP)
[  371.212709][T14240] syzkaller1: entered promiscuous mode
[  371.212909][T14240] syzkaller1: entered allmulticast mode
[  371.702012][T14254] openvswitch: netlink: IP tunnel dst address not specified
[  371.896152][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'.
[  371.979381][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'.
[  373.478248][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  373.815825][T14304] netlink: 'syz.0.2027': attribute type 4 has an invalid length.
[  373.881744][T14302] netlink: 'syz.0.2027': attribute type 4 has an invalid length.
[  374.191492][T14317] netlink: 'syz.3.2030': attribute type 29 has an invalid length.
[  374.215061][T14318] netlink: 'syz.3.2030': attribute type 29 has an invalid length.
[  375.004061][T14332] tap0: tun_chr_ioctl cmd 1074025677
[  375.004371][T14332] tap0: linktype set to 778
[  375.031127][T14344] __nla_validate_parse: 3 callbacks suppressed
[  375.031147][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'.
[  375.031166][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'.
[  375.031192][T14344] netlink: 'syz.4.2041': attribute type 18 has an invalid length.
[  375.081090][ T8151] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 4352 - 0
[  375.086604][ T8162] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 4352 - 0
[  375.086727][ T8162] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 4352 - 0
[  375.086762][ T8162] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 4352 - 0
[  375.817521][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'.
[  375.817551][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'.
[  376.323581][T14362] Bluetooth: MGMT ver 1.23
[  376.583427][T14363] erspan1: entered allmulticast mode
[  376.862389][T14369] syz.0.2044 (14369) used obsolete PPPIOCDETACH ioctl
[  376.917921][T14376] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  378.577109][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'.
[  378.602159][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  379.655581][T14440] netlink: 'syz.2.2061': attribute type 2 has an invalid length.
[  379.655609][T14440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2061'.
[  380.315331][T14422] bond0 (unregistering): Released all slaves
[  380.324914][T14419] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2058'.
[  380.820652][T14461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2065'.
[  381.620910][T14474] smc: net device vlan1 applied user defined pnetid SYZ2
[  381.853596][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'.
[  382.597116][T14498] netlink: 'syz.3.2077': attribute type 3 has an invalid length.
[  382.623599][T14505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2078'.
[  382.737688][T14507] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2079'.
[  383.515206][T14522] netlink: 'syz.1.2084': attribute type 1 has an invalid length.
[  383.911804][T14524] bond8: (slave bridge5): Enslaving as a backup interface with an up link
[  384.212663][T14533] bond8: (slave bridge6): Enslaving as a backup interface with a down link
[  384.405541][T14532] bond8: (slave bridge7): Enslaving as a backup interface with a down link
[  384.565950][T14546] netlink: 'syz.0.2089': attribute type 13 has an invalid length.
[  385.815933][T14556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2091'.
[  388.437202][T14591] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  389.154093][T14599] sysfs: cannot create duplicate filename '/class/ieee80211/1ãà^!'
[  389.154131][T14599] CPU: 1 UID: 0 PID: 14599 Comm: syz.4.2098 Not tainted syzkaller #0 PREEMPT(full) 
[  389.154161][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  389.154181][T14599] Call Trace:
[  389.154196][T14599]  <TASK>
[  389.154208][T14599]  dump_stack_lvl+0xe8/0x150
[  389.154252][T14599]  sysfs_warn_dup+0x8e/0xa0
[  389.154324][T14599]  sysfs_do_create_link_sd+0xc0/0x110
[  389.154366][T14599]  device_add_class_symlinks+0x1cf/0x240
[  389.154479][T14599]  device_add+0x467/0xb80
[  389.154509][T14599]  wiphy_register+0x1fc8/0x2ff0
[  389.154642][T14599]  ? __pfx_wiphy_register+0x10/0x10
[  389.154681][T14599]  ? __pfx_netdev_run_todo+0x10/0x10
[  389.154774][T14599]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  389.154884][T14599]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  389.155001][T14599]  ieee80211_register_hw+0x3d3d/0x4a50
[  389.155068][T14599]  ? ieee80211_register_hw+0x19f1/0x4a50
[  389.155128][T14599]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  389.155159][T14599]  ? __asan_memset+0x22/0x50
[  389.155198][T14599]  ? __hrtimer_setup+0x1b7/0x260
[  389.155239][T14599]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  389.155320][T14599]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  389.155392][T14599]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  389.155420][T14599]  ? kstrndup+0xbd/0x160
[  389.155472][T14599]  ? kstrndup+0xbd/0x160
[  389.155500][T14599]  hwsim_new_radio_nl+0xd8b/0xf90
[  389.155547][T14599]  genl_family_rcv_msg_doit+0x233/0x340
[  389.155648][T14599]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  389.155693][T14599]  ? bpf_lsm_capable+0x9/0x20
[  389.155726][T14599]  ? security_capable+0x7e/0x2c0
[  389.155798][T14599]  genl_rcv_msg+0x614/0x7a0
[  389.155835][T14599]  ? __pfx_genl_rcv_msg+0x10/0x10
[  389.155862][T14599]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  389.155909][T14599]  netlink_rcv_skb+0x226/0x4a0
[  389.155946][T14599]  ? __pfx_genl_rcv_msg+0x10/0x10
[  389.155976][T14599]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  389.156040][T14599]  ? down_read+0x2be/0x330
[  389.156075][T14599]  genl_rcv+0x28/0x40
[  389.156100][T14599]  netlink_unicast+0x7bd/0x940
[  389.156147][T14599]  netlink_sendmsg+0x813/0xb40
[  389.156196][T14599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  389.156243][T14599]  ? apparmor_socket_sendmsg+0x98/0x360
[  389.156274][T14599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  389.156309][T14599]  sock_sendmsg_nosec+0x13a/0x180
[  389.156352][T14599]  ____sys_sendmsg+0x54e/0x850
[  389.156392][T14599]  ? __pfx_____sys_sendmsg+0x10/0x10
[  389.156436][T14599]  ? import_iovec+0x73/0xa0
[  389.156471][T14599]  ___sys_sendmsg+0x2a5/0x360
[  389.156502][T14599]  ? __lock_acquire+0x747/0x2de0
[  389.156533][T14599]  ? __pfx____sys_sendmsg+0x10/0x10
[  389.156569][T14599]  ? futex_wait+0x2a2/0x390
[  389.156657][T14599]  ? __fget_files+0x2a/0x420
[  389.156691][T14599]  ? __fget_files+0x3a2/0x420
[  389.156738][T14599]  __x64_sys_sendmsg+0x1b1/0x290
[  389.156774][T14599]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  389.156833][T14599]  do_syscall_64+0x166/0x520
[  389.156859][T14599]  ? trace_irq_disable+0x3b/0x140
[  389.156883][T14599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.156909][T14599]  ? clear_bhb_loop+0x70/0xc0
[  389.156939][T14599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.156964][T14599] RIP: 0033:0x7f6e2ab9e159
[  389.156996][T14599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.157018][T14599] RSP: 002b:00007f6e2ba25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  389.157045][T14599] RAX: ffffffffffffffda RBX: 00007f6e2ae26180 RCX: 00007f6e2ab9e159
[  389.157064][T14599] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000a
[  389.157080][T14599] RBP: 00007f6e2ac3506b R08: 0000000000000000 R09: 0000000000000000
[  389.157096][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.157110][T14599] R13: 00007f6e2ae26218 R14: 00007f6e2ae26180 R15: 00007ffcec4ddf48
[  389.157151][T14599]  </TASK>
[  389.336708][    C0] sched: DL replenish lagged too much
[  390.170493][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'.
[  390.419023][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'.
[  391.006796][T14608] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2100'.
[  391.432196][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'.
[  391.432224][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'.
[  391.778217][T14621] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2103'.
[  391.950919][T14621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2103'.
[  392.062411][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'.
[  392.407319][T14631] netlink: 'syz.3.2106': attribute type 39 has an invalid length.
[  392.531689][T14633] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2106'.
[  392.546864][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'.
[  392.546903][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'.
[  392.586908][T14631] tipc: Disabling bearer <eth:syz_tun>
[  392.809684][T14639] netlink: 'syz.2.2107': attribute type 83 has an invalid length.
[  394.923085][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2115'.
[  394.923136][T14672] netlink: 'syz.4.2115': attribute type 4 has an invalid length.
[  395.247000][T14676] 8021q: VLANs not supported on ip_vti0
[  396.280177][T14705] __nla_validate_parse: 1 callbacks suppressed
[  396.280205][T14705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2122'.
[  396.316301][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'.
[  396.329199][T14705] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  396.436154][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'.
[  396.436219][T14705] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  397.347539][T14714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2126'.
[  397.357973][T14715] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2126'.
[  397.469116][T14714] –: renamed from virt_wifi0
[  397.938313][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2129'.
[  397.938349][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2129'.
[  398.477254][T14738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2131'.
[  398.895386][T14743] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2135'.
[  399.419023][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  401.365275][T14796] __nla_validate_parse: 1 callbacks suppressed
[  401.365297][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'.
[  401.512897][T14790] dummy0: entered promiscuous mode
[  402.418611][T14820] netlink: 'syz.0.2151': attribute type 61 has an invalid length.
[  402.418640][T14820] netlink: 'syz.0.2151': attribute type 62 has an invalid length.
[  402.689575][T14811] macvtap1: entered allmulticast mode
[  402.689603][T14811] veth0_to_bridge: entered allmulticast mode
[  402.723157][T14811] veth0_to_bridge: left allmulticast mode
[  405.122586][T14869] sctp: [Deprecated]: syz.0.2159 (pid 14869) Use of struct sctp_assoc_value in delayed_ack socket option.
[  405.122586][T14869] Use struct sctp_sack_info instead
[  405.368844][T14876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2161'.
[  405.704680][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2161'.
[  406.520720][T14896] netlink: 'syz.2.2166': attribute type 10 has an invalid length.
[  406.904396][T14906] batman_adv: batadv0: Adding interface: gretap1
[  406.904417][T14906] batman_adv: batadv0: The MTU of interface gretap1 is too small (1412) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.904454][T14906] batman_adv: batadv0: Interface activated: gretap1
[  407.066593][T14906] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2169'.
[  407.241320][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'.
[  407.947195][T14930] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2176'.
[  407.947220][T14930] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2176'.
[  407.947237][T14930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2176'.
[  409.005642][T14945] xt_hashlimit: size too large, truncated to 1048576
[  410.377276][T14965] C: renamed from veth1_to_team
[  410.426820][T14965] netlink: 'syz.4.2184': attribute type 1 has an invalid length.
[  410.426846][T14965] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2184'.
[  410.426866][T14965] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  412.766688][T15019] netlink: 'syz.1.2198': attribute type 10 has an invalid length.
[  412.782360][T15015] sch_tbf: peakrate 3 is lower than or equals to rate 4096 !
[  412.806088][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2199'.
[  413.331392][T15037] xt_socket: unknown flags 0x8
[  413.877943][T15046] netlink: ct_mark mask cannot be 0
[  413.877980][T15046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.284135][T15081] x_tables: duplicate underflow at hook 1
[  417.775204][T15100] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.811648][T15100] team0: left allmulticast mode
[  417.811673][T15100] team_slave_0: left allmulticast mode
[  417.811691][T15100] team_slave_1: left allmulticast mode
[  418.268387][T15100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.407618][T15100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.847967][T15100] ip6gre2: left allmulticast mode
[  418.961481][T15100] xfrm2: left allmulticast mode
[  419.279235][ T8140] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.279292][ T8140] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.279334][ T8140] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.279375][ T8140] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.287394][T15129] tc_dump_action: action bad kind
[  419.314412][ T7942] wg2 speed is unknown, defaulting to 1000
[  419.314515][ T7942] syz2: Port: 1 Link DOWN
[  419.714480][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'.
[  420.206764][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.206792][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.206810][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.206827][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.206844][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.206871][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.206888][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.206905][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.206921][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'.
[  420.301252][T15165] syz_tun: entered allmulticast mode
[  420.337302][T15164] syz_tun: left allmulticast mode
[  420.764071][T15182] vlan3: entered promiscuous mode
[  420.764095][T15182] ip6gretap0: entered promiscuous mode
[  421.271667][T15194] IPVS: set_ctl: invalid protocol: 33324 220.62.187.170:9603
[  421.790464][T15209] smc: net device vlan1 erased user defined pnetid SYZ2
[  421.823070][T15213] netlink: 'syz.4.2241': attribute type 2 has an invalid length.
[  421.951690][T15213] ip6gretap1: entered allmulticast mode
[  424.266151][T15255] macvlan0: left promiscuous mode
[  424.314792][T15255] bond1: left promiscuous mode
[  424.314818][T15255] bridge1: left promiscuous mode
[  424.317073][T15255] veth3: left promiscuous mode
[  424.335274][T15255] ipvlan4: left promiscuous mode
[  424.376137][T15255] xfrm1: left allmulticast mode
[  424.376309][T15255] xfrm2: left allmulticast mode
[  424.377171][T15255] gtp1: left promiscuous mode
[  424.377188][T15255] gtp1: left allmulticast mode
[  424.420484][T15255] dummy0: left promiscuous mode
[  424.427110][T15255] batman_adv: batadv0: Interface deactivated: gretap1
[  425.258431][T15289] __nla_validate_parse: 153 callbacks suppressed
[  425.258454][T15289] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2264'.
[  425.888909][T15299] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2266'.
[  427.294624][T15336] IPVS: sh: FWM 3 0x00000003 - no destination available
[  428.223551][T15359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2283'.
[  428.541859][T15368] syzkaller0: entered promiscuous mode
[  428.542066][T15368] syzkaller0: entered allmulticast mode
[  428.571675][T15370] xt_TCPMSS: Only works on TCP SYN packets
[  428.599990][T15368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.634254][T15368] tipc: Resetting bearer <eth:syzkaller0>
[  428.741303][T15372] tipc: New replicast peer: 172.20.20.187
[  428.741723][T15372] tipc: Enabled bearer <udp:syz0>, priority 26
[  429.385744][T15364] tipc: Resetting bearer <eth:syzkaller0>
[  429.532370][T15364] tipc: Disabling bearer <eth:syzkaller0>
[  430.172190][T15408] Cannot find set identified by id 4 to match
[  430.172828][T15406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'.
[  430.197881][T15411] netlink: 'syz.3.2297': attribute type 11 has an invalid length.
[  431.873916][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2303'.
[  431.873968][T15449] vlan0: entered promiscuous mode
[  431.876931][T15449] netlink: 'syz.3.2303': attribute type 2 has an invalid length.
[  431.876961][T15449] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2303'.
[  431.876980][T15449] netlink: 'syz.3.2303': attribute type 2 has an invalid length.
[  431.876994][T15449] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2303'.
[  432.016708][T15455] SET target dimension over the limit!
[  432.205759][T15460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2305'.
[  432.256702][T15460] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2305'.
[  432.276375][T15449] xt_CT: No such helper "syz1"
[  432.857064][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'.
[  432.870920][T15466] hsr_slave_0: left promiscuous mode
[  432.975796][T15471] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2307'.
[  432.995814][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2309'.
[  433.037261][T15464] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2307'.
[  434.002853][T15494] netlink: 'syz.4.2313': attribute type 10 has an invalid length.
[  434.002894][T15494] syz_tun: entered promiscuous mode
[  434.031734][T15494] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2313'.
[  434.485219][T15478] syzkaller0: entered promiscuous mode
[  434.485246][T15478] syzkaller0: entered allmulticast mode
[  434.512165][T15485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.716836][T15474] tipc: Resetting bearer <eth:syzkaller0>
[  434.990584][T15474] tipc: Disabling bearer <eth:syzkaller0>
[  435.356775][T15524] x_tables: duplicate underflow at hook 1
[  435.890365][T15521] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  439.453768][T15529] bridge0: left promiscuous mode
[  439.701470][  T172] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0
[  439.701529][  T172] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0
[  439.701573][  T172] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0
[  439.701615][  T172] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0
[  440.073130][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  440.378373][T15571] __nla_validate_parse: 4 callbacks suppressed
[  440.378398][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2328'.
[  440.378423][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2328'.
[  440.434154][T15570] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.462707][T15571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  440.462735][T15571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  440.580794][T15570] hsr_slave_0: left promiscuous mode
[  440.617342][T15570] hsr_slave_1: left promiscuous mode
[  440.951308][T15582] netlink: 'syz.3.2331': attribute type 1 has an invalid length.
[  441.064016][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'.
[  441.204202][T15582] bond6: entered promiscuous mode
[  441.204797][T15582] 8021q: adding VLAN 0 to HW filter on device bond6
[  441.245364][T15588] 8021q: adding VLAN 0 to HW filter on device bond6
[  441.245839][T15588] bond6: (slave gre1): The slave device specified does not support setting the MAC address
[  441.245861][T15588] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  441.291720][T15588] bond6: (slave gre1): making interface the new active one
[  441.291749][T15588] gre1: entered promiscuous mode
[  441.296622][T15588] bond6: (slave gre1): Enslaving as an active interface with an up link
[  441.467362][T15590] bond6 (unregistering): (slave gre1): Releasing backup interface
[  441.467393][T15590] gre1: left promiscuous mode
[  441.596185][T15590] bond6 (unregistering): Released all slaves
[  442.606464][T15602] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2334'.
[  444.846125][T15651] netlink: 'syz.4.2343': attribute type 1 has an invalid length.
[  444.846154][T15651] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2343'.
[  445.501407][T15662] openvswitch: netlink: Multiple metadata blocks provided
[  447.735208][T15679] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2349'.
[  448.756290][T15692] 8021q: adding VLAN 0 to HW filter on device team0
[  448.796509][T15692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.994903][T15692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.020382][T15692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.093236][T15692] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  449.580073][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2351'.
[  449.615139][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.615255][ T8156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.765759][ T7745] wg2 speed is unknown, defaulting to 1000
[  449.765786][ T7745] syz2: Port: 1 Link ACTIVE
[  450.069454][T15716] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2355'.
[  450.185874][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'.
[  450.272589][T15725] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2359'.
[  450.483802][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'.
[  451.592247][T15743] x_tables: duplicate underflow at hook 2
[  451.614868][T15742] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.2363'.
[  452.117360][T15753] netlink: 'syz.0.2366': attribute type 7 has an invalid length.
[  452.117389][T15753] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  452.117406][T15753] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2366'.
[  452.117758][T15753] netlink: 'syz.0.2366': attribute type 7 has an invalid length.
[  452.117777][T15753] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  452.117793][T15753] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2366'.
[  452.120943][T15753] netlink: 'syz.0.2366': attribute type 7 has an invalid length.
[  452.121011][T15753] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  452.121064][T15753] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2366'.
[  452.125185][T15753] netlink: 'syz.0.2366': attribute type 7 has an invalid length.
[  452.125242][T15753] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  452.125862][T15753] netlink: 'syz.0.2366': attribute type 7 has an invalid length.
[  452.125879][T15753] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  453.710173][T15790] __nla_validate_parse: 10 callbacks suppressed
[  453.710197][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'.
[  453.710225][T15790] block nbd0: Unsupported socket: should be TCP or UNIX.
[  454.650964][T15822] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2382'.
[  454.732910][T15818] bond5: entered promiscuous mode
[  454.733396][T15818] 8021q: adding VLAN 0 to HW filter on device bond5
[  454.869925][T15823] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  454.869955][T15823] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  454.869974][T15823] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  455.260873][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'.
[  455.398544][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  456.356260][T15843] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  456.522422][T15843] bond7 (unregistering): Released all slaves
[  457.367757][T15854] syzkaller0: entered promiscuous mode
[  457.367786][T15854] syzkaller0: entered allmulticast mode
[  457.630717][T15868] validate_nla: 14 callbacks suppressed
[  457.630742][T15868] netlink: 'syz.3.2391': attribute type 30 has an invalid length.
[  457.662894][T15873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2392'.
[  457.736118][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'.
[  458.420552][T15868] netlink: 'syz.3.2391': attribute type 30 has an invalid length.
[  459.036866][T15893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2398'.
[  459.667545][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  459.671121][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  459.686930][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  459.697260][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  459.823589][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  459.824530][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  459.825264][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  459.826266][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  459.827058][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  460.069207][T15917] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  462.325517][T15982] 8021q: adding VLAN 0 to HW filter on device bond7
[  462.402626][T15992] netlink: 'syz.3.2414': attribute type 4 has an invalid length.
[  464.323120][T16021] ip_tables: iptables: counters copy to user failed while replacing table
[  464.500849][T16023] netlink: 'syz.1.2422': attribute type 9 has an invalid length.
[  464.697841][T16027] netlink: 'syz.2.2421': attribute type 16 has an invalid length.
[  464.697868][T16027] netlink: 'syz.2.2421': attribute type 17 has an invalid length.
[  465.061556][T16029] __nla_validate_parse: 48 callbacks suppressed
[  465.061580][T16029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2423'.
[  465.165474][T16027] 8021q: adding VLAN 0 to HW filter on device bond0
[  465.197957][T16027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.510418][T16027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  465.542404][T16027] veth1_vlan: left promiscuous mode
[  465.548606][T16027] veth0_vlan: left promiscuous mode
[  465.573585][T16027] veth0_vlan: entered promiscuous mode
[  465.592586][T16027] veth1_vlan: entered promiscuous mode
[  465.632418][T16027] veth1_macvtap: left promiscuous mode
[  465.650242][T16027] veth0_macvtap: left promiscuous mode
[  465.657242][T16027] veth0_macvtap: entered promiscuous mode
[  465.678507][T16027] veth1_macvtap: entered promiscuous mode
[  465.776058][T16027] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  465.803850][T16027] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  465.819633][T16027] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  465.824453][T16027] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  465.871603][T16027] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  465.889204][T16027] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  465.891971][T16027] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  466.273786][T16033] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  466.293503][ T8140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.304358][ T8151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.304448][ T8151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.304490][ T8151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.329998][ T7745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.492012][ T7745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.873070][T16055] xt_hashlimit: size too large, truncated to 1048576
[  467.166620][ T8129] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  467.808129][T16077] netlink: 'syz.0.2433': attribute type 10 has an invalid length.
[  467.808165][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'.
[  467.902340][T16078] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2433'.
[  468.012345][T16078] netlink: 'syz.0.2433': attribute type 1 has an invalid length.
[  468.017357][T16079] netlink: 'syz.0.2433': attribute type 1 has an invalid length.
[  468.420367][T16079] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.475301][T16082] 8021q: adding VLAN 0 to HW filter on device .`
[  468.502070][T16082] bond0: (slave .`): making interface the new active one
[  468.624245][T16082] bond0: (slave .`): Enslaving as an active interface with an up link
[  468.754907][ T8129] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  468.755154][ T8129] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  469.638449][ T7745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.176325][T16124] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2445'.
[  470.301253][T16124] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2445'.
[  470.756645][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'.
[  471.060949][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2449'.
[  471.558327][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'.
[  471.939222][T16153] wg2 speed is unknown, defaulting to 1000
[  472.919339][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  473.806410][T16194] xt_connbytes: Forcing CT accounting to be enabled
[  473.857797][T16194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  474.335338][T16191] smbdirect: ib_dev[syz2] renamed to [sys]
[  474.475066][T16190] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  474.475109][T16190] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  474.475152][T16190] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  474.619693][T16205] sctp: [Deprecated]: syz.4.2460 (pid 16205) Use of int in max_burst socket option deprecated.
[  474.619693][T16205] Use struct sctp_assoc_value instead
[  474.651366][T16190] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[  475.125045][T16212] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2462'.
[  475.766648][T16219] ip_tables: iptables: counters copy to user failed while replacing table
[  477.563508][T16252] netlink: zone id is out of range
[  479.280850][T16283] block nbd0: server does not support multiple connections per device.
[  479.281211][T16283] block nbd0: shutting down sockets
[  480.565467][T16308] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2487'.
[  481.014335][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  481.061907][T16321] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2491'.
[  481.584143][T16319] smbdirect: ib_dev[sys] removed
[  482.277401][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'.
[  483.003307][T16339] netlink: 'syz.3.2497': attribute type 9 has an invalid length.
[  483.203596][T16363] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  483.203812][T16363] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  483.873700][T16382] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2506'.
[  484.803636][T16399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.161854][T16395] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  485.335684][T16407] netlink: 'syz.4.2515': attribute type 1 has an invalid length.
[  485.335708][T16407] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2515'.
[  485.398387][T16404] batman_adv: batadv0: Adding interface: dummy0
[  485.398407][T16404] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  485.398602][T16404] batman_adv: batadv0: Interface activated: dummy0
[  485.523407][T16404] batadv0: mtu less than device minimum
[  485.526469][T16404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  485.527967][T16404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  485.529489][T16404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  485.531021][T16404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  485.533370][T16404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  485.534933][T16404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  485.536394][T16404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  485.705939][T16417] bond7: entered allmulticast mode
[  485.722175][T16417] macvlan2: entered promiscuous mode
[  485.722199][T16417] macvlan2: entered allmulticast mode
[  485.723102][T16417] bond7: (slave macvlan2): Opening slave failed
[  485.750112][T16407] netlink: 'syz.4.2515': attribute type 1 has an invalid length.
[  486.122270][T16407] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  487.123484][T16436] netlink: 'syz.4.2518': attribute type 1 has an invalid length.
[  487.434647][T16436] bond8: entered promiscuous mode
[  487.446764][T16436] 8021q: adding VLAN 0 to HW filter on device bond8
[  487.786550][T16433] 8021q: adding VLAN 0 to HW filter on device bond8
[  487.787008][T16433] bond8: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  487.787031][T16433] bond8: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  487.894873][T16433] bond8: (slave ip6gre3): making interface the new active one
[  487.894901][T16433] ip6gre3: entered promiscuous mode
[  487.917531][T16433] bond8: (slave ip6gre3): Enslaving as an active interface with an up link
[  488.709973][T16455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2524'.
[  488.993793][T16467] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20001
[  489.496383][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.496409][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.496425][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.496440][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.496455][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.496470][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.496486][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.496501][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.496516][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'.
[  489.779110][T16476] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.214086][T16509] vlan2: entered allmulticast mode
[  491.214112][T16509] bridge_slave_0: entered allmulticast mode
[  491.214398][T16509] bridge0: port 1(vlan2) entered blocking state
[  491.214512][T16509] bridge0: port 1(vlan2) entered disabled state
[  491.309761][T16509] vlan2: entered promiscuous mode
[  491.309787][T16509] bridge_slave_0: entered promiscuous mode
[  491.614126][T16526] netlink: 'syz.0.2539': attribute type 10 has an invalid length.
[  491.653433][T16526] 8021q: adding VLAN 0 to HW filter on device team0
[  491.789684][T16526] .`: (slave team0): Enslaving as an active interface with an up link
[  493.280797][T16566] netlink: 'syz.1.2548': attribute type 21 has an invalid length.
[  493.427574][T16566] netlink: 'syz.1.2548': attribute type 5 has an invalid length.
[  493.437325][ T7641] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  493.437395][ T7641] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  493.439321][ T7641] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  493.439368][ T7641] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  494.525933][T16590] __nla_validate_parse: 12 callbacks suppressed
[  494.525956][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'.
[  494.525975][T16590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2554'.
[  495.376482][T16608] xt_ecn: cannot match TCP bits for non-tcp packets
[  495.393698][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'.
[  496.164271][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2562'.
[  496.267084][T16620] ip6gre3: entered promiscuous mode
[  496.267112][T16620] ip6gre3: entered allmulticast mode
[  496.306571][ T8123] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  496.306834][ T8123] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  496.325726][ T7741] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  496.689279][ T7741] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  497.003884][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  497.025916][ T7741] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  498.288726][T16657] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  498.288756][T16657] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  498.781975][T16663] block nbd0: not configured, cannot reconfigure
[  499.694617][T16679] net_ratelimit: 12 callbacks suppressed
[  499.694726][T16679] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  500.118782][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  500.737172][T16699] netlink: 'syz.2.2582': attribute type 1 has an invalid length.
[  501.192030][T16703] macvtap1: entered allmulticast mode
[  501.271414][T16709] bond6: (slave bridge5): making interface the new active one
[  501.302554][T16709] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  503.054658][T16750] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  503.094101][T16750] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  503.815123][T16786] netlink: 'syz.4.2600': attribute type 11 has an invalid length.
[  504.234134][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2604'.
[  505.311308][T16817] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  505.443548][T16821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2610'.
[  506.644352][T16846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2615'.
[  506.645039][T16847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2615'.
[  507.015693][T16857] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  507.514108][T16864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2621'.
[  507.878215][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  511.354415][T16918] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2633'.
[  511.443261][T16918] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2633'.
[  512.646390][T16941] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2639'.
[  512.845485][T16942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'.
[  512.970052][T16955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2642'.
[  513.279884][T16955] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2642'.
[  513.683396][T16962] sctp: [Deprecated]: syz.0.2643 (pid 16962) Use of int in max_burst socket option.
[  513.683396][T16962] Use struct sctp_assoc_value instead
[  514.241941][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2645'.
[  514.245785][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2645'.
[  514.386307][T16974] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2647'.
[  514.464263][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'.
[  514.631661][T16975] bond9: option tlb_dynamic_lb: invalid value (128)
[  514.694682][T16975] bond9 (unregistering): Released all slaves
[  515.288661][T16993] 0·: renamed from hsr0
[  515.349650][T16993] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  515.350105][T16993] 0·: entered allmulticast mode
[  515.350124][T16993] hsr_slave_0: entered allmulticast mode
[  515.382358][T16993] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  515.382641][T16992] 1·: renamed from 
c0· (while UP)
[  515.465153][T16992] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  516.934725][T17027] __nla_validate_parse: 2 callbacks suppressed
[  516.934751][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'.
[  519.138613][T17061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2666'.
[  520.596499][T17080] vlan3: entered promiscuous mode
[  520.596527][T17080] bridge0: entered promiscuous mode
[  520.710969][T17084] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2678'.
[  520.710997][T17084] openvswitch: netlink: Flow key attr not present in new flow.
[  520.746038][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2677'.
[  521.329177][T17091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2679'.
[  521.367594][T17093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2680'.
[  521.379837][T17091] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2679'.
[  521.485905][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'.
[  522.206438][T17110] nftables ruleset with unbound chain
[  522.816144][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'.
[  522.965787][T17140] xt_hashlimit: size too large, truncated to 1048576
[  523.090010][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2688'.
[  523.242282][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2688'.
[  523.460292][T17143] xt_hashlimit: size too large, truncated to 1048576
[  523.878183][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  523.932370][T17158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2692'.
[  524.014473][T17158] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2692'.
[  524.037030][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2692'.
[  526.429242][T17212] ±ÿ)”ëfl: renamed from lo (while UP)
[  526.482111][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2708'.
[  526.777503][T17219] x_tables: duplicate underflow at hook 3
[  526.891199][T17222] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  527.096699][T17225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2712'.
[  527.990976][T17241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.953961][ T7745] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  529.250102][ T7745] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  529.709366][T17264] netlink: 'syz.0.2720': attribute type 1 has an invalid length.
[  529.744887][T17266] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2723'.
[  529.870362][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2723'.
[  530.131507][T17261] team0: Port device bridge0 added
[  530.279288][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  530.497680][T17272] vlan0: entered allmulticast mode
[  530.497705][T17272] bridge17: entered allmulticast mode
[  530.822264][T17277] veth21: entered promiscuous mode
[  530.822292][T17277] veth21: entered allmulticast mode
[  530.844020][T17277] team0: Device veth21 is up. Set it down before adding it as a team port
[  531.053638][T17284] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2725'.
[  531.160684][T17289] debugfs: '1ùà^!' already exists in 'ieee80211'
[  532.794162][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2735'.
[  532.833175][T17326] netlink: 'syz.4.2737': attribute type 1 has an invalid length.
[  533.023555][T17327] netlink: 'syz.4.2737': attribute type 1 has an invalid length.
[  533.093974][T17334] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2737'.
[  533.323339][T17326] 8021q: adding VLAN 0 to HW filter on device bond9
[  533.348641][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  533.433467][T17332] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  533.483038][T17327] bond9: (slave ip6gretap1): making interface the new active one
[  533.485884][T17327] ip6gretap1: entered promiscuous mode
[  533.487408][T17327] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  533.706927][T17343] sctp: [Deprecated]: syz.0.2740 (pid 17343) Use of int in max_burst socket option.
[  533.706927][T17343] Use struct sctp_assoc_value instead
[  533.925689][T17346] syzkaller1: entered promiscuous mode
[  533.925717][T17346] syzkaller1: entered allmulticast mode
[  534.578061][T17356] netlink: 'syz.0.2742': attribute type 5 has an invalid length.
[  534.578086][T17356] netlink: 'syz.0.2742': attribute type 9 has an invalid length.
[  534.578102][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'.
[  534.646631][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'.
[  534.939755][T17361] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  535.017507][T17358] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  535.053720][T17358] bond0 (unregistering): Released all slaves
[  535.104201][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2739'.
[  535.812330][T17371] ipt_ECN: cannot use operation on non-tcp rule
[  536.416320][T17388] netlink: 'syz.3.2750': attribute type 1 has an invalid length.
[  537.630241][T17406] netlink: 'syz.1.2752': attribute type 10 has an invalid length.
[  537.742853][T17388] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  537.833125][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  537.834684][T17406] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  537.982082][T17406] team0: Port device netdevsim1 added
[  538.488602][T17413] netlink: 'syz.2.2753': attribute type 10 has an invalid length.
[  539.613791][T17426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2756'.
[  539.880060][T17436] geneve4: entered promiscuous mode
[  540.424046][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'.
[  540.695293][T15568] udevd[15568]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  540.720318][T15568] udevd[15568]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  540.800210][T17451] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  540.800301][T17451] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  541.110320][T17462] netlink: 'syz.2.2765': attribute type 62 has an invalid length.
[  541.770094][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2769'.
[  541.861662][T17487] siw: device registration error -23
[  542.086730][T17458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.097446][T17492] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2772'.
[  542.158544][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2772'.
[  542.629370][T17499] netlink: 'syz.3.2776': attribute type 4 has an invalid length.
[  542.629394][T17499] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2776'.
[  542.666720][T17458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.679410][T17500] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2773'.
[  542.680449][T17500] unsupported nlmsg_type 40
[  542.821236][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'.
[  543.047806][T17458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.103316][T17458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.286228][T17519] netlink: 'syz.1.2779': attribute type 1 has an invalid length.
[  544.286254][T17519] netlink: 756 bytes leftover after parsing attributes in process `syz.1.2779'.
[  545.869602][ T8140] ip6gretap1: left promiscuous mode
[  545.995685][T17539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2784'.
[  546.218492][T17542] netlink: 'syz.1.2784': attribute type 1 has an invalid length.
[  546.218519][T17542] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2784'.
[  546.492689][ T8162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.699085][ T8130] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.160865][ T8130] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.162214][T17555] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2788'.
[  547.189097][ T8162] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.536579][T17559] netlink: 'syz.4.2789': attribute type 1 has an invalid length.
[  547.536604][T17559] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2789'.
[  547.736555][T17559] netlink: 'syz.4.2789': attribute type 1 has an invalid length.
[  547.736580][T17559] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2789'.
[  548.551472][    C1] ==================================================================
[  548.551561][    C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200
[  548.551601][    C1] Free of addr ffff88802b70ba80 by task syz.2.2790/17561
[  548.551619][    C1] 
[  548.551668][    C1] CPU: 1 UID: 0 PID: 17561 Comm: syz.2.2790 Not tainted syzkaller #0 PREEMPT(full) 
[  548.551777][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  548.551794][    C1] Call Trace:
[  548.551804][    C1]  <IRQ>
[  548.551814][    C1]  dump_stack_lvl+0xe8/0x150
[  548.551853][    C1]  print_address_description+0x55/0x1e0
[  548.551899][    C1]  print_report+0x58/0x70
[  548.551929][    C1]  ? rcu_free_sheaf+0x31/0x200
[  548.551951][    C1]  kasan_report_invalid_free+0xea/0x110
[  548.551985][    C1]  ? rcu_free_sheaf+0x31/0x200
[  548.552011][    C1]  ? rcu_free_sheaf+0x31/0x200
[  548.552036][    C1]  __kasan_slab_pre_free+0x104/0x120
[  548.552065][    C1]  __rcu_free_sheaf_prepare+0x10a/0x2a0
[  548.552099][    C1]  ? rcu_core+0x8a8/0x1260
[  548.552134][    C1]  rcu_free_sheaf+0x31/0x200
[  548.552159][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  548.552204][    C1]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  548.552228][    C1]  ? rcu_core+0x8a8/0x1260
[  548.552253][    C1]  rcu_core+0x926/0x1260
[  548.552292][    C1]  ? __pfx_rcu_core+0x10/0x10
[  548.552320][    C1]  ? try_to_wake_up+0x8c5/0x14d0
[  548.552365][    C1]  handle_softirqs+0x226/0x860
[  548.552407][    C1]  ? do_softirq+0x77/0xd0
[  548.552440][    C1]  ? page_pool_put_unrefed_netmem+0x855/0xad0
[  548.552519][    C1]  do_softirq+0x77/0xd0
[  548.552550][    C1]  </IRQ>
[  548.552559][    C1]  <TASK>
[  548.552568][    C1]  __local_bh_enable_ip+0x100/0x140
[  548.552601][    C1]  page_pool_put_unrefed_netmem+0x855/0xad0
[  548.552633][    C1]  napi_pp_put_page+0x133/0x1e0
[  548.552692][    C1]  skb_release_data+0x8c3/0xab0
[  548.552730][    C1]  __kfree_skb+0x5d/0x210
[  548.552759][    C1]  skb_queue_purge_reason+0x2e5/0x3a0
[  548.552823][    C1]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  548.552868][    C1]  ? packet_release+0xb50/0xd00
[  548.552928][    C1]  ? preempt_schedule_thunk+0x16/0x40
[  548.552962][    C1]  packet_release+0xb81/0xd00
[  548.552989][    C1]  ? __pfx_packet_release+0x10/0x10
[  548.553011][    C1]  ? down_write+0x16b/0x200
[  548.553050][    C1]  __sock_release+0xa0/0x1f0
[  548.553112][    C1]  ? __pfx_sock_close+0x10/0x10
[  548.553148][    C1]  sock_close+0x1c/0x30
[  548.553182][    C1]  __fput+0x418/0xa50
[  548.553218][    C1]  task_work_run+0x1d9/0x270
[  548.553246][    C1]  ? __pfx_task_work_run+0x10/0x10
[  548.553278][    C1]  exit_to_user_mode_loop+0x204/0x770
[  548.553303][    C1]  ? rcu_is_watching+0x16/0xb0
[  548.553337][    C1]  do_syscall_64+0x328/0x520
[  548.553364][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.553390][    C1]  ? clear_bhb_loop+0x70/0xc0
[  548.553419][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.553443][    C1] RIP: 0033:0x7ff7c159e159
[  548.553477][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.553501][    C1] RSP: 002b:00007ffeb525acf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  548.553529][    C1] RAX: 0000000000000000 RBX: 00007ff7c1827da0 RCX: 00007ff7c159e159
[  548.553547][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  548.553562][    C1] RBP: 00007ff7c1827da0 R08: 0000000000000006 R09: 0000000000000000
[  548.553579][    C1] R10: 00007ff7c1827cb0 R11: 0000000000000246 R12: 0000000000085e1c
[  548.553596][    C1] R13: 00007ff7c182618c R14: 0000000000085c73 R15: 00007ffeb525ae00
[  548.553626][    C1]  </TASK>
[  548.553634][    C1] 
[  548.553640][    C1] Allocated by task 8133:
[  548.553681][    C1]  kasan_save_track+0x3e/0x80
[  548.553705][    C1]  __kasan_kmalloc+0x93/0xb0
[  548.553729][    C1]  __kmalloc_cache_noprof+0x321/0x600
[  548.553750][    C1]  hwsim_update_pib+0x7e/0x400
[  548.553811][    C1]  hwsim_set_promiscuous_mode+0x196/0x2e0
[  548.553841][    C1]  drv_set_promiscuous_mode+0x159/0x2e0
[  548.553901][    C1]  drv_start+0x4ea/0x1010
[  548.553956][    C1]  mac802154_scan_worker+0x8e6/0xe60
[  548.553990][    C1]  process_scheduled_works+0xc3d/0x1630
[  548.554020][    C1]  worker_thread+0xa47/0xfb0
[  548.554050][    C1]  kthread+0x38b/0x480
[  548.554070][    C1]  ret_from_fork+0x514/0xb70
[  548.554105][    C1]  ret_from_fork_asm+0x1a/0x30
[  548.554139][    C1] 
[  548.554145][    C1] Freed by task 17561:
[  548.554157][    C1]  kasan_save_track+0x3e/0x80
[  548.554178][    C1]  kasan_save_free_info+0x40/0x50
[  548.554210][    C1]  __kasan_slab_free+0x5c/0x80
[  548.554233][    C1]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[  548.554261][    C1]  rcu_free_sheaf+0x31/0x200
[  548.554282][    C1]  rcu_core+0x926/0x1260
[  548.554304][    C1]  handle_softirqs+0x226/0x860
[  548.554333][    C1]  do_softirq+0x77/0xd0
[  548.554359][    C1]  __local_bh_enable_ip+0x100/0x140
[  548.554388][    C1]  page_pool_put_unrefed_netmem+0x855/0xad0
[  548.554412][    C1]  napi_pp_put_page+0x133/0x1e0
[  548.554438][    C1]  skb_release_data+0x8c3/0xab0
[  548.554472][    C1]  __kfree_skb+0x5d/0x210
[  548.554497][    C1]  skb_queue_purge_reason+0x2e5/0x3a0
[  548.554533][    C1]  packet_release+0xb81/0xd00
[  548.554551][    C1]  __sock_release+0xa0/0x1f0
[  548.554588][    C1]  sock_close+0x1c/0x30
[  548.554619][    C1]  __fput+0x418/0xa50
[  548.554645][    C1]  task_work_run+0x1d9/0x270
[  548.554667][    C1]  exit_to_user_mode_loop+0x204/0x770
[  548.554689][    C1]  do_syscall_64+0x328/0x520
[  548.554713][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.554735][    C1] 
[  548.554742][    C1] The buggy address belongs to the object at ffff88802b70ba80
[  548.554742][    C1]  which belongs to the cache kmalloc-64 of size 64
[  548.554791][    C1] The buggy address is located 0 bytes inside of
[  548.554791][    C1]  64-byte region [ffff88802b70ba80, ffff88802b70bac0)
[  548.554817][    C1] 
[  548.554823][    C1] The buggy address belongs to the physical page:
[  548.554845][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b70b
[  548.554868][    C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  548.554888][    C1] page_type: f5(slab)
[  548.554911][    C1] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122
[  548.554940][    C1] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000
[  548.554953][    C1] page dumped because: kasan: bad access detected
[  548.554970][    C1] page_owner tracks the page as allocated
[  548.554979][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5622, tgid 5622 (syz-executor), ts 163065137504
[  548.555019][    C1]  post_alloc_hook+0x1f9/0x250
[  548.555061][    C1]  get_page_from_freelist+0x2209/0x2280
[  548.555085][    C1]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  548.555109][    C1]  allocate_slab+0x7d/0x620
[  548.555137][    C1]  refill_objects+0x2d5/0x350
[  548.555166][    C1]  __pcs_replace_empty_main+0x2c8/0x6c0
[  548.555194][    C1]  __kmalloc_noprof+0x47b/0x720
[  548.555214][    C1]  tomoyo_encode+0x2ad/0x570
[  548.555298][    C1]  tomoyo_realpath_from_path+0x5fa/0x640
[  548.555328][    C1]  tomoyo_path_perm+0x283/0x560
[  548.555350][    C1]  tomoyo_path_unlink+0xaa/0xf0
[  548.555380][    C1]  security_path_unlink+0x15f/0x330
[  548.555433][    C1]  filename_unlinkat+0x349/0x610
[  548.555467][    C1]  __se_sys_unlink+0x2e/0x140
[  548.555491][    C1]  do_syscall_64+0x166/0x520
[  548.555514][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.555537][    C1] page last free pid 8205 tgid 8202 ts 163050387135 stack trace:
[  548.555554][    C1]  __free_frozen_pages+0xc93/0xd90
[  548.555588][    C1]  tlb_finish_mmu+0x13e/0x220
[  548.555609][    C1]  exit_mmap+0x4b2/0x9f0
[  548.555639][    C1]  __mmput+0x118/0x420
[  548.555676][    C1]  exit_mm+0x221/0x2d0
[  548.555696][    C1]  do_exit+0x6cd/0x2360
[  548.555716][    C1]  do_group_exit+0x22d/0x2f0
[  548.555736][    C1]  get_signal+0x121b/0x12c0
[  548.555764][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  548.555798][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  548.555820][    C1]  do_syscall_64+0x328/0x520
[  548.555843][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.555866][    C1] 
[  548.555872][    C1] Memory state around the buggy address:
[  548.555909][    C1]  ffff88802b70b980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  548.555926][    C1]  ffff88802b70ba00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  548.555943][    C1] >ffff88802b70ba80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  548.555955][    C1]                    ^
[  548.555967][    C1]  ffff88802b70bb00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  548.555984][    C1]  ffff88802b70bb80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  548.555997][    C1] ==================================================================
[  548.556034][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  549.415268][    C1] CPU: 1 UID: 0 PID: 17561 Comm: syz.2.2790 Not tainted syzkaller #0 PREEMPT(full) 
[  549.424673][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  549.434755][    C1] Call Trace:
[  549.438063][    C1]  <IRQ>
[  549.440945][    C1]  vpanic+0x56d/0xa60
[  549.445165][    C1]  ? rcu_is_watching+0x16/0xb0
[  549.449984][    C1]  ? __pfx_vpanic+0x10/0x10
[  549.454544][    C1]  panic+0xc5/0xd0
[  549.458332][    C1]  ? __pfx_panic+0x10/0x10
[  549.462820][    C1]  check_panic_on_warn+0x89/0xb0
[  549.467799][    C1]  end_report+0x73/0x170
[  549.472083][    C1]  ? rcu_free_sheaf+0x31/0x200
[  549.476882][    C1]  kasan_report_invalid_free+0xfa/0x110
[  549.482464][    C1]  ? rcu_free_sheaf+0x31/0x200
[  549.487267][    C1]  ? rcu_free_sheaf+0x31/0x200
[  549.492074][    C1]  __kasan_slab_pre_free+0x104/0x120
[  549.497397][    C1]  __rcu_free_sheaf_prepare+0x10a/0x2a0
[  549.502981][    C1]  ? rcu_core+0x8a8/0x1260
[  549.507436][    C1]  rcu_free_sheaf+0x31/0x200
[  549.512062][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  549.517915][    C1]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  549.523145][    C1]  ? rcu_core+0x8a8/0x1260
[  549.527593][    C1]  rcu_core+0x926/0x1260
[  549.531877][    C1]  ? __pfx_rcu_core+0x10/0x10
[  549.536589][    C1]  ? try_to_wake_up+0x8c5/0x14d0
[  549.541597][    C1]  handle_softirqs+0x226/0x860
[  549.546424][    C1]  ? do_softirq+0x77/0xd0
[  549.550805][    C1]  ? page_pool_put_unrefed_netmem+0x855/0xad0
[  549.556919][    C1]  do_softirq+0x77/0xd0
[  549.561124][    C1]  </IRQ>
[  549.564079][    C1]  <TASK>
[  549.567039][    C1]  __local_bh_enable_ip+0x100/0x140
[  549.572281][    C1]  page_pool_put_unrefed_netmem+0x855/0xad0
[  549.578214][    C1]  napi_pp_put_page+0x133/0x1e0
[  549.583103][    C1]  skb_release_data+0x8c3/0xab0
[  549.588006][    C1]  __kfree_skb+0x5d/0x210
[  549.592383][    C1]  skb_queue_purge_reason+0x2e5/0x3a0
[  549.597811][    C1]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  549.604038][    C1]  ? packet_release+0xb50/0xd00
[  549.608955][    C1]  ? preempt_schedule_thunk+0x16/0x40
[  549.614384][    C1]  packet_release+0xb81/0xd00
[  549.619104][    C1]  ? __pfx_packet_release+0x10/0x10
[  549.624347][    C1]  ? down_write+0x16b/0x200
[  549.628901][    C1]  __sock_release+0xa0/0x1f0
[  549.633542][    C1]  ? __pfx_sock_close+0x10/0x10
[  549.638785][    C1]  sock_close+0x1c/0x30
[  549.643011][    C1]  __fput+0x418/0xa50
[  549.647055][    C1]  task_work_run+0x1d9/0x270
[  549.651698][    C1]  ? __pfx_task_work_run+0x10/0x10
[  549.656859][    C1]  exit_to_user_mode_loop+0x204/0x770
[  549.662272][    C1]  ? rcu_is_watching+0x16/0xb0
[  549.667086][    C1]  do_syscall_64+0x328/0x520
[  549.671717][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.677818][    C1]  ? clear_bhb_loop+0x70/0xc0
[  549.682526][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.688459][    C1] RIP: 0033:0x7ff7c159e159
[  549.692911][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.712554][    C1] RSP: 002b:00007ffeb525acf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  549.721021][    C1] RAX: 0000000000000000 RBX: 00007ff7c1827da0 RCX: 00007ff7c159e159
[  549.729119][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  549.737127][    C1] RBP: 00007ff7c1827da0 R08: 0000000000000006 R09: 0000000000000000
[  549.745132][    C1] R10: 00007ff7c1827cb0 R11: 0000000000000246 R12: 0000000000085e1c
[  549.753149][    C1] R13: 00007ff7c182618c R14: 0000000000085c73 R15: 00007ffeb525ae00
[  549.761184][    C1]  </TASK>
[  549.764834][    C1] Kernel Offset: disabled
[  549.769177][    C1] Rebooting in 86400 seconds..