last executing test programs:

6.442401038s ago: executing program 2 (id=4763):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x59, 0x8, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x28, {0x2, 0x8, 0xf, 0x1, [0x285c, 0x6, 0x4, 0xfffffffffffffffb]}}]}, 0x50)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x8000}, 0x2e)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x23, 0x803, 0xfffffffd)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x88}}, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)

4.098464381s ago: executing program 3 (id=4788):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8e000000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf7f00000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000010000b7050000080000008515000000a500000095cf8f0cf6b9ce0ae05d9e01ed023ecd5c7c5423e28ec73c4002946384d57c98b3f34f6623a97b402c5f283144009fda62be52138bbf7bcac0723522c1b2f046695963946bc19f2879d364f3b192f3"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

3.924948961s ago: executing program 1 (id=4791):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80000)
connect$x25(r0, &(0x7f0000000100), 0x12) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.921932057s ago: executing program 3 (id=4792):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x118, 0x4a, 0xe3, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x1, 0x1, 0x1, 0x7fff, 0x32e}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000058a2001000000000000000a0c020240000000000000000508000a408e187de008000b400000000108000a400000000208000b4000000004140000001100010000000000000000000300000a000000004cf98c2bf9d815cdbba5205ac2642009e2414a7969e76b1e8b4754b8503bc65f92ab6a297714780f50f5ecf2ad146196a90d"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840)
unshare(0x22020600)
r3 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe000001000000008400120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00"], 0xbc}, 0x1, 0x0, 0x0, 0x4000845}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0)
syz_genetlink_get_family_id$nfc(&(0x7f0000001600), r4)
sendmsg$NFT_BATCH(r1, &(0x7f00000036c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003680)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_DELSETELEM={0x1e7c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e60, 0x3, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xf8, 0xb, 0x0, 0x1, [{0xf4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xe4, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_FROM_DATA={0xb8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x18, 0x1, "05d375fd82fb65da28e7a9a1b0d313731043df01"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, {0x1710, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "68f0101b1dad7dfd894cda5d8f0ecfe0369b9b04e760ea2ee047f94b2842123eb8c9a0b1b09f60fa81e9597d9f2084f9934c98ddfbac9d1ad97e69e8372dc3f99eef8e2607125d4c325b42f087b8275558aaa24221abdedee5992523e42dc1f7641ba75bb09c837459d4c98aa631d0d5db0c2fdc25e5310fd02f0db1d50727ae"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x7c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "2b9d7a0b9af4ba48008f0b39c50c8c7231f41e24fc18b492c1ed077626fb2b28eb38ba9ca211d2ec74665601545a2ce22aa7f3271b70ff509fae748384625f739895ff08fb5a97c3183843e505a10d6567d24daeb6e1014065a777f41baa3b4223ea416c74ba7d97c8b6201fe62be22791dd721d4b99ffb0796c932a7860ef8d630e83e6cc8c"}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x83, 0x1, "34a645019a327e8fd06f4322b38f36309efdaf920d48f6f66e47fd25ee1305749db1a5f8d2c333bbad93eda08e7efaa4f423dd420cc12b9cb02afda598615ba381c3b96363caa0abadbd2f806972f0a3dbb1ea3bb20bdd8ec31f57603bce8fbb7ccf8aa186d74ec8a8ac0a372413ba2d3e83402dea6165994794dcaede8080"}, @NFTA_DATA_VALUE={0xa, 0x1, "1d8830fa9ac1"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x1240, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "5af8d3448da1e3d2a88087ceec77855a1307cd18c49c9a491f91422c7abd8c2a2448c503653fc1312a9ae6f9a049d1d08ad27f981f8cb191052506657bdbc74b52"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "f0f28524490615730dfd5e45c04712213f815861fdaf9fbe767c1098fa728a4706f8010a6357b482699f3633688c876fa31ad3bd3da084db4c14786d3c21b50e24237c574d8f6b8341069230448bc1d0acd3e1b87b926f0f4c64e3f0dfd53d65134c14ce1ea3c859de9c70b9e03b5b6ac7f6330e12960c99291a6ce2687c1fbf9bf3c49f2cd541b40b1c0e7c36a685279aa46abe47248513d929055d9b8c3a1762d9b45ed95a0e11863f232a9ed845dd47607a1c3e66a1bf9da5d506da38ab4a7d9677ea43"}, @NFTA_DATA_VALUE={0xde, 0x1, "25a6d3ddffbeba5102cf66a3c6a969510528bb62d666bae2c85c0d1b97cf3ee0acd51a290e0ca1fd5899991f90c25546b077d35b822c8879bfb4aad097cf57c91baea79ac4af5aec6f85c0ff411038ff2d451a1bf014013a1fa68de422b6bee09810ac1830bdbe27b4d71cde188fb706c4e9a43b1411e0f97d140c3f12ab1a8e3bff96c2809bb23022a4a5df05862f0b9f3bd3229b99740d13e8a2856a50d895967f23aa0647423be0808e3d9cd9db1c41984e66f1f827c1356d31bb86f97f69127178b78897c9be17f0ef882597c31119beca2abe64c058ed97"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x74, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_DYNSET_EXPR={0x3c, 0x7, 0x0, 0x1, {{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x48, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}, @NFTA_MATCH_REV={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RANGE_OP={0x8}]}}}]}]}, {0x5a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xab}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x474, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xc000000}]}}}, {0x35c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x50, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_TO_DATA={0xd0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "36dcb9813d94974436eadfb37876f965b267c7cf0d02eb0abbfec86139c0377a900bf2cc92e473788ae2a09ce4ab9b535ed991551d5d9ef11dcb6215578083f67aab0cbf4a2a320f2fa598a91b4364575e7eca7264de6e03b17e1e29382621ab1ce9d800580e2765a5d2c2b0449fea2b8551de1a51faa28d6afb15b2b6d6fec5acca29be3042df3eb57f6481aaf944345d7cbc2e1f7dec9011648838d289caad5d448aaaf8706f35a7c49b3dfb19ff10258d3fde046c835c5be028aaee08a344593a352755574f"}]}, @NFTA_RANGE_TO_DATA={0x218, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x93, 0x1, "e4a19ece9c9d322bf36fda390cf17e8c9620b22817036a18ac2a8fa20ce4a33657eba821185aceece8a384801f25363a5798414dd9071230f20d7dd34dbb14f004c4e3b3cf7838fedf72e0dacdc7180f7a153d68ab2b321b2f5c5d0243465210b98b86601ade1f29ea33ca5673c221c8aaf4f2d0917cf4ddc159b7f09c4c23a3b77bd4c0928779f49667f028eab4bd"}, @NFTA_DATA_VALUE={0x47, 0x1, "c393efb91f07a9a1c60ceb1f6a9c0ee69b9e7f7993ce9ab6742fe49dbc1ff8d0c0cfe1e059efcc7bab27860f872f09e6e3deb62856471cb9d97fbd8471e32c2462b537"}, @NFTA_DATA_VALUE={0xaa, 0x1, "0bf2db87661bde99a32a720c095fb4048a33c4b5df7c610fcf0619eed8a8472042265dbc167cf525b4126942392c70f4a519e0be7edcfc69549c50f4c05ec5ee9c2af0670fc8563c1c7b59ff45b5b8c4cc096daf49d480cd80b653ed2f5372ff4ef666a97c325214e58c51516b62c84b1ec5e8f026a6a02ebfd65837e52b05c4acdb5d2fe277ac0caf48e263db69aca01f428eb938cf4ba5c0a93508313da813f5dca6f9bc28"}, @NFTA_DATA_VALUE={0x5c, 0x1, "9eedda7bff9c19b1e08728595687f68271ab26b216f6e9c40ac8a9368f26d42d98928b4162f096babdfbe877f1bbdc1784ec66188a876421b29aa3dd80190b13691f71145542ca73df8e87b05642949659f89ad803b8e4a5"}, @NFTA_DATA_VALUE={0x12, 0x1, "468934b40a50565091c6b2ec6cbc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x46}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x31}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa8}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x98, 0x6, 0x1, 0x0, "7b16255c737105e74d50d7762d37db502a1991a84cba885062df4e4d75e847952fbf7bf03ff02ceba9ef6b0460fd65b0ff615736fad75d3f733ec2910c272cb5f4db52bf833130dcd9de521c7c1c1bd7d907a1dbeea76ef8ae88e1347c57f2441697ba4173c303056c95b70dbe9e33711501a4eda984be44ad570191471c4360c2a9ec1c2e4e32d57a173b75ba2ed499870b3c2c"}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "fe29bb4c4c166dae5938c5a9394f32b1744eaad758d7687c2bd6728c2510b6b1e986d7903ed6bf751c1bf8b70e2e530620aa0a56cef9c08e2df13d10a521143370f18e55b3debd0ec4e64b9fcbdad8979e6c3e4a"}]}]}]}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x1f2c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r7, 0x8b32, &(0x7f0000000040))
writev(r1, &(0x7f0000001580)=[{&(0x7f0000000080)="f36db0856e42797971c6dfecd07a0581f3ea8ab6d96afa1d377b", 0x1a}, {&(0x7f00000000c0)="0ae9fccfb059c3f89ae1ccbeb1d1885fa04662d85c514a46cc95de017f83d71ac1af86dab63f3ecd73060580e125e8c46d815b86ae713870f22e5710aa2cac5124debb340c8cc3a4912f8a8cbf55f70888f7f51cca13e9efbdb5e9a5a990ee074da9841f131cefe596874604c417037e32c5dc3c48317049c54177bb47804bc36158a611d503df2b7f517bb098b1a79cd8c916e127c41a283e4969afa10bb87d62077121c61a173df519de35988f01dbf5", 0xb1}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="98bb8de2cbbaed1ee7e33e748faf303956665e9f01f717287a74d8d58bf608963ce721a41adc88596a4685073fcb4361cda4ffc38281e2d8f5caa1f069d8939f9b0ba5dbe0a5f9fa611deb6c28c183bb", 0x50}, {&(0x7f0000001300)="128ccdf04d0004a0befe63555bab2bdca015000d52b076de592dd6414ad31a50b132bb975b785f2aabef1a2d00fcbab0aa21c71d35db114d884b5984cf8bfafbc4c963324e50d778741f9e8773d4978644d4779f13738e2094aa7c45c54d795974d09f5e0dd50bc9753abd4d4ebcb63ab7a02008b384b0da137464cd788165506b077b498d344fecc0a3d7b524f93432dd3a7d8d6ba0bdb6d693cf252b07e41eea0d6f1dcd4213c8596170da4d5970b9fb6e5fafe0f6f0800d23e49b433709d69f0383fcb0adb9d905f81152af32b8b5f194d3a92c1dc67d8ea2", 0xda}, {&(0x7f0000001400)="4a9ac544d33dbab9316362431d618afb75922c775e9bcb060a9f7141bd8cbf047c273be0c558617fab257814d4a917f048e8e781b7eef33141786d3c4b705aff916bf84b56857f8a5673bb6bc24fa736151ab240630d1dd475cee3f87b3fb03632a719295d964b7cd0b861d92e7fde48423cf081914db2", 0x77}, {&(0x7f0000001480)="08eefcfa5e3490ce00ad8bb97e277bd2ead8319d93abc9d0a004a0287f2d06cb2085fa4f462d779a267f5046b5f3e6ec494184aa6d02ff41af94bdcf038905d05152d545a474f58b74abf47d8310ac531542fb55bdcf4dc77b91a2781f664ca2ae527c64566db24d5d51c824017920c360d9feb600ea34cf9c61fb3077b65d0b80408559b802936fbe0e9d8d375816e5115034965d3bebf734db5b9ba4585631e6e3dd03e156a6973d0a79971d878e43d2085769dd57bf090a069ab2764963ea9908c305e36d56a688e878cf176ea5194df933530797e7b20f1328dedfe9d0db7afb3606b074da14de34c246e5139e17be4dd10e", 0xf4}], 0x7)

3.682727889s ago: executing program 1 (id=4795):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESDEC], 0x40}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x801, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xffffe000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000000)='S', 0x1)
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7204}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24000000)

3.677613319s ago: executing program 2 (id=4796):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000f80000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.484848533s ago: executing program 2 (id=4797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x2}, 0x20)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0xc000)

3.479481182s ago: executing program 1 (id=4798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan1\x00', <r2=>0x0})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ac0)={0x2, 0x10, 0xf, 0x8, 0x214, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_address={0x5, 0x7, 0x33, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x1ff, @remote, 0x5}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x2, 0x96, 0x1, 0x20000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_lifetime={0x4, 0x2, 0x314, 0x6, 0x0, 0x2}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_x_sa2={0x2, 0x13, 0xd, 0x0, 0x0, 0x70bd25, 0x3505}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}]}, 0x10a0}}, 0x4001)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0xa0, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd59d, 0x6}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xd}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0x16}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa0}}, 0xc000)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1000})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x79e44343b1c0a261}, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f00000002c0)={{0x87, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1, 'wrr\x00', 0x8, 0x4, 0x24}, {@remote, 0x4e22, 0x10000, 0x6, 0x2, 0x2}}, 0x44)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000100000000000008001f0001000000", 0x24)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x7, 0x4)
r8 = socket$kcm(0x21, 0x2, 0x2)
r9 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r9, 0x0, 0xd, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x100}}, 0x3d2a98fc, 0x2, 0x8000, 0x6, 0x2, 0x6, 0x1}, 0x9c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8001)

3.374596805s ago: executing program 0 (id=4799):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4}, 0xc) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
close(r5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) (async)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r9, 0x1)
recvmmsg(r9, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10100, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x84, 0x0, @broadcast}}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)

3.357410021s ago: executing program 4 (id=4800):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', <r3=>r1, 0x7800, 0x8, 0x1, 0xff, {{0x2b, 0x4, 0x2, 0x4, 0xac, 0x68, 0x0, 0x5, 0x0, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0x6, [{@remote, 0x7fff}]}, @end, @timestamp_addr={0x44, 0x1c, 0x76, 0x1, 0x0, [{@multicast1, 0xd}, {@loopback, 0xc7}, {@local, 0x5}]}, @cipso={0x86, 0x4d, 0x0, [{0x5, 0x2}, {0x6, 0x4, "001f"}, {0x5, 0xb, "ebf22e1b30d88ff638"}, {0x0, 0xb, "266157a138da360b7a"}, {0x2, 0xd, "fef1073741171ed3f910d6"}, {0x7, 0x2}, {0x6, 0x3, '?'}, {0x6, 0xc, "e7b9fda47c7252f09697"}, {0x6, 0x5, "fa5fac"}, {0x0, 0x8, "7a6f3b3282df"}]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0x8, "48d27afc4eec"}, {0x0, 0x11, "40ca6bcf070d9c88010f90d898ae6f"}]}]}}}}})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x10000}]}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0x6}, @union={0x4, 0x2, 0x0, 0x5, 0x0, 0xf80, [{0x2, 0x3, 0x1}, {0x1, 0x5, 0xa0000000}]}, @ptr={0x5}, @struct={0x10, 0x1, 0x0, 0x4, 0x1, 0x401, [{0x7, 0x5, 0x5}]}, @fwd={0x10}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/148, 0xa3, 0x94, 0x0, 0x3b2}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000700)=""/254, 0xfe, <r5=>0x0, &(0x7f0000000800)=""/58, 0x3a}}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000d00)=<r8=>0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r10=>0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000d40)=<r14=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r7, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004084}, 0x8c1)
writev(r6, &(0x7f0000003500)=[{&(0x7f00000035c0)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758495616c22692c9888acd74c8141f760b360d963b2ea9defa4e0d04a1b08b1e9bca95a6fef2e1e2e3bcdf3fe633f09f44363b28eec64030d7269c6024f118efe0eaeda4ce2ffd74748748ea9e1f264a4efc5eb41bc90831fc6d70a3bb367f094dd21b1165959e0a48e43d1e01976a1b9b430e28acd780f7ea7bb157a161644979b927f6c7109538395a73f29cfbc4b79f775dc80ac55ec12ebf839793e3a665921c15820a20298addeb88eddabce5fcef43cc3e81dd4aa8a5f84a0f9f996f3705c0e88146b1e19b21aee9d4143adf57e60a482507714ac4d52d2d2160cdf2809ec84e", 0x102}], 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, <r15=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000000ff07000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f6ffffff840000008600000018010000696c6c2500800000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', r3, @fallback=0x38, r4, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x5, &(0x7f0000000980)=[r15], &(0x7f00000009c0)=[{0x2, 0x1, 0x8, 0x1}, {0x0, 0x3, 0xb, 0x7}, {0x4, 0x3, 0x6}, {0x5, 0x5, 0x5, 0x1}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x7}, 0x94)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0)
r17 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b40), r6)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x84, r17, 0x815, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x84}, 0x1, 0x0, 0x0, 0x200040c0}, 0x44)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r18=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r18, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="8386c51b13ee4d9dc706598e8bf9f6ffa0aa82cc17ad2ddeb1f3def9b6a0f3f223467d21004212bddbec1aafd53c89a86556532836df6aed77f24b54eb3bb1fc177b765edb1c16278245cd18f29f6e3fdd74695e4added30863842b7af6d31715ad0b21a3a8566ef73b41bcca76eeb4f9d020b52ba2c7da39d64319c98d53aedf9098b55d40f468667ff2b34ba543f3fdb19cdb7d07761f2dd85cda821660516edf77f362323bf15860f99000000000000000000"], 0x44}}, 0x0)

3.337067546s ago: executing program 2 (id=4801):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000740))
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002680)=@newchain={0x1364, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0xffff}, {0xfff3, 0x8}, {0x3, 0x9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1334, 0x2, [@TCA_CGROUP_EMATCHES={0x1330, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0xfcb5, 0x0, 0x2}, "7bb8fd8fc01532acd2a97cea39bdaee75a816d175e95329bcd56c433b69cea26fc3e095c0d4dcb098439345cf0debcf7e526e66692064c2c87eff9f4ae62e2d881ae3f12a230f7d36a51de2df90a0484e5224e16579aefcdf13eb07ef2a257a7ab1e3be8302157f370ff8a4986699ede677a4ce0601d8b839ede8c7fddd6845b4d21e7c1411dd6bc0059676f91afcd8ff7581abc35a82ed17f9ee15233ecb7b4b0dd759e18118f96b1c3e445d2eada300e7c0f4c398bf0652d5f33b5932c6054dcb2954aac9dc2505509289c231f35763909342000637cea7cede2a05cea9e5f37434dccde3830021fecfff052df0524e2b7c83b6c70c9775d802dc797bdfcee0c38b92ce689820f5769b1e912a9cef02cac50dc7977365e53d476147e01199c04fb3fd16e62cb4e08fb44dad163a37ce4e3a5c940121eeb17a18d09574f51c87bdbf0b30791fc663b8d8e5a4b63cb82aa6aef5f9dd3d587587c2907e7fa8d9600efb57a4adf315ced7f8deeb2e4ad46aebb563546870e1a5744c31253eca4bcd869c5632dcdfbc6c7a9a9b9c9af9bf202e910b62b933803e479b92c07b5d3ce9b241acfe105f837beb5adeae656bba03ae1c7f64261bbbc848e44f5e0ec2e794bfa5f313a24e309d871f24672f70d505c880f6f589952c1e6fd3b37cbb18f7456389a0ddeb40acbfa67d7a0465a61b42986ffbedf7ca5e70ef4dca1fd8c5ccf09a6611de9f38515726c43db977cb3806076c38869d73df6936ebaad3a17ee0d033cb2d1a4285cd22a7bef24156aaa685d42a71971eb931e20851af3b95cf144f91d97035121a138c7648971b2917e925d7662450a581736cf3f8bfc0c2a78463ba7fab075cf7fa831d56663c495e2e8186d0714107c7afeb2b1b2438a9c0ba985b8176383119093538ba0b3f110e489e2bed0576a79fa82b6c09e581bab871da041fcb2e72267a255c2a6b2360c39b8f1e93b7169d1d2e9756e339f8c3efe66bf76caf7179a542cbc0fd7cb5f7ecb95f497dbc04fc5a782e864f0d01cf7525b714449508c2e55521a4d6dcce6984087cc70f4cfb60c858a6adcba0b8cfe0f12929e2518cf6f1357aaf33aae8bd7bc6b4c18f39ba9d959b374a522d607f7d08f33f6c16f262c279200bb0adecd708e2717375db2352012d9bf0c1b4b0eb4c9e1abaa0f8551a1edb30a1f756dd3bf80d4fcc25804741b98feb9f42c202fae808aca16a248ce8d676fa081299da5db1aa4f38b847427ab2ed27ca7e9e464de32e6e4583f7577dbca83faf78b83a72e19ef8d2a825876a1fda834e195f70342d86064d272d7e967df360f441beabce62e318790a19986bdaac01e7fca8eadc4a339a8a76385519b2dc069035ce6843a85ac2215ac107f26b4ac707f212bb8033ba3ffb9fb088d4a8c6e2c921db97fb8e9544582fb74e4c4323accd37a7581ba67dbabe640d6d5ae43433f18c6a062479f4af45994677a8b2c97e5efe91a9bb9510765ac4a2dbf8ce2312467eb95ce15482d174265190978ed0d903bf3d68f5de4e55fb1453b663fec0c4097ad62a67069f368ab68ef02f789fca7e6c173f9308e897a5ddf41f8f9300a6bfccfc39de32fe1018e9f0c1f0c83fbdd5a2e64b493e81de0a55d289c847d584e6bccff4f0f478f298b71b0610af9eb0914eb45e09872130d252ed37917dac40dbe53478981d535d6c6187d30019eaf759b402814342d69d9824016690565db9584e28e238fadbba7afbb7401cb99e0711b46e6828fe40a653a792f2210ba08381033133b9c8c1e62cf11668188cc422fcbea386507d58a964135e3974b6687fd7286b081bb7259c5e757aaa7a898b9b273b753df60ae5ec0be50ac01cfb7e8a6bcba4899664f459f406d99f3670fcb951538088c2070ba726193f1475fcb075bfd08da6ed0e4b1565481fc47ecca57e9faa33961b582fb918dc3385e154e33efe1944c4ab69bdba26ef9891b51aca4b08dd3d7ba6d7262d7c2fdc538479f83b7e838fcd443ba00553e589248ae5d3d656ab7dab319f1f23a3810c3524ebd040b7e81bf04606c6ed56529a2ee121593b839df82f6090c9f4c780fe70a98703e309f38e5032ed920f55df668c297d8e2837f69476d56769113e625334fcc4f94d8fd9fee159b7f7135e792efd11fb8eeeacd08375613fcf1f1d5a7facd61bedc864bb5a61f93385d1a37dbbba0410c8506c700337524f51b00296ca845d56801bc0e593c8e640dd0736cced0d2b67b2768c8e7724bd5094ffe9a48fbe47fd63b5db3ceb7c17675b53c6ed677b67a9997dbd5738a94d6ac9097962a56aa8b300a6fb09b058000ff765425f43ec38aac3323d9fc30069bbe0087ed9cb916fe82d10c9c22a1ec029a8aa53cdc073e255430beaabec859b9281ab29a79bfd235bb9ed512cc5d4a1c0c599da32713badb4b65eaccf27bef93e9e7ccb5a7219b1e1c808f88fc7c6526ea0d2dec842ff38e934e985f03ed79ec4cbac6528592ec3fef264e4f7eb956b4e69f1d8597863d49b858a9c4437f8687ae8c9663bb0c06abe3c6ad3e1591b82b49d2b70952d7fb6b103477c673cadb4cfd12df5a4e44c1061ca10ae85624c322e09dcbbc9d6e74dfb6da1d03f5dccc726f730bed9cf1e08cbfb4379cdb230fd8f36c1f0f01ca83b0c2050648ec34be96000bf772516dc31d0197096286f445072f7177ef40d2ff4344e27e27037a662f5ec035a5d2f60d7a7353f0de21969656e15d40f4868f2025c918e644a5afc25cbd0deb392e2466092cb02ec6852c983d6a7e6e3396c1ab9d8ca499784b2e13cd179de661db8628090f3b477f183c318a6e8c55c53ec27248c3cd0e635fb7ead888c1d02bb2bd7692114a36d15bd73033eca1f81ee5ce404a7d5590052931d248a721d82e48e9d5fb4ec3d72b8347e0f3f684f2c005a91e1c3e9cff8cc00b9ac4cb964bc7f05d706ca941d3b0ac76f9b46df36fd6c210db99e89f217430c47b3ab4f484f0efed3ac4738fd8bdf10a784ce3a45a9ddc6d11997ba98240d332370cc9e441c60ace2b418d4851bcee0bc7f7f41a42d22ef2aecfa3085e0a96fb193a22309ae49886a7674501f1d86391df7400d22d0375a5ac89a2dc1cd8516d6ba0a5dff889ef6a0ff66126ccb4fc66253712f97bc1b1e59e00a00885a150190344ce0115998a414ddca7fb54347ecc2e13436bc3db9f9f11d53d321444b01ed8ef8af679f17e54c0f519d06931044bba84632efeac33f0e2cbc3d0f5f499b490594e9e3c72ddb704fce852675d63734ddea144c4004102c42061388fc9a672dbc9dbc23999e1a1c83b9dce24fc09263285d2f983d0f6e3ec03ba42a0d69d2563456f3346f568af50cbc037ee9f2d877861dad1791b772d36f31d1d531b3d789227d97a0716aae219f45f29e797d18c5d81df81ed949e063a3c75050ec486ca57c509d4759116eff8cb71adf1b42f591efad8eeec38520d655e426205e6b430044ee70bbfc9f556326b3dd978f8fb60455f0cc4eff953721bd2fc676eb8e8bbfd25420a6ccc2f74029f97aa6a0c96962132b646f1556b898592bf262358afe5fb8dd4781096d1ac1a84292d1135db4674b94dcbea00819f7a8a0dff150fe0c6a877924f672cd199fa0f7bf1977b2132f2fad8bcd2d334895490a081cbb38b7640657c88a6a0876a0bd45ba8b8a806d8fd4a553088775c54e98c09ab3183b4f3ffbb46a225358d6c76fe4ef014fbaece594fe767522bc4a9f9cd20503c18d1ffcf1f82b2ffc2054d2984b6f448d7631d6c88abcb3a0dc0c9ff58905fb6a8a36c5029172a48def20f72e37d48b5bb3b807fc4b879aa37a1f189e16b92212178aa94d3ef5cdfdc258dd1d9ed1a20f6f12d7ce7f342a99c3706efae15c01a4c2a326d0f434d8bfac87fb4a91a4d245dc3b0b3f14085dc9abfde44a5a8f6b50007afd14463512a89db13f1ca93b0fe87ea8f59fb60017c863b7e35bc61450562a247e71a994555da6b9195dbb1dab4117505fdba710d1118116f9a9b170192e8942476c0fced555d158166fc8cf5b6497fba8a84d0406345409840480670ed68c7dec78840cf2207cc1c4a035c73dd36ce6e7862e9444f58266f3739ce44e4aeaf3f27a7ee23da30e2c8a5e12087aea08b1fde706447b341c4c96e8abd46beee493fe7474be4651cae88059c27b55cbfcfd6f123229bfb3fc2de132c261d1f53e09ec5eef8fe6e13e7f1bd491859324ea8f10c6ea56977570a5c80eef641365d6f83545561fb58537e51fb4fd7fd58ebd887b44c9131e22a0002bb29ae2912ab281b76bcc6b516f389b7a9b65399abe45a26aaa93250897c964171332d9997b3b7eede410720cb72dc6dea7396d93d01c3e8a6f3df883fa84d866392421f929ccd722b40c4ddda408d140f3145820d287eb6572c07ed42c1e79a142522af4d662f7b475efde1d635f25a1d697618a5c8af3c9715542bcfa3a646a758027182bdfd76e60ab1517120f2217fb32b66bf06e0a23aff64c0f60eba37584663ec3a3917cb845bf80ae73aabd09dca3376efc4c747893d78d35cc17098150e48593810b2ce9138c547d189ab39dc611d3b19cd2139edac564b2a32bce0bfdd995572034e77118f21a42b7ca433e037e33e189a7adc0bff219c08181d7ea98caf8da5fc5828b1cc76da10d43972e6397263e44d2ba7e02e3570edb8e51299144974ba248feffa9905112caf09681b5f4e4d9088e034d6d183b0bc0378cc1bff33b025673430f7ea416a82072801307ddf677d564d80646bc5a177991ed2bab727fa8315d850faba7e31771ed4d865a8d6203638f58877a8607a6812b328167eaf7c7a480f9656305aa9053a353c215832b683f7c3fb315717c26a828f8cbc96b4bd4e542a566236edba1e0c902033e53b1936baf3a150559b5c5027d2eb19a43a20deb6a28ecfc90c9ada28debb9b7281258f067f2a317a7c15a0f7f9e373aba601e9c90d49e0dcd0307b0cfa62c1e06447f5fd222de875d6d4e6f04613be9e7ea12d62d9612356e486b8b7a1221ad0410c4c75d24a4cd3677219d2b24c9f0c5791b6c4ebf096d82da483d4aaa25cb26e7bc363159b5d9f027d68360b8a5711a185abff0b348a37ccdc043b54731cf2fc8b9cfeefe87c891c2395830ae42bdea7f212a671c33d2a20dc940151c8890d50d2dfdd3c82f92c0a07ad0e60460c92416dd3ee26d3ca7ec82bec457f9d9bad58ec7e3e30b58a35b99a5253c198ce6478c4535169ee3bf634f203f7969fbe0119c2e6cd0a81836924307b05a6a4465594887f65363b004d3672914382ef5590bde0e88ef33aa423f5db3e816f85139ee404e38d7d6534e3cbed35921978979e116508c96b4749459dc73f364353a825cc9f810cc9a688e180be0f91c1e4ddf1146d66f4a9639e9b2a41482950b7316329791dfe446382111b38fbc50b8faebc47715fd8fed99dec2457d740b46a7ff608e07e11da272b7f442efa0d6aecc13b50b92025db1734abd3d5f521b9feffcc80a287f527a1b4f3632cf8cff5f01d9d428b3f3d4e52f2729b0d947914ebddd2820bf66fcc361cff3e37b6b7777ba65be0d1f5b322fca54e2f842e64129a9dcf5d7e54b26f28a0cca03ca27a55f116aecbf61aa0d1ce590198ac8c22ca5156e6fc9cd7be1d053c029b9c4f50dd0b4c1c75cbc175eeaee360c79e84456c996e040c3828f725496bffccfb1673bd90dd455467fba688afbd4ca63570c51fd50f4c5b60ba3220ce7e36ffbbd3cf567638e33e025a74ae19fb243dd1e6e27dda891811f3240983792daa3605"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe13, 0x3, 0x639}, {0x3, 0x4, 0x4, 0xc14}}}, @TCF_EM_CONTAINER={0xe4, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x40}, "cc17593f73741b667dfeab1c95fd752ef8502b2ee42a20171fe23e1b709d4c4d456e0c0b2ad51f7ca76dc242ce8d47e08bd001e8ac34712a33c083d82e8d995bfa7c449becb1bcf036bfac5e80cfbda0dd9c8c640ef87ade2cadddea535ea7b9dc7a13411731470949aaaf96ea9e8d8a49b9e748b82dab8bb3e404e20846c6f18a7658adaf7f24991f4ed70c8cf55609a8b96595c4a5f13fa92d0764ded7280e422dc4b4a438a3667bc07a749dcccd6cbe6891afae673297cf1568d1d26b46f8fa811743279c22867486d9acf78a0db76c46fe025e59a9ec"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0xfffa}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x8}, {0x8, 0xff, 0x100, 0x6, 0xb, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x6}, {0x3ff, 0x6, 0x8, 0x8}}}, @TCF_EM_CONTAINER={0xf4, 0x3, 0x0, 0x0, {{0x3d1, 0x0, 0x842f}, "004bc9f0a6d33fb5cb9e85c0b941992d33563f930e2ed11b14810140d6787e20f2a761ae26691d9de8446a8a3cde75b313cfadbfabffdf5c226e1e7c8c79ac74f91a7432a0230e092c2c1f5f2eda1ade34b9c144ebe2efa54539baae172b92d14cf63f8ad1d19ec3a199c87728c1b23a92f5d19ac0ac4c8457ec89751f107620faf22eba3aeeeeddc1020cf37ea4a40c6e960cd037fd446bb7d5003944e65b1dfa38ab87348a93d3b7984e5119d3da533c2e165a6b4592e793224a9af24c0a9a0b48cf097799b26ab1c2326715732621bc57711f7c9217ec8343f0b88326092f82e587185f"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1000, 0x7, 0x5}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x16, 0x1, 0x1}, {0x8000e, 0xa, 0x1, 0x0, 0x9, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x40, 0x2, 0xe}, {0xd79, 0x3, 0x1, "2a44ac"}}}]}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7f, 0x1, 0x4}, {0x7, 0x6, 0x1, 0x2, 0x6, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x8001}, {0xfffb, 0x7, 0x1, "5c990d42407e6a"}}}, @TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0x101, 0x0, 0x4f8}, "56158e647028b148f2545cd6857541ab2abcb8d38f041bbff116100e727f7198152dfc85429f786bb6711e0b909ecea2adc4882ef86a15c86f55"}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x4000}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff0}}]}]}}]}, 0x1364}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800)
socket$nl_route(0x10, 0x3, 0x0)

3.078596447s ago: executing program 1 (id=4802):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100), 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x200, 0x1040000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xfffffffc}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c42505abd307a0c4fa3838bf399ad5bd35f2d707c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e26, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x43, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2df070000000000001348589b763d46d14810acc5f700"}, 0xd8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3a, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x4)
listen(r4, 0x71e4)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000fff10000100080c10000000000000000000", 0x58}], 0x1)

3.078174493s ago: executing program 2 (id=4803):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x24020400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000df00000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740200000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}, 0x1, 0x0, 0x0, 0x448d0}, 0x40040c1)

3.07528977s ago: executing program 0 (id=4804):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x186}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='pim6reg\x00'})

3.006631766s ago: executing program 1 (id=4805):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000400), 0x0, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff1, 0x61a, 0xc8a1, 0x583, 0x5010000000000000, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r2)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf254d0000000e0001006e657464657673696d0000000f0002006e652b73b67464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="abb52e2ed25f7bf1000180000000000004000080"], 0x14}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x6, 0x0, 0x7, 0x20, 0x800, 0x7ff, 0x8ea}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x6000000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000148000001400000004000000000100000000615f00000000000000880000000000000000"], &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28)

2.938695586s ago: executing program 4 (id=4806):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x87, 0x0, 0x4000, 0xfffffff8}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="240000001200010a0000000000000000da113bc2c671e998b1ed6563f4800000000c00080008070000000000000400de80"], 0x24}}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYRES64=r0], 0x5c}}, 0x80) (async)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xf008}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) (async)
socket$nl_route(0x10, 0x3, 0x0)

2.937416092s ago: executing program 3 (id=4807):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000004000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.931616417s ago: executing program 0 (id=4808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x163180, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8040000, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x5c)
shutdown(r6, 0x0)
recvmmsg(r6, &(0x7f0000005000), 0x0, 0x60, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r10, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r9)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r13, {0xfff1, 0x6}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000380)={'wg1\x00'})

2.895810786s ago: executing program 2 (id=4809):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop, @generic={0x0, 0x2}]}}}], 0x18}, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop, @generic={0x0, 0x2}]}}}], 0x18}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$sock(r6, &(0x7f0000003640), 0x0, 0x20040059)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r8=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000100)=0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)

2.790562693s ago: executing program 3 (id=4810):
socket(0x11, 0x3, 0x3e) (async)
r0 = socket(0x11, 0x3, 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r4, &(0x7f0000000240)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
close(r3) (async)
close(r3)
socket(0x2, 0x3, 0xff) (async)
r5 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000180)=0x5, 0x4)
sendmmsg$inet(r5, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0x2, 0x5e20, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000400)="56e0f578b9be96fd5d41d7eed4549a815b589d4428ac1ee280b31ae250dd1e83b54de5b556cbd0ef396e006eed7be468113fc0607c52c46850b1c6d306a06ee01614f9d2747aae31cc71e29c274dba91200f546d2d85a5644fdc3fedf69da2d164340e8d415b35a08edea1ea96c9cbec2362c77bb11277ec4caa4ad0f3e769c5e575471f75fcd6639e5b9bb9", 0x8c}], 0x1}}], 0x1, 0x8804)
ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, @null, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @default, 0x9, 0x6, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async)
ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, @null, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @default, 0x9, 0x6, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000001c0)={0x8})
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_subtree(r10, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="2b6340aed7"], 0x5) (async)
write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="2b6340aed7"], 0x5)
r12 = openat$cgroup_int(r9, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async)
write$cgroup_subtree(r11, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
close(r12) (async)
close(r12)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x101)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000000c0)={0x0, 'erspan0\x00', {0x2}, 0x9})
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6)

2.696436824s ago: executing program 4 (id=4811):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x44}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f00000000c0)=0x2, 0x4) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6)
sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r7, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x37c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x340, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x2f4, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0xaf000000, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x90, 0x16, 0x0, 0x0, {{0x8}, {0x4}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x114, 0x1a, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a15a6ce4ed2dbc77499eb26844a4b31b"}, @TCA_CT_LABELS={0x14, 0x7, "bf91b338555d4b4d82637cd8f81d8678"}]}, {0xc2, 0x6, "c527675bf7f4646ae31c844a33598eff03ceaabbf6272a809016b3f45d79c400b539c7a4d14eaae83644f301ed04c18bf42d5c76a75e8a581d9a3557c255c6295de63eb3da7d415bef4d1f78361360ce6fe6411cab60fa0a5057105013247436fea28171a79df64b155fc529fcfebcabf8e2f34843a55ef8798b5d34a7f442bde0879242568c20977076b5be5c90ddd6de40fd02d6c00f1f52b2454bd700ba583c7a3e90fc14df63eeb534c65c8bfdca7233e81f51f78cc2c2ccc2f16679"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @multicast2}], 0x40)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r8, &(0x7f0000005200)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2e}}}}], 0x28}}], 0x1, 0x40088d0) (async)
sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240), 0x10b3}}], 0x1, 0x8054)

2.417657457s ago: executing program 0 (id=4812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x10, 0xba, 0x58, @local, @loopback, 0x8000, 0x7800, 0x2, 0x3}})

2.354749444s ago: executing program 4 (id=4813):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000080)="dfd9a358819b7c43197ff20b547b35c001e30be08d281dfa9a16ce36c21fa5a67e4ba57e2ecb9df5ab82e42b646f00837f8066baace9d54475d1d7a3f2552b8c0745a6c7be47ab476c120a84f3b0f3de3acd0c598142b93409569258ceb2ee9258aa2de58c699ad56b0c195407a4deb257919937b357b23d9d99f1e5e84eeaa880462e610a059b183fafb4bbf1e50471e0c3cb0abe184fe5138f75ecea8ae517aa0d7d44a91d807db1fb48f634d9ed4ed1bf1666dbadb78f37687306f6e7ac4365cb5e2c690ad18d8d461a04ddeb8ac150fbd5934bfef9783a2ddd07d40ac63a00bb48c6da4f6ff270b1977245b4508f97", 0xf1}, {&(0x7f0000000200)="c2a371d4d31e5eb853358af4f8a4bac4b6337243236bf602d2728931985cb7ebcc02f915f09d5681b48c0dd7ccdfb84c73b213b09d95589dcc56317fd44d6fad2b459b3435d196499cb7052c2d7fa176e5cc", 0x52}, {&(0x7f0000000280)="0bc88086155456dbd3585b6f11fae2f6ed0898b6529321d18d8aef0790562011c2e73a8370795ebe8955052622a7239ac2122e8e68cd145332bd0623356674c72af5634939199f0446b474b3a024e1e8f2e6cd347af12463c949e8ae7d882b9ec6b9d1e0e743178425577c94eef4817a", 0x70}, {&(0x7f0000000300)="2e00bb0c898201823f917a74d2cd0cf8d8e643490a9d0cd1f4da019fa2e70ab5ab73e3557364a8d308c44504d87bf9f4e3810a1391c2ef3814eed8fce1fbf69c4907d7ffa57816022fd7b7c92a0ad5146d84291f7fea408730c89482ee36f7e78cc6a62683cc27ab9d95540a33781d200934660187ef1820e1fa875e", 0x7c}, {&(0x7f0000000180)="e0aad9f50e941a9aec71a8c1750ddae90088ea677d101fd993728bd252adcafeb45d6807342f7e2cd9f7ec541461e8f95d14eb129504", 0x36}, {&(0x7f0000000380)="17258bf136e0f9a95a2817f8a9640784d1c41752a67eed77", 0x18}], 0x6, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa000}}], 0x30}, 0x1094) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@deltaction={0x1ac, 0x31, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdca}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x56}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f4000}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5668}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x1ac}}, 0x0)
socket$unix(0x1, 0x2, 0x0)

2.307570432s ago: executing program 1 (id=4814):
syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "af", "dd"}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x24}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="50000000ffffffffffff080211000000080211000025ad4000000000000000006400010000060202020202020100"], 0x2e)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700), 0x600, 0x40, 0x0)
accept$packet(r4, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

2.285975727s ago: executing program 4 (id=4815):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "1332b8d5dbabacf7", "a177e8b1af3ec18be135ce99c7f9a82e", "81549a6a", "a1fd332905973b41"}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011000101000000000000000000000000161074476965964713e1dff705f9c41b42d479965f88214137287f4fde4e921cd24358e0440f6f4bb5c54c6b9a987b3fa1e9f9eed1ad9fe18ec780074b80d13d446a0f17fef4150198469abdd5551735a0477ae8a09aaab6667f76b62737f6b9aaff3a53c186d0eae9b4325cda182804777b96f1e6fe6c24eb7170f3c7dbe5257485e8b256c11f2a4c213c1e7d9c68a419e58f41e9a0fb3c476a51475a25bc6d592866c96431479053b2a2b99a2711bc869481413aeedd79068ceb5060ea8593db9248e5cdeb66b913cad5ddb3a35692f92e2db668f9187b924fe45b3a7bd4e93cc1666b8e2b617052196c09a6959d9848c4d526d19653fb576326", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0)

2.198445669s ago: executing program 0 (id=4816):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0xd, 0x1}, {0x7, 0x4}, {0x10, 0x4}, {0x1, 0xffffffff}]}]}}, &(0x7f0000000f40)=""/4076, 0x46, 0xfec, 0x8}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
close(r1)
ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000100)="47615588b3d746efc8cebc10062a1edd4e5c6daf6e8fad07e836393a8cf471b47d53aa62203d2f02f1ff7fd92d161dfd4d22ef734735f4b9048ea00b291ecd8cc2a5380eb4044b1703a135bc858ffe5b35a6e6df63490cb335cbc6d3fa3c7bb1eb8676ae69fdc533f8a7183d8196d28676584f1bf117ef7e75986512945e4f3343")

351.785138ms ago: executing program 4 (id=4817):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000003c0)={0x67, 0x0, '\x00', [@pad1]}, 0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000008000000ee66c53538", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000060000000000000009000000900600010f000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000680)=[{0x4, 0x2, 0xd, 0xa}, {0x2, 0x2, 0x8, 0x1}, {0x2, 0x4, 0x9, 0xa}, {0x0, 0x5, 0x8, 0x9}, {0x1, 0x4, 0xe, 0x8}, {0x1, 0x3, 0xb, 0x1}, {0x1, 0x4, 0x8, 0xb}, {0x3, 0x5, 0x6, 0xc}, {0x2, 0x1, 0xc, 0x4}], 0x10, 0x8}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa0000000060a0b0400000000000000000200000074000480700001800a0001006c696d69740000006000028008000540000000000800034000000004080005400000000008000540000000000c000240000000000000000308000340000000d60c000140000000000000000408000540000000000c000240000000000000ffff08000340000000000900010073797a30000000000900020073797a32"], 0xc8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000840)={&(0x7f0000000800)=""/46, 0x21000, 0x0, 0x3, 0x2}, 0x20)
r6 = socket(0x2, 0x3, 0x0)
socket(0x28, 0x805, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
getpeername$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa002a008})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
r7 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10)

313.716348ms ago: executing program 0 (id=4818):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xa8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_emit_ethernet(0xda, &(0x7f0000000640)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x2, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0xb, 0x6, "b4f445", 0x9c, 0x11, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {0x4e20, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "b0d016c9d7fbf8513684182cb81b6e0c3d139ced8e40d9ebe681c11b07bfd847", "908df6b58ae9c8151c65eadb80d12b15fe726eff65218d21f6fc8d7e41daec8bd3123215eedad11275222c938c183e8f", "155935ce0b7006ba115d3c01101ab435e71c7a1bca23e635528b245f", {"82dc81604d2f11cc124c16f927262537", "0da855954422610e37f4f826aecf9929"}}}}}}}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000280)={'ip6gretap0\x00', 0x4201})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r9}, 0x8)
write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x20)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r11=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r11, 0xd}, 0x8)
close(r0)

211.526512ms ago: executing program 3 (id=4819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x69}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x10, 0x8, 0xa, 0x7, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x3e, &(0x7f0000000240)=""/62, 0x41100, 0x28, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xd, 0xffffffff, 0xfffffffe}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0x1], &(0x7f00000005c0)=[{0x5, 0x3, 0x7, 0x7}, {0x5, 0x3, 0x3, 0x3}, {0x3, 0x4, 0xa, 0x3}], 0x10, 0x8}, 0x94)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000006c0)=<r3=>0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0xade}, [@IFLA_VF_PORTS={0x0, 0x18, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "36fa31534ad9a62efeaf9027eeba0c1c"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "c722f4615eccc60a7f7eb8692b845cc9"}, @IFLA_PORT_REQUEST={0x0, 0x6, 0xc}, @IFLA_PORT_REQUEST={0x0, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x0, 0x6, 0xd9}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "d71b741a4b3300000800"}, @IFLA_PORT_REQUEST={0x0, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x0, 0x2, 'wlan1\x00'}]}, {}, {}, {0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "3af9ba9d98cb7f32e58fbb5b5361db16"}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "b425604ce523d38069abf5b72f3c9568"}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "063baff9f47a78f3478359e9dca046b5"}, @IFLA_PORT_PROFILE={0x0, 0x2, 'nl80211\x00'}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "263f3bb812f0c2b539aefcc52ebad5bf"}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "d4828f3bf723430beba83fd4a346cdcf"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "14cc0b14225e474946b71e7134bc18ef"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "6b92af424ceba7e174cb566400a274d5"}]}]}, @IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x0, 0x3, 0x9}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x0, 0x8, r2}]}, @IFLA_NUM_RX_QUEUES={0x0, 0x20, 0x6}, @IFLA_IFNAME={0x0, 0x3, 'veth0_to_bond\x00'}, @IFLA_MTU={0x0, 0x4, 0x2}, @IFLA_TXQLEN={0x0, 0xd, 0x2}, @IFLA_NET_NS_PID={0x0, 0x13, r3}]}, 0x2}}, 0x41)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESDEC=r1, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000042c82f9c6b4a995f343d385c8eaa3112fdc1e69b9ba9e531ba4e5044a3f4362f2ba94a3a1f7b6539808073c95b6bbd67915ece3726683d348f3daab301f44d8aff2340dd35e38cfbf43b76ab8ff4d0697f65002ed596e5179feb290165c3fe72d220e64c28cf944cbc8f6d988497d426148c751abd6800810c9438f89674f5d6ffa525a906d3259c8c661b1b00aa8f887e76d4a3a6beb405099dcffaeae8ce4e6718c677b2df757a5d4b14d6adef80a7dccffff017ce945cb775d55bfd42adeafb724fb2ab1bcb4b29ef80cfad806815569ace6d5b50d59c957b676387a80ef1c093a3a992c72c08", @ANYRES16=r9, @ANYBLOB="f1e6ffffffff0000000013000000"], 0x14}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x24044884)

0s ago: executing program 3 (id=4820):
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80000)
ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x2000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x200000100000011, 0x803, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r2, r1, 0x0, 0x15, &(0x7f0000000300)="cb0bb16825c7c1f3e4195da6f344ec2a03db3433e0", 0x0, 0xd, 0x7, 0xeb9, 0x8c73, 0x1, 0x401, 'syz0\x00'})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8)
getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f00000003c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000002ffffffb702000008000000b703000007030000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000100)="90fa5f85dc8bf85c2a706c30e6f5", 0x0, 0x5, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x5}, 0x50)

kernel console output (not intermixed with test programs):

x100
[  587.579351][T18605]  should_fail_ex+0x414/0x560
[  587.579376][T18605]  should_failslab+0xa8/0x100
[  587.579408][T18605]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  587.579438][T18605]  ? __alloc_skb+0x112/0x2d0
[  587.579462][T18605]  __alloc_skb+0x112/0x2d0
[  587.579487][T18605]  netlink_ack+0x146/0xa50
[  587.579516][T18605]  ? is_bpf_text_address+0x26/0x2b0
[  587.579541][T18605]  ? kernel_text_address+0xa5/0xe0
[  587.579561][T18605]  ? __kernel_text_address+0xd/0x40
[  587.579600][T18605]  audit_receive+0x2ea/0x2a80
[  587.579650][T18605]  ? __pfx_audit_receive+0x10/0x10
[  587.579676][T18605]  ? __lock_acquire+0xab9/0xd20
[  587.579725][T18605]  ? __lock_acquire+0xab9/0xd20
[  587.579754][T18605]  ? __netlink_deliver_tap+0x823/0x850
[  587.579773][T18605]  ? netlink_deliver_tap+0x2e/0x1b0
[  587.579799][T18605]  ? netlink_deliver_tap+0x2e/0x1b0
[  587.579827][T18605]  netlink_unicast+0x82c/0x9e0
[  587.579866][T18605]  ? __pfx_netlink_unicast+0x10/0x10
[  587.579896][T18605]  ? netlink_sendmsg+0x642/0xb30
[  587.579913][T18605]  ? skb_put+0x11b/0x210
[  587.579937][T18605]  netlink_sendmsg+0x805/0xb30
[  587.579967][T18605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  587.579990][T18605]  ? aa_sock_msg_perm+0x94/0x160
[  587.580020][T18605]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  587.580041][T18605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  587.580062][T18605]  __sock_sendmsg+0x219/0x270
[  587.580094][T18605]  ____sys_sendmsg+0x505/0x830
[  587.580123][T18605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  587.580156][T18605]  ? import_iovec+0x74/0xa0
[  587.580188][T18605]  ___sys_sendmsg+0x21f/0x2a0
[  587.580213][T18605]  ? __pfx____sys_sendmsg+0x10/0x10
[  587.580277][T18605]  ? __fget_files+0x2a/0x420
[  587.580293][T18605]  ? __fget_files+0x3a0/0x420
[  587.580323][T18605]  __x64_sys_sendmsg+0x19b/0x260
[  587.580349][T18605]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  587.580383][T18605]  ? __pfx_ksys_write+0x10/0x10
[  587.580407][T18605]  ? rcu_is_watching+0x15/0xb0
[  587.580436][T18605]  ? do_syscall_64+0xbe/0x3b0
[  587.580460][T18605]  do_syscall_64+0xfa/0x3b0
[  587.580477][T18605]  ? lockdep_hardirqs_on+0x9c/0x150
[  587.580507][T18605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.580527][T18605]  ? clear_bhb_loop+0x60/0xb0
[  587.580552][T18605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.580571][T18605] RIP: 0033:0x7ff51cd8e9a9
[  587.580589][T18605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.580605][T18605] RSP: 002b:00007ff51dc1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  587.580645][T18605] RAX: ffffffffffffffda RBX: 00007ff51cfb5fa0 RCX: 00007ff51cd8e9a9
[  587.580660][T18605] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  587.580673][T18605] RBP: 00007ff51dc1c090 R08: 0000000000000000 R09: 0000000000000000
[  587.580685][T18605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.580697][T18605] R13: 0000000000000000 R14: 00007ff51cfb5fa0 R15: 00007ffc37998238
[  587.580730][T18605]  </TASK>
[  588.133858][T18613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  588.326584][T18627] netlink: 'syz.0.3368': attribute type 10 has an invalid length.
[  588.530041][T18634] lo speed is unknown, defaulting to 1000
[  588.568849][T18637] netlink: 'syz.0.3371': attribute type 58 has an invalid length.
[  588.969405][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3375'.
[  589.242077][T18661] tap0: tun_chr_ioctl cmd 1074025677
[  589.252151][T18661] tap0: linktype set to 774
[  589.293464][T18665] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3381'.
[  589.399428][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3382'.
[  589.450345][T18672] netlink: 'syz.4.3382': attribute type 22 has an invalid length.
[  589.517617][T18677] xt_ecn: cannot match TCP bits for non-tcp packets
[  589.611087][T18670] bridge_slave_1: left allmulticast mode
[  589.617183][T18670] bridge_slave_1: left promiscuous mode
[  589.623958][T18670] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.643734][T18670] bridge_slave_0: left allmulticast mode
[  589.649415][T18670] bridge_slave_0: left promiscuous mode
[  589.663961][T18670] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.923174][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3383'.
[  590.347315][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'.
[  590.357805][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'.
[  590.433863][T18683] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  590.450231][T18634] lo speed is unknown, defaulting to 1000
[  590.694690][T18705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3388'.
[  590.980930][T18711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3391'.
[  591.006921][T18711] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3391'.
[  591.885815][T18419] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  591.911193][T18419] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  592.445981][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'.
[  593.795160][T18740] lo speed is unknown, defaulting to 1000
[  593.910830][T18754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3400'.
[  594.128018][T18761] netlink: 'syz.3.3401': attribute type 3 has an invalid length.
[  594.168269][T18761] netlink: 'syz.3.3401': attribute type 1 has an invalid length.
[  594.188729][T18761] netlink: 'syz.3.3401': attribute type 1 has an invalid length.
[  594.210114][T18761] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3401'.
[  594.242281][T18761] NCSI netlink: No device for ifindex 0
[  594.720111][T18782] syz.4.3409: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  594.754602][T18782] CPU: 1 UID: 0 PID: 18782 Comm: syz.4.3409 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) 
[  594.754629][T18782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  594.754640][T18782] Call Trace:
[  594.754648][T18782]  <TASK>
[  594.754656][T18782]  dump_stack_lvl+0x189/0x250
[  594.754686][T18782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  594.754709][T18782]  ? __pfx__printk+0x10/0x10
[  594.754734][T18782]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  594.754760][T18782]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  594.754786][T18782]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  594.754814][T18782]  warn_alloc+0x214/0x310
[  594.754838][T18782]  ? __pfx_warn_alloc+0x10/0x10
[  594.754865][T18782]  ? __get_vm_area_node+0x28f/0x300
[  594.754893][T18782]  ? xskq_create+0xbf/0x170
[  594.754923][T18782]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  594.754981][T18782]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  594.755015][T18782]  ? __kasan_kmalloc+0x93/0xb0
[  594.755040][T18782]  vmalloc_user_noprof+0xad/0xf0
[  594.755063][T18782]  ? xskq_create+0xbf/0x170
[  594.755085][T18782]  xskq_create+0xbf/0x170
[  594.755109][T18782]  xsk_init_queue+0xb0/0x110
[  594.755132][T18782]  xsk_setsockopt+0x57b/0x8d0
[  594.755155][T18782]  ? __pfx_xsk_setsockopt+0x10/0x10
[  594.755175][T18782]  ? __pfx_aa_sk_perm+0x10/0x10
[  594.755202][T18782]  ? __fget_files+0x2a/0x420
[  594.755215][T18782]  ? aa_sock_opt_perm+0x74/0x110
[  594.755231][T18782]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  594.755249][T18782]  ? __pfx_xsk_setsockopt+0x10/0x10
[  594.755271][T18782]  do_sock_setsockopt+0x179/0x1b0
[  594.755292][T18782]  __x64_sys_setsockopt+0x13f/0x1b0
[  594.755313][T18782]  do_syscall_64+0xfa/0x3b0
[  594.755326][T18782]  ? lockdep_hardirqs_on+0x9c/0x150
[  594.755349][T18782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.755363][T18782]  ? clear_bhb_loop+0x60/0xb0
[  594.755382][T18782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.755396][T18782] RIP: 0033:0x7fec72d8e9a9
[  594.755410][T18782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  594.755423][T18782] RSP: 002b:00007fec70bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  594.755439][T18782] RAX: ffffffffffffffda RBX: 00007fec72fb6080 RCX: 00007fec72d8e9a9
[  594.755450][T18782] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000007b
[  594.755459][T18782] RBP: 00007fec72e10d69 R08: 0000000000000004 R09: 0000000000000000
[  594.755468][T18782] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  594.755477][T18782] R13: 0000000000000000 R14: 00007fec72fb6080 R15: 00007ffffce43d18
[  594.755506][T18782]  </TASK>
[  594.755526][T18782] Mem-Info:
[  594.817788][T18788] tipc: Started in network mode
[  594.881813][T18782] active_anon:10400 inactive_anon:0 isolated_anon:0
[  594.881813][T18782]  active_file:1621 inactive_file:40060 isolated_file:0
[  594.881813][T18782]  unevictable:768 dirty:206 writeback:0
[  594.881813][T18782]  slab_reclaimable:12481 slab_unreclaimable:162721
[  594.881813][T18782]  mapped:34347 shmem:4495 pagetables:1048
[  594.881813][T18782]  sec_pagetables:0 bounce:0
[  594.881813][T18782]  kernel_misc_reclaimable:0
[  594.881813][T18782]  free:1254851 free_pcp:14537 free_cma:0
[  594.899794][T18788] tipc: Node identity ac14140f, cluster identity 4711
[  594.939418][T18782] Node 0 active_anon:42100kB inactive_anon:0kB active_file:6484kB inactive_file:160040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137788kB dirty:824kB writeback:0kB shmem:16844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13540kB pagetables:4056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  594.993850][T18788] tipc: New replicast peer: 255.255.255.255
[  595.077775][T18782] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  595.151387][T18788] tipc: Enabled bearer <udp:syz2>, priority 10
[  595.264365][T18740] lo speed is unknown, defaulting to 1000
[  595.280436][T18782] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  595.393438][T18782] lowmem_reserve[]: 0 2498 2499 2499 2499
[  595.399308][T18782] Node 0 DMA32 free:1088836kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49552kB inactive_anon:0kB active_file:6484kB inactive_file:158476kB unevictable:1536kB writepending:824kB present:3129332kB managed:2558348kB mlocked:0kB bounce:0kB free_pcp:40776kB local_pcp:19708kB free_cma:0kB
[  595.499559][T18782] lowmem_reserve[]: 0 0 1 1 1
[  595.505071][T18782] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  595.543852][T18782] lowmem_reserve[]: 0 0 0 0 0
[  595.548685][T18782] Node 1 Normal free:3905968kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17264kB local_pcp:8224kB free_cma:0kB
[  595.639646][T18782] lowmem_reserve[]: 0 0 0 0 0
[  595.649363][T18782] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  595.667860][T18782] Node 0 DMA32: 106*4kB (UME) 31*8kB (UE) 2*16kB (UM) 0*32kB 1*64kB (E) 56*128kB (UME) 124*256kB (UME) 143*512kB (UME) 79*1024kB (UM) 8*2048kB (UM) 214*4096kB (UM) = 1086720kB
[  595.694463][T18782] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  595.713717][T18782] Node 1 Normal: 162*4kB (UE) 51*8kB (UME) 41*16kB (UME) 98*32kB (UME) 35*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3905968kB
[  595.741032][T18782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  595.751294][T18782] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  595.775146][T18782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  595.790855][T18789] 0: reclassify loop, rule prio 0, protocol 800
[  595.799075][T18782] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  595.815573][T18782] 48798 total pagecache pages
[  595.820304][T18782] 0 pages in swap cache
[  595.824849][T18782] Free swap  = 124996kB
[  595.829229][T18782] Total swap = 124996kB
[  595.840984][T18782] 2097051 pages RAM
[  595.922990][T18782] 0 pages HighMem/MovableOnly
[  595.927743][T18782] 425422 pages reserved
[  595.974448][T18782] 0 pages cma reserved
[  596.143760][ T6872] tipc: Node number set to 2886997007
[  596.409479][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  596.535904][T18810] netlink: 'syz.3.3420': attribute type 15 has an invalid length.
[  596.728439][T18820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.921154][T18820] syzkaller1: entered promiscuous mode
[  596.927869][T18820] syzkaller1: entered allmulticast mode
[  596.937702][T18820] netlink: 'syz.0.3421': attribute type 4 has an invalid length.
[  597.234008][T18833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3425'.
[  597.497772][T18419] 0: reclassify loop, rule prio 0, protocol 800
[  597.874581][T18839] veth3: entered promiscuous mode
[  597.879669][T18839] veth3: entered allmulticast mode
[  598.299305][T18859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3431'.
[  598.521205][T18873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3434'.
[  598.549097][T18873] netlink: 'syz.3.3434': attribute type 1 has an invalid length.
[  598.570234][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  598.615761][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'.
[  598.636351][T18873] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3434'.
[  598.647487][ T6872] 0: reclassify loop, rule prio 0, protocol 800
[  598.657224][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3435'.
[  598.882448][T18885] bridge: RTM_NEWNEIGH with invalid ether address
[  599.310158][T18907] netlink: 'syz.1.3446': attribute type 1 has an invalid length.
[  599.319972][T18907] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3446'.
[  599.373551][T18908] netlink: 'syz.1.3446': attribute type 1 has an invalid length.
[  599.381333][T18908] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3446'.
[  599.558032][T18925] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.567678][T18925] 8021q: adding VLAN 0 to HW filter on device team0
[  599.588431][T18925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  599.612814][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  599.687136][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3452'.
[  599.709096][T18937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.780823][T18939] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3452'.
[  600.097233][T18937] syzkaller0: entered promiscuous mode
[  600.109556][T18937] syzkaller0: entered allmulticast mode
[  600.128596][T18948] tipc: Resetting bearer <eth:syzkaller0>
[  600.223594][T18933] tipc: Resetting bearer <eth:syzkaller0>
[  600.284162][T18933] tipc: Disabling bearer <eth:syzkaller0>
[  600.652948][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  600.666326][T18991] lo speed is unknown, defaulting to 1000
[  601.403663][T19009] netlink: 'syz.0.3469': attribute type 1 has an invalid length.
[  601.426727][T19009] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  601.442029][T18991] lo speed is unknown, defaulting to 1000
[  601.491721][T19015] bridge1: the hash_elasticity option has been deprecated and is always 16
[  601.541716][T19015] bridge1: entered allmulticast mode
[  601.638206][T19017] bond4: entered promiscuous mode
[  601.644494][T19017] 8021q: adding VLAN 0 to HW filter on device bond4
[  601.696235][T18419] 0: reclassify loop, rule prio 0, protocol 800
[  602.031903][T19017] bond4 (unregistering): Released all slaves
[  602.318168][T19044] __nla_validate_parse: 4 callbacks suppressed
[  602.318186][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3475'.
[  602.356575][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3475'.
[  602.455470][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3476'.
[  602.455865][T19041] lo speed is unknown, defaulting to 1000
[  602.488117][T18419] 0: reclassify loop, rule prio 0, protocol 800
[  602.665605][T19052] syzkaller0: entered promiscuous mode
[  602.671257][T19052] syzkaller0: entered allmulticast mode
[  602.730096][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  603.283633][T19084] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3484'.
[  603.507369][T19041] lo speed is unknown, defaulting to 1000
[  603.770633][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  604.062078][T19126] netlink: 'syz.2.3493': attribute type 64 has an invalid length.
[  604.306357][T19134] netlink: 'syz.1.3498': attribute type 3 has an invalid length.
[  604.407043][T14149] 0: reclassify loop, rule prio 0, protocol 800
[  604.630435][T19147] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3500'.
[  604.765067][T19153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3500'.
[  604.810382][T18419] 0: reclassify loop, rule prio 0, protocol 800
[  604.847212][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'.
[  605.031857][T19148] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  605.074510][T19147] batadv1: entered promiscuous mode
[  605.089022][T19147] batadv1: entered allmulticast mode
[  605.229605][T19157] syzkaller0: entered allmulticast mode
[  605.301917][T19163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3505'.
[  605.363965][T19163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3505'.
[  605.523349][T19174] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3508'.
[  605.551007][T19174] netlink: 'syz.2.3508': attribute type 2 has an invalid length.
[  605.568917][T19174] netlink: 'syz.2.3508': attribute type 5 has an invalid length.
[  605.569659][T19181] netlink: 'syz.3.3510': attribute type 9 has an invalid length.
[  605.798446][T19192] openvswitch: netlink: Flow key attr not present in new flow.
[  605.860266][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  605.955739][T19199] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  606.312632][T19211] lo speed is unknown, defaulting to 1000
[  606.891500][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  606.954733][T19212] lo speed is unknown, defaulting to 1000
[  607.345161][T19233] netlink: 'syz.1.3526': attribute type 5 has an invalid length.
[  607.484138][T19211] lo speed is unknown, defaulting to 1000
[  607.521889][T19242] __nla_validate_parse: 5 callbacks suppressed
[  607.521909][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3528'.
[  607.612058][T19242] vlan4: entered promiscuous mode
[  607.631175][T19242] bridge0: entered promiscuous mode
[  607.647223][T19242] vlan4: entered allmulticast mode
[  607.655730][T19242] bridge0: entered allmulticast mode
[  607.929708][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  608.134419][T19265] xt_TPROXY: Can be used only with -p tcp or -p udp
[  608.234992][T19212] lo speed is unknown, defaulting to 1000
[  608.244009][T16228] 0: reclassify loop, rule prio 0, protocol 800
[  608.991587][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  609.037577][T19286] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  609.171775][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3543'.
[  609.524235][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  609.530631][T14149] 0: reclassify loop, rule prio 0, protocol 800
[  609.638828][T19315] 0: reclassify loop, rule prio 0, protocol 800
[  609.647223][T19315] IPv4: Oversized IP packet from 127.202.26.0
[  610.001702][T19328] sctp: [Deprecated]: syz.2.3551 (pid 19328) Use of int in maxseg socket option.
[  610.001702][T19328] Use struct sctp_assoc_value instead
[  610.025816][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  610.155763][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3554'.
[  610.181669][T19337] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3553'.
[  610.297259][T19336] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  610.320264][T19336] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  610.350848][T19336] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  610.373600][T19336] bond1: (slave bridge5): Enslaving as an active interface with an up link
[  610.413394][T19336] bond1: (slave bridge6): Enslaving as an active interface with an up link
[  610.451159][T19336] bond1: (slave bridge7): Enslaving as an active interface with an up link
[  610.486254][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'.
[  610.495745][T19349] netlink: 'syz.4.3557': attribute type 1 has an invalid length.
[  610.508774][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'.
[  610.577191][T19336] bond1: (slave bridge8): Enslaving as an active interface with an up link
[  610.621858][T19336] bond1: (slave bridge9): Enslaving as an active interface with an up link
[  610.649292][T19336] bond1: (slave bridge10): Enslaving as an active interface with an up link
[  610.771433][T19336] bond1: (slave bridge11): Enslaving as an active interface with an up link
[  610.881642][T19336] bond1: (slave bridge12): Enslaving as an active interface with an up link
[  610.954996][T19336] bond1: (slave bridge13): Enslaving as an active interface with an up link
[  611.059251][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  611.096183][T19371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  611.250754][T19380] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3563'.
[  612.059295][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3573'.
[  612.086087][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  612.113336][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3573'.
[  612.140639][T19411] netlink: 'syz.2.3573': attribute type 4 has an invalid length.
[  612.392990][T19420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  612.414018][T19420] syzkaller0: entered promiscuous mode
[  612.419679][T19420] syzkaller0: entered allmulticast mode
[  612.477910][T19420] tipc: Resetting bearer <eth:syzkaller0>
[  612.778203][T19439] lo speed is unknown, defaulting to 1000
[  612.918073][ T5859] Bluetooth: hci1: link tx timeout
[  612.925177][ T5859] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  612.936951][ T5861] Bluetooth: hci1: link tx timeout
[  612.942668][ T5861] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  612.950633][ T5861] Bluetooth: hci1: link tx timeout
[  612.950708][T19451] 0: reclassify loop, rule prio 0, protocol 800
[  612.956537][ T5861] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  613.012430][T19455] netlink: 179692 bytes leftover after parsing attributes in process `syz.1.3584'.
[  613.039892][T19455] netlink: zone id is out of range
[  613.045996][T19455] netlink: zone id is out of range
[  613.051385][T19455] netlink: zone id is out of range
[  613.056874][T19455] netlink: zone id is out of range
[  613.062236][T19455] netlink: zone id is out of range
[  613.067657][T19455] netlink: zone id is out of range
[  613.073080][T19455] netlink: zone id is out of range
[  613.078291][T19455] netlink: zone id is out of range
[  613.407896][T19419] tipc: Resetting bearer <eth:syzkaller0>
[  613.481203][T19419] tipc: Disabling bearer <eth:syzkaller0>
[  613.597954][T19420] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  613.662319][T19470] tipc: Enabling of bearer <et‚:g> rejected, media not registered
[  613.684927][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'.
[  613.793659][T19473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3580'.
[  613.826062][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'.
[  613.854039][T19447] lo speed is unknown, defaulting to 1000
[  613.912626][T19481] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3591'.
[  613.933229][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'.
[  613.948536][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'.
[  614.563328][ T5861] Bluetooth: hci4: command 0x0401 tx timeout
[  614.600454][T19491] lo speed is unknown, defaulting to 1000
[  614.864277][T19439] lo speed is unknown, defaulting to 1000
[  614.980463][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  615.034345][T19508] netlink: 'syz.1.3600': attribute type 1 has an invalid length.
[  615.400034][T19516] syzkaller0: entered promiscuous mode
[  615.405763][T19516] syzkaller0: entered allmulticast mode
[  615.416157][T19516] netlink: 'syz.3.3601': attribute type 7 has an invalid length.
[  615.630743][T19514] lo speed is unknown, defaulting to 1000
[  616.145775][T19514] lo speed is unknown, defaulting to 1000
[  616.204360][T19447] lo speed is unknown, defaulting to 1000
[  616.654279][T19491] lo speed is unknown, defaulting to 1000
[  617.218350][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'.
[  617.298929][ T6882] net_ratelimit: 13 callbacks suppressed
[  617.298949][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  617.370023][T19528] dvmrp8: entered allmulticast mode
[  617.446858][T19526] dvmrp8: left allmulticast mode
[  617.849479][ T6872] 0: reclassify loop, rule prio 0, protocol 800
[  618.333898][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  618.797572][T19555] IPv6: NLM_F_CREATE should be specified when creating new route
[  619.124987][ T6850] 0: reclassify loop, rule prio 0, protocol 800
[  619.218262][T19579] netlink: 'syz.0.3618': attribute type 3 has an invalid length.
[  619.243244][T19582] x_tables: duplicate underflow at hook 1
[  619.303516][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'.
[  619.307712][T19585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'.
[  619.324019][T19586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3618'.
[  619.337447][T19585] netlink: 'syz.2.3620': attribute type 2 has an invalid length.
[  619.342408][T19580] xt_TCPMSS: Only works on TCP SYN packets
[  619.363726][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  619.468496][T19579] vlan4: left promiscuous mode
[  619.473886][T19579] bridge0: left promiscuous mode
[  619.479031][T19579] vlan4: left allmulticast mode
[  619.506007][T19579] bridge0: left allmulticast mode
[  619.549573][T19587] IPVS: Unknown mcast interface: vcan0
[  619.723989][T19605] syz_tun: entered allmulticast mode
[  619.779891][T19613] geneve1: entered promiscuous mode
[  619.799197][T19613] geneve1: entered allmulticast mode
[  619.866067][T19620] netlink: 'syz.4.3628': attribute type 3 has an invalid length.
[  619.909411][T19620] netlink: 'syz.4.3628': attribute type 1 has an invalid length.
[  619.949904][T19620] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3628'.
[  619.996741][T19620] NCSI netlink: No device for ifindex 0
[  620.002393][    C1] vcan0: j1939_tp_rxtimer: 0xffff888064641800: rx timeout, send abort
[  620.020497][T19618] netlink: 'syz.4.3628': attribute type 3 has an invalid length.
[  620.033007][T19618] netlink: 'syz.4.3628': attribute type 1 has an invalid length.
[  620.040768][T19618] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3628'.
[  620.061262][T19618] NCSI netlink: No device for ifindex 0
[  620.286878][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'.
[  620.303328][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'.
[  620.307431][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'.
[  620.338531][T19645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  620.353680][T19642] netlink: 'syz.1.3634': attribute type 7 has an invalid length.
[  620.354660][T19643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'.
[  620.409863][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  620.420357][T19643] netlink: 'syz.1.3634': attribute type 7 has an invalid length.
[  620.499836][    C1] vcan0: j1939_tp_rxtimer: 0xffff888064643400: rx timeout, send abort
[  620.508554][    C1] vcan0: j1939_tp_rxtimer: 0xffff888064641800: abort rx timeout. Force session deactivation
[  620.528350][T19604] syz_tun: left allmulticast mode
[  620.579260][T19654] netlink: 'syz.3.3637': attribute type 27 has an invalid length.
[  620.619095][T19656] syzkaller0: create flow: hash 2582695695 index 1
[  620.699520][T19660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3640'.
[  621.008339][    C1] vcan0: j1939_tp_rxtimer: 0xffff888064643400: abort rx timeout. Force session deactivation
[  621.046502][T12669] 0: reclassify loop, rule prio 0, protocol 800
[  621.125932][T19656] syzkaller0: delete flow: hash 2582695695 index 1
[  621.449673][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  621.687241][ T6872] 0: reclassify loop, rule prio 0, protocol 800
[  622.486066][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  623.183529][T19691] lo speed is unknown, defaulting to 1000
[  623.374070][T19706] smc: net device bond0 erased user defined pnetid SYZ2
[  623.392040][T19706] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0
[  623.530005][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  623.603567][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  623.667425][T19723] netlink: zone id is out of range
[  623.700806][T19723] netlink: zone id is out of range
[  623.716603][T19723] netlink: zone id is out of range
[  623.721778][T19723] netlink: zone id is out of range
[  623.768322][T19725] 0: reclassify loop, rule prio 0, protocol 800
[  623.779457][T19723] netlink: zone id is out of range
[  623.811897][T19723] netlink: zone id is out of range
[  623.881753][T19729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  623.942017][T19737] syzkaller0: entered promiscuous mode
[  623.961206][T19737] syzkaller0: entered allmulticast mode
[  624.031177][T19729] tipc: Resetting bearer <eth:syzkaller0>
[  624.071017][T19726] tipc: Resetting bearer <eth:syzkaller0>
[  624.155123][T19726] tipc: Disabling bearer <eth:syzkaller0>
[  624.198443][T19742] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  624.223797][T19744] tipc: Invalid UDP bearer configuration
[  624.223855][T19744] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  624.261429][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  624.271644][T19691] lo speed is unknown, defaulting to 1000
[  624.403805][T19755] __nla_validate_parse: 7 callbacks suppressed
[  624.403823][T19755] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3667'.
[  624.428003][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3666'.
[  624.662372][T19763] x_tables: duplicate underflow at hook 1
[  624.696674][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3670'.
[  625.070909][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3675'.
[  625.113141][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3675'.
[  625.122052][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'.
[  625.173081][T19780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'.
[  625.401169][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'.
[  625.770139][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'.
[  626.117959][T19816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'.
[  626.179333][T19815] lo speed is unknown, defaulting to 1000
[  626.372531][T19830] netlink: 'syz.4.3690': attribute type 39 has an invalid length.
[  626.983232][T19836] lo speed is unknown, defaulting to 1000
[  627.355966][T19832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  628.226494][ T6994] net_ratelimit: 81 callbacks suppressed
[  628.226514][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  628.265470][T19815] lo speed is unknown, defaulting to 1000
[  628.723766][ T6872] 0: reclassify loop, rule prio 0, protocol 800
[  629.278373][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  629.339847][T19878] netlink: 'syz.3.3702': attribute type 1 has an invalid length.
[  629.492958][T19836] lo speed is unknown, defaulting to 1000
[  629.561037][T19865] lo speed is unknown, defaulting to 1000
[  629.712663][T19884] __nla_validate_parse: 5 callbacks suppressed
[  629.712682][T19884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3703'.
[  629.756038][T19869] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3699'.
[  629.765222][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms
[  629.765251][    C1] lec:lec_tx_timeout: lec0
[  630.264181][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805dcf5c00: rx timeout, send abort
[  630.330782][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  630.643967][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  630.772415][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805dcf5c00: abort rx timeout. Force session deactivation
[  631.355906][T19915] sctp: [Deprecated]: syz.2.3709 (pid 19915) Use of int in maxseg socket option.
[  631.355906][T19915] Use struct sctp_assoc_value instead
[  631.371014][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  631.460118][T19917] netlink: 516 bytes leftover after parsing attributes in process `syz.1.3710'.
[  631.520672][T19919] TCP: TCP_TX_DELAY enabled
[  631.634283][T19865] lo speed is unknown, defaulting to 1000
[  631.710023][T19922] netlink: 'syz.2.3712': attribute type 10 has an invalid length.
[  632.126832][T19932] lo speed is unknown, defaulting to 1000
[  632.133385][T19935] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  632.412411][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  632.568187][T14149] 0: reclassify loop, rule prio 0, protocol 800
[  632.926340][T19943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3716'.
[  633.259879][T19949] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3718'.
[  633.366873][T19932] lo speed is unknown, defaulting to 1000
[  633.443796][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  634.020801][T19969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3722'.
[  634.105049][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3721'.
[  634.487013][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  634.514264][T14149] 0: reclassify loop, rule prio 0, protocol 800
[  634.665578][T19978] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  635.080979][T19993] netlink: 'syz.3.3730': attribute type 1 has an invalid length.
[  635.133488][T19993] netlink: 'syz.3.3730': attribute type 1 has an invalid length.
[  635.392144][T20001] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3733'.
[  635.403776][T20001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3733'.
[  635.525692][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  635.759681][T20012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3738'.
[  635.953234][T20019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3741'.
[  635.997886][T20019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3741'.
[  636.023656][T20019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3741'.
[  636.267838][T12669] nci: nci_rx_work: unknown MT 0x1
[  636.563556][ T5859] Bluetooth: hci3: command 0x0406 tx timeout
[  636.572688][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  636.589408][T20053] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  636.736422][T20064] netlink: 'syz.3.3753': attribute type 21 has an invalid length.
[  636.746849][T20063] netlink: 'syz.3.3753': attribute type 21 has an invalid length.
[  636.769525][T20064] netlink: 'syz.3.3753': attribute type 6 has an invalid length.
[  636.787450][T20064] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3753'.
[  636.799646][T20063] netlink: 'syz.3.3753': attribute type 6 has an invalid length.
[  636.808165][T20063] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3753'.
[  636.830813][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'.
[  636.842214][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'.
[  637.189496][T20080] rdma_op ffff888047e839f0 conn xmit_rdma 0000000000000000
[  637.330958][T20089] lo speed is unknown, defaulting to 1000
[  637.338664][T20085] netlink: 'syz.0.3759': attribute type 10 has an invalid length.
[  637.435210][T20085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  637.442665][T20085] bridge0: port 3(batadv0) entered blocking state
[  637.450318][T20085] bridge0: port 3(batadv0) entered disabled state
[  637.461259][T20085] batadv0: entered allmulticast mode
[  637.476759][T20085] batadv0: entered promiscuous mode
[  637.486162][T20095] netlink: 'syz.1.3762': attribute type 13 has an invalid length.
[  637.498086][T20095] netlink: 'syz.1.3762': attribute type 17 has an invalid length.
[  637.604190][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  637.698758][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  637.780551][T20095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  637.807413][T20083] lo speed is unknown, defaulting to 1000
[  637.886238][T14155] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  637.896001][T14155] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  637.988687][T20098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  638.334478][T12669] 0: reclassify loop, rule prio 0, protocol 800
[  638.549793][T20096] lo speed is unknown, defaulting to 1000
[  638.573071][T20089] lo speed is unknown, defaulting to 1000
[  638.644286][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  639.039330][T20113] lo speed is unknown, defaulting to 1000
[  639.237711][T20124] lo speed is unknown, defaulting to 1000
[  639.581794][T20083] lo speed is unknown, defaulting to 1000
[  639.628798][T20124] lo speed is unknown, defaulting to 1000
[  639.703401][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  640.245135][T14155] 0: reclassify loop, rule prio 0, protocol 800
[  640.424533][T20113] lo speed is unknown, defaulting to 1000
[  640.441788][T20096] lo speed is unknown, defaulting to 1000
[  640.723863][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  641.177238][T20132] __nla_validate_parse: 6 callbacks suppressed
[  641.177256][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3771'.
[  641.763666][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  641.871310][T20141] netlink: 'syz.4.3772': attribute type 13 has an invalid length.
[  641.879600][T20141] netlink: 'syz.4.3772': attribute type 17 has an invalid length.
[  641.896506][T20140] lo speed is unknown, defaulting to 1000
[  641.896524][T20141] netlink: 'syz.4.3772': attribute type 5 has an invalid length.
[  642.706691][T20157] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3775'.
[  642.804342][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  643.011439][T20161] openvswitch: netlink: IP tunnel TTL not specified.
[  643.256789][T20170] batman_adv: batadv0: Adding interface: dummy0
[  643.283406][T20170] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.348761][T20170] batman_adv: batadv0: Interface activated: dummy0
[  643.374728][T20173] batadv0: mtu less than device minimum
[  643.392078][T20173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  643.404381][T20173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  643.446254][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3778'.
[  643.779074][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'.
[  643.792455][T20186] net_ratelimit: 17 callbacks suppressed
[  643.792471][T20186] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  643.815871][T20186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  643.846176][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  643.920131][T20189] can: request_module (can-proto-3) failed.
[  643.946659][T20191] netlink: 'syz.0.3785': attribute type 21 has an invalid length.
[  643.986285][T20189] netlink: 'syz.3.3784': attribute type 58 has an invalid length.
[  643.992297][T20140] lo speed is unknown, defaulting to 1000
[  644.023851][T20189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3784'.
[  644.077975][   T30] audit: type=1107 audit(1752997647.560:4): pid=20192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='çÏâZa
«aÝí6:×d‹²ýØM—�†À‡Øš1'N¾q3ƒÇ6€ˆÐ|¸É%çë<'õÓÌä)ÇÀ8ðÌº>zX1YÌJN†¥-*È®FGÜb”…èZþ &{ålNƒ"·`¦†á=ƒùåBc•29_KÕ«'
[  644.105437][T12669] 0: reclassify loop, rule prio 0, protocol 800
[  644.257975][T20209] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  644.415788][T20211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3790'.
[  644.464512][T20215] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  644.477989][T20219] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  644.724988][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  644.883801][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  645.085865][T20230] lo speed is unknown, defaulting to 1000
[  645.268792][T20242] xt_CT: You must specify a L4 protocol and not use inversions on it
[  645.384717][T20245] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3797'.
[  645.783047][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3800'.
[  645.791974][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3800'.
[  645.834753][T20261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3796'.
[  645.923619][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  646.007223][T12669] 0: reclassify loop, rule prio 0, protocol 800
[  646.329105][T20276] xt_hashlimit: size too large, truncated to 1048576
[  646.386105][T20278] __nla_validate_parse: 3 callbacks suppressed
[  646.386124][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3806'.
[  646.709409][T20288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3808'.
[  646.963572][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  647.034442][T20303] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3812'.
[  647.311008][T20307] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  647.520557][T20230] lo speed is unknown, defaulting to 1000
[  648.643665][T20335] syzkaller1: entered promiscuous mode
[  648.674117][T20335] syzkaller1: entered allmulticast mode
[  649.043617][ T6994] net_ratelimit: 1 callbacks suppressed
[  649.043637][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  649.284702][T20368] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  649.586712][T20376] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3829'.
[  649.650627][T20378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'.
[  649.756058][T20378] smc: removing ib device syz!
[  649.773213][T20383] xt_time: invalid argument - start or stop time greater than 23:59:59
[  649.784633][T20384] xt_time: invalid argument - start or stop time greater than 23:59:59
[  649.849838][T13429] 0: reclassify loop, rule prio 0, protocol 800
[  650.085540][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  650.242996][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3834'.
[  650.284310][T20396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  650.344356][T20396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.377241][T20401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3835'.
[  650.388209][T20403] netlink: 'syz.1.3836': attribute type 64 has an invalid length.
[  650.466971][T20396] batadv0 (unregistering): left allmulticast mode
[  650.485798][T20396] batadv0 (unregistering): left promiscuous mode
[  650.528629][T20396] bridge0: port 3(batadv0) entered disabled state
[  651.062004][T20419] lo speed is unknown, defaulting to 1000
[  651.126048][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  651.192097][T20434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3844'.
[  651.230138][T20433] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3844'.
[  651.522246][T20434] team0: Port device team_slave_0 removed
[  651.576841][T20444] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.763498][T14155] 0: reclassify loop, rule prio 0, protocol 800
[  651.770270][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  651.923658][ T5859] Bluetooth: hci4: command 0x0401 tx timeout
[  652.091450][T20444] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.163731][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  652.523526][T20444] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.609861][T20466] netlink: 'syz.0.3849': attribute type 83 has an invalid length.
[  652.645929][T20419] lo speed is unknown, defaulting to 1000
[  652.930350][T20444] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.955943][T20468] 0: reclassify loop, rule prio 0, protocol 800
[  653.203453][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  653.320394][T20474] lo speed is unknown, defaulting to 1000
[  653.455538][ T1087] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.546035][T13429] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.681828][T14155] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.698852][T14155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.160617][T20474] lo speed is unknown, defaulting to 1000
[  654.243819][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  654.381909][T20494] syzkaller1: entered promiscuous mode
[  654.393628][T20494] syzkaller1: entered allmulticast mode
[  655.244804][T20526] x_tables: duplicate underflow at hook 1
[  655.286004][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  655.608639][T14156] 0: reclassify loop, rule prio 0, protocol 800
[  655.702568][T20539] netlink: 'syz.3.3870': attribute type 1 has an invalid length.
[  655.752995][T20539] bond4: (slave gretap1): making interface the new active one
[  655.762475][T20539] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  655.923271][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  655.956214][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3875'.
[  656.077715][T20554] bond0: (slave bridge0): Releasing backup interface
[  656.098502][T20554] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  656.269368][T20568] netlink: 'syz.2.3877': attribute type 12 has an invalid length.
[  656.282561][T20568] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3877'.
[  656.324129][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  656.475113][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3879'.
[  656.641208][T20581] 8021q: adding VLAN 0 to HW filter on device bond5
[  656.642387][T20588] x_tables: duplicate underflow at hook 1
[  656.662891][T20586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  656.912435][T20600] lo speed is unknown, defaulting to 1000
[  657.363905][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  657.386479][T20614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.526478][T14156] 0: reclassify loop, rule prio 0, protocol 800
[  657.549696][T20618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3890'.
[  657.555503][T20600] lo speed is unknown, defaulting to 1000
[  657.566648][T20608] lo speed is unknown, defaulting to 1000
[  657.954337][T14149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  657.970151][T14149] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  658.014682][T14149] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  658.044543][T13429] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  658.370614][T20616] lo speed is unknown, defaulting to 1000
[  658.404569][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  658.679702][T20649] lo speed is unknown, defaulting to 1000
[  658.684117][T20608] lo speed is unknown, defaulting to 1000
[  658.749278][T20616] lo speed is unknown, defaulting to 1000
[  658.803821][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  659.310657][T20649] lo speed is unknown, defaulting to 1000
[  659.449885][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  659.747448][T20664] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  660.358211][T20674] netlink: 'syz.4.3902': attribute type 9 has an invalid length.
[  660.445620][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3903'.
[  660.470143][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3903'.
[  660.479755][T20677] netlink: 'syz.2.3903': attribute type 15 has an invalid length.
[  660.491886][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  660.508027][T20677] netlink: 'syz.2.3903': attribute type 18 has an invalid length.
[  660.516933][T20679] IPv6: sit1: Disabled Multicast RS
[  660.653667][T20682] syzkaller1: entered promiscuous mode
[  660.671033][T20682] syzkaller1: entered allmulticast mode
[  660.690206][T20684] tc_dump_action: action bad kind
[  660.748596][T20682] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.783140][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3905'.
[  660.884883][T20682] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.903067][T20695] ksmbd: Unknown IPC event: 8, ignore.
[  660.911963][T20697] ksmbd: Unknown IPC event: 8, ignore.
[  660.956277][T20682] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.986258][T20695] netlink: 'syz.0.3909': attribute type 6 has an invalid length.
[  661.070648][T20682] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.224688][T20700] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3911'.
[  661.279145][T13429] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  661.378658][T14149] 0: reclassify loop, rule prio 0, protocol 800
[  661.488689][T20718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3913'.
[  661.524040][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  661.646753][T20700] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  661.655369][T20728] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3915'.
[  661.670794][T20700] bond0 (unregistering): Released all slaves
[  661.701484][T14149] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  661.821733][T12669] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  661.872530][T20722] lo speed is unknown, defaulting to 1000
[  661.872565][T12669] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  661.970503][T20733] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3916'.
[  662.003075][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  662.083325][ T5859] Bluetooth: hci1: command 0x0406 tx timeout
[  662.110858][T20735] 0: reclassify loop, rule prio 0, protocol 800
[  662.140443][T20740] netlink: 'syz.2.3919': attribute type 8 has an invalid length.
[  662.340997][T20722] lo speed is unknown, defaulting to 1000
[  662.349382][T20737] siw: device registration error -23
[  662.359930][T20741] lo speed is unknown, defaulting to 1000
[  662.563820][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  662.642422][T20746] tc_dump_action: action bad kind
[  662.654003][T14156] 0: reclassify loop, rule prio 0, protocol 800
[  662.899290][T20740] lo speed is unknown, defaulting to 1000
[  662.906771][T20741] lo speed is unknown, defaulting to 1000
[  663.316610][T20740] lo speed is unknown, defaulting to 1000
[  663.495845][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3926'.
[  663.609006][ T6994] 0: reclassify loop, rule prio 0, protocol 800
[  663.667633][T20766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.717414][ T6850] IPVS: starting estimator thread 0...
[  663.823208][T20770] IPVS: using max 29 ests per chain, 69600 per kthread
[  663.989514][T20765] macvlan1 (unregistering): left promiscuous mode
[  664.125164][T20766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.167479][T14149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.172240][T20775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3928'.
[  664.198839][T14149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.265668][T20766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.449412][T20766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.643686][ T6882] 0: reclassify loop, rule prio 0, protocol 800
[  664.837756][T14156] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  664.923332][T14156] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  664.969718][T14149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.123470][T13429] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.637296][T20820] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3938'.
[  665.683566][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  665.843701][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  665.908671][T20835] netlink: 'syz.4.3944': attribute type 1 has an invalid length.
[  665.945808][T20835] 8021q: adding VLAN 0 to HW filter on device bond2
[  666.014514][T20835] 8021q: adding VLAN 0 to HW filter on device bond2
[  666.025820][T20835] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  666.038805][T20835] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  666.153505][T20837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'.
[  666.259368][T20839] gretap2: entered promiscuous mode
[  666.270023][T20839] bond2: (slave gretap2): making interface the new active one
[  666.278827][T20839] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  666.311426][T20843] macvlan2: entered promiscuous mode
[  666.317226][T20843] macvlan2: entered allmulticast mode
[  666.323825][T20843] bond2: entered promiscuous mode
[  666.330059][T20843] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  666.340186][T20843] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  666.355775][T20843] bond2: left promiscuous mode
[  666.415951][T20846] netlink: 'syz.4.3944': attribute type 1 has an invalid length.
[  666.523971][T20853] veth0_to_team: entered promiscuous mode
[  666.530121][T20853] veth0_to_team: entered allmulticast mode
[  666.724232][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  666.824505][T20857] syzkaller0: entered promiscuous mode
[  666.830277][T20857] syzkaller0: entered allmulticast mode
[  666.899095][T20881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3950'.
[  666.927464][T20880] xt_socket: unknown flags 0xfc
[  667.124970][T13429] 0: reclassify loop, rule prio 0, protocol 800
[  667.136787][T20888] netlink: 'syz.3.3954': attribute type 3 has an invalid length.
[  667.187833][T20891] Cannot find del_set index 2 as target
[  667.767322][T14821] 0: reclassify loop, rule prio 0, protocol 800
[  668.408362][ T1087] 0: reclassify loop, rule prio 0, protocol 800
[  668.808811][T14821] 0: reclassify loop, rule prio 0, protocol 800
[  669.153467][T20900] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3958'.
[  669.168958][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3958'.
[  669.366071][T20911] vlan2: entered allmulticast mode
[  669.393133][T20911] ip6gretap0: entered allmulticast mode
[  669.394224][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  669.461569][T16228] IPVS: starting estimator thread 0...
[  669.539272][T20912] lo speed is unknown, defaulting to 1000
[  669.563611][T20923] IPVS: using max 28 ests per chain, 67200 per kthread
[  669.578908][T20925] netlink: 'syz.3.3962': attribute type 6 has an invalid length.
[  669.657235][T20927] netlink: 'syz.1.3963': attribute type 1 has an invalid length.
[  669.843546][T14821] 0: reclassify loop, rule prio 0, protocol 800
[  669.887825][T20929] veth7: entered promiscuous mode
[  669.940435][T20935] netlink: 'syz.0.3965': attribute type 13 has an invalid length.
[  669.963589][T20935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3965'.
[  669.973430][T20932] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3964'.
[  669.984478][T20932] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3964'.
[  670.195442][T20912] lo speed is unknown, defaulting to 1000
[  670.360172][T20946] lo speed is unknown, defaulting to 1000
[  670.487471][T20952] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3969'.
[  670.625747][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3971'.
[  670.820960][T20946] lo speed is unknown, defaulting to 1000
[  670.852502][T20964] lo speed is unknown, defaulting to 1000
[  670.885480][T14821] 0: reclassify loop, rule prio 0, protocol 800
[  671.098814][T20972] netlink: 'syz.0.3974': attribute type 1 has an invalid length.
[  671.249061][T20975] bond4: (slave bridge6): making interface the new active one
[  671.313310][T20975] bond4: (slave bridge6): Enslaving as an active interface with an up link
[  671.436406][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.450984][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.471438][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.502729][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.521834][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.534167][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.545485][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.578423][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.593473][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.606712][T20984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  671.992070][   T43] 0: reclassify loop, rule prio 0, protocol 800
[  672.087512][T21006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3977'.
[  672.175358][T13429] 0: reclassify loop, rule prio 0, protocol 800
[  672.402996][ T5859] Bluetooth: hci5: command 0x0406 tx timeout
[  672.628366][T20988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  672.695330][T20988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  672.948999][T21009] 0: reclassify loop, rule prio 0, protocol 800
[  673.099087][T14821] 0: reclassify loop, rule prio 0, protocol 800
[  673.191493][T20964] lo speed is unknown, defaulting to 1000
[  673.381700][ T1087] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  673.415137][ T1087] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  673.457932][ T1087] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  673.493578][ T1087] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  673.710556][T21030] netlink: 'syz.4.3980': attribute type 1 has an invalid length.
[  673.718847][T21030] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3980'.
[  673.736905][T21030] netlink: 'syz.4.3980': attribute type 1 has an invalid length.
[  673.769853][T21030] netlink: 'syz.4.3980': attribute type 2 has an invalid length.
[  674.004255][T21035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3984'.
[  674.163131][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  674.171827][   T49] 0: reclassify loop, rule prio 0, protocol 800
[  674.178232][T20989] 0: reclassify loop, rule prio 0, protocol 800
[  674.256685][T21040] ip6tnl2: entered promiscuous mode
[  674.264849][T21040] ip6tnl2: entered allmulticast mode
[  674.297774][T21040] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[  674.904269][T21061] xt_NFQUEUE: number of total queues is 0
[  674.920182][T21061] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3990'.
[  675.041821][T21071] netlink: 'syz.4.3993': attribute type 1 has an invalid length.
[  675.067922][T21071] netlink: 'syz.4.3993': attribute type 3 has an invalid length.
[  675.083297][T21071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3993'.
[  675.135000][T21061] netlink: 'syz.1.3990': attribute type 4 has an invalid length.
[  675.220016][T20989] 0: reclassify loop, rule prio 0, protocol 800
[  675.253536][T21078] netlink: 'syz.3.3994': attribute type 2 has an invalid length.
[  675.443880][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  675.491938][T21089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3997'.
[  675.636924][T21096] tc_dump_action: action bad kind
[  675.831875][T21101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  675.980726][T21110] lo speed is unknown, defaulting to 1000
[  675.988312][T21108] netlink: 'syz.2.4004': attribute type 13 has an invalid length.
[  675.998515][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'.
[  676.215222][T21115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  676.250843][T20989] 0: reclassify loop, rule prio 0, protocol 800
[  676.345527][T21115] syzkaller0: entered promiscuous mode
[  676.357142][T21115] syzkaller0: entered allmulticast mode
[  676.366541][T21115] tipc: Resetting bearer <eth:syzkaller0>
[  676.453492][T21113] tipc: Resetting bearer <eth:syzkaller0>
[  676.606620][T21100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  676.664554][T21122] 0: reclassify loop, rule prio 0, protocol 800
[  676.884851][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4011'.
[  677.298083][T20989] 0: reclassify loop, rule prio 0, protocol 800
[  678.014299][T12669] 0: reclassify loop, rule prio 0, protocol 800
[  678.332926][T20989] 0: reclassify loop, rule prio 0, protocol 800
[  678.404202][T21113] tipc: Disabling bearer <eth:syzkaller0>
[  678.417124][T21104] lo speed is unknown, defaulting to 1000
[  678.417175][T21110] lo speed is unknown, defaulting to 1000
[  678.789673][T21144] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4012'.
[  679.001025][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4017'.
[  679.045698][T21154] openvswitch: netlink: Message has 4784 unknown bytes.
[  679.053687][T21154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.127229][T21154] No such timeout policy "syz1"
[  679.184123][T21156] netlink: 'syz.0.4018': attribute type 3 has an invalid length.
[  679.198004][T21104] lo speed is unknown, defaulting to 1000
[  679.211175][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4018'.
[  679.267197][T21156] gre0: entered allmulticast mode
[  679.291572][T21157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4018'.
[  679.374949][T20989] 0: reclassify loop, rule prio 0, protocol 800
[  679.684556][T21167] xt_ecn: cannot match TCP bits for non-tcp packets
[  679.779315][T21162] vlan0: entered promiscuous mode
[  679.785035][T21162] bond0: entered promiscuous mode
[  679.790363][T21162] bond_slave_0: entered promiscuous mode
[  679.804581][T21162] bond_slave_1: entered promiscuous mode
[  679.812339][T21162] vlan0: entered allmulticast mode
[  679.826495][T21162] bond0: entered allmulticast mode
[  679.831794][T21162] bond_slave_0: entered allmulticast mode
[  679.842102][T21162] bond_slave_1: entered allmulticast mode
[  680.428279][T20989] net_ratelimit: 1 callbacks suppressed
[  680.428307][T20989] 0: reclassify loop, rule prio 0, protocol 800
[  680.593317][T20989] 0: reclassify loop, rule prio 0, protocol 800
[  680.680100][T21183] tc_dump_action: action bad kind
[  681.055858][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4031'.
[  681.089073][T21203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4031'.
[  681.161401][T21209] netlink: 'syz.4.4033': attribute type 21 has an invalid length.
[  681.197984][T21209] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4033'.
[  681.198050][T21204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4031'.
[  681.247899][T21209] netlink: 'syz.4.4033': attribute type 4 has an invalid length.
[  681.284442][T21209] netlink: 'syz.4.4033': attribute type 5 has an invalid length.
[  681.303025][T21209] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4033'.
[  681.387032][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4033'.
[  681.449827][T14821] 0: reclassify loop, rule prio 0, protocol 800
[  681.706868][T21244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.095118][T21238] tc_dump_action: action bad kind
[  682.244168][T21262] netlink: 'syz.2.4048': attribute type 3 has an invalid length.
[  682.487771][T14821] 0: reclassify loop, rule prio 0, protocol 800
[  682.665371][T21285] 0: reclassify loop, rule prio 0, protocol 800
[  682.682891][T21285] 0: reclassify loop, rule prio 0, protocol 800
[  682.702413][T21285] 0: reclassify loop, rule prio 0, protocol 800
[  682.720716][T21285] 0: reclassify loop, rule prio 0, protocol 800
[  682.727696][T21285] 0: reclassify loop, rule prio 0, protocol 800
[  682.887026][T21295] tc_dump_action: action bad kind
[  683.108988][T21307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  683.131396][T21297] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  684.018012][T21336] __nla_validate_parse: 8 callbacks suppressed
[  684.018033][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4070'.
[  684.123231][T21340] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4072'.
[  684.139767][T21336] syzkaller0: entered promiscuous mode
[  684.148128][T21336] syzkaller0: entered allmulticast mode
[  684.155457][T21335] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  684.178683][T21340] netlink: 'syz.4.4072': attribute type 1 has an invalid length.
[  684.203850][T21340] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4072'.
[  684.234846][T21340] NCSI netlink: No device for ifindex 0
[  684.380347][T21345] lo speed is unknown, defaulting to 1000
[  684.404987][T21347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4074'.
[  684.419593][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4075'.
[  684.449530][T21350] gtp0: entered promiscuous mode
[  684.467609][T21350] gtp0: entered allmulticast mode
[  684.782644][T21365] netlink: 'syz.4.4079': attribute type 1 has an invalid length.
[  684.805549][T21365] NCSI netlink: No device for ifindex 0
[  684.845149][T21369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4077'.
[  685.132110][T21380] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.4082'.
[  685.179913][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'.
[  685.210268][T21384] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4083'.
[  685.260518][T21385] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4083'.
[  685.323953][T21345] lo speed is unknown, defaulting to 1000
[  685.427210][T21389] xt_CT: No such helper "snmp"
[  685.697342][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  686.239395][T21426] team0: Mode changed to "broadcast"
[  686.797539][T21443] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ýMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!'
[  686.818245][T21443] CPU: 0 UID: 0 PID: 21443 Comm: syz.3.4097 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) 
[  686.818274][T21443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  686.818287][T21443] Call Trace:
[  686.818295][T21443]  <TASK>
[  686.818304][T21443]  dump_stack_lvl+0x189/0x250
[  686.818339][T21443]  ? __pfx_dump_stack_lvl+0x10/0x10
[  686.818363][T21443]  ? __pfx__printk+0x10/0x10
[  686.818391][T21443]  ? kernfs_path_from_node+0x2c/0x260
[  686.818411][T21443]  ? kernfs_path_from_node+0x2c/0x260
[  686.818428][T21443]  ? kernfs_path_from_node+0x2c/0x260
[  686.818449][T21443]  ? kernfs_path_from_node+0x22c/0x260
[  686.818466][T21443]  ? kernfs_path_from_node+0x2c/0x260
[  686.818488][T21443]  sysfs_warn_dup+0x8e/0xa0
[  686.818519][T21443]  sysfs_do_create_link_sd+0xc0/0x110
[  686.818553][T21443]  device_add_class_symlinks+0x1cf/0x240
[  686.818588][T21443]  device_add+0x475/0xb50
[  686.818622][T21443]  wiphy_register+0x1ba6/0x28d0
[  686.818686][T21443]  ? __pfx_wiphy_register+0x10/0x10
[  686.818717][T21443]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  686.818750][T21443]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  686.818779][T21443]  ieee80211_register_hw+0x3443/0x40b0
[  686.818824][T21443]  ? ieee80211_register_hw+0x1491/0x40b0
[  686.818859][T21443]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  686.818889][T21443]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  686.818988][T21443]  ? __hrtimer_setup+0x187/0x210
[  686.819015][T21443]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  686.819042][T21443]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  686.819096][T21443]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  686.819124][T21443]  ? trace_kmalloc+0x1f/0xd0
[  686.819147][T21443]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  686.819175][T21443]  ? kstrndup+0xbf/0x160
[  686.819208][T21443]  hwsim_new_radio_nl+0xea4/0x1b10
[  686.819232][T21443]  ? __pfx___nla_validate_parse+0x10/0x10
[  686.819277][T21443]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  686.819301][T21443]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  686.819337][T21443]  ? __nla_parse+0x40/0x60
[  686.819365][T21443]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  686.819401][T21443]  genl_family_rcv_msg_doit+0x215/0x300
[  686.819434][T21443]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  686.819476][T21443]  ? bpf_lsm_capable+0x9/0x20
[  686.819502][T21443]  ? security_capable+0x7e/0x2e0
[  686.819545][T21443]  genl_rcv_msg+0x60e/0x790
[  686.819598][T21443]  ? __pfx_genl_rcv_msg+0x10/0x10
[  686.819623][T21443]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  686.819672][T21443]  netlink_rcv_skb+0x208/0x470
[  686.819703][T21443]  ? __lock_acquire+0xab9/0xd20
[  686.819724][T21443]  ? __pfx_genl_rcv_msg+0x10/0x10
[  686.819752][T21443]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  686.819808][T21443]  ? down_read+0x1ad/0x2e0
[  686.819834][T21443]  genl_rcv+0x28/0x40
[  686.819857][T21443]  netlink_unicast+0x82c/0x9e0
[  686.819897][T21443]  ? __pfx_netlink_unicast+0x10/0x10
[  686.819928][T21443]  ? netlink_sendmsg+0x642/0xb30
[  686.819946][T21443]  ? skb_put+0x11b/0x210
[  686.819972][T21443]  netlink_sendmsg+0x805/0xb30
[  686.820010][T21443]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.820035][T21443]  ? aa_sock_msg_perm+0x94/0x160
[  686.820060][T21443]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  686.820081][T21443]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.820103][T21443]  __sock_sendmsg+0x219/0x270
[  686.820137][T21443]  ____sys_sendmsg+0x505/0x830
[  686.820168][T21443]  ? __pfx_____sys_sendmsg+0x10/0x10
[  686.820205][T21443]  ? import_iovec+0x74/0xa0
[  686.820238][T21443]  ___sys_sendmsg+0x21f/0x2a0
[  686.820266][T21443]  ? __pfx____sys_sendmsg+0x10/0x10
[  686.820336][T21443]  ? __fget_files+0x2a/0x420
[  686.820354][T21443]  ? __fget_files+0x3a0/0x420
[  686.820386][T21443]  __x64_sys_sendmsg+0x19b/0x260
[  686.820414][T21443]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  686.820454][T21443]  ? do_user_addr_fault+0xc8a/0x1390
[  686.820479][T21443]  ? do_syscall_64+0xbe/0x3b0
[  686.820505][T21443]  do_syscall_64+0xfa/0x3b0
[  686.820523][T21443]  ? lockdep_hardirqs_on+0x9c/0x150
[  686.820554][T21443]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.820575][T21443]  ? clear_bhb_loop+0x60/0xb0
[  686.820611][T21443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.820631][T21443] RIP: 0033:0x7fd5fd98e9a9
[  686.820651][T21443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  686.820705][T21443] RSP: 002b:00007fd5fe760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.820725][T21443] RAX: ffffffffffffffda RBX: 00007fd5fdbb6080 RCX: 00007fd5fd98e9a9
[  686.820740][T21443] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  686.820752][T21443] RBP: 00007fd5fda10d69 R08: 0000000000000000 R09: 0000000000000000
[  686.820764][T21443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  686.820776][T21443] R13: 0000000000000001 R14: 00007fd5fdbb6080 R15: 00007ffd5e18d958
[  686.820809][T21443]  </TASK>
[  687.885538][T21471] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  687.897793][T21471] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  688.144218][T21489] bond0: (slave bond_slave_0): Releasing backup interface
[  688.188799][T21489] bond0: (slave bond_slave_1): Releasing backup interface
[  688.241213][T21489] team0: Port device team_slave_0 removed
[  688.268900][T21489] team0: Port device team_slave_1 removed
[  688.284377][T21490] netlink: 'syz.4.4110': attribute type 10 has an invalid length.
[  688.284404][T21489] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.318449][T21489] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.349387][T21489] bond1: (slave gretap1): Releasing active interface
[  688.398559][T21489] bond2: (slave gretap2): Releasing active interface
[  688.669221][T21500] lo speed is unknown, defaulting to 1000
[  689.085571][T21519] __nla_validate_parse: 7 callbacks suppressed
[  689.085590][T21519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4117'.
[  689.346635][T21500] lo speed is unknown, defaulting to 1000
[  689.532045][T21538] netlink: 'syz.1.4123': attribute type 2 has an invalid length.
[  689.550819][T21542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4123'.
[  689.811263][T21547] veth0_to_bridge: entered promiscuous mode
[  690.002047][T21540] veth0_to_bridge: left promiscuous mode
[  690.085199][T21566] tc_dump_action: action bad kind
[  690.301859][T21577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4132'.
[  690.312602][T21577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4132'.
[  690.384001][T21579] netlink: 'syz.3.4134': attribute type 13 has an invalid length.
[  690.391982][T21579] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.4134'.
[  690.722871][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  690.730979][    C1] lec:lec_tx_timeout: lec0
[  691.307065][T21621] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4145'.
[  691.326848][T21623] IPv6: NLM_F_CREATE should be specified when creating new route
[  691.647916][T21647] netlink: 'syz.3.4152': attribute type 4 has an invalid length.
[  691.691270][T21647] bond_slave_1: entered allmulticast mode
[  691.723193][T21647] net_ratelimit: 1022 callbacks suppressed
[  691.723211][T21647] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  691.774648][T21655] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  691.811166][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4154'.
[  691.823087][T21655] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4154'.
[  691.902011][T21660] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  692.293769][T21684] netlink: 'syz.2.4164': attribute type 9 has an invalid length.
[  692.319275][T21684] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.4164'.
[  692.346248][T21689] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4164'.
[  692.378208][T21690] tc_dump_action: action bad kind
[  692.703689][T21697] No such timeout policy "syz1"
[  692.925555][T21702] FAULT_INJECTION: forcing a failure.
[  692.925555][T21702] name failslab, interval 1, probability 0, space 0, times 0
[  692.960109][T21702] CPU: 0 UID: 0 PID: 21702 Comm: syz.1.4169 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) 
[  692.960139][T21702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  692.960153][T21702] Call Trace:
[  692.960162][T21702]  <TASK>
[  692.960171][T21702]  dump_stack_lvl+0x189/0x250
[  692.960202][T21702]  ? __pfx____ratelimit+0x10/0x10
[  692.960234][T21702]  ? __pfx_dump_stack_lvl+0x10/0x10
[  692.960258][T21702]  ? __pfx__printk+0x10/0x10
[  692.960288][T21702]  ? __lock_acquire+0xab9/0xd20
[  692.960319][T21702]  should_fail_ex+0x414/0x560
[  692.960357][T21702]  should_failslab+0xa8/0x100
[  692.960388][T21702]  kmem_cache_alloc_noprof+0x73/0x3c0
[  692.960414][T21702]  ? skb_clone+0x212/0x3a0
[  692.960443][T21702]  skb_clone+0x212/0x3a0
[  692.960469][T21702]  __netlink_deliver_tap+0x404/0x850
[  692.960503][T21702]  ? netlink_deliver_tap+0x2e/0x1b0
[  692.960530][T21702]  netlink_deliver_tap+0x19c/0x1b0
[  692.960550][T21702]  netlink_unicast+0x7fa/0x9e0
[  692.960589][T21702]  ? __pfx_netlink_unicast+0x10/0x10
[  692.960620][T21702]  ? netlink_sendmsg+0x642/0xb30
[  692.960635][T21702]  ? skb_put+0x11b/0x210
[  692.960660][T21702]  netlink_sendmsg+0x805/0xb30
[  692.960690][T21702]  ? __pfx_netlink_sendmsg+0x10/0x10
[  692.960713][T21702]  ? aa_sock_msg_perm+0x94/0x160
[  692.960736][T21702]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  692.960757][T21702]  ? __pfx_netlink_sendmsg+0x10/0x10
[  692.960777][T21702]  __sock_sendmsg+0x219/0x270
[  692.960809][T21702]  ____sys_sendmsg+0x505/0x830
[  692.960838][T21702]  ? __pfx_____sys_sendmsg+0x10/0x10
[  692.960871][T21702]  ? import_iovec+0x74/0xa0
[  692.960902][T21702]  ___sys_sendmsg+0x21f/0x2a0
[  692.960928][T21702]  ? __pfx____sys_sendmsg+0x10/0x10
[  692.960993][T21702]  ? __fget_files+0x2a/0x420
[  692.961010][T21702]  ? __fget_files+0x3a0/0x420
[  692.961038][T21702]  __x64_sys_sendmsg+0x19b/0x260
[  692.961065][T21702]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  692.961099][T21702]  ? __pfx_ksys_write+0x10/0x10
[  692.961123][T21702]  ? rcu_is_watching+0x15/0xb0
[  692.961151][T21702]  ? do_syscall_64+0xbe/0x3b0
[  692.961173][T21702]  do_syscall_64+0xfa/0x3b0
[  692.961190][T21702]  ? lockdep_hardirqs_on+0x9c/0x150
[  692.961218][T21702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.961237][T21702]  ? clear_bhb_loop+0x60/0xb0
[  692.961261][T21702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.961280][T21702] RIP: 0033:0x7f88b798e9a9
[  692.961298][T21702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  692.961315][T21702] RSP: 002b:00007f88b874c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  692.961354][T21702] RAX: ffffffffffffffda RBX: 00007f88b7bb5fa0 RCX: 00007f88b798e9a9
[  692.961368][T21702] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000003
[  692.961381][T21702] RBP: 00007f88b874c090 R08: 0000000000000000 R09: 0000000000000000
[  692.961393][T21702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  692.961404][T21702] R13: 0000000000000000 R14: 00007f88b7bb5fa0 R15: 00007fff9851bd38
[  692.961437][T21702]  </TASK>
[  692.961606][T21702] tc_dump_action: action bad kind
[  694.658632][T21752] __nla_validate_parse: 1 callbacks suppressed
[  694.658652][T21752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'.
[  694.676193][T21754] netlink: 'syz.1.4187': attribute type 303 has an invalid length.
[  694.702712][T21752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4188'.
[  694.715652][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4187'.
[  694.998639][T21766] tc_dump_action: action bad kind
[  695.134621][T21778] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4196'.
[  695.350904][T21788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  695.678042][T21803] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4203'.
[  695.697756][T21810] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4203'.
[  695.724012][T21803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'.
[  696.057861][T21819] lo speed is unknown, defaulting to 1000
[  696.108919][T21823] tc_dump_action: action bad kind
[  696.125296][T21817] tipc: Started in network mode
[  696.130289][T21817] tipc: Node identity 060f1e30a649, cluster identity 4711
[  696.132204][T21824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4206'.
[  696.184748][T21817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  696.275357][T21820] syzkaller0: entered promiscuous mode
[  696.296690][T21820] syzkaller0: entered allmulticast mode
[  696.406265][T21830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4209'.
[  696.439157][T21836] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4210'.
[  696.606367][T21844] sctp: [Deprecated]: syz.1.4212 (pid 21844) Use of struct sctp_assoc_value in delayed_ack socket option.
[  696.606367][T21844] Use struct sctp_sack_info instead
[  696.815854][T21814] tipc: Resetting bearer <eth:syzkaller0>
[  697.104725][T21814] tipc: Disabling bearer <eth:syzkaller0>
[  697.168440][T21819] lo speed is unknown, defaulting to 1000
[  697.423693][T21863] syzkaller0: entered promiscuous mode
[  697.429307][T21863] syzkaller0: entered allmulticast mode
[  697.865876][T21889] netlink: 'syz.1.4222': attribute type 1 has an invalid length.
[  699.448328][T21882] tc_dump_action: action bad kind
[  699.608634][T21896] lo speed is unknown, defaulting to 1000
[  699.878305][T21913] __nla_validate_parse: 2 callbacks suppressed
[  699.878325][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'.
[  700.051227][T21922] syzkaller0: entered promiscuous mode
[  700.103648][T21922] syzkaller0: entered allmulticast mode
[  700.207004][T21896] lo speed is unknown, defaulting to 1000
[  700.546166][T21950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4236'.
[  700.879289][T21958] tc_dump_action: action bad kind
[  700.887287][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4237'.
[  701.544832][T21972] sctp: [Deprecated]: syz.2.4242 (pid 21972) Use of int in max_burst socket option.
[  701.544832][T21972] Use struct sctp_assoc_value instead
[  701.616777][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4242'.
[  701.851192][T21979] netlink: 'syz.3.4244': attribute type 1 has an invalid length.
[  702.240301][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4246'.
[  702.257575][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4246'.
[  703.768569][T21997] tc_dump_action: action bad kind
[  704.399941][T22026] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4257'.
[  704.422615][T22023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4256'.
[  704.424533][T22026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4257'.
[  704.478280][T22023] netlink: 'syz.4.4256': attribute type 1 has an invalid length.
[  704.529365][T22033] syz_tun: entered allmulticast mode
[  704.562731][T22032] 
: left allmulticast mode
[  704.576033][T22032] 
: left promiscuous mode
[  704.580749][T22032] bridge0: port 1(
) entered disabled state
[  704.604160][T22027] netlink: 'syz.3.4258': attribute type 13 has an invalid length.
[  704.678581][T22027] netlink: 'syz.3.4258': attribute type 17 has an invalid length.
[  704.749117][T22032] bridge_slave_1: left allmulticast mode
[  704.763190][T22032] bridge_slave_1: left promiscuous mode
[  704.769157][T22032] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.807229][T22032] bond0: (slave bond_slave_0): Releasing backup interface
[  704.819363][T22032] bond_slave_0: left promiscuous mode
[  704.831899][T22032] bond0: (slave bond_slave_1): Releasing backup interface
[  704.853223][T22045] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4256'.
[  704.874331][T22032] bond_slave_1: left promiscuous mode
[  704.897754][T22032] team0: Port device team_slave_1 removed
[  704.930812][T22032] bond1: (slave gretap1): Releasing active interface
[  704.941932][T22032] bond2: (slave bridge3): Releasing active interface
[  704.965611][T22032] bond4: (slave bridge6): Releasing active interface
[  705.000414][T22036] gre0: left allmulticast mode
[  705.029565][T22036] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  705.175392][T22027] sit0: left promiscuous mode
[  705.277787][T22027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  705.324861][T22022] syz_tun: left allmulticast mode
[  705.410810][T22052] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  705.474214][T22055] syzkaller1: entered promiscuous mode
[  705.491251][T22055] syzkaller1: entered allmulticast mode
[  705.613809][T22056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  705.631604][T22056] syzkaller0: entered promiscuous mode
[  705.648210][T22056] syzkaller0: entered allmulticast mode
[  705.718695][T22056] tipc: Resetting bearer <eth:syzkaller0>
[  705.774043][T22054] tipc: Resetting bearer <eth:syzkaller0>
[  705.835859][T22054] tipc: Disabling bearer <eth:syzkaller0>
[  706.190981][T22085] netlink: 'syz.2.4277': attribute type 1 has an invalid length.
[  706.208654][T22085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4277'.
[  706.241918][T22088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4277'.
[  706.292632][T22093] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4280'.
[  706.372004][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4279'.
[  706.516874][T22101] lo speed is unknown, defaulting to 1000
[  706.749789][T22119] netlink: del zone limit has 4 unknown bytes
[  706.911439][T22119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  706.933436][T22119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.284137][T22101] lo speed is unknown, defaulting to 1000
[  707.361610][T22119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.387491][T22119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.469373][T22146] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4290'.
[  707.609525][T22119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.665414][T22119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.839663][T22119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.852657][T22119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.879180][T22159] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4295'.
[  708.126682][T14149] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  708.170495][T14149] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  708.269723][T14156] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  708.291209][T14156] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.313655][T22166] Cannot find del_set index 1 as target
[  708.353411][T14152] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  708.362752][T14152] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  708.430147][T14156] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  708.443890][T14156] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.680608][T22178] sctp: [Deprecated]: syz.4.4301 (pid 22178) Use of struct sctp_assoc_value in delayed_ack socket option.
[  708.680608][T22178] Use struct sctp_sack_info instead
[  708.788952][T22184] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  708.880015][T22176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.895863][T22176] batadv_slave_1: entered promiscuous mode
[  709.194112][T22207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4310'.
[  709.247650][T22207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  709.282006][T22207] batman_adv: batadv0: Removing interface: batadv_slave_0
[  709.307196][T22207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  709.332947][T22207] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.355804][T22207] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  709.373386][T22207] batman_adv: batadv0: Removing interface: ip6gretap1
[  709.509338][T22220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4313'.
[  709.550562][T22220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  709.562720][T22220] batman_adv: batadv0: Removing interface: batadv_slave_0
[  709.575844][T22220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.651717][T22216] lo speed is unknown, defaulting to 1000
[  710.043791][T22216] lo speed is unknown, defaulting to 1000
[  710.056814][T22226] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4314'.
[  710.792567][T22245] lo speed is unknown, defaulting to 1000
[  711.050400][T22245] lo speed is unknown, defaulting to 1000
[  711.143199][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  711.370038][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'.
[  711.434904][T22260] 8021q: adding VLAN 0 to HW filter on device bond0
[  711.449017][T22260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4322'.
[  711.495597][T22265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4323'.
[  711.517253][T22269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4324'.
[  711.533658][T22269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4324'.
[  712.027358][T22291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.119172][T22295] netlink: 'syz.0.4332': attribute type 1 has an invalid length.
[  712.378531][T22302] gretap0: entered promiscuous mode
[  712.393770][T22302] gretap0: entered allmulticast mode
[  712.417391][T22302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  712.457551][T22300] tipc: Disabling bearer <eth:syzkaller0>
[  712.819252][T22325] lo speed is unknown, defaulting to 1000
[  713.079239][T22343] syzkaller1: entered promiscuous mode
[  713.098706][T22343] syzkaller1: entered allmulticast mode
[  713.202433][T22347] syzkaller1: entered promiscuous mode
[  713.224633][T22347] syzkaller1: entered allmulticast mode
[  713.318694][T22359] delete_channel: no stack
[  713.327758][T22361] "syz.0.4344" (22361) uses obsolete ecb(arc4) skcipher
[  713.399294][T22325] lo speed is unknown, defaulting to 1000
[  713.410075][T22350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4345'.
[  713.426554][T22350] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.434967][T22350] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.480398][T22364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4348'.
[  713.538900][T22364] nbd: socks must be embedded in a SOCK_ITEM attr
[  713.585226][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4349'.
[  713.594331][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4349'.
[  713.785974][T22368] udevd[22368]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  713.837438][T22368] udevd[22368]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  714.004557][T22381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4354'.
[  714.179335][T22390] syz_tun: entered promiscuous mode
[  714.210579][T22390] batadv_slave_0: entered promiscuous mode
[  714.234499][T22390] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  714.244554][T22390] Cannot create hsr debugfs directory
[  714.250331][T22390] hsr1: entered allmulticast mode
[  714.257522][T22390] syz_tun: entered allmulticast mode
[  714.269168][T22390] batadv_slave_0: entered allmulticast mode
[  714.440771][T22400] lo speed is unknown, defaulting to 1000
[  714.985373][T22401] lo speed is unknown, defaulting to 1000
[  714.995781][T22400] lo speed is unknown, defaulting to 1000
[  715.114649][T22421] netlink: 'syz.1.4362': attribute type 13 has an invalid length.
[  715.863952][T22417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  716.000585][T22418] lo speed is unknown, defaulting to 1000
[  716.039729][T22457] netlink: 'syz.3.4370': attribute type 1 has an invalid length.
[  716.063388][T22457] netlink: 'syz.3.4370': attribute type 4 has an invalid length.
[  716.102748][T22457] netlink: 'syz.3.4370': attribute type 1 has an invalid length.
[  716.122992][T22457] netlink: 'syz.3.4370': attribute type 4 has an invalid length.
[  716.224576][T22459] sctp: [Deprecated]: syz.4.4371 (pid 22459) Use of int in maxseg socket option.
[  716.224576][T22459] Use struct sctp_assoc_value instead
[  716.383812][T22418] lo speed is unknown, defaulting to 1000
[  716.390634][T22463] __nla_validate_parse: 5 callbacks suppressed
[  716.390656][T22463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4373'.
[  716.410649][T22464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  716.420872][T22464] syzkaller0: entered promiscuous mode
[  716.427026][T22464] syzkaller0: entered allmulticast mode
[  716.457774][T22464] tipc: Resetting bearer <eth:syzkaller0>
[  716.613298][T22401] lo speed is unknown, defaulting to 1000
[  716.875424][T22473] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4375'.
[  717.098572][T22483] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4378'.
[  717.147249][T22460] tipc: Resetting bearer <eth:syzkaller0>
[  717.260510][T22460] tipc: Disabling bearer <eth:syzkaller0>
[  717.722263][T22507] netlink: 'syz.0.4384': attribute type 21 has an invalid length.
[  718.170678][T22523] lo speed is unknown, defaulting to 1000
[  718.292205][T22537] netlink: 'syz.1.4395': attribute type 1 has an invalid length.
[  718.317738][T22537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4395'.
[  718.469619][T22543] netlink: 'syz.1.4398': attribute type 5 has an invalid length.
[  718.601880][T22550] netlink: 'syz.2.4399': attribute type 2 has an invalid length.
[  718.642794][T22550] hsr0: entered promiscuous mode
[  718.674611][T22550] macsec1: entered promiscuous mode
[  718.680199][T22550] macsec1: entered allmulticast mode
[  718.686797][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'.
[  718.696193][T22550] hsr0: entered allmulticast mode
[  718.706556][T22550] hsr_slave_0: entered allmulticast mode
[  718.728742][T22550] hsr_slave_1: entered allmulticast mode
[  718.774146][T22550] hsr0: left allmulticast mode
[  718.779125][T22550] hsr_slave_0: left allmulticast mode
[  718.790538][T22550] hsr_slave_1: left allmulticast mode
[  718.882100][T22523] lo speed is unknown, defaulting to 1000
[  719.008389][T22562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4403'.
[  719.034031][T22562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4403'.
[  719.080912][T22565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4405'.
[  719.114841][T22571] mac80211_hwsim hwsim37 ªªªªª": renamed from wlan0 (while UP)
[  719.170796][T22573] pim6reg: entered allmulticast mode
[  719.218741][T22576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4407'.
[  719.279022][T22579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4408'.
[  719.545435][T22578] lo speed is unknown, defaulting to 1000
[  720.288288][T22586] lo speed is unknown, defaulting to 1000
[  720.295576][T22578] lo speed is unknown, defaulting to 1000
[  720.403372][T22630] IPVS: length: 209 != 24
[  720.432133][T22630] tc_dump_action: action bad kind
[  721.092788][T22586] lo speed is unknown, defaulting to 1000
[  721.100791][T22667] lo speed is unknown, defaulting to 1000
[  721.736602][T22681] tipc: Started in network mode
[  721.741615][T22681] tipc: Node identity 863bc6b9c4ce, cluster identity 4711
[  721.769607][T22681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  721.790213][T22681] syzkaller0: entered promiscuous mode
[  721.799981][T22681] syzkaller0: entered allmulticast mode
[  721.913343][T22678] lo speed is unknown, defaulting to 1000
[  721.921797][T22681] tipc: Resetting bearer <eth:syzkaller0>
[  721.969489][T22680] tipc: Resetting bearer <eth:syzkaller0>
[  722.024139][T22680] tipc: Disabling bearer <eth:syzkaller0>
[  722.560597][T22692] lo speed is unknown, defaulting to 1000
[  722.561003][T22667] lo speed is unknown, defaulting to 1000
[  722.625001][T22678] lo speed is unknown, defaulting to 1000
[  722.717273][T22704] __nla_validate_parse: 3 callbacks suppressed
[  722.717293][T22704] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4440'.
[  722.754591][T22704] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4440'.
[  723.067011][T22710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4444'.
[  723.202277][T22692] lo speed is unknown, defaulting to 1000
[  723.839700][T22721] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4448'.
[  724.024712][   T49] batman_adv: batadv0: Interface deactivated: macvlan6
[  724.047592][   T49] batman_adv: batadv0: Removing interface: macvlan6
[  724.192453][   T49] tipc: Disabling bearer <eth:gre0>
[  724.236907][   T49] bond6 (unregistering): (slave geneve2): Releasing active interface
[  724.590853][   T49] bond0 (unregistering): (slave bond7): Releasing backup interface
[  724.599589][   T49] bond0 (unregistering): Released all slaves
[  724.617311][   T49] bond1 (unregistering): Released all slaves
[  724.631150][T22733] nbd: must specify a size in bytes for the device
[  724.637921][   T49] bond2 (unregistering): Released all slaves
[  724.762650][   T49] bond3 (unregistering): Released all slaves
[  724.878226][   T49] bond4 (unregistering): Released all slaves
[  724.994758][   T49] bond5 (unregistering): Released all slaves
[  725.010146][   T49] bond6 (unregistering): Released all slaves
[  725.126064][   T49] bond7 (unregistering): Released all slaves
[  725.142613][   T49] bond8 (unregistering): Released all slaves
[  725.158907][   T49] bond9 (unregistering): Released all slaves
[  725.178842][   T49] bond10 (unregistering): Released all slaves
[  725.219607][T22731] netlink: 'syz.2.4450': attribute type 26 has an invalid length.
[  725.364083][T22724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.468483][   T49] k›*·]‘: left promiscuous mode
[  725.510180][T22724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.549842][   T49] tipc: Disabling bearer <eth:team0>
[  725.566632][   T49] tipc: Disabling bearer <eth:syzkaller0>
[  725.581509][   T49] tipc: Left network mode
[  725.678758][T22724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.867874][T22724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.183954][T22743] netlink: 'syz.4.4455': attribute type 30 has an invalid length.
[  726.224576][T14155] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  726.255015][T22743] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  726.278020][T22743] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  726.362173][T14152] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  726.415627][T22724] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.431771][T22753] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4458'.
[  726.448121][T22750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4457'.
[  726.461191][T22755] netlink: 'syz.0.4456': attribute type 1 has an invalid length.
[  726.470221][T22751] netlink: 'syz.0.4456': attribute type 1 has an invalid length.
[  726.600025][T22755] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  726.601320][T22751] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  726.651558][T22724] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.004339][T22779] xt_SECMARK: invalid mode: 0
[  727.013771][T22774] gretap0: left allmulticast mode
[  727.050686][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'.
[  727.090154][T22783] netlink: 87 bytes leftover after parsing attributes in process `syz.4.4462'.
[  727.492030][   T49] veth1_macvtap: left promiscuous mode
[  727.513367][   T49] veth0_macvtap: left promiscuous mode
[  727.520399][   T49] veth1_vlan: left promiscuous mode
[  728.909739][   T49] !
 (unregistering): left promiscuous mode
[  728.916142][   T49] !
 (unregistering): left allmulticast mode
[  728.928590][   T49] team0 (unregistering): Port device 
0!
 removed
[  729.144241][T22826] netlink: 'syz.1.4472': attribute type 1 has an invalid length.
[  729.222235][T22826] 8021q: adding VLAN 0 to HW filter on device bond2
[  729.330768][T22834] netlink: 'syz.4.4475': attribute type 10 has an invalid length.
[  729.340750][T22834] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4475'.
[  729.376928][T22826] bond2: entered promiscuous mode
[  729.441261][T22829] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4473'.
[  729.530335][T22830] bond2: (slave geneve2): making interface the new active one
[  729.552775][T22826] sctp: [Deprecated]: syz.1.4472 (pid 22826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  729.552775][T22826] Use struct sctp_sack_info instead
[  729.615543][T22830] geneve2: entered promiscuous mode
[  729.636772][T22830] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  729.689376][T22834] team0: Port device geneve0 added
[  729.744139][T14156] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  729.765571][T14156] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  729.805598][T14156] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  729.833309][T14156] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.919258][T22862] syzkaller0: entered promiscuous mode
[  729.931615][T22863] SET target dimension over the limit!
[  729.951487][T22862] syzkaller0: entered allmulticast mode
[  729.969083][T22863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4482'.
[  730.027812][T22863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4482'.
[  730.091851][T22866] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  730.149005][   T49] IPVS: stop unused estimator thread 0...
[  730.153594][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4483'.
[  730.291078][T22869] netlink: 'syz.3.4483': attribute type 13 has an invalid length.
[  730.302162][T22869] netlink: 'syz.3.4483': attribute type 17 has an invalid length.
[  730.330118][T22881] smc: net device bond0 applied user defined pnetid SYZ2
[  730.354297][T22881] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4485'.
[  730.377587][T22869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  730.393876][T22882] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4485'.
[  730.627006][T22882] smc: removing net device bond0 with user defined pnetid SYZ2
[  730.635844][T22882] bond0 (unregistering): left promiscuous mode
[  730.659621][T22882] bond0 (unregistering): Released all slaves
[  730.747685][T22886] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  730.792529][T22871] lo speed is unknown, defaulting to 1000
[  731.048321][T22901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4491'.
[  733.623675][T22895] syzkaller0: entered promiscuous mode
[  733.629199][T22895] syzkaller0: entered allmulticast mode
[  733.689627][T22871] lo speed is unknown, defaulting to 1000
[  733.834006][T22909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4493'.
[  734.885533][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4499'.
[  735.852508][T22931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4499'.
[  736.306901][T22951] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4506'.
[  736.327472][T22951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  736.866920][T22976] netlink: 'syz.3.4511': attribute type 10 has an invalid length.
[  736.963357][T22964] lo speed is unknown, defaulting to 1000
[  737.087597][T22983] bridge9: entered promiscuous mode
[  737.099706][T22983] bridge9: entered allmulticast mode
[  737.258517][T22964] lo speed is unknown, defaulting to 1000
[  737.686710][T23007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  737.874006][T23017] netlink: 'syz.2.4524': attribute type 1 has an invalid length.
[  738.180470][T23017] 8021q: adding VLAN 0 to HW filter on device bond1
[  738.452477][T23046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4527'.
[  738.515136][T23023] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4527'.
[  739.030200][T23067] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4536'.
[  739.086656][T23061] pimreg: entered allmulticast mode
[  739.092677][T23066] pimreg: left allmulticast mode
[  739.140053][T23058] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  739.251831][T23076] dvmrp8: entered allmulticast mode
[  739.329494][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4539'.
[  739.359183][T23081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4539'.
[  739.385825][T23080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4539'.
[  739.396684][T23081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4539'.
[  739.397781][T23071] dvmrp8: left allmulticast mode
[  739.539404][T23087] netlink: 'syz.1.4542': attribute type 10 has an invalid length.
[  739.867941][T23105] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  741.058253][T23163] __nla_validate_parse: 1 callbacks suppressed
[  741.058273][T23163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4564'.
[  741.186561][T23169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4565'.
[  741.204222][T23172] netlink: 'syz.0.4567': attribute type 29 has an invalid length.
[  741.223131][T23174] netlink: 'syz.2.4566': attribute type 1 has an invalid length.
[  741.501675][T23196] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4574'.
[  741.727214][T23207] FAULT_INJECTION: forcing a failure.
[  741.727214][T23207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  741.777674][T23207] CPU: 0 UID: 0 PID: 23207 Comm: syz.0.4578 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) 
[  741.777706][T23207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  741.777719][T23207] Call Trace:
[  741.777729][T23207]  <TASK>
[  741.777740][T23207]  dump_stack_lvl+0x189/0x250
[  741.777774][T23207]  ? __pfx____ratelimit+0x10/0x10
[  741.777820][T23207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  741.777845][T23207]  ? __pfx__printk+0x10/0x10
[  741.777873][T23207]  ? __might_fault+0xb0/0x130
[  741.777913][T23207]  should_fail_ex+0x414/0x560
[  741.777938][T23207]  _copy_from_user+0x2d/0xb0
[  741.777967][T23207]  do_sock_getsockopt+0x17d/0x450
[  741.778001][T23207]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  741.778024][T23207]  ? do_syscall_64+0x20/0x3b0
[  741.778043][T23207]  ? __fget_files+0x3a0/0x420
[  741.778061][T23207]  ? __fget_files+0x2a/0x420
[  741.778087][T23207]  __x64_sys_getsockopt+0x1a5/0x250
[  741.778110][T23207]  ? do_syscall_64+0x20/0x3b0
[  741.778131][T23207]  ? do_syscall_64+0x20/0x3b0
[  741.778155][T23207]  do_syscall_64+0xfa/0x3b0
[  741.778173][T23207]  ? lockdep_hardirqs_on+0x9c/0x150
[  741.778204][T23207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.778224][T23207]  ? clear_bhb_loop+0x60/0xb0
[  741.778250][T23207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.778270][T23207] RIP: 0033:0x7f8cf518e9a9
[  741.778289][T23207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  741.778308][T23207] RSP: 002b:00007f8cf603a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  741.778329][T23207] RAX: ffffffffffffffda RBX: 00007f8cf53b5fa0 RCX: 00007f8cf518e9a9
[  741.778343][T23207] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004
[  741.778355][T23207] RBP: 00007f8cf603a090 R08: 0000200000000080 R09: 0000000000000000
[  741.778368][T23207] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  741.778381][T23207] R13: 0000000000000000 R14: 00007f8cf53b5fa0 R15: 00007fffb4c44a48
[  741.778413][T23207]  </TASK>
[  742.044311][T23219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4580'.
[  742.044899][T23212] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  742.141309][T23210] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  742.869720][T23250] netlink: 'syz.3.4588': attribute type 10 has an invalid length.
[  742.959843][T23252] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4588'.
[  742.999949][T23252] lo speed is unknown, defaulting to 1000
[  743.326032][T23252] lo speed is unknown, defaulting to 1000
[  743.554434][T23276] bridge0: port 1(gretap0) entered blocking state
[  743.561075][T23276] bridge0: port 1(gretap0) entered disabled state
[  743.598765][T23276] gretap0: entered allmulticast mode
[  743.814544][T23292] vcan0: tx drop: invalid sa for name 0xfbfffffffffffffd
[  743.852250][T23292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4597'.
[  744.045813][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'.
[  744.055017][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4601'.
[  744.064256][T23299] netlink: 'syz.1.4601': attribute type 20 has an invalid length.
[  744.087224][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'.
[  744.116616][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4601'.
[  744.143402][T23299] netlink: 'syz.1.4601': attribute type 20 has an invalid length.
[  744.550266][T23310] lo speed is unknown, defaulting to 1000
[  745.157819][T23344] x_tables: duplicate underflow at hook 3
[  745.819735][T23310] lo speed is unknown, defaulting to 1000
[  746.089445][T23375] lo speed is unknown, defaulting to 1000
[  746.705621][T23387] __nla_validate_parse: 2 callbacks suppressed
[  746.705642][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4630'.
[  746.728842][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4630'.
[  746.753888][T23387] netlink: 'syz.3.4630': attribute type 15 has an invalid length.
[  746.859348][T23375] lo speed is unknown, defaulting to 1000
[  747.131636][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  747.252976][T23399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4634'.
[  748.088514][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4644'.
[  748.508206][T23441] netlink: 'syz.1.4651': attribute type 12 has an invalid length.
[  748.520156][T23442] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4651'.
[  748.530786][T23441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4651'.
[  748.600278][T23445] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4651'.
[  748.819130][T23454] netlink: 'syz.4.4654': attribute type 1 has an invalid length.
[  748.847471][T23454] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.4654'.
[  749.120316][T23477] --map-set only usable from mangle table
[  749.141276][T23472] xt_CT: No such helper "pptp"
[  749.225112][T23483] Cannot find add_set index 3 as target
[  749.341329][T23480] batman_adv: batadv0: Interface deactivated: dummy0
[  749.358585][T23480] batman_adv: batadv0: Removing interface: dummy0
[  749.421214][T23480] bond3: (slave vti0): Releasing backup interface
[  749.440826][T23480] bond4: (slave gretap1): Releasing active interface
[  749.981382][T23514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4670'.
[  750.032515][T23514] netlink: 'syz.2.4670': attribute type 13 has an invalid length.
[  750.378975][T23514] gretap0: refused to change device tx_queue_len
[  750.390349][T23514] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  750.413792][T23515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4672'.
[  750.454225][T23526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  750.477088][T23519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  750.514956][T23519] tipc: Disabling bearer <eth:syzkaller0>
[  750.639424][   T30] audit: type=1800 audit(1752997754.120:5): pid=23536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4676" name="memory.events" dev="tmpfs" ino=1784 res=0 errno=0
[  750.696087][T23538] netlink: 'syz.4.4679': attribute type 23 has an invalid length.
[  750.704997][   T30] audit: type=1804 audit(1752997754.140:6): pid=23536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4676" name="/newroot/345/memory.events" dev="tmpfs" ino=1784 res=1 errno=0
[  750.801145][T23543] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.878806][T23543] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.955508][T23543] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.060670][T23543] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.267411][T23571] netlink: 'syz.2.4687': attribute type 1 has an invalid length.
[  751.279564][T23571] netlink: 'syz.2.4687': attribute type 4 has an invalid length.
[  751.311333][T14149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  751.402023][T14155] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  751.473341][T23574] No such timeout policy "syz1"
[  751.474636][T14155] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  751.576242][T14155] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  751.871963][T23592] xt_check_match: 23 callbacks suppressed
[  751.871988][T23592] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  752.050391][T23595] lo speed is unknown, defaulting to 1000
[  752.185138][T23604] RDS: rds_bind could not find a transport for ::ffff:100.1.33.0, load rds_tcp or rds_rdma?
[  752.352539][T23612] __nla_validate_parse: 10 callbacks suppressed
[  752.352577][T23612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4695'.
[  752.429388][T23612] hsr_slave_0: left promiscuous mode
[  752.436015][T23612] hsr_slave_1: left promiscuous mode
[  752.505373][T23595] lo speed is unknown, defaulting to 1000
[  752.670231][T23614] lo speed is unknown, defaulting to 1000
[  752.722836][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms
[  752.730922][    C1] lec:lec_tx_timeout: lec0
[  752.821336][T23629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4701'.
[  753.247395][T23631] lo speed is unknown, defaulting to 1000
[  753.338638][T23645] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4707'.
[  753.732286][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4703'.
[  753.974102][T23634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4703'.
[  754.078884][T23614] lo speed is unknown, defaulting to 1000
[  754.104901][T23631] lo speed is unknown, defaulting to 1000
[  754.385297][T23678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4715'.
[  754.612594][T23684] tipc: Started in network mode
[  754.628852][T23684] tipc: Node identity 9633499b92c8, cluster identity 4711
[  754.670189][T23687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4720'.
[  754.673590][T23684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  754.761402][T23688] syzkaller0: entered promiscuous mode
[  754.790956][T23688] syzkaller0: entered allmulticast mode
[  754.866995][T23688] tipc: Resetting bearer <eth:syzkaller0>
[  754.957229][T23683] tipc: Resetting bearer <eth:syzkaller0>
[  755.116028][T23683] tipc: Disabling bearer <eth:syzkaller0>
[  755.129839][T23707] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4723'.
[  755.318377][T23711] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4726'.
[  755.332201][T23711] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4726'.
[  756.065610][T23741] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  756.178493][T23755] lo speed is unknown, defaulting to 1000
[  756.257596][T23757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  756.317678][T23764] syzkaller0: entered promiscuous mode
[  756.325793][T23764] syzkaller0: entered allmulticast mode
[  756.569050][T23757] tipc: Resetting bearer <eth:syzkaller0>
[  756.577955][T23770] netlink: 'syz.1.4745': attribute type 5 has an invalid length.
[  756.594382][T23755] lo speed is unknown, defaulting to 1000
[  756.617263][T23756] tipc: Resetting bearer <eth:syzkaller0>
[  756.679330][T23756] tipc: Disabling bearer <eth:syzkaller0>
[  757.458191][T23798] netlink: 'syz.3.4751': attribute type 39 has an invalid length.
[  757.601638][T23798] syz_tun (unregistering): left promiscuous mode
[  757.620207][T23802] lo speed is unknown, defaulting to 1000
[  757.975551][T23824] __nla_validate_parse: 12 callbacks suppressed
[  757.975571][T23824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4760'.
[  758.042339][T23830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4762'.
[  758.098946][T23830] vlan1: entered promiscuous mode
[  758.114611][T23830] erspan0: entered promiscuous mode
[  758.185978][T23802] lo speed is unknown, defaulting to 1000
[  758.188287][T23833] lo speed is unknown, defaulting to 1000
[  758.916866][T23849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4763'.
[  759.071875][T23833] lo speed is unknown, defaulting to 1000
[  759.283262][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  760.141911][T23907] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4781'.
[  760.369542][T23912] veth3: entered promiscuous mode
[  760.809581][T23941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4794'.
[  760.840890][T23937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4793'.
[  760.871419][T23942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4793'.
[  760.938356][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4794'.
[  760.998648][T23953] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  761.062217][T23953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  761.172505][T23959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4799'.
[  761.204307][T23961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  761.344354][T23959] tipc: Disabling bearer <eth:syzkaller0>
[  761.651313][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4806'.
[  761.682039][T23992] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  761.702248][T23992] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.764042][T23989] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  761.776065][T23994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  761.793926][T23994] syzkaller0: entered promiscuous mode
[  761.799438][T23994] syzkaller0: entered allmulticast mode
[  761.822396][T23992] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  761.833235][T23992] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.881557][T23987] tipc: Resetting bearer <eth:syzkaller0>
[  761.937424][T23987] tipc: Disabling bearer <eth:syzkaller0>
[  762.006651][T23992] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  762.026704][T23992] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.157480][T23992] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  762.172947][T23992] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.081747][T24020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  764.131396][T24021] lo speed is unknown, defaulting to 1000
[  764.218109][T13429] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  764.243363][T13429] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  764.263520][T14149] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  764.281928][T14149] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  764.328430][T14149] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  764.337104][T14149] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  764.346486][T24034] ip6gretap0: entered allmulticast mode
[  764.360991][T24036] netlink: 'syz.3.4819': attribute type 10 has an invalid length.
[  764.376146][T14151] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  764.388364][T14151] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  764.441774][T23993] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  764.473035][T23993] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.524627][T14151] ==================================================================
[  764.532729][T14151] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80
[  764.540207][T14151] Read of size 8 at addr ffff88805b6970b0 by task kworker/u8:19/14151
[  764.548374][T14151] 
[  764.550714][T14151] CPU: 0 UID: 0 PID: 14151 Comm: kworker/u8:19 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) 
[  764.550740][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  764.550753][T14151] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  764.550787][T14151] Call Trace:
[  764.550795][T14151]  <TASK>
[  764.550803][T14151]  dump_stack_lvl+0x189/0x250
[  764.550826][T14151]  ? __kasan_check_byte+0x12/0x40
[  764.550854][T14151]  ? __pfx_dump_stack_lvl+0x10/0x10
[  764.550876][T14151]  ? lock_release+0x4b/0x3e0
[  764.550899][T14151]  ? __virt_addr_valid+0x4a5/0x5c0
[  764.550925][T14151]  print_report+0xca/0x230
[  764.550942][T14151]  ? __mutex_lock+0x144/0xe80
[  764.550958][T14151]  kasan_report+0x118/0x150
[  764.550983][T14151]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  764.551011][T14151]  ? __mutex_lock+0x144/0xe80
[  764.551033][T14151]  __mutex_lock+0x144/0xe80
[  764.551051][T14151]  ? __mutex_lock+0x51b/0xe80
[  764.551072][T14151]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  764.551102][T14151]  ? __pfx___mutex_lock+0x10/0x10
[  764.551123][T14151]  ? __lock_acquire+0xab9/0xd20
[  764.551156][T14151]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  764.551189][T14151]  ? process_scheduled_works+0x9ef/0x17b0
[  764.551210][T14151]  ? process_scheduled_works+0x9ef/0x17b0
[  764.551232][T14151]  process_scheduled_works+0xae1/0x17b0
[  764.551269][T14151]  ? __pfx_process_scheduled_works+0x10/0x10
[  764.551300][T14151]  worker_thread+0x8a0/0xda0
[  764.551336][T14151]  kthread+0x70e/0x8a0
[  764.551363][T14151]  ? __pfx_worker_thread+0x10/0x10
[  764.551384][T14151]  ? __pfx_kthread+0x10/0x10
[  764.551410][T14151]  ? _raw_spin_unlock_irq+0x23/0x50
[  764.551436][T14151]  ? lockdep_hardirqs_on+0x9c/0x150
[  764.551463][T14151]  ? __pfx_kthread+0x10/0x10
[  764.551489][T14151]  ret_from_fork+0x3fc/0x770
[  764.551510][T14151]  ? __pfx_ret_from_fork+0x10/0x10
[  764.551533][T14151]  ? __switch_to_asm+0x39/0x70
[  764.551556][T14151]  ? __switch_to_asm+0x33/0x70
[  764.551580][T14151]  ? __pfx_kthread+0x10/0x10
[  764.551606][T14151]  ret_from_fork_asm+0x1a/0x30
[  764.551640][T14151]  </TASK>
[  764.551646][T14151] 
[  764.757900][T14151] Allocated by task 23992:
[  764.762314][T14151]  kasan_save_track+0x3e/0x80
[  764.767002][T14151]  __kasan_kmalloc+0x93/0xb0
[  764.771594][T14151]  __kmalloc_noprof+0x27a/0x4f0
[  764.776454][T14151]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  764.782617][T14151]  notifier_call_chain+0x1b3/0x3e0
[  764.787754][T14151]  register_netdevice+0x1608/0x1ae0
[  764.792965][T14151]  nsim_create+0xae8/0xf10
[  764.797392][T14151]  __nsim_dev_port_add+0x6b6/0xb10
[  764.802501][T14151]  nsim_dev_port_add_all+0x37/0xf0
[  764.807613][T14151]  nsim_dev_reload_up+0x451/0x780
[  764.812635][T14151]  devlink_reload+0x4ec/0x8d0
[  764.817315][T14151]  devlink_nl_reload_doit+0xb35/0xd50
[  764.822687][T14151]  genl_family_rcv_msg_doit+0x215/0x300
[  764.828243][T14151]  genl_rcv_msg+0x60e/0x790
[  764.832744][T14151]  netlink_rcv_skb+0x208/0x470
[  764.837524][T14151]  genl_rcv+0x28/0x40
[  764.841508][T14151]  netlink_unicast+0x82c/0x9e0
[  764.846282][T14151]  netlink_sendmsg+0x805/0xb30
[  764.851046][T14151]  __sock_sendmsg+0x219/0x270
[  764.855727][T14151]  ____sys_sendmsg+0x505/0x830
[  764.860491][T14151]  ___sys_sendmsg+0x21f/0x2a0
[  764.865177][T14151]  __x64_sys_sendmsg+0x19b/0x260
[  764.870117][T14151]  do_syscall_64+0xfa/0x3b0
[  764.874621][T14151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.880519][T14151] 
[  764.882848][T14151] Freed by task 23993:
[  764.886959][T14151]  kasan_save_track+0x3e/0x80
[  764.891648][T14151]  kasan_save_free_info+0x46/0x50
[  764.896676][T14151]  __kasan_slab_free+0x62/0x70
[  764.901440][T14151]  kfree+0x18e/0x440
[  764.905338][T14151]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  764.911595][T14151]  notifier_call_chain+0x1b3/0x3e0
[  764.916706][T14151]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  764.923128][T14151]  unregister_netdevice_queue+0x33c/0x380
[  764.928855][T14151]  nsim_destroy+0x217/0x6a0
[  764.933367][T14151]  __nsim_dev_port_del+0x14d/0x1b0
[  764.938484][T14151]  nsim_dev_reload_destroy+0x288/0x490
[  764.943975][T14151]  nsim_dev_reload_down+0x8a/0xc0
[  764.949031][T14151]  devlink_reload+0x1b3/0x8d0
[  764.953735][T14151]  devlink_nl_reload_doit+0xb35/0xd50
[  764.959121][T14151]  genl_family_rcv_msg_doit+0x215/0x300
[  764.964704][T14151]  genl_rcv_msg+0x60e/0x790
[  764.969213][T14151]  netlink_rcv_skb+0x208/0x470
[  764.974009][T14151]  genl_rcv+0x28/0x40
[  764.978010][T14151]  netlink_unicast+0x82c/0x9e0
[  764.982789][T14151]  netlink_sendmsg+0x805/0xb30
[  764.987561][T14151]  __sock_sendmsg+0x219/0x270
[  764.992247][T14151]  ____sys_sendmsg+0x505/0x830
[  764.997020][T14151]  ___sys_sendmsg+0x21f/0x2a0
[  765.001709][T14151]  __x64_sys_sendmsg+0x19b/0x260
[  765.006669][T14151]  do_syscall_64+0xfa/0x3b0
[  765.011197][T14151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.017112][T14151] 
[  765.019446][T14151] Last potentially related work creation:
[  765.025158][T14151]  kasan_save_stack+0x3e/0x60
[  765.029843][T14151]  kasan_record_aux_stack+0xbd/0xd0
[  765.035055][T14151]  insert_work+0x3d/0x330
[  765.039442][T14151]  __queue_work+0xbd9/0xfe0
[  765.043959][T14151]  queue_work_on+0x181/0x270
[  765.048558][T14151]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  765.054212][T14151]  udp_tunnel_push_rx_port+0x180/0x200
[  765.059703][T14151]  geneve_offload_rx_ports+0xd7/0x160
[  765.065082][T14151]  geneve_netdevice_event+0x6a/0x80
[  765.070320][T14151]  notifier_call_chain+0x1b3/0x3e0
[  765.075445][T14151]  call_netdevice_notifiers+0x88/0xc0
[  765.080821][T14151]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  765.087070][T14151]  notifier_call_chain+0x1b3/0x3e0
[  765.092189][T14151]  register_netdevice+0x1608/0x1ae0
[  765.097388][T14151]  nsim_create+0xae8/0xf10
[  765.101811][T14151]  __nsim_dev_port_add+0x6b6/0xb10
[  765.106926][T14151]  nsim_dev_port_add_all+0x37/0xf0
[  765.112038][T14151]  nsim_dev_reload_up+0x451/0x780
[  765.117061][T14151]  devlink_reload+0x4ec/0x8d0
[  765.121747][T14151]  devlink_nl_reload_doit+0xb35/0xd50
[  765.127123][T14151]  genl_family_rcv_msg_doit+0x215/0x300
[  765.132685][T14151]  genl_rcv_msg+0x60e/0x790
[  765.137193][T14151]  netlink_rcv_skb+0x208/0x470
[  765.141971][T14151]  genl_rcv+0x28/0x40
[  765.145954][T14151]  netlink_unicast+0x82c/0x9e0
[  765.150728][T14151]  netlink_sendmsg+0x805/0xb30
[  765.155489][T14151]  __sock_sendmsg+0x219/0x270
[  765.160175][T14151]  ____sys_sendmsg+0x505/0x830
[  765.164940][T14151]  ___sys_sendmsg+0x21f/0x2a0
[  765.169621][T14151]  __x64_sys_sendmsg+0x19b/0x260
[  765.174559][T14151]  do_syscall_64+0xfa/0x3b0
[  765.179072][T14151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.185069][T14151] 
[  765.187392][T14151] Second to last potentially related work creation:
[  765.193991][T14151]  kasan_save_stack+0x3e/0x60
[  765.198689][T14151]  kasan_record_aux_stack+0xbd/0xd0
[  765.204064][T14151]  insert_work+0x3d/0x330
[  765.208408][T14151]  __queue_work+0xcfc/0xfe0
[  765.212920][T14151]  queue_work_on+0x181/0x270
[  765.217523][T14151]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  765.223165][T14151]  udp_tunnel_push_rx_port+0x180/0x200
[  765.228633][T14151]  vxlan_offload_rx_ports+0x139/0x200
[  765.234011][T14151]  vxlan_netdevice_event+0x111/0x470
[  765.239301][T14151]  notifier_call_chain+0x1b3/0x3e0
[  765.244418][T14151]  call_netdevice_notifiers+0x88/0xc0
[  765.249795][T14151]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  765.256046][T14151]  notifier_call_chain+0x1b3/0x3e0
[  765.261177][T14151]  register_netdevice+0x1608/0x1ae0
[  765.266388][T14151]  nsim_create+0xae8/0xf10
[  765.270821][T14151]  __nsim_dev_port_add+0x6b6/0xb10
[  765.276029][T14151]  nsim_dev_port_add_all+0x37/0xf0
[  765.281154][T14151]  nsim_dev_reload_up+0x451/0x780
[  765.286189][T14151]  devlink_reload+0x4ec/0x8d0
[  765.291057][T14151]  devlink_nl_reload_doit+0xb35/0xd50
[  765.296433][T14151]  genl_family_rcv_msg_doit+0x215/0x300
[  765.301982][T14151]  genl_rcv_msg+0x60e/0x790
[  765.306489][T14151]  netlink_rcv_skb+0x208/0x470
[  765.311258][T14151]  genl_rcv+0x28/0x40
[  765.315238][T14151]  netlink_unicast+0x82c/0x9e0
[  765.320006][T14151]  netlink_sendmsg+0x805/0xb30
[  765.324777][T14151]  __sock_sendmsg+0x219/0x270
[  765.329547][T14151]  ____sys_sendmsg+0x505/0x830
[  765.334317][T14151]  ___sys_sendmsg+0x21f/0x2a0
[  765.338999][T14151]  __x64_sys_sendmsg+0x19b/0x260
[  765.343940][T14151]  do_syscall_64+0xfa/0x3b0
[  765.348443][T14151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.354337][T14151] 
[  765.356663][T14151] The buggy address belongs to the object at ffff88805b697000
[  765.356663][T14151]  which belongs to the cache kmalloc-256 of size 256
[  765.370888][T14151] The buggy address is located 176 bytes inside of
[  765.370888][T14151]  freed 256-byte region [ffff88805b697000, ffff88805b697100)
[  765.384780][T14151] 
[  765.387105][T14151] The buggy address belongs to the physical page:
[  765.393520][T14151] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b696
[  765.402276][T14151] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  765.410950][T14151] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  765.418933][T14151] page_type: f5(slab)
[  765.422939][T14151] raw: 00fff00000000040 ffff88801a441b40 0000000000000000 0000000000000001
[  765.431521][T14151] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  765.440114][T14151] head: 00fff00000000040 ffff88801a441b40 0000000000000000 0000000000000001
[  765.448882][T14151] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  765.457556][T14151] head: 00fff00000000001 ffffea00016da581 00000000ffffffff 00000000ffffffff
[  765.466229][T14151] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  765.474891][T14151] page dumped because: kasan: bad access detected
[  765.481313][T14151] page_owner tracks the page as allocated
[  765.487052][T14151] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 23195, tgid 23193 (syz.4.4573), ts 742339617332, free_ts 734116475842
[  765.508595][T14151]  post_alloc_hook+0x240/0x2a0
[  765.514332][T14151]  get_page_from_freelist+0x21e4/0x22c0
[  765.519882][T14151]  __alloc_frozen_pages_noprof+0x181/0x370
[  765.525688][T14151]  alloc_pages_mpol+0x232/0x4a0
[  765.530541][T14151]  allocate_slab+0x8a/0x3b0
[  765.535062][T14151]  ___slab_alloc+0xbfc/0x1480
[  765.539771][T14151]  __kmalloc_noprof+0x305/0x4f0
[  765.544621][T14151]  iter_file_splice_write+0x1cb/0x1000
[  765.550086][T14151]  direct_splice_actor+0x101/0x160
[  765.555202][T14151]  splice_direct_to_actor+0x5a5/0xcc0
[  765.560574][T14151]  do_splice_direct+0x181/0x270
[  765.565431][T14151]  do_sendfile+0x4da/0x7e0
[  765.569852][T14151]  __se_sys_sendfile64+0x13e/0x190
[  765.574977][T14151]  do_syscall_64+0xfa/0x3b0
[  765.579508][T14151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.585406][T14151] page last free pid 6994 tgid 6994 stack trace:
[  765.591724][T14151]  __free_frozen_pages+0xc71/0xe70
[  765.596839][T14151]  __slab_free+0x326/0x400
[  765.601256][T14151]  qlist_free_all+0x97/0x140
[  765.605936][T14151]  kasan_quarantine_reduce+0x148/0x160
[  765.611393][T14151]  __kasan_slab_alloc+0x22/0x80
[  765.616250][T14151]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  765.622171][T14151]  __alloc_skb+0x112/0x2d0
[  765.626586][T14151]  mld_newpack+0x13c/0xc40
[  765.631017][T14151]  add_grhead+0x5a/0x2a0
[  765.635272][T14151]  add_grec+0x1452/0x1740
[  765.639608][T14151]  mld_ifc_work+0x6ed/0xd60
[  765.644107][T14151]  process_scheduled_works+0xae1/0x17b0
[  765.649660][T14151]  worker_thread+0x8a0/0xda0
[  765.654272][T14151]  kthread+0x70e/0x8a0
[  765.658352][T14151]  ret_from_fork+0x3fc/0x770
[  765.662948][T14151]  ret_from_fork_asm+0x1a/0x30
[  765.667729][T14151] 
[  765.670046][T14151] Memory state around the buggy address:
[  765.675669][T14151]  ffff88805b696f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  765.683728][T14151]  ffff88805b697000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  765.691790][T14151] >ffff88805b697080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  765.699854][T14151]                                      ^
[  765.705484][T14151]  ffff88805b697100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  765.713547][T14151]  ffff88805b697180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  765.721606][T14151] ==================================================================
[  765.807578][T14151] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  765.814913][T14151] CPU: 1 UID: 0 PID: 14151 Comm: kworker/u8:19 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) 
[  765.827256][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  765.837338][T14151] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  765.844676][T14151] Call Trace:
[  765.848069][T14151]  <TASK>
[  765.851024][T14151]  dump_stack_lvl+0x99/0x250
[  765.855641][T14151]  ? __asan_memcpy+0x40/0x70
[  765.860252][T14151]  ? __pfx_dump_stack_lvl+0x10/0x10
[  765.865563][T14151]  ? __pfx__printk+0x10/0x10
[  765.870206][T14151]  panic+0x2db/0x790
[  765.874128][T14151]  ? __pfx_panic+0x10/0x10
[  765.878572][T14151]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  765.884491][T14151]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  765.890869][T14151]  ? print_memory_metadata+0x314/0x400
[  765.896333][T14151]  ? __mutex_lock+0x144/0xe80
[  765.901033][T14151]  check_panic_on_warn+0x89/0xb0
[  765.905976][T14151]  ? __mutex_lock+0x144/0xe80
[  765.910650][T14151]  end_report+0x78/0x160
[  765.914903][T14151]  kasan_report+0x129/0x150
[  765.919417][T14151]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  765.925321][T14151]  ? __mutex_lock+0x144/0xe80
[  765.930000][T14151]  __mutex_lock+0x144/0xe80
[  765.934594][T14151]  ? __mutex_lock+0x51b/0xe80
[  765.939277][T14151]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  765.945533][T14151]  ? __pfx___mutex_lock+0x10/0x10
[  765.950565][T14151]  ? __lock_acquire+0xab9/0xd20
[  765.955422][T14151]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  765.961517][T14151]  ? process_scheduled_works+0x9ef/0x17b0
[  765.967249][T14151]  ? process_scheduled_works+0x9ef/0x17b0
[  765.972999][T14151]  process_scheduled_works+0xae1/0x17b0
[  765.978574][T14151]  ? __pfx_process_scheduled_works+0x10/0x10
[  765.984566][T14151]  worker_thread+0x8a0/0xda0
[  765.989180][T14151]  kthread+0x70e/0x8a0
[  765.993262][T14151]  ? __pfx_worker_thread+0x10/0x10
[  765.998388][T14151]  ? __pfx_kthread+0x10/0x10
[  766.002992][T14151]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.008204][T14151]  ? lockdep_hardirqs_on+0x9c/0x150
[  766.013413][T14151]  ? __pfx_kthread+0x10/0x10
[  766.018019][T14151]  ret_from_fork+0x3fc/0x770
[  766.022707][T14151]  ? __pfx_ret_from_fork+0x10/0x10
[  766.027822][T14151]  ? __switch_to_asm+0x39/0x70
[  766.032638][T14151]  ? __switch_to_asm+0x33/0x70
[  766.037408][T14151]  ? __pfx_kthread+0x10/0x10
[  766.042003][T14151]  ret_from_fork_asm+0x1a/0x30
[  766.046778][T14151]  </TASK>
[  766.050136][T14151] Kernel Offset: disabled
[  766.054462][T14151] Rebooting in 86400 seconds..