last executing test programs:

2.538808987s ago: executing program 4 (id=1257):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x20000000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xb}, {0x6, 0xfff2}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x80, 0x3e38, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x800) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async)
syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x9}}}}}}}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg0\x00', <r5=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=<r9=>0x0, &(0x7f0000000480)=0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'gre0\x00', &(0x7f00000004c0)={'gretap0\x00', <r10=>0x0, 0x8000, 0x8000, 0x0, 0x8000, {{0x30, 0x4, 0x1, 0x34, 0xc0, 0x67, 0x0, 0xef, 0x2f, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0xf, 0x9b, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x4c, 0x8d, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x37}, 0xfffffffe}, {@multicast2, 0x6}, {@remote, 0xffffffff}, {@multicast2, 0x2}, {@rand_addr=0x64010100, 0xffffffff}, {@multicast1}, {@private=0xa010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@broadcast, 0x7f}]}, @ssrr={0x89, 0x1b, 0xa0, [@rand_addr=0x64010100, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @end, @timestamp={0x44, 0x20, 0x23, 0x0, 0xa, [0x7, 0x86, 0xa440, 0x0, 0x2, 0x4, 0x200]}, @timestamp_addr={0x44, 0x14, 0x8c, 0x1, 0x0, [{@broadcast, 0x4}, {@empty, 0x7fff}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', <r11=>0x0, 0x4, 0x7, 0x0, 0x6, 0x23, @empty, @loopback, 0x7, 0x8, 0x5, 0x9}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r12=>0x0}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0xe8, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x51, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xe8}}, 0x4000041)

2.331756398s ago: executing program 4 (id=1259):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYBLOB="9e15c82cd0af655c9ff25c8fa4e26a63491371949ab72fd826f02e54be1bc272ec436d565ff4e76cbc6cb9f655bdb793d838b03a27e5a7ad7da2161583e96d43cca704cfc7ae0f4a4a868d259477a6c9bd99d1bda0cc201c6f1341150345338f6b251ab0933e7b876338b0384a32b5191ef32da8ce62052690367651c7bcaf13dd49e8100dacdd7be39ea1b4930c92e06920c6242b2873af71554e52deb0b999c43a22cdad0f2c01d63b47a78a6cde410cd0c300c2666e72390217d4ca90d738b96f670860f4361edb31a821", @ANYBLOB="080001000000000008000400ac1414bb0d000200ac1414bb080001006401010208000a0001000000080009000c"], 0x48}}, 0x0) (async)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000240)=""/100, 0x7}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xe0000000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) (async)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='veth1_virt_wifi\x00') (async)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
socket$netlink(0x10, 0x3, 0x9) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000631000000000000062000200000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe64}, 0x94) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})

2.28166006s ago: executing program 1 (id=1261):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x4, 0xc2)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000300)={0x11, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc5}]}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="11ef5cb7408a3beb87c6cb0caa6b19c64d933e153a41a760ce39cf8a62f0df124357a98c9659918c5e4c9cdec066685d75269a9f92d5aac40e1143d827a7b687b405483eaa872b7dd0782e6f9b041483361d4e37eba650579c5e7c75267a9c19c3c0ce7807c5533ced6bb691afd06c59580bfdf68e6d1f197aa28d39d553a23bcbe2e629b5ccf318878dd570e6a8755611062311a990aa43aab0b76236056729f6bd733a6dd5782521a0f0de619308ddf7811e829718e9901405e6d5670d4220663b631bd7c7e4ed88e1f953", 0xcc}, {&(0x7f0000000240)="88627af13e9887fac957ef53171d549b76a80928a78b63c0b9c8a21e39f04bdc3bdc2ce8e3abd16b790583d775fc52ba97c1f2f9ef9a14c712310e519a75068044601561b05bab0b5871f00f80", 0x4d}], 0x2, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x903}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}], 0x90}, 0x20008800)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000180)={0x0, 0x2710}, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(0xffffffffffffffff, &(0x7f00000000c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x100}, 0xc)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0xfdef)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028008000240000000010d000100434f4e4e4d41524b0000000014000300e4624777db9d97adbf2cd16d6fb1131f0900020073797a32000000000900010073797a30"], 0x98}}, 0x0)

2.056383401s ago: executing program 4 (id=1263):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x74}}, 0x4044001)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c00018005"], 0x28}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000e000000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00jL\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00'], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r6, &(0x7f0000000300), 0x0}, 0x20)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)

1.958666749s ago: executing program 1 (id=1265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={<r4=>0x0, @local, @local}, &(0x7f0000000100)=0xc)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r4})
r6 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000000)=0x5, 0x4)
ioctl(r6, 0x8916, &(0x7f0000000000))
ioctl(r6, 0x8936, &(0x7f0000000000))
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x3, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x40000000000000}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @random="b58878dbe00a", @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, @multicast, @loopback}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x1b9, 0xf31, 0x74a, 0xa4c]})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r7=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0)

1.859906418s ago: executing program 4 (id=1267):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x51}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r5, 0x7}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x18, 0x200, 0xc5, 0x7, r5}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x94)

1.617057219s ago: executing program 2 (id=1272):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
recvmsg$can_raw(r1, &(0x7f0000001180)={&(0x7f0000000d80)=@tipc, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e00)=""/156, 0x9c}, {&(0x7f0000000ec0)=""/248, 0xf8}, {&(0x7f0000000fc0)=""/26, 0x1a}, {&(0x7f0000001000)=""/27, 0x1b}], 0x4, &(0x7f0000001080)=""/239, 0xef}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0xfef94000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}}, 0x20008040)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x8004f, 0x10000})
accept4$inet(r1, 0x0, &(0x7f0000000000), 0x80000)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=@newtfilter={0x3ab0, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x3a80, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_ACT={0x25e0, 0x6, [@m_csum={0x154, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x7, 0x80000001, 0x7}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xffffffff, 0x0, 0xfef, 0x2}, 0x9}}]}, {0xee, 0x6, "bdd7596e5d7c270a5c6424af1cab79ec6b1064219e6934aff131f19f29c6a58b42dfe97a11e7ae1f594e44c3ac60702fce31427647e509d2fe159c0b097264482b05556b8e5932b914329a17d89fa5bc0ef8b653c56914951c7aa36615b371ecaa6776c049a8447427954121caf47dc7f88b0f852cecf74f3047868f61526692fc7cf1298a17748972941b6a1ee6a1a7810a0c1267f736baa3e8233c323616d3928e15a1792a6d77fb053bda7902bb453e9e3106553a95d3f48257c7e6b5f12bd14080ad2d15cc9033d01a23b27739f8ac070cfed0cb519d1fba6a539f70ebb58724adbcdddbe43bb2d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x150, 0x14, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x20000000, 0xf, 0xb1a}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x5b1, 0x4, 0x0, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2a, 0x10001, 0x1, 0x8, 0xffffffff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9d, 0x18000, 0x2, 0x80000000, 0x8000}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xf, 0xffffffffffffffff, 0x1ff, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0xf7, 0x5, 0x7, 0x140b}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xdd5, 0x10000000, 0x6, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x10000000, 0x5, 0x8}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x10000000, 0x8, 0x500000}, 0xd}}]}, {0x5, 0x6, "aa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x54, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x1f, 0x6, "c81ee4fbea1bf73bd9e60d84c9a567a365631c27d692b04ecf556d"}, {0xc}, {0xc}}}, @m_simple={0x198, 0x8, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xb, 0x0, 0x7, 0xfffffeff}}, @TCA_DEF_DATA={0xd, 0x3, '\xdf+\\/}./:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9b, 0x0, 0x6, 0x10}}, @TCA_DEF_DATA={0xb, 0x3, 'multiq\x00'}, @TCA_DEF_DATA={0xa, 0x3, '#^]%,\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xf3, 0x3, 0x101, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x4, 0x2, 0x9}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x6, 0x20000000, 0x36, 0x4}}]}, {0xb7, 0x6, "8252f661f8512c803291b0a4d02aef0eaf28a0784827a7b248ae37167b62607f880218ad041d81c60264b24adc49802b1f083950d2a2d3c9d4262137a90e4565ca63730802b01004730e070a005c487c862be937798ab0c91791b98aef393a51bdb0a88570ed763ea6c4483ffeb4a4bf1e8915f7a40af5600b3ee1d0734003d2a8d6f2fa482d99da9f8098912f941e97afb6e368e2dc29291d8f9029056a496f84c5b5bdcaf77149dc0912841783efbea8d2ea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xee8, 0x10, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xb, 0x3, 0x6, 0x1ff, 0xd7f}, 0xd, 0x7, [{0x401, 0xfffffff8, 0x4, 0x401, 0xffffffff}, {0x76, 0x401, 0x6, 0x101, 0xc, 0x4}]}, [{0x7, 0x9, 0x2, 0x0, 0x5, 0x200}, {0x4, 0x4, 0x3, 0x3, 0x8}, {0x40, 0x8, 0x6, 0xd26a, 0x81, 0x2}, {0x8, 0x6, 0x80000000, 0x2f0d, 0x0, 0xf4f4}, {0x7c, 0x16, 0x6, 0x8, 0x1, 0x8}, {0xbe3e, 0x5, 0x81, 0x2, 0x40, 0x9}, {0x342bce93, 0x2, 0xffff, 0x3, 0x3, 0x8}, {0x2, 0x9, 0x4, 0x4, 0xff, 0xe5e}, {0x2, 0x0, 0xfffffffb, 0x63, 0x6, 0x8}, {0x4, 0x0, 0xffffffc0, 0x400, 0x1ff, 0x3e5}, {0x7fff, 0x7, 0x9, 0x1ff, 0xd3, 0x1}, {0x800, 0x9, 0x3a, 0xff, 0x6, 0x101}, {0x5, 0x5, 0x100, 0x7, 0x80000001, 0x3}, {0x7, 0x329c, 0xff, 0x0, 0x8, 0xffffff81}, {0x2, 0x8, 0xf8d, 0x7, 0x4, 0x1000}, {0x5, 0xc, 0x2, 0x1, 0x5, 0x7fff}, {0x401, 0x7, 0x4, 0x3, 0x4}, {0xfffffff9, 0x8, 0x9, 0x739aa3a6, 0x8, 0xa}, {0xffffffff, 0x9, 0x400, 0x4, 0x1, 0xfffffff4}, {0x5, 0x2, 0x5, 0x3, 0x40, 0x4}, {0xf608, 0xf, 0x6, 0x1000, 0x6, 0x80000001}, {0xa9, 0x1, 0x4, 0x0, 0x1808f4d1}, {0x4592, 0x3, 0x4, 0x4, 0x401, 0x80}, {0x3, 0x6, 0x4, 0xa, 0x8, 0x9}, {0x8, 0x0, 0x10001, 0xb520, 0x48c, 0x80000000}, {0x80000001, 0x7, 0xa, 0x9, 0x2, 0xfffffbff}, {0x7, 0x40, 0x9, 0x5, 0x5, 0xe}, {0x82f, 0x0, 0x80000000, 0x4, 0xffff95ae, 0x3ff}, {0x2, 0x9, 0x0, 0x1, 0x7ff}, {0x8001, 0x9, 0xe920, 0x800000, 0x9, 0xcf25}, {0x9, 0x1, 0x8, 0x1, 0x3, 0x73}, {0x7fff, 0x7, 0x800, 0x1, 0xfffff30d, 0x7}, {0xff, 0xfffffffa, 0x7, 0x3, 0x80, 0x3}, {0x0, 0xb, 0x8, 0x3ff, 0x8, 0x9b12}, {0x7, 0x2, 0xe852, 0x8, 0x791a, 0x3ff}, {0x3, 0x5, 0x0, 0x1, 0x7fffffff, 0x80}, {0x5, 0x0, 0x40, 0x5, 0x10000, 0x80}, {0x10000, 0x400, 0x100, 0x1, 0x5, 0x2}, {0x2d41, 0x7ff, 0xfffffffd, 0x200, 0xfffffff7, 0x78f7}, {0x0, 0x10000, 0xf, 0xffff, 0x5, 0x1000}, {0x1, 0x1, 0x0, 0x1, 0x80000000, 0x5}, {0xfff, 0x0, 0x6, 0x2, 0x8, 0x6}, {0xe5d, 0x7fff, 0x2, 0x9, 0x2f445494, 0x5003}, {0xdc, 0x7ff, 0x5, 0xfd1, 0xca58, 0x6}, {0x6, 0xffff, 0x0, 0x7, 0xc, 0x2}, {0x4, 0x9, 0x7, 0x8, 0x401, 0x80000001}, {0x6, 0x4, 0x7, 0xb, 0x3, 0xfffffff9}, {0x1, 0x8, 0x3, 0x2, 0x4}, {0x4, 0x1, 0xfff, 0xd1d, 0xdc4, 0x719e}, {0x70, 0x7, 0x0, 0x8, 0x10, 0xfffffffe}, {0xbeff, 0x80000001, 0x3, 0xa1, 0xcef, 0xde}, {0x10, 0x9, 0x7, 0xe, 0x7, 0x4}, {0x6, 0xff, 0x4e5d, 0x0, 0x4b, 0x7}, {0x8, 0xfffffffa, 0x9, 0x4, 0x3, 0xffffd87a}, {0x8, 0x4, 0x0, 0x5, 0x8}, {0x8, 0x1, 0x0, 0x6, 0xa}, {0x8000, 0x3, 0x8, 0x200000, 0xe461, 0x401}, {0xfff, 0xa98, 0x50000000, 0x1, 0x80000001, 0x8}, {0x9e, 0x1, 0x401, 0x0, 0x3, 0x3}, {0x3, 0x1, 0x8, 0x3, 0x4, 0x4}, {0x6, 0x1, 0x6, 0x10000, 0x5, 0x6}, {0x6, 0x7, 0x2, 0x0, 0x81, 0x8}, {0x4, 0x2, 0xe0c, 0xfffffffc, 0x85d1, 0x67}, {0x3, 0x7, 0x5, 0x7, 0x3, 0x2}, {0x0, 0x9, 0x3, 0x0, 0x6, 0x2}, {0x800, 0x40, 0x3255, 0x77c, 0x2, 0x8}, {0x1, 0x763, 0xca3, 0x81, 0x6, 0x7}, {0x3, 0x4296, 0x7ff, 0x9, 0x2, 0xc0000}, {0x6, 0x80000000, 0x6, 0x0, 0x100, 0x6}, {0xffff7c4c, 0x1, 0x7, 0x0, 0x4b, 0x7}, {0x80000001, 0x0, 0x9, 0x2, 0x4}, {0x2, 0x3, 0x2, 0x80000000, 0xf2, 0xde}, {0x8, 0x25, 0x9, 0x4, 0xfffffff8, 0x8001}, {0x2, 0x7, 0x7, 0xff, 0xffff8001, 0x3}, {0x1, 0xc, 0x7fffffff, 0x8, 0x0, 0x2578}, {0x785, 0x8001, 0x7, 0x3, 0x7ff, 0xf8}, {0xad, 0x1, 0xffffff7f, 0x7ff0000, 0xfffffffb, 0xca0}, {0x0, 0x40000, 0xba, 0x7, 0x2, 0xfe}, {0x0, 0x81, 0x0, 0x0, 0x1, 0xfffffffb}, {0x8, 0x7d55, 0x2, 0x400, 0x8, 0x81}, {0x80000001, 0x4, 0x9, 0x4, 0x77, 0x3}, {0x0, 0x10001, 0x1ff, 0x1, 0x0, 0xed32}, {0x22b9, 0xe6b, 0x4, 0x0, 0x6, 0xfffffff8}, {0x7e4, 0xf, 0x2, 0xfffffff4, 0x80, 0x2}, {0x2, 0x8, 0x3, 0xc86, 0x8, 0x2}, {0x50, 0x7, 0x3, 0x6, 0x1, 0xc08}, {0xfffffffd, 0x2, 0x9, 0x1, 0xcc, 0x1}, {0xa00, 0x6, 0x3, 0x3, 0xe9, 0xd}, {0x4, 0x1, 0x40, 0x7f, 0x4, 0x4}, {0x9c24, 0x800, 0xf, 0x2, 0xff, 0x3ff}, {0x4, 0xee, 0x1, 0x6, 0xfffffffd, 0x1}, {0x1, 0x28, 0x1, 0x9b, 0x260f, 0x3ff}, {0x2, 0x7fff, 0x7, 0x9, 0x3, 0xbb4}, {0x8, 0x4, 0x9, 0x516, 0x1400, 0x5}, {0x81, 0x1ff, 0x80000000, 0xf34, 0xb3, 0x7}, {0x1, 0xcf4, 0x10, 0x3c, 0xd9e4, 0x7}, {0x5, 0x6, 0xd, 0x8, 0x8, 0x3ff}, {0x0, 0x4, 0x7, 0x8, 0x7f, 0xfffffff9}, {0x8, 0x6, 0x10001, 0x4, 0x8, 0x509}, {0x3, 0xfffffffb, 0x8, 0x10001, 0x3, 0x1}, {0x401, 0x8, 0x97d3, 0x3d, 0x3}, {0x2, 0x0, 0x3, 0xfffffff8, 0xc80, 0xc1}, {0x3, 0x6, 0xa41, 0x34, 0x5, 0xb}, {0x0, 0x40, 0x400, 0xa30, 0x8, 0xd178}, {0x7fff, 0x1, 0x23253799, 0x10000, 0x1, 0x8}, {0x6, 0x0, 0x4, 0x0, 0xcad, 0x5}, {0x3, 0x9, 0x5, 0x0, 0x4, 0x7}, {0x6, 0x7, 0x10, 0x7f, 0x9, 0xe}, {0x4, 0xec, 0xfffffff5, 0x7, 0xffffffff, 0x2}, {0x10001, 0x2, 0x9, 0x8e7, 0xc000000, 0x5}, {0x20000000, 0x7, 0x6, 0xfffffffa, 0x7, 0x9}, {0x3, 0x8, 0x2, 0x0, 0x2, 0xfffffff8}, {0x4, 0x9, 0x5, 0x5, 0x0, 0x1}, {0x7, 0x8, 0x5, 0x100, 0x6, 0x9}, {0x7a6, 0xfffeffff, 0x8, 0x9, 0xfffff615, 0x71}, {0x8, 0x2, 0x9, 0x4, 0x10, 0xbd7c}, {0x8f7, 0x2, 0x1, 0xfffffc00, 0x0, 0x18da}, {0x5, 0x8, 0x8dc, 0x6495, 0xa11, 0x8}, {0x4, 0x4, 0x5, 0x1, 0x1517, 0x2}, {0xb, 0x6, 0x4, 0xa1e4, 0x2, 0x9}, {0xc6d, 0x1, 0x451f, 0x4, 0x1, 0x100}, {0xfedb, 0x8, 0x9, 0x7f, 0x5d5, 0xc}, {0x401, 0x0, 0x7f, 0x800, 0x7ff, 0x6}, {0x400, 0x1, 0x6, 0x1000, 0x6}, {0x3d8b35ec, 0x6, 0x3, 0x6, 0x4, 0x3}, {0x10001, 0x3, 0x4, 0x80, 0x5, 0xa}, {0x9, 0x7, 0x3c1cf091, 0x2, 0x6, 0x6}, {0x80000000, 0x7fffffff, 0xff, 0x8, 0x87, 0x10}], [{0x4, 0x1}, {0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x5, 0x3e1d05ce5a45a4d7}, {0x4}, {0x5}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x7}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x69b48ca8123fd383}, {}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2, 0xd23e15e87d2b91ea}, {0x5, 0x1}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x82739ab1e610f5e}, {0x7}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x5, 0x8f82f65248c0a297}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5f73571e161be6a1}], 0x1}}]}, {0x6c, 0x6, "ac39b50313122880ed7e69ddf6843c1deefaa4a938303d7006e4e49e5c69fa757017b7663b293d62bf2aee052cab56f46d6689845d675619ab20339c1ba31db8a83a7ddcb89a54768e2d020ca8aff56b2af38852bb8d95ab11a5fa76c93a3926b2c16a0efd1ab042"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x10c, 0x1a, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xd5, 0x6, "d778fc9ccb47db9a52138d3a77607979ec868a2b566516678eb02a737eb5e4e53f6426666a0367fc3a6516981085a44d7f652c60fb3c8d86abea42a77c869d13453686090b3d0539197a2f54df201469984b920d4e53fd5b5d3e32b80da41a905cb4375001af7091c0d5a8cb0f83a983a91160fe8cc89a5737bda3d06cf20db12473b2379af0a958362a23a34366414729c77187a65cb094fd08d0503a0e56b881f7e1995fa0070071205ecc17ff4c153f425f356845c1fc5142f7b8aa6dde887198b9a92bfc4f998cb99b5d17db5040c7"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0xf60, 0xa, 0x0, 0x0, {{0xa}, {0xecc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x8, 0x80000000, 0x10000000, 0x0, 0x7}, 0x11, 0x3, [{0x5, 0x1ff, 0x0, 0x80e, 0xfffffff9, 0xffffffff}, {0x10001, 0x400, 0xfff, 0x800, 0x1, 0x10}, {0x3, 0xfff, 0x7, 0x8c0, 0x4, 0x3}, {0xdf7, 0xfffffce6, 0x8, 0x6, 0xffffb81d, 0x7}, {0x2, 0x0, 0x497, 0x9, 0xa4, 0x6}, {0x0, 0x1, 0x10, 0xffffffff, 0x5, 0x1}, {0x7, 0x5, 0x6, 0x6, 0x9, 0x6}]}, [{0x5, 0x5, 0x8, 0x1, 0x1, 0x9}, {0xfffffff8, 0x3, 0x8, 0x9, 0x4, 0x6}, {0x7, 0x4, 0x5, 0x6, 0xfffffff8}, {0x4, 0xffff, 0x9, 0x80000001, 0x0, 0x3ff}, {0x4, 0x4, 0x1b6d, 0x0, 0x7}, {0x2, 0x7, 0x4, 0x9, 0x8, 0x1ff}, {0x7f, 0x8, 0x3, 0x9, 0x9, 0xffff0208}, {0x80000001, 0xffffffa3, 0x10001, 0x2, 0x2, 0x9}, {0x0, 0x8, 0x9, 0x40, 0x8, 0x3}, {0x7, 0x800, 0x6fe, 0x0, 0x400, 0xfffffff7}, {0x9, 0x2, 0xe, 0xa5, 0x9, 0x12d7ba33}, {0x414c, 0xa9b5, 0x78b, 0x7121, 0x7, 0x9}, {0x6, 0x5, 0xb69, 0xa3, 0x0, 0xeb54}, {0x1, 0x1ff, 0xffff, 0x2, 0x826, 0x4}, {0x8, 0x401, 0x2, 0x2, 0x511, 0x9579}, {0x5, 0xa, 0x3, 0x4, 0xe, 0x101}, {0xfa2, 0x1d3a, 0xc5dc, 0xffffffff, 0x10, 0x1000}, {0xffffffb0, 0x0, 0x9, 0x2615, 0x90, 0x8000}, {0x780f, 0x8, 0xff, 0x3, 0x4, 0x8}, {0x4, 0x3b3, 0xddc, 0xffff, 0x80000001, 0x2fc}, {0x439, 0x101, 0xb2, 0x9, 0xb47, 0x8}, {0x7, 0x2, 0xa43a, 0x7fff, 0x6, 0x1}, {0x7, 0x7ff, 0x6, 0xa152, 0x6e71, 0x8}, {0x2c, 0xd, 0xffffd065, 0x100, 0x7, 0x7}, {0x3, 0x7f, 0x9, 0x10001, 0xffff, 0x7}, {0x3, 0x8000, 0x0, 0xa99, 0x4, 0xffffffff}, {0xe004, 0xd, 0x100, 0x2, 0x10001, 0x5}, {0x0, 0xb3fb, 0x0, 0x3, 0x400, 0x3ff}, {0x3, 0x2, 0x0, 0x5, 0x942, 0x9}, {0x5, 0xfff, 0x200, 0xfffffff7, 0x6, 0x4c}, {0x6, 0x58185806, 0x40, 0x9, 0x6, 0xe}, {0xf9, 0x9, 0xd, 0xf2a, 0x3}, {0xd4c, 0x3, 0xc, 0x8000, 0x86, 0x8}, {0xd2b, 0x4, 0xe, 0x6, 0x80000000, 0x7}, {0x1ff, 0x5, 0x29f, 0x1, 0x9, 0x1}, {0x6, 0xa8, 0x19cd, 0x2, 0x8, 0x7}, {0xa, 0x7, 0xd70, 0x0, 0x8, 0xfffffc01}, {0x3, 0x6, 0x3, 0x2, 0x78ea, 0x9}, {0x3, 0xfffffffa, 0x5, 0x6, 0x8, 0x4162}, {0x8001, 0x4, 0xffffffff, 0xfffffbff, 0x29c, 0x400}, {0x9, 0x7f, 0xb21, 0x4, 0x3, 0x1}, {0xc60, 0x7ff, 0x4, 0xff, 0x10000, 0x8000}, {0x6, 0xb266, 0x1, 0x1f7, 0x4, 0x4}, {0x8dbe, 0xbe4f, 0x6, 0x6, 0x100}, {0x200, 0x6, 0x2, 0x101, 0x6}, {0x3248, 0x7fffffff, 0xba, 0x7, 0x1, 0x5}, {0x7, 0x10, 0x401, 0x9, 0xfff00, 0x9}, {0x6, 0x1, 0x7, 0x80000000, 0xff, 0x40}, {0x29, 0x8, 0x41, 0xdae, 0x81, 0x10001}, {0x80000000, 0x7807, 0x9, 0x6, 0x8000, 0xff}, {0x4, 0x1, 0x2, 0x0, 0x3, 0x4}, {0x3, 0x2, 0x0, 0x0, 0x7fffffff, 0x3}, {0xb, 0x5, 0x4, 0x2, 0x1, 0x6}, {0x1, 0x3ff, 0xb7b8, 0x3, 0xd2e9, 0x5}, {0x4, 0x1d, 0x3, 0x5, 0xffffffff, 0x5}, {0x1, 0x2, 0x3, 0x2, 0x4}, {0x8000, 0x2, 0x4, 0x0, 0x800, 0x2}, {0xffff, 0xffff, 0x0, 0x0, 0x2, 0x8}, {0x81, 0x5, 0x9, 0x5, 0x10001, 0xb2e7}, {0x0, 0x1, 0x800, 0x1, 0x10000, 0xe}, {0x7, 0x4, 0x1ff, 0x2, 0x5, 0xfffffff8}, {0x6e, 0x7, 0xb21, 0xffffffff, 0x9, 0x6}, {0xf, 0x6, 0x9, 0x85b, 0x3ff, 0x2}, {0x80, 0x100, 0xe2ecbe1, 0x2, 0x6ca, 0x80000001}, {0x7bd, 0xff, 0x1, 0x7, 0x99f6, 0x8}, {0x5, 0x80000000, 0x3, 0x10000, 0x8c, 0x610540d5}, {0x0, 0x5, 0xdcc, 0x6, 0x212d, 0x8000}, {0x3, 0x8, 0xffffffff, 0x4000000, 0xa7d2, 0xd}, {0x7fffffff, 0x533, 0x4cc, 0x5, 0x0, 0x8edc}, {0x2000000, 0xc000000, 0xfffffffb, 0x1000, 0xfe, 0xff}, {0x856, 0xfa7, 0x8, 0x7fff, 0xb, 0x4}, {0x2, 0xb505, 0x885, 0x1ff, 0x4, 0x6}, {0x8, 0x5786, 0x0, 0x3, 0xe, 0x2}, {0x6, 0x1, 0x0, 0x0, 0x8, 0x1}, {0x6, 0x6, 0x8, 0x80000000, 0xe7df, 0x8}, {0x1, 0x4, 0x8, 0x5f, 0x7ff, 0x10}, {0xd9d, 0x1000, 0x10001, 0x7, 0xac, 0x400}, {0xd5, 0x4, 0xc7, 0x5, 0x3, 0x5}, {0x8, 0xd05f25c, 0xfb, 0x3ff, 0x6}, {0x1, 0x6e, 0x2, 0x9, 0x5, 0x3}, {0x9, 0x9, 0x3, 0x1ff, 0x3, 0xfffff58e}, {0x8, 0x2, 0x2, 0x3, 0x1ff, 0x5}, {0x9, 0x3, 0x2, 0x8001, 0xfffffff8}, {0x8, 0xfffffff1, 0xfffffff8, 0x7a, 0x5, 0x4}, {0xf, 0x6, 0xffffff00, 0x3, 0x2, 0x4a59dd9a}, {0x1, 0x800, 0x8, 0x8, 0xf, 0x1}, {0x2, 0x9, 0x0, 0x2, 0x7ff, 0x7}, {0x8000, 0x5, 0x5, 0x5, 0x4, 0x80000000}, {0x66, 0x3, 0x0, 0x3, 0xa286, 0x7}, {0x9, 0xaa2, 0x4e, 0x9, 0x1ff5, 0x76c9}, {0x2, 0x4, 0x6, 0xcb7, 0x0, 0xffff}, {0x8, 0x1, 0x7, 0x15b, 0x2, 0x7}, {0xfff, 0x101, 0xffff, 0x80, 0x10001, 0x24d1b1d6}, {0x4, 0x5, 0x5, 0x6, 0xd6ff}, {0xe000000, 0x8, 0x6, 0x0, 0xfffffff8, 0x1}, {0x7, 0x80, 0x5, 0x9, 0x3, 0x8001}, {0x5b, 0x3, 0xb, 0x5, 0x9, 0x1000}, {0x1, 0x8, 0xffffffb4, 0x4, 0x3, 0x401}, {0xfff, 0x5, 0x1, 0x62, 0x2, 0x15}, {0x2, 0x8, 0x4, 0xfff, 0x5e86}, {0x7, 0x2, 0x0, 0x6, 0x8, 0x661c77f2}, {0x1, 0xffff, 0x7, 0xeb8e, 0x3, 0x1}, {0xfffffff9, 0x5, 0x5, 0x0, 0x5f27}, {0xfffffff9, 0xfffffff3, 0x4a2, 0x1, 0x3, 0x101}, {0xfffffffe, 0xd, 0x8001, 0x1ff, 0x0, 0x2}, {0x6, 0x1, 0x80000001, 0x2, 0x1f6, 0xf0c2}, {0x6, 0x3, 0xffffff9f, 0xffffffff, 0xfffffffb, 0x2}, {0x7, 0x1, 0xb7, 0x7ff, 0xfffffff9, 0x4}, {0x8, 0x67, 0x40, 0x80000000, 0x0, 0x7fff}, {0x9, 0x2, 0xfff, 0x5, 0x992, 0x779}, {0x3, 0x6, 0x3, 0x2000, 0xec, 0x9}, {0x0, 0x8b, 0x7, 0x820f, 0x800, 0x3b91}, {0x1, 0x2, 0x5, 0x9, 0x5, 0x9c3c}, {0x7, 0x2, 0x0, 0xb7d, 0x3, 0x7ff}, {0x8, 0xfffffffa, 0x9c, 0x2, 0x400, 0x4}, {0x7d, 0x9, 0xfffffffe, 0x1a, 0x0, 0xe95}, {0xffffffff, 0x8000, 0x9, 0x8, 0xffff, 0xf}, {0x71717011, 0x0, 0xcbd3, 0x1, 0x4, 0x5}, {0xc3, 0x2, 0x4, 0x7, 0x0, 0x2}, {0x10, 0x4, 0x8000, 0x1, 0x8, 0xb07}, {0x85c, 0x800, 0x9b, 0x7, 0x2, 0xfffffff5}, {0x0, 0xda, 0xfffffffd, 0x5, 0x7, 0x6}, {0x62, 0x100, 0x9, 0x2, 0xb9, 0x56d}, {0x4, 0x2, 0x1ff, 0x5, 0x1, 0x8b}, {0x2, 0x5a0, 0x6, 0x9, 0xb55, 0x2f10}, {0x3, 0x10001, 0x7, 0xd, 0x1, 0x58}, {0x5, 0xfffffffd, 0x3, 0x9, 0x9, 0x1959}, {0x810c, 0xfe4, 0xf, 0x6, 0x4, 0x2}], [{0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {}, {0x4}, {0x2}, {0x5}, {0x5, 0x1}, {0x1}, {}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x2}, {0x3}, {0x1}, {0x4}, {0x4}, {0x5}, {}, {0x4}, {0x3}, {}, {0x4}, {0x1}, {0x2}, {}, {0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x6a441fefc0e0c7d7, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x49f11149e9930278}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}]}}]}, {0x6c, 0x6, "2006cfbd354ca2953e9335d68a33befb42de598560c0d21e1250aa6d2d87477e75a72d78d18f85b16fe1320bee4f95cafea0590ea95280574b77e6e0c50a3d17aeed7a8fa11714e47d5012ac74245881df6e1e68a153df3a7479b9fb4221db4348600a9749ffee52"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_tunnel_key={0x150, 0x10, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xf1, 0x6, "1689dd60f0431a5138c8833c885468093173b0094f2bd64bbe1f0662b0480508868b95d6b33588b8552400edee999d5aa2796d57dde62208354179ad8b86578f5dea484146ed57e5553ece2ad58be2e852d4cd31d0fc1ab1cd8273f56e55e770f169cf629a9836ee4978c609f08bd146bc3b48279382c25e15edef70d84e6e804e503bbf79d86e18754886217606bb20ce105ec45ca88216035ade0e90ddc08457e97c356ec71f1a45af84d8bbb4ffce977ccc3d403491ee483056a17bbcf8f64e3acb2667afb02b295af4c9b70b338911ce197e9e66db577e347f80675a371e6d825d2254d6f1d2df1730cce3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xa8, 0xf, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x6, 0x6, 0x1, 0x7fffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe3b9, 0xffff, 0x0, 0x7, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x8, 0x2, 0x9, 0x9}}]}, {0x32, 0x6, "0ea71ef61c1ddfd3164bf8c49de5e57e76e096a53fda2be826debd3e3bf430d52511e5a903ed1b285d3cd82202ef"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf6}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x27}, @TCA_ROUTE4_POLICE={0x1464, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x474, 0x10000, 0x3, 0x4, 0x5, 0x5, 0x2, 0x7, 0x7, 0x6, 0x0, 0x9, 0x1f5, 0xffff, 0x9, 0x7f, 0xf8, 0x16, 0x80, 0x968, 0xff, 0xc50a, 0xd, 0x3, 0x4, 0x7, 0xffffffff, 0xfffffffa, 0x2, 0x80, 0xf, 0x10001, 0xffffffff, 0x1ab7, 0x1853, 0xffffffc0, 0x7fff, 0x32, 0x10000, 0x1000, 0x0, 0x6, 0x2, 0x4000, 0x0, 0xffff, 0x2, 0x5, 0x8, 0x9, 0x9, 0x1000, 0xfff, 0x9, 0x4, 0x9, 0xffb, 0x2, 0x20400000, 0x6, 0x101, 0x19, 0x1000, 0xfffffff7, 0xfffffff9, 0x7fffffff, 0xffff, 0x797, 0x3, 0x0, 0x0, 0x5, 0x8, 0xfffffe01, 0x80, 0x308a48d, 0xe, 0x5, 0x8001, 0x8, 0x9, 0x3, 0x3, 0xfc7, 0x2, 0x4, 0x4, 0x5, 0x9, 0x1, 0x9, 0xc923, 0x8, 0xacd, 0xb, 0x0, 0x101, 0xb, 0x4, 0x3, 0xf506, 0x3, 0x3, 0xf, 0x6, 0x4, 0x4, 0x5, 0x7, 0x1ff, 0x200, 0x1cd4, 0x0, 0x9, 0x8, 0x6000, 0x8001, 0x6, 0xfffffff9, 0x5, 0x1, 0x7f, 0xf, 0x10001, 0x9, 0x3, 0xffffffff, 0x24, 0xff, 0x2, 0x800, 0x80000001, 0x3, 0x4, 0x8, 0x1, 0x1, 0x9, 0x8000, 0x6, 0x6, 0x3, 0x8, 0x3, 0x0, 0x24c, 0x9bea, 0x1, 0x986, 0x0, 0xffffffff, 0x80, 0x9b3, 0x2, 0x8, 0xfff, 0x0, 0x0, 0xe, 0x3ff, 0xc2c6, 0x7f, 0xcc4d, 0x3, 0x3, 0x5, 0x983, 0x5, 0x3, 0x4e1, 0x7, 0x5, 0x6, 0x115, 0x1, 0x4, 0x2, 0x5, 0x6, 0x4, 0x4, 0x2, 0x3, 0x9, 0x1b73, 0x2, 0x8e, 0x4, 0x64, 0x7, 0x6, 0x4, 0x800, 0x100, 0x4, 0x9, 0x80, 0x4308, 0x0, 0x3, 0x9, 0x3, 0x7ff, 0x7f, 0x4a, 0x6, 0x4, 0x1000, 0x3, 0x9, 0xa0, 0x7fff, 0x6, 0x7, 0x2, 0x9, 0x2, 0x10, 0x800, 0xa3f, 0x800, 0xfffffffe, 0x0, 0x4, 0x7fff, 0xffffffff, 0x9, 0x100, 0x7, 0x400, 0xab916c5, 0x5, 0x0, 0x8, 0x6, 0x6, 0x10001, 0x34c7, 0xfffffff9, 0xa, 0x81, 0x80000001, 0x8, 0x3, 0x0, 0x0, 0x31f, 0x2db, 0x0, 0x4, 0x80000001, 0x1, 0x400, 0x10000, 0x3, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x6, 0xd0, 0x5b6, 0x3, 0x80, 0x3, 0x631c, 0xbe6d, 0xfff, 0x8001, 0x400, 0xffffffff, 0xc55, 0x4, 0x7, 0xffffffc0, 0x8, 0x5, 0x0, 0x7, 0x9, 0x7fff, 0xb, 0x4, 0x2, 0xfff, 0xc842, 0x6, 0x5, 0x3, 0x4, 0x7, 0x1, 0x21bf, 0x2, 0x401, 0x74, 0x0, 0x40, 0x9, 0x7ff, 0xf, 0x10000, 0x80000001, 0x5, 0x8001, 0x6f, 0x7, 0x9, 0x4, 0x5, 0x2fa9, 0x9, 0xdea0, 0x6d, 0x3, 0xffffffff, 0xc728, 0x7, 0x4, 0x9, 0x98c, 0x2, 0x1, 0x2, 0x3, 0x3, 0x9, 0x1, 0x6, 0x400, 0xb6aa, 0xffffffff, 0x200, 0x5, 0x6be, 0x3, 0x8, 0x67fed8ae, 0x5, 0x1, 0x4, 0x9, 0x3, 0x2, 0x7fff, 0x5, 0x1, 0x3, 0x2, 0x49, 0x7, 0xc282, 0xf1f0, 0x5, 0x5, 0x7ff, 0x81, 0x9, 0x3, 0x9, 0xaff9, 0xffffffff, 0x4, 0x0, 0x31, 0x2, 0x10, 0xc30000, 0x7fffffff, 0x80, 0x2, 0x100, 0x0, 0x3ff, 0x0, 0x3, 0x5, 0x9, 0x6, 0x8001, 0x4, 0x3e, 0x40, 0x2, 0x1, 0xf, 0x6, 0x2, 0x5a3, 0x7, 0xa, 0x80000000, 0x7fffffff, 0x663, 0xd6, 0x800, 0x1, 0x0, 0x1, 0x8, 0x1, 0x4, 0xfd38, 0x6, 0x6, 0x8, 0x9, 0x9, 0xe5, 0xffff, 0xffff, 0x5, 0x3ff, 0xd0e5, 0x3, 0x3, 0xfffffff7, 0xffff7fff, 0x4, 0x7, 0x1, 0x1, 0x7, 0x2b, 0x1, 0x9, 0x4, 0x224f, 0x6, 0x6, 0x6, 0x5, 0x3dc0, 0x2, 0x8, 0x75, 0x8, 0x66, 0xffff8000, 0x3ff, 0x7, 0x2, 0xfffffffb, 0xc, 0x0, 0x100, 0x0, 0x7ff, 0xc8f8, 0xeac, 0x2, 0x8a, 0x9, 0x10001, 0x1, 0x7, 0x7, 0xffffffff, 0x3, 0xe4, 0xb4, 0x5, 0xffff79bb, 0x7ff, 0xd, 0xdb7b, 0x2, 0x4, 0x10000, 0x12, 0x9, 0x6, 0x5, 0xffff, 0xffffffff, 0x6, 0x10, 0x101, 0x40c, 0x1c, 0x0, 0x0, 0xf, 0xfffffffd, 0x53, 0x3, 0x83ad, 0x7fff, 0xfffff451, 0xd66, 0x1, 0x863, 0x4, 0xc, 0x1c000, 0x10001, 0x6, 0x2, 0x5923, 0x2, 0x3, 0x1, 0x5, 0x400000, 0x20, 0x0, 0x7, 0x10000, 0x8001, 0x5, 0xae0, 0x5, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xec1c, 0x3, 0xa, 0xa, 0x80, {0x7, 0x2, 0x8, 0x40, 0x3, 0x5}, {0xff, 0x0, 0x7f, 0x6, 0x1, 0x5}, 0x6, 0x10, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7fffffff, 0x7, 0x0, 0x4, 0x50d, 0x19c, 0x1, 0x5, 0x1, 0xf, 0x592, 0x2, 0x5, 0x100, 0xff, 0x1, 0x2, 0x73, 0x10001, 0x3, 0x3, 0x4, 0xb1b, 0x5, 0x0, 0x8, 0x800, 0x101, 0x5, 0x9, 0x6, 0xbb, 0x401, 0xffff2f91, 0x5, 0x0, 0x9, 0x3, 0x7, 0x40, 0x7, 0x6, 0x6, 0x400, 0x8, 0x8, 0x8, 0x10000, 0x5, 0x8f, 0x6, 0x17d, 0x2cb731f9, 0x3, 0x0, 0x8, 0x3, 0x401, 0x1, 0x5, 0xe, 0x6, 0x7, 0x8, 0x2, 0x1ff, 0x40, 0x8001, 0x6, 0x1, 0x5, 0x5, 0x6, 0x2, 0x0, 0x10000, 0x0, 0x4, 0x3, 0x10001, 0x5, 0x7, 0x1386, 0x2, 0x3, 0x1, 0x38d, 0x80000000, 0x9, 0x7fffffff, 0x10, 0x7, 0x0, 0x7fffffff, 0x39, 0x7, 0x1, 0x7, 0x9, 0x9, 0x7, 0x10, 0x3, 0x6, 0x1, 0x8, 0x1c0, 0x400, 0x7, 0x7fff, 0x0, 0x8, 0x0, 0x4, 0x3, 0xfffffff8, 0x800, 0x9, 0x1, 0x7, 0x1, 0xffff, 0x7, 0x4, 0x8b7f, 0x0, 0xe35, 0x4, 0x3, 0x4, 0x6, 0x2f5, 0x3d2, 0xfffffff4, 0x7fffffff, 0x9, 0x7fffffff, 0x9, 0xfffffff7, 0x6, 0x1e1, 0x4, 0x4, 0xee7c, 0x7, 0x0, 0xc662dad, 0x3, 0x1, 0xfffffffe, 0x4, 0x1000, 0xf8, 0x4, 0x5, 0x8001, 0x594, 0x4, 0x0, 0x9, 0x69, 0x9a, 0x80000001, 0x6, 0x4, 0x2, 0x9, 0xbe60, 0xd, 0x7, 0x9, 0x6, 0xfffffff7, 0x5, 0xfffffff9, 0x5, 0x817, 0xfffffff8, 0x5, 0x8, 0xfffffffe, 0xff, 0x1, 0x1, 0x8, 0x4, 0xfffffff8, 0xfffffffb, 0x0, 0x7, 0xffffffff, 0x3, 0x9, 0x8, 0x81, 0x84, 0x7, 0xfffffffa, 0x8, 0x4, 0x0, 0x4, 0x6, 0x2, 0x1, 0xfffffffb, 0x4d, 0x6, 0xd2, 0x3, 0xa19, 0x2, 0x80, 0x5, 0x33, 0x7, 0x9, 0x200, 0xfffffffa, 0x7, 0x2, 0x2, 0xf, 0x6, 0x6, 0xfffffffd, 0x80000000, 0x0, 0xe, 0x8, 0x7, 0x6a, 0xd, 0x0, 0x8, 0x7f, 0x0, 0x5, 0x37, 0x2, 0x7, 0x9adb, 0x9dc, 0x80000001, 0x9, 0x2, 0x7, 0x6, 0x1, 0xffffcc4f, 0xa46, 0x7f00, 0x1d0, 0xf2a3, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0xffff, 0x3, 0x1, 0x23f5eeba, 0x7, 0xfffff338, 0x5, 0x9, 0x1, 0x40, 0x9, 0x1, 0xa, 0x1, 0x8, 0x4c, 0x8, 0x8, 0x1, 0x10000, 0xff, 0x10000, 0x10, 0x8, 0x58, 0x400, 0x1, 0x6, 0x6, 0x7ced, 0x0, 0x6, 0xc, 0x7, 0x6, 0x9, 0x8001, 0x10, 0x5779, 0x1, 0x3, 0x6, 0xf44d, 0x4, 0x80, 0xa, 0x3, 0x3, 0x8, 0x7fffffff, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x3, 0xe, 0x7, 0x75bb, 0xa, 0x7, 0x10000, 0x6d8, 0x9, 0x80000000, 0x8, 0x2, 0x100, 0x491a6bd2, 0x732, 0x4, 0x0, 0xfffffff2, 0x4, 0x4, 0x0, 0x7, 0xdd, 0xfffffffa, 0x7, 0xfff, 0x1, 0xaac, 0x200, 0x7fff, 0x9, 0x7, 0x9, 0x9, 0x1f, 0x5, 0x9, 0x40, 0x200, 0x9, 0xfae, 0x38, 0x6, 0x9, 0x0, 0x332c, 0x6, 0x1ff, 0x9, 0x1, 0x8, 0x1, 0xffffff7f, 0x0, 0x8, 0x7fffffff, 0x6, 0x0, 0x80000000, 0x6, 0x0, 0x7, 0xc, 0x0, 0x5, 0x80000001, 0xdb2a, 0x7, 0x2, 0x9, 0xf9e5, 0x4, 0xb, 0x9d, 0x9, 0x4, 0x7, 0x1, 0x4, 0x4, 0x1d1, 0x533b, 0x7, 0x3, 0x8, 0x3, 0x438, 0xfffff4bd, 0x2, 0x62, 0x2, 0x2, 0x9, 0xffffffff, 0x9, 0xa8eb, 0x4, 0x0, 0x8, 0xa, 0x3, 0x4, 0x7e111973, 0x2, 0x6, 0x7, 0xf, 0x5, 0x2, 0x6, 0x6, 0xe63, 0x3ff, 0x0, 0x84e, 0x2, 0xa5, 0xc, 0x35, 0x9, 0xf7d, 0x9, 0x6, 0xd61c, 0x80000000, 0xfffffffc, 0x6b, 0x8, 0x3aa, 0x7fff, 0xb513, 0x0, 0xffffffff, 0x3, 0x5, 0x9, 0x10001, 0x8, 0x8, 0x80000000, 0x0, 0x8, 0xd, 0xbf6f, 0xffffff01, 0xffffff5a, 0xb0e7, 0x9, 0x7f, 0x2f, 0x5, 0x8, 0x401, 0x2f6, 0x0, 0x4d, 0x9a39, 0x5, 0x17ae, 0x8, 0x3, 0x3, 0xbb, 0x7fff, 0xaf, 0x9, 0x6, 0x0, 0x3, 0x1, 0x200, 0x8, 0x1, 0x8, 0xc0000000, 0xcd, 0x800, 0x4, 0x6, 0xffff, 0x30000, 0x6, 0x7, 0x0, 0x7, 0x6, 0x0, 0x100, 0x5, 0x9, 0x2, 0x4, 0xb16, 0x9, 0x2a, 0xfcb0, 0x8001, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x9, 0x7, 0x0, 0x400, 0x6, 0x7, 0xfff, 0xffff, 0x401, 0x200, 0x3, 0xfffff97d, 0x561, 0x9, 0x7fffffff, 0x9, 0x2, 0x10, 0x0, 0x4, 0x5, 0x7c, 0xd5, 0x0, 0x6, 0xf, 0x13, 0x0, 0x100, 0x8, 0x0, 0x0, 0xd82, 0x401, 0xd3, 0x0, 0x5, 0x1, 0x8, 0x45b, 0xd72, 0x6, 0x3, 0x10001, 0x9, 0x2c0, 0x40, 0x5, 0xe2, 0xa5de, 0x1, 0x36, 0x299, 0x10000, 0x6, 0xfffffeff, 0x1, 0x5, 0x7fffffff, 0x48000000, 0x1, 0x4, 0xfffff522, 0x9, 0xd, 0x9, 0xbd3c00, 0x0, 0x7, 0x2, 0x2, 0xa171, 0x7, 0x5d5, 0x2d5e, 0x8, 0x8, 0x8, 0xd, 0x1f6f, 0x0, 0x6, 0x0, 0x9, 0x4, 0xc, 0xfffffeff, 0x0, 0x30b, 0x63, 0x1ff, 0x1, 0x8, 0x7ff, 0x8001, 0x401, 0x4, 0x7, 0x700, 0x0, 0x81, 0x8, 0x4, 0xaf0d0000, 0x0, 0x0, 0x5, 0x7, 0x5, 0x0, 0x6, 0x9, 0x81, 0x2, 0x2, 0x20, 0x4, 0xc, 0x800, 0x3, 0x5, 0x9, 0x4, 0xffff, 0x5, 0xffffffff, 0x3, 0x9, 0x3, 0x2, 0x9, 0x1, 0x400, 0x7378, 0x3, 0x0, 0x5, 0x1, 0x101, 0x7c, 0x7, 0x8000, 0x1c4, 0x401, 0xf6a, 0x8e7, 0x800, 0x0, 0x5, 0x5, 0x4, 0x8, 0x2, 0x2, 0x5, 0xff, 0x6, 0x9, 0x9, 0x7, 0x8, 0x80000001, 0x5, 0x40, 0x2, 0xb, 0x0, 0x0, 0x4, 0x6, 0x101, 0x8, 0x7fff, 0xa1, 0x7, 0x0, 0x100, 0x9, 0x800, 0xffffffff, 0x9, 0xaf, 0x7, 0x9, 0xcadb, 0x7ff, 0x6, 0x8, 0x9, 0x6, 0xd, 0x8, 0x200, 0x6, 0xfffffffd, 0x9, 0x5, 0x9, 0x9, 0xa74f, 0x7, 0xb, 0x8001, 0x6, 0x2, 0x872, 0x6, 0xfffffffa, 0x5, 0x5, 0x7, 0x3, 0x5, 0x3, 0xffffffff, 0x5, 0x1, 0x1, 0xc22, 0x2, 0x1, 0x2, 0x6, 0x0, 0x200, 0x6, 0x2f3, 0x0, 0xe8c, 0xab6d, 0x81, 0x9, 0x3, 0xfffffff7, 0x10001, 0xffff9fb0, 0x8, 0xd1, 0xf, 0x10001, 0x5, 0x7, 0x18a, 0x8, 0x7, 0x3, 0x2, 0x6, 0x7ff, 0x18f99593, 0x3, 0x3000, 0x1, 0x7ff]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x16}, @TCA_ROUTE4_TO={0x8, 0x2, 0xad}]}}]}, 0x3ab0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040004)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
recvmsg$can_raw(r1, &(0x7f00000005c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000a00)=""/195, 0xc3}, {&(0x7f0000000b00)=""/83, 0x53}, {&(0x7f0000000b80)=""/75, 0x4b}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x5, &(0x7f0000006e00)=""/4096, 0x1000}, 0x40000001)
r8 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x0)
bind$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x101, @rand_addr=' \x01\x00', 0x5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000ec0000000073113900000000008510008002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
recvmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000000800)=""/164, 0xa4}], 0x7, &(0x7f00000008c0)=""/140, 0x8c}, 0x3)

1.44525199s ago: executing program 3 (id=1276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0x8, 0x9}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_flow={{0x21}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf2ff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040), 0x4)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
r7 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000580)={<r8=>0x0, 0x8}, &(0x7f0000000600)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000640)={r8, 0x8}, 0xc)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac00", @ANYRES16=r5, @ANYBLOB="050000000000fdffffff0600000008000300", @ANYRES32=r6, @ANYBLOB="08000500060000000a00e80008021100000000002800178004000100040005"], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0xc810)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffffc, 0x56}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc880)
sendmmsg$unix(r3, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40810}}], 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x40)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r5, 0x404, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0xf16, 0x44}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x200}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x40010)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="8fce9a8acd677f89b8e2de285c79912f40ed3250d1e2acb59f23826b19d94143c285675501ac712a2e0fbc1573165dce29b6969512a416fe75703cc5957336ecc5ab2d977941fdc0dc39110b52778c64b6acbb04253ed8", 0x57)
close(r0)

1.390623604s ago: executing program 2 (id=1277):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040)=0x2, 0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast})
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
close(0x3)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r7, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0x6ebf}, {0x6, 0x0, 0x0, 0x1000000}]}, 0x10)
sendmmsg$unix(r8, &(0x7f00000000c0), 0x3f, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
socket$rxrpc(0x21, 0x2, 0x2)

1.267855944s ago: executing program 3 (id=1280):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000140)=0xb1e0, 0x4)
r1 = socket(0xa, 0x3, 0x100000001)
setsockopt(r1, 0xff, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x13e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="48a3f8b06723f6e2f3a912817812e3ad88f025aed3c2c5e7c30558340640a026dfa27fcc00f55f13f1d9b8060759c03ce5c265db85476c7933b0", @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9a766fb}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080)
syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0)
socket(0x2b, 0x80801, 0x1) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000140)=0xb1e0, 0x4) (async)
socket(0xa, 0x3, 0x100000001) (async)
setsockopt(r1, 0xff, 0x1, 0x0, 0x0) (async)
syz_emit_ethernet(0x13e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="48a3f8b06723f6e2f3a912817812e3ad88f025aed3c2c5e7c30558340640a026dfa27fcc00f55f13f1d9b8060759c03ce5c265db85476c7933b0", @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9a766fb}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) (async)
syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) (async)

1.166643764s ago: executing program 0 (id=1281):
socket(0x21, 0x1, 0x7)
socket$inet6(0xa, 0x80003, 0xff)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10)

1.165276559s ago: executing program 3 (id=1282):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async)
splice(r1, 0x0, r3, 0x0, 0x1, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x9, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x200000, 0x7, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010028bd700002dcdb250900020073797a31000000000800410021da66ed140033006970360900"/56], 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r5, 0x852dd6c070cd7e4d, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) (async)
sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044844)

1.091608654s ago: executing program 0 (id=1283):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x80, 0x3, 0x400, 0x8, 0xa, 0xa9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x80, 0x3, 0x400, 0x8, 0xa, 0xa9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'caif0\x00', {0x2, 0x4e21, @multicast2}})
socket$netlink(0x10, 0x3, 0x10) (async)
r16 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r16, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0)
socket(0x11, 0x2, 0x8001)

1.009358311s ago: executing program 2 (id=1284):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000004850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="300000000d0a010800c00000000000000a000001090002007b4f00310000000009b9010073797a310000000004000380"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000740)={{{@in=@local, @in=@remote, 0x4e22, 0x9, 0x4e24, 0x2, 0x2, 0x40, 0xe0, 0x8, 0x0, r8}, {0x100, 0x0, 0x1, 0x7, 0x1ff, 0xffffffffffffffff, 0x2, 0x5}, {0x8, 0x2, 0xffff, 0x1}, 0x6, 0x6e6bb2, 0x2, 0x0, 0x3}, {{@in=@multicast1, 0x4d5, 0x3c}, 0x5fb0a273f3a731a3, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x32, 0x38000000, 0xffffffff, 0x9}}, 0xe8)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r6)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r9, 0x72b}, 0x14}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x6f2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r13, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNATTACHFILTER(r14, 0x401054d5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r10}, 0x38)
socket(0x22, 0x2, 0xfffffffc)

934.823426ms ago: executing program 1 (id=1285):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r2, 0x10000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000001e000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004010000"], 0xfc}}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6, 0x7a6ca697541ff5c9}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)

925.776423ms ago: executing program 4 (id=1286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff200000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e, 0x7, 0x5, 0x8001, 0x80, 0xffffffffffffffff, 0x10001, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @func_proto]}}, 0x0, 0x32}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r4, 0x0, 0x1}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001000)={0x0, r4}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x2, '\x00', r1, r4, 0x5, 0x0, 0x2}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffe55}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

800.119616ms ago: executing program 3 (id=1287):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_settings={0x80000000, 0x100009, @sync=0x0}})
socket(0x1d, 0x2, 0x6) (async)
r1 = socket(0x1d, 0x2, 0x6)
setsockopt$packet_int(r1, 0x6a, 0x7, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1)

666.786222ms ago: executing program 0 (id=1288):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff700002802c"], 0x398}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x108, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x9f, 0x8, "846fc29c98390576b6bfa455a944b8230a491685070f2b940b5bd6c4902f881e3929b40e009a868e55a2fdc6aecc203c9ec221bf6f2f8f190ce9b15c6d148961f34da3f9d257933e2e5f822058d4478eddddc9e70ce434c1da0262dc104712f5fbd3457f4a52ad109615d9134ed5c8a826e2235a7409870963e0da75bede67c62e0e6e8844f7c695127ece9b3161e2b6499105959c727a1f3bee63"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x180}}, 0x0)

666.236651ms ago: executing program 1 (id=1289):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x3, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc2c8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb65}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa9d8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x738d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10000}, 0x24004051) (async)
ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000340)={'bond_slave_1\x00', @ifru_settings={0x4, 0x10, @raw_hdlc=&(0x7f0000000300)={0x8, 0x401}}})

661.191528ms ago: executing program 3 (id=1290):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000180)=0x28)
syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r4}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='contention_end\x00', r0, 0x0, 0x6}, 0x18)
r5 = socket$tipc(0x1e, 0x2, 0x0)
unshare(0x400)
bind$tipc(r5, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xd2, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)

528.100585ms ago: executing program 2 (id=1291):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x6060600)
bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @any, 0x4}, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000002000014001640000049000000000000000000000000080800074000000007"], 0x78}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800fb030000deff000000000a000000000000030000000008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x6}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x1ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x7, 0x1ff, 0x9, 0x6fa, 0x61, 0x5, 0x8}, 0x9c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
unshare(0x40000)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)

521.197305ms ago: executing program 4 (id=1292):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x2000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10)
gettid()
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x474, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "4cc3a2c8c66df3a20d49d8998b7bfa32135c2293766f743d1aa988fd82260068e856aacae462c9f82ab02db354ace226b693d73103a0fa0ef554f8fc35fde7e4ba8bb1f2aecaefdaed69c95daef256fb4e1120d095eda3930e003fef6451fc6b7de99321bef89b2833d763d21aec84600186b9a8e6"}, @ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "6ffef811ce23b8755efe8c55282c145bcfabe2aa6179cde5dd8b97cf8295452aa7bbc5b3c3ca2da5b7fa530be38aa69f90f27aa20d19248eec2130f07a7e4a608587c7d97a22f151c61dc4a25266e2ef97f8507c98cd7bcedfffecacb22b4fe79f24b3eccafba56b2b04c529c94a04d896d8ec6d3b6282b6916686728d062e63ad37c532b6fe8cf34835b531faaab3027a93ea00ae1fe6a558b11131e3395eb04871e49993e468dad946cd7e012ab1ccf1e1ea77cc986205ac6e79eca414a2276d5361f02c42adea70a1a12288fa2642fb4ada61a7f6656907d2b99c1536411634e1e10b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20005}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc70e}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbce5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x140}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe81b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(^!#%\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'A\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '&'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '))\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '[~\'\'\\{\\@\\]$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb0e}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-\xd0!\xc6)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.()\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bond\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "a212aa73a69040ea48f896eb7e86bca151dfc72f3aaa000259ac7fff791f98c5cfbb20d1cc076ebadf5c97fb21f781431ac33e"}]}]}, 0x474}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0xffffffffffffff50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7c}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5202230}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x70}}, 0x4004040)

386.731079ms ago: executing program 0 (id=1293):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_stats}) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000006c0)={0x0, 0x88, "0200000000000000703fcd0993d4323725cdcff2eae49f99843adfb38749f0ca584723bd9698dcb65318d5ba093aa7610002512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c2621e15e7a5d6743243dfde8a664"}, &(0x7f0000000040)=0x90) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x7f, &(0x7f0000000200)=""/127, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})

384.928519ms ago: executing program 1 (id=1294):
r0 = socket(0x10, 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c000000000000000400000d0000000006000000020020000e000000040000000b00005256421800040000000100000004"], 0x0, 0x5c}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x10002, 0x8}, 0xc)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="83e54ba287abe518830000000000000000000000a5d838a9a11bb811bd0994670f6cc374148d14d3b43bfc63c13cbf1d4a5667888c04adb2077b7bc70257adf8d9c8155f33bb3ec065420a6a1d98140b6ca0738094d2af9cdc42842bcb752f4581ee9d32", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f0000001b40)=ANY=[@ANYBLOB="1800000000002008002000070000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7020000f7c6c52db7030000000000008500000005000000bf0900000000000066090600000003e704000000f7ffffff170100002020642500000000002020207b9ac2ca7d2e83f1b0e738978e38f8ff00000000ac910000000000003701000019000000b802000008000000b7030000000000001400000000a100005d93000000000000b50302000000000085000000c4000000b700000000000000950000000000000070e6213fc664c4392287a0d612b351b137a17d909126f3170e71da464593820882fe39d02896"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xe43c4cf3342b4a61, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000006c40)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0xffffffffffffffce)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2000000002000000ffffff7f4508000004160000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000903e52a39d780c000000000000004000000000000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0xa, &(0x7f0000006b80)=ANY=[@ANYBLOB="950000000000000018010000786c6c2500000000002020207b1af8ff00000000000007010000f8ffffffb702000008000000b703000088000001850000000600000003320c0000000000285a3509f9854bf05fadb67e86bd9ae8b55cf1f7661241b69931a00ecdbc6ae987435881185028d594477a89d446decb48742b0e31e71b725075c636a1e5a408bf8dd832bae2f30c156172287b4553edab9258b6198ff99564a7aef32a4b1100"/184], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xffffffff, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff], &(0x7f0000000500)=[{0x4, 0x3, 0x10, 0x6}], 0x10, 0xfffffffc}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffd, 0x1, @mcast1, @mcast2, 0x8000, 0x0, 0x2000002}})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50cb6ba80e5b5530c", 0x9}], 0x1}}], 0x1, 0x8011)
recvmmsg(r9, &(0x7f0000006900)=[{{&(0x7f0000000940)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/9, 0x9}], 0x1, &(0x7f0000001c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000002d00)=@phonet, 0x80, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000680)=""/11, 0xb}, 0x8b98}, {{&(0x7f0000002f80)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000003100)=""/90, 0x5a}, 0xffffff8d}, {{&(0x7f0000003180)=@generic, 0x80, &(0x7f0000003680)=[{&(0x7f0000003200)=""/109, 0x6d}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/98, 0x62}, {&(0x7f0000003380)=""/206, 0xce}, {&(0x7f0000003480)=""/64, 0x40}, {&(0x7f00000034c0)=""/4, 0x4}, {&(0x7f0000003500)=""/187, 0xbb}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/112, 0x70}, {&(0x7f0000003640)=""/55, 0x37}], 0xa, &(0x7f0000003740)=""/33, 0x21}, 0x9}, {{&(0x7f0000003780)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003800)=""/197, 0xc5}, {0x0}], 0x2, &(0x7f0000003980)=""/140, 0x8c}, 0x6}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003a40)=""/240, 0xf0}, {&(0x7f0000003b40)=""/36, 0x24}, {&(0x7f0000005500)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003bc0)=""/187, 0xbb}, {&(0x7f0000003d80)=""/194, 0xc2}, {&(0x7f0000003e80)=""/37, 0x25}], 0x3, &(0x7f0000003f00)=""/189, 0xbd}, 0x3}, {{&(0x7f0000003fc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004040)=""/179, 0xb3}, {&(0x7f0000004100)=""/245, 0xf5}], 0x2, &(0x7f0000004240)=""/104, 0x68}, 0x1}, {{&(0x7f00000042c0)=@xdp, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/44, 0x2c}, {&(0x7f0000004380)=""/182, 0xb6}], 0x2, &(0x7f0000004480)=""/27, 0x1b}, 0x1}], 0x9, 0x10120, 0x0)
sendmsg$inet(r9, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000040)="b74069aab46ca593db86cf4b0a275b9b32c12f", 0x13}, {0x0}, {&(0x7f0000000540)="5325c45960404ab8e911314e6f3501ac7e13aaad91dbdb8283780dc9543dd94c11e4431b8c1d3cee0c28b7a6f1a3bc4e6a6a928dd8557431", 0x38}], 0x5}, 0x0)
shutdown(r9, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
accept4(r10, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="580000000206010200000000004965056e7edadaff000780080012400006000005e4be52e7d1f621d5c025fbe1110b9e8000010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x58}}, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7}, 0x90)

336.564753ms ago: executing program 2 (id=1295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="9a427876fc00141e35016a467df6", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5c}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x20048080)

315.424168ms ago: executing program 3 (id=1296):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0xa, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x7, 0x400, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="f5af24bd7009000000000e00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf250f00000008003c000800000005002d0001000000050033000100000005002d0001000000ffd906d5059740fd76b531c4c36bdca6eca03d74fe452bba26d62907a2c513031484588bf439da3933fcbe99fbc944b5247ac8f381fd82770544e9cf731e989a71d44b756430f1feff4b74043e9e0183e9a813fc997fb93665d79948c26c4158bd2be4f5e2e21193e4bf1904371dc1c231a8ca91f7b4aa414a6978823ff2371fa5c0129c851f59d1afc1b36a420510"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f00000003c0)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r9, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

210.748336ms ago: executing program 0 (id=1297):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
unshare(0x20400)
connect$unix(r1, 0x0, 0x0)
listen(r0, 0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
unshare(0x480) (async)
unshare(0x480)
unshare(0x2c060000) (async)
unshare(0x2c060000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94)
unshare(0x24020400)
pread64(r0, &(0x7f0000000040)=""/120, 0x78, 0x200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
bind$bt_l2cap(r2, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
socket$pptp(0x18, 0x1, 0x2) (async)
socket$pptp(0x18, 0x1, 0x2)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2})
sendfile(r5, r4, 0x0, 0xf03a0005)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

207.766896ms ago: executing program 1 (id=1298):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@getlink={0x28, 0x12, 0x913, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x40)

92.7938ms ago: executing program 2 (id=1299):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x9, 0x5, 0x9)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r6=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x6, r3, 0x10, r4}, 0x10)
bind$xdp(r4, &(0x7f00000010c0)={0x2c, 0x0, r6, 0xb}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x814}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x80)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r10, 0x0)
r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r12, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b51a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0x1e, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21)

0s ago: executing program 0 (id=1300):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
unshare(0x20000400)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x94}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_cipso(0xfffffffffffffffe, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
pipe(&(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
setsockopt$inet6_int(r10, 0x29, 0x19, &(0x7f0000000000)=0x76f, 0x4)
writev(r5, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4142df6640b27", 0xfdef}], 0x1)
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000240)={@remote, 0x6a, r1})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x1)

kernel console output (not intermixed with test programs):

wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.179398][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.220664][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.339945][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   81.346209][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.374176][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.494129][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.538587][    T9] cfg80211: failed to load regulatory.db
[   81.565586][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.648903][ T6004] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   81.699424][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.745342][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.792128][ T6011] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10'.
[   82.092612][ T5869] Bluetooth: hci0: command tx timeout
[   82.172243][ T5869] Bluetooth: hci4: command tx timeout
[   82.172268][ T5865] Bluetooth: hci3: command tx timeout
[   82.177707][ T5869] Bluetooth: hci1: command tx timeout
[   82.183479][ T5875] Bluetooth: hci2: command tx timeout
[   82.860772][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   82.907853][ T6028] tipc: Started in network mode
[   82.917684][ T6028] tipc: Node identity c6be8e72c4ac, cluster identity 4711
[   82.995784][ T6028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.307802][ T6040] syzkaller0: entered promiscuous mode
[   83.359453][ T6040] syzkaller0: entered allmulticast mode
[   83.374214][ T6040] tipc: Resetting bearer <eth:syzkaller0>
[   83.483830][ T6026] tipc: Resetting bearer <eth:syzkaller0>
[   83.877470][ T6076] netlink: 'syz.1.23': attribute type 1 has an invalid length.
[   83.882204][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'.
[   83.913110][ T6077] netlink: 'syz.4.24': attribute type 1 has an invalid length.
[   83.920774][ T6077] netlink: 'syz.4.24': attribute type 1 has an invalid length.
[   83.936875][ T6077] netlink: 'syz.4.24': attribute type 1 has an invalid length.
[   84.102639][   T44] tipc: Node number set to 34770546
[   84.811297][ T6026] tipc: Disabling bearer <eth:syzkaller0>
[   84.826865][ T6065] batadv_slave_0: entered promiscuous mode
[   84.836373][ T6076] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   84.941534][ T6070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.941853][ T5944] IPVS: starting estimator thread 0...
[   84.968931][ T6085] IPVS: lc: FWM 3 0x00000003 - no destination available
[   84.983713][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[   85.103987][ T6093] netlink: 'syz.1.27': attribute type 1 has an invalid length.
[   85.115037][ T6093] netlink: 208 bytes leftover after parsing attributes in process `syz.1.27'.
[   85.115174][ T6070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.136331][ T6086] IPVS: using max 29 ests per chain, 69600 per kthread
[   85.201552][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'.
[   85.225566][ T6065] batadv_slave_0: left promiscuous mode
[   85.268929][ T6070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.275572][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.427449][ T6070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.630660][ T6104] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET)
[   86.439473][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.465113][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.483745][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.525452][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.605997][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.644101][ T6129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.36'.
[   86.713787][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.822308][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.906317][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.944720][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   86.999598][ T6136] syz.4.35 uses old SIOCAX25GETINFO
[   87.163105][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.170835][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.233852][ T6132] ªªªªª;: renamed from batadv0 (while UP)
[   87.265333][ T6142] FAULT_INJECTION: forcing a failure.
[   87.265333][ T6142] name failslab, interval 1, probability 0, space 0, times 1
[   87.300789][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.1.37 Not tainted syzkaller #0 PREEMPT(full) 
[   87.300810][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   87.300826][ T6142] Call Trace:
[   87.300832][ T6142]  <TASK>
[   87.300839][ T6142]  dump_stack_lvl+0x189/0x250
[   87.300865][ T6142]  ? __pfx____ratelimit+0x10/0x10
[   87.300883][ T6142]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.300901][ T6142]  ? __pfx__printk+0x10/0x10
[   87.300927][ T6142]  ? __pfx___might_resched+0x10/0x10
[   87.300942][ T6142]  ? fs_reclaim_acquire+0x7d/0x100
[   87.300961][ T6142]  should_fail_ex+0x414/0x560
[   87.300986][ T6142]  should_failslab+0xa8/0x100
[   87.301007][ T6142]  __kmalloc_noprof+0xcb/0x4f0
[   87.301025][ T6142]  ? ethnl_default_notify+0x1af/0xb70
[   87.301056][ T6142]  ethnl_default_notify+0x1af/0xb70
[   87.301077][ T6142]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   87.301095][ T6142]  ? __pfx_ethnl_default_notify+0x10/0x10
[   87.301127][ T6142]  ? mutex_is_locked+0x17/0x50
[   87.301141][ T6142]  ? rtnl_is_locked+0x15/0x20
[   87.301161][ T6142]  ethnl_default_set_doit+0x4f8/0x890
[   87.301189][ T6142]  genl_family_rcv_msg_doit+0x212/0x300
[   87.301214][ T6142]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   87.301248][ T6142]  ? bpf_lsm_capable+0x9/0x20
[   87.301264][ T6142]  ? security_capable+0x7e/0x2e0
[   87.301291][ T6142]  genl_rcv_msg+0x60e/0x790
[   87.301317][ T6142]  ? __pfx_genl_rcv_msg+0x10/0x10
[   87.301334][ T6142]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[   87.301352][ T6142]  ? __asan_memcpy+0x40/0x70
[   87.301368][ T6142]  ? __pfx_ref_tracker_free+0x10/0x10
[   87.301396][ T6142]  netlink_rcv_skb+0x208/0x470
[   87.301411][ T6142]  ? __lock_acquire+0xab9/0xd20
[   87.301431][ T6142]  ? __pfx_genl_rcv_msg+0x10/0x10
[   87.301452][ T6142]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   87.301490][ T6142]  ? down_read+0x1ad/0x2e0
[   87.301510][ T6142]  genl_rcv+0x28/0x40
[   87.301528][ T6142]  netlink_unicast+0x82f/0x9e0
[   87.301560][ T6142]  ? __pfx_netlink_unicast+0x10/0x10
[   87.301584][ T6142]  ? netlink_sendmsg+0x642/0xb30
[   87.301600][ T6142]  ? skb_put+0x11b/0x210
[   87.301622][ T6142]  netlink_sendmsg+0x805/0xb30
[   87.301651][ T6142]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.301673][ T6142]  ? aa_sock_msg_perm+0xf1/0x1d0
[   87.301691][ T6142]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   87.301704][ T6142]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.301718][ T6142]  __sock_sendmsg+0x21c/0x270
[   87.301739][ T6142]  ____sys_sendmsg+0x505/0x830
[   87.301769][ T6142]  ? __pfx_____sys_sendmsg+0x10/0x10
[   87.301793][ T6142]  ? import_iovec+0x74/0xa0
[   87.301812][ T6142]  ___sys_sendmsg+0x21f/0x2a0
[   87.301830][ T6142]  ? __pfx____sys_sendmsg+0x10/0x10
[   87.301883][ T6142]  ? __fget_files+0x2a/0x420
[   87.301895][ T6142]  ? __fget_files+0x3a0/0x420
[   87.301917][ T6142]  __x64_sys_sendmsg+0x19b/0x260
[   87.301938][ T6142]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   87.301971][ T6142]  ? __pfx_ksys_write+0x10/0x10
[   87.301987][ T6142]  ? rcu_is_watching+0x15/0xb0
[   87.302009][ T6142]  ? do_syscall_64+0xbe/0x3b0
[   87.302039][ T6142]  do_syscall_64+0xfa/0x3b0
[   87.302056][ T6142]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.302073][ T6142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.302088][ T6142]  ? clear_bhb_loop+0x60/0xb0
[   87.302104][ T6142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.302119][ T6142] RIP: 0033:0x7f3c7638eba9
[   87.302140][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.302152][ T6142] RSP: 002b:00007f3c771f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   87.302173][ T6142] RAX: ffffffffffffffda RBX: 00007f3c765d6090 RCX: 00007f3c7638eba9
[   87.302186][ T6142] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000005
[   87.302196][ T6142] RBP: 00007f3c771f5090 R08: 0000000000000000 R09: 0000000000000000
[   87.302206][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.302216][ T6142] R13: 00007f3c765d6128 R14: 00007f3c765d6090 R15: 00007ffc8a99dae8
[   87.302247][ T6142]  </TASK>
[   87.966915][ T6157] veth1_to_bridge: entered promiscuous mode
[   87.973535][ T6157] veth1_to_bridge: entered allmulticast mode
[   88.014214][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.455912][ T6177] netlink: 'syz.1.50': attribute type 5 has an invalid length.
[   88.477414][ T6177] geneve2: entered promiscuous mode
[   88.486787][ T6177] geneve2: entered allmulticast mode
[   88.495718][ T5985] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   88.507781][ T5985] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   88.518417][ T6177] netlink: 'syz.1.50': attribute type 12 has an invalid length.
[   88.529237][ T5985] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   88.568789][ T5985] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   88.600596][ T6182] FAULT_INJECTION: forcing a failure.
[   88.600596][ T6182] name failslab, interval 1, probability 0, space 0, times 0
[   88.615783][ T6182] CPU: 0 UID: 0 PID: 6182 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) 
[   88.615803][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   88.615813][ T6182] Call Trace:
[   88.615820][ T6182]  <TASK>
[   88.615828][ T6182]  dump_stack_lvl+0x189/0x250
[   88.615852][ T6182]  ? __pfx____ratelimit+0x10/0x10
[   88.615871][ T6182]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.615890][ T6182]  ? __pfx__printk+0x10/0x10
[   88.615917][ T6182]  ? __pfx___might_resched+0x10/0x10
[   88.615933][ T6182]  ? fs_reclaim_acquire+0x7d/0x100
[   88.615954][ T6182]  should_fail_ex+0x414/0x560
[   88.615982][ T6182]  should_failslab+0xa8/0x100
[   88.616007][ T6182]  __kmalloc_noprof+0xcb/0x4f0
[   88.616027][ T6182]  ? ethnl_default_notify+0x1f5/0xb70
[   88.616052][ T6182]  ethnl_default_notify+0x1f5/0xb70
[   88.616075][ T6182]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   88.616096][ T6182]  ? __pfx_ethnl_default_notify+0x10/0x10
[   88.616134][ T6182]  ? mutex_is_locked+0x17/0x50
[   88.616150][ T6182]  ? rtnl_is_locked+0x15/0x20
[   88.616179][ T6182]  ethnl_default_set_doit+0x4f8/0x890
[   88.616210][ T6182]  genl_family_rcv_msg_doit+0x212/0x300
[   88.616238][ T6182]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   88.616273][ T6182]  ? bpf_lsm_capable+0x9/0x20
[   88.616293][ T6182]  ? security_capable+0x7e/0x2e0
[   88.616324][ T6182]  genl_rcv_msg+0x60e/0x790
[   88.616352][ T6182]  ? __pfx_genl_rcv_msg+0x10/0x10
[   88.616372][ T6182]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[   88.616393][ T6182]  ? __asan_memcpy+0x40/0x70
[   88.616411][ T6182]  ? __pfx_ref_tracker_free+0x10/0x10
[   88.616441][ T6182]  netlink_rcv_skb+0x208/0x470
[   88.616456][ T6182]  ? __lock_acquire+0xab9/0xd20
[   88.616479][ T6182]  ? __pfx_genl_rcv_msg+0x10/0x10
[   88.616501][ T6182]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   88.616539][ T6182]  ? down_read+0x1ad/0x2e0
[   88.616573][ T6182]  genl_rcv+0x28/0x40
[   88.616591][ T6182]  netlink_unicast+0x82f/0x9e0
[   88.616624][ T6182]  ? __pfx_netlink_unicast+0x10/0x10
[   88.616649][ T6182]  ? netlink_sendmsg+0x642/0xb30
[   88.616665][ T6182]  ? skb_put+0x11b/0x210
[   88.616688][ T6182]  netlink_sendmsg+0x805/0xb30
[   88.616723][ T6182]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.616744][ T6182]  ? aa_sock_msg_perm+0xf1/0x1d0
[   88.616767][ T6182]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   88.616784][ T6182]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.616803][ T6182]  __sock_sendmsg+0x21c/0x270
[   88.616829][ T6182]  ____sys_sendmsg+0x505/0x830
[   88.616855][ T6182]  ? __pfx_____sys_sendmsg+0x10/0x10
[   88.616885][ T6182]  ? import_iovec+0x74/0xa0
[   88.616908][ T6182]  ___sys_sendmsg+0x21f/0x2a0
[   88.616929][ T6182]  ? __pfx____sys_sendmsg+0x10/0x10
[   88.616989][ T6182]  ? __fget_files+0x2a/0x420
[   88.617003][ T6182]  ? __fget_files+0x3a0/0x420
[   88.617031][ T6182]  __x64_sys_sendmsg+0x19b/0x260
[   88.617054][ T6182]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   88.617084][ T6182]  ? __pfx_ksys_write+0x10/0x10
[   88.617102][ T6182]  ? rcu_is_watching+0x15/0xb0
[   88.617125][ T6182]  ? do_syscall_64+0xbe/0x3b0
[   88.617149][ T6182]  do_syscall_64+0xfa/0x3b0
[   88.617171][ T6182]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.617189][ T6182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.617205][ T6182]  ? clear_bhb_loop+0x60/0xb0
[   88.617226][ T6182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.617242][ T6182] RIP: 0033:0x7f3c7638eba9
[   88.617257][ T6182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.617270][ T6182] RSP: 002b:00007f3c77216038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   88.617288][ T6182] RAX: ffffffffffffffda RBX: 00007f3c765d5fa0 RCX: 00007f3c7638eba9
[   88.617300][ T6182] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000005
[   88.617310][ T6182] RBP: 00007f3c77216090 R08: 0000000000000000 R09: 0000000000000000
[   88.617320][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   88.617330][ T6182] R13: 00007f3c765d6038 R14: 00007f3c765d5fa0 R15: 00007ffc8a99dae8
[   88.617361][ T6182]  </TASK>
[   89.513063][ T6202] netlink: 'syz.4.57': attribute type 3 has an invalid length.
[   89.521032][ T6203] netlink: 'syz.4.57': attribute type 3 has an invalid length.
[   89.596178][   T44] IPVS: starting estimator thread 0...
[   89.605140][ T6205] IPVS: lc: FWM 3 0x00000003 - no destination available
[   89.702056][ T6206] IPVS: using max 32 ests per chain, 76800 per kthread
[   89.716132][ T6210] Zero length message leads to an empty skb
[   89.717241][ T6208] IPVS: Unknown mcast interface: batadv0
[   89.886474][ T5985] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.941762][ T5985] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.979425][   T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.015157][ T6217] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   90.051597][ T6217] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   90.118996][ T1097] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.391306][ T6234] openvswitch: netlink: IP tunnel dst address not specified
[   90.891111][ T6249] vlan2: entered promiscuous mode
[   90.905566][ T6249] macvtap0: entered promiscuous mode
[   91.014340][ T6254] ieee802154 phy0 wpan0: encryption failed: -22
[   91.032550][ T6246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.158809][ T6252] syzkaller0: entered promiscuous mode
[   91.182347][ T6252] syzkaller0: entered allmulticast mode
[   91.311861][ T6242] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   91.345757][ T6251] pimreg: entered allmulticast mode
[   91.459812][ T6239] tipc: Resetting bearer <eth:syzkaller0>
[   91.625723][ T6239] tipc: Disabling bearer <eth:syzkaller0>
[   91.818453][ T6266] warning: `syz.3.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.652239][ T6278] __nla_validate_parse: 36 callbacks suppressed
[   92.652256][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'.
[   94.390122][ T6278] hsr0: entered promiscuous mode
[   94.402432][ T6278] hsr0: entered allmulticast mode
[   94.407469][ T6278] hsr_slave_0: entered allmulticast mode
[   94.419191][ T6278] hsr_slave_1: entered allmulticast mode
[   94.626926][ T6293] netlink: 288 bytes leftover after parsing attributes in process `syz.2.81'.
[   94.702841][ T6241] Set syz1 is full, maxelem 65536 reached
[   94.736089][ T6296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'.
[   94.755257][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[   94.848649][   T10] IPVS: starting estimator thread 0...
[   94.858164][ T6298] IPVS: lc: FWM 3 0x00000003 - no destination available
[   94.959848][ T6301] IPVS: using max 28 ests per chain, 67200 per kthread
[   94.991040][ T6305] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   95.048729][ T6308] netlink: 'syz.4.87': attribute type 1 has an invalid length.
[   95.089922][ T6308] netlink: 'syz.4.87': attribute type 1 has an invalid length.
[   95.308761][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'.
[   95.389852][ T6324] macvtap0: entered promiscuous mode
[   95.408953][ T6324] team0: entered promiscuous mode
[   95.430221][ T6324] team_slave_0: entered promiscuous mode
[   95.441794][ T6324] team_slave_1: entered promiscuous mode
[   95.444558][ T6334] netlink: 'syz.1.95': attribute type 7 has an invalid length.
[   95.450336][ T6324] macvtap0: entered allmulticast mode
[   95.468702][ T6324] team0: entered allmulticast mode
[   95.483432][ T6324] team_slave_0: entered allmulticast mode
[   95.489261][ T6324] team_slave_1: entered allmulticast mode
[   95.496929][ T6324] 8021q: adding VLAN 0 to HW filter on device macvtap0
[   95.510825][ T6329] team0: left allmulticast mode
[   95.515978][ T6329] team_slave_0: left allmulticast mode
[   95.522798][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   95.524280][ T6329] team_slave_1: left allmulticast mode
[   95.537494][ T6329] team0: left promiscuous mode
[   95.542427][ T6329] team_slave_0: left promiscuous mode
[   95.544480][   T30] audit: type=1804 audit(1757534129.487:2): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.94" name="/newroot/9/cgroup.controllers" dev="tmpfs" ino=64 res=1 errno=0
[   95.548814][ T6329] team_slave_1: left promiscuous mode
[   95.572190][   T30] audit: type=1800 audit(1757534129.487:3): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.94" name="cgroup.controllers" dev="tmpfs" ino=64 res=0 errno=0
[   95.596311][   T30] audit: type=1800 audit(1757534129.487:4): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.94" name="cgroup.controllers" dev="tmpfs" ino=64 res=0 errno=0
[   95.644564][ T6339] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   95.701261][ T6342] ip_vti0: entered promiscuous mode
[   95.715396][ T6343] netlink: 'syz.0.96': attribute type 4 has an invalid length.
[   95.736492][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   95.839875][ T6350] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21
[   95.847934][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'.
[   95.857931][ T6350] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21
[   95.869298][ T6350] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21
[   95.878197][ T6350] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21
[   95.885841][ T6350] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21
[   95.892934][ T6350] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21
[   95.899798][ T6350] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21
[   95.952328][ T6350] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21
[   95.959799][ T6350] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:0
[   95.989839][ T6350] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:0
[   95.996855][ T6350] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:0
[   96.021155][ T6351] lo speed is unknown, defaulting to 1000
[   96.031220][ T6351] lo speed is unknown, defaulting to 1000
[   96.041695][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'.
[   96.047124][ T6351] lo speed is unknown, defaulting to 1000
[   96.056609][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'.
[   96.093866][ T6351] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   96.141657][ T6351] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   96.218863][ T6351] lo speed is unknown, defaulting to 1000
[   96.229647][ T6351] lo speed is unknown, defaulting to 1000
[   96.237726][ T6351] lo speed is unknown, defaulting to 1000
[   96.247021][ T6351] lo speed is unknown, defaulting to 1000
[   96.261472][ T6351] lo speed is unknown, defaulting to 1000
[   96.528999][ T6367] lo speed is unknown, defaulting to 1000
[   96.694450][ T6380] tipc: Started in network mode
[   96.702044][ T6380] tipc: Node identity d68872673e97, cluster identity 4711
[   96.737090][ T6380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.756017][ T6392] syzkaller0: entered promiscuous mode
[   96.761496][ T6392] syzkaller0: entered allmulticast mode
[   96.864276][ T6380] tipc: Resetting bearer <eth:syzkaller0>
[   96.946282][ T6379] tipc: Resetting bearer <eth:syzkaller0>
[   96.981132][ T6379] tipc: Disabling bearer <eth:syzkaller0>
[   97.017233][ T6395] lo speed is unknown, defaulting to 1000
[   97.540696][ T6415] macvtap1: entered promiscuous mode
[   97.565472][ T6415] dummy0: entered promiscuous mode
[   97.592735][ T6415] macvtap1: entered allmulticast mode
[   97.612119][ T6415] dummy0: entered allmulticast mode
[   97.657006][ T6419] dummy0: left allmulticast mode
[   97.676775][ T6419] dummy0: left promiscuous mode
[   97.764513][ T6416] lo speed is unknown, defaulting to 1000
[   98.221799][ T6449] __nla_validate_parse: 5 callbacks suppressed
[   98.221816][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'.
[   98.328945][ T6449] vlan2: entered promiscuous mode
[   98.334634][ T6449] bridge0: entered promiscuous mode
[   99.125206][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'.
[   99.137843][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[   99.158956][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'.
[   99.338792][ T6485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.378385][ T6483] tipc: Disabling bearer <eth:syzkaller0>
[   99.603880][ T6492] openvswitch: netlink: Flow key attr not present in new flow.
[   99.635054][ T6480] lo speed is unknown, defaulting to 1000
[   99.679465][ T6493] sch_tbf: burst 0 is lower than device wg1 mtu (1420) !
[  100.217967][ T6509] tipc: Failed to remove unknown binding: 66,1,1/0:1271133455/1271133457
[  100.231550][ T6509] tipc: Failed to remove unknown binding: 66,1,1/0:1271133455/1271133457
[  100.246488][ T6509] tipc: Failed to remove unknown binding: 66,1,1/0:1271133455/1271133457
[  100.271734][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.138'.
[  100.287270][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.138'.
[  100.313312][ T6511] netlink: 64 bytes leftover after parsing attributes in process `syz.0.139'.
[  100.330151][ T6511] netlink: 64 bytes leftover after parsing attributes in process `syz.0.139'.
[  100.574200][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'.
[  100.758523][ T6531] Bluetooth: MGMT ver 1.23
[  100.776017][   T30] audit: type=1800 audit(1757534134.717:5): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.143" name="blkio.bfq.time_recursive" dev="tmpfs" ino=168 res=0 errno=0
[  100.948124][   T30] audit: type=1800 audit(1757534134.757:6): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.143" name="blkio.bfq.time_recursive" dev="tmpfs" ino=168 res=0 errno=0
[  101.435923][ T6544] delete_channel: no stack
[  101.763644][ T6556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.158764][ T6575] lo speed is unknown, defaulting to 1000
[  102.344642][ T6587] ipvlan1: entered allmulticast mode
[  102.351468][ T6587] veth0_vlan: entered allmulticast mode
[  102.431562][ T6595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.503698][ T6595] tipc: Disabling bearer <eth:syzkaller0>
[  102.857274][ T6620] netlink: 'syz.3.173': attribute type 1 has an invalid length.
[  102.990734][ T6620] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.080304][ T6614] lo speed is unknown, defaulting to 1000
[  103.740508][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'.
[  103.766352][ T6643] team_slave_0: entered promiscuous mode
[  103.772215][ T6643] team_slave_1: entered promiscuous mode
[  103.778688][ T6643] macvtap1: entered promiscuous mode
[  103.784834][ T6643] team0: entered promiscuous mode
[  103.791922][ T6643] macvtap1: entered allmulticast mode
[  103.807102][ T6643] team0: entered allmulticast mode
[  103.812656][ T6643] team_slave_0: entered allmulticast mode
[  103.835713][ T6643] team_slave_1: entered allmulticast mode
[  103.878081][ T6643] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  103.920951][ T6646] team0: left allmulticast mode
[  103.926074][ T6646] team_slave_0: left allmulticast mode
[  103.943143][ T6646] team_slave_1: left allmulticast mode
[  103.950913][ T6646] team0: left promiscuous mode
[  103.969281][ T6646] team_slave_0: left promiscuous mode
[  103.974891][ T6646] team_slave_1: left promiscuous mode
[  104.029288][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'.
[  104.045693][ T6645] lo speed is unknown, defaulting to 1000
[  104.236981][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[  104.308744][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[  104.364041][ T6661] lo speed is unknown, defaulting to 1000
[  104.865835][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[  104.929655][ T6703] netlink: 'syz.0.196': attribute type 1 has an invalid length.
[  104.977567][ T6699] erspan0: entered promiscuous mode
[  105.004470][ T6699] erspan0: left promiscuous mode
[  105.055051][ T6711] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20004
[  105.205956][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'.
[  105.504470][ T6732] nbd2: detected capacity change from 0 to 63
[  105.522964][ T6737] block nbd2: NBD_DISCONNECT
[  105.528392][ T6737] block nbd2: Disconnected due to user request.
[  105.546442][ T6737] block nbd2: shutting down sockets
[  105.553430][ T5881] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.590642][ T5881] Buffer I/O error on dev nbd2, logical block 0, async page read
[  105.659850][   T55] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  105.669946][   T55] Buffer I/O error on dev nbd2, logical block 1, async page read
[  105.679942][   T55] Buffer I/O error on dev nbd2, logical block 2, async page read
[  105.689483][   T55] Buffer I/O error on dev nbd2, logical block 3, async page read
[  105.698978][ T5881] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.710770][ T5881] Buffer I/O error on dev nbd2, logical block 0, async page read
[  105.719050][ T5881] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.728308][ T5881] Buffer I/O error on dev nbd2, logical block 1, async page read
[  105.739337][ T5881] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.748777][ T5881] Buffer I/O error on dev nbd2, logical block 2, async page read
[  105.757182][ T5881] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.766371][ T5881] Buffer I/O error on dev nbd2, logical block 3, async page read
[  105.775829][ T5881] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.785419][ T5881] Buffer I/O error on dev nbd2, logical block 0, async page read
[  105.802325][ T5881] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.823315][ T5881] Buffer I/O error on dev nbd2, logical block 1, async page read
[  105.844333][ T5881] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.889268][ T5881] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.913097][ T5881] ldm_validate_partition_table(): Disk read failed.
[  105.926301][ T5881] Dev nbd2: unable to read RDB block 0
[  105.931656][ T6732] bond1: entered promiscuous mode
[  105.935349][ T5881]  nbd2: unable to read partition table
[  105.958602][ T5881] ldm_validate_partition_table(): Disk read failed.
[  105.965798][ T6732] bond1: entered allmulticast mode
[  105.973188][ T6732] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.985898][ T6754] IPVS: lc: FWM 3 0x00000003 - no destination available
[  105.986135][ T5881] Dev nbd2: unable to read RDB block 0
[  106.001017][ T5881]  nbd2: unable to read partition table
[  106.061820][ T6751] netlink: 'syz.3.204': attribute type 4 has an invalid length.
[  106.241751][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'.
[  106.558348][   T30] audit: type=1107 audit(1757534140.507:7): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='	öŠi"L)‡ý™Ú'
[  106.704937][ T6785] lo speed is unknown, defaulting to 1000
[  106.717145][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'.
[  107.624380][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'.
[  107.743315][ T6829] netlink: 'syz.2.228': attribute type 4 has an invalid length.
[  107.845786][ T6832] IPVS: lc: FWM 3 0x00000003 - no destination available
[  108.027973][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.230'.
[  108.047709][ T6839] team0: No ports can be present during mode change
[  108.119409][ T6845] lo speed is unknown, defaulting to 1000
[  108.282587][ T6853] ipvlan2: entered promiscuous mode
[  108.290553][ T6854] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[  108.304983][ T6858] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[  108.359710][ T6856] syzkaller1: entered promiscuous mode
[  108.380391][ T6856] syzkaller1: entered allmulticast mode
[  108.421443][ T6854] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  108.423796][ T6858] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  108.931699][ T6887] netlink: 'syz.2.245': attribute type 12 has an invalid length.
[  108.938732][ T6886] IPVS: lc: FWM 3 0x00000003 - no destination available
[  108.954798][ T6889] netlink: 'syz.2.245': attribute type 12 has an invalid length.
[  109.155783][ T6894] lo speed is unknown, defaulting to 1000
[  109.314873][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'.
[  109.398134][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'.
[  109.752865][ T6894] netlink: 'syz.1.246': attribute type 6 has an invalid length.
[  109.814539][ T6911] lo speed is unknown, defaulting to 1000
[  110.626201][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'.
[  110.731125][    T9] IPVS: starting estimator thread 0...
[  110.743012][ T6936] IPVS: lc: FWM 3 0x00000003 - no destination available
[  110.750171][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  110.802485][ T6932] team_slave_0: entered promiscuous mode
[  110.808662][ T6932] team_slave_1: entered promiscuous mode
[  110.837441][ T6932] macvtap1: entered promiscuous mode
[  110.843982][ T6932] team0: entered promiscuous mode
[  110.872877][ T6932] macvtap1: entered allmulticast mode
[  110.878263][ T6932] team0: entered allmulticast mode
[  110.883666][ T6939] IPVS: using max 30 ests per chain, 72000 per kthread
[  110.946595][ T6932] team_slave_0: entered allmulticast mode
[  110.990217][ T6932] team_slave_1: entered allmulticast mode
[  111.034411][ T6932] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  111.334719][ T6952] delete_channel: no stack
[  111.659412][ T6964] IPVS: stopping backup sync thread 6966 ...
[  111.669043][ T6966] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  112.425628][ T6993] IPVS: lc: FWM 3 0x00000003 - no destination available
[  112.455175][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  112.630944][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'.
[  112.694245][ T7008] team_slave_0: entered promiscuous mode
[  112.699970][ T7008] team_slave_1: entered promiscuous mode
[  112.802820][ T7008] macvtap1: entered promiscuous mode
[  112.832204][ T7008] team0: entered promiscuous mode
[  112.855653][ T7008] macvtap1: entered allmulticast mode
[  112.874841][ T7008] team0: entered allmulticast mode
[  112.887110][ T7008] team_slave_0: entered allmulticast mode
[  112.914693][ T7008] team_slave_1: entered allmulticast mode
[  112.936725][ T7008] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  112.997676][ T7013] team0: left allmulticast mode
[  113.013647][ T7013] team_slave_0: left allmulticast mode
[  113.030312][ T7013] team_slave_1: left allmulticast mode
[  113.048932][ T7013] team0: left promiscuous mode
[  113.071398][ T7013] team_slave_0: left promiscuous mode
[  113.076959][ T7013] team_slave_1: left promiscuous mode
[  113.385190][ T7030] syzkaller1: entered allmulticast mode
[  114.557863][ T7052] IPVS: lc: FWM 3 0x00000003 - no destination available
[  114.576529][    C1] IPVS: lc: FWM 3 0x00000003 - no destination available
[  114.576949][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[  114.604125][ T7053] Driver unsupported XDP return value 0 on prog  (id 151) dev N/A, expect packet loss!
[  114.745686][ T7059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.286'.
[  114.772513][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'.
[  114.887847][ T7064] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  114.922339][ T7064] macsec1: entered promiscuous mode
[  115.852427][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'.
[  116.140758][ T7097] IPVS: lc: FWM 3 0x00000003 - no destination available
[  116.150534][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  117.087487][ T7143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.311'.
[  117.656422][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'.
[  117.711482][ T7163] bridge1: entered promiscuous mode
[  117.873880][ T7163] bond1: entered promiscuous mode
[  117.906319][ T7163] bond1: entered allmulticast mode
[  117.915587][ T7163] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.935082][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'.
[  117.960561][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'.
[  118.001020][ T7174] netlink: 'syz.0.320': attribute type 5 has an invalid length.
[  118.009815][ T7174] netlink: 'syz.0.320': attribute type 6 has an invalid length.
[  118.139310][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.322'.
[  118.348242][ T7174] lo speed is unknown, defaulting to 1000
[  118.724195][ T7198] netlink: 'syz.2.324': attribute type 1 has an invalid length.
[  118.750232][ T7198] netlink: 'syz.2.324': attribute type 1 has an invalid length.
[  118.795164][ T7198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.324'.
[  118.879547][ T7207] netlink: 'syz.3.330': attribute type 8 has an invalid length.
[  118.901416][ T7207] bond0: entered promiscuous mode
[  118.909794][ T7207] bond_slave_0: entered promiscuous mode
[  118.917186][ T7207] bond_slave_1: entered promiscuous mode
[  118.929503][ T7207] bond0: left promiscuous mode
[  118.935324][ T7207] bond_slave_0: left promiscuous mode
[  118.941497][ T7207] bond_slave_1: left promiscuous mode
[  119.436967][ T7221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.444435][ T7221] syzkaller0: entered promiscuous mode
[  119.449908][ T7221] syzkaller0: entered allmulticast mode
[  119.488904][ T7221] tipc: Resetting bearer <eth:syzkaller0>
[  119.540258][ T7221] tipc: Resetting bearer <eth:syzkaller0>
[  119.668098][ T7221] tipc: Disabling bearer <eth:syzkaller0>
[  119.695423][ T7224] __nla_validate_parse: 7 callbacks suppressed
[  119.695438][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'.
[  119.741070][   T30] audit: type=1804 audit(1757534153.687:8): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.337" name="memory.events" dev="tmpfs" ino=363 res=1 errno=0
[  119.797428][   T30] audit: type=1800 audit(1757534153.687:9): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.337" name="memory.events" dev="tmpfs" ino=363 res=0 errno=0
[  119.897786][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.948788][ T7239] IPVS: lc: FWM 3 0x00000003 - no destination available
[  120.210203][ T7241] : entered promiscuous mode
[  120.419134][ T7250] lo speed is unknown, defaulting to 1000
[  120.699785][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'.
[  120.709635][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'.
[  120.739622][ T7268] netlink: 10 bytes leftover after parsing attributes in process `syz.3.349'.
[  120.810455][ T7268] nbd: socks must be embedded in a SOCK_ITEM attr
[  121.166392][ T7289] ieee802154 phy0 wpan0: encryption failed: -90
[  121.264970][ T7293] ip_vti0: left promiscuous mode
[  121.291378][ T7293] sit0: left promiscuous mode
[  121.334046][ T7293] sit0: left allmulticast mode
[  121.410849][ T7293] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  121.485681][ T7293] macvtap0: left promiscuous mode
[  121.533074][ T7293] macvtap0: left allmulticast mode
[  121.538474][ T7293] macvtap1: left promiscuous mode
[  121.574833][ T7293] macvtap1: left allmulticast mode
[  121.584080][ T7312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.358'.
[  121.660903][ T7299] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  121.821909][ T7293] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[  121.844164][ T7323] IPVS: lc: FWM 3 0x00000003 - no destination available
[  121.870342][ T5944] IPVS: starting estimator thread 0...
[  121.876126][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  121.876922][ T7325] lo speed is unknown, defaulting to 1000
[  121.992298][ T7326] IPVS: using max 28 ests per chain, 67200 per kthread
[  122.088941][ T7329] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  122.186989][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[  122.198983][ T7329] ip6gre1: entered allmulticast mode
[  122.226753][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'.
[  122.758136][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'.
[  122.812933][ T7360] team_slave_0: entered promiscuous mode
[  122.818689][ T7360] team_slave_1: entered promiscuous mode
[  122.883049][ T7360] macvtap1: entered promiscuous mode
[  122.900666][ T7360] team0: entered promiscuous mode
[  122.928222][ T7366] netlink: 'syz.1.373': attribute type 5 has an invalid length.
[  122.951038][ T7360] macvtap1: entered allmulticast mode
[  122.969122][ T7366] sctp: [Deprecated]: syz.1.373 (pid 7366) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.969122][ T7366] Use struct sctp_sack_info instead
[  122.975639][ T7360] team0: entered allmulticast mode
[  122.990734][ T7360] team_slave_0: entered allmulticast mode
[  122.996740][ T7360] team_slave_1: entered allmulticast mode
[  123.003824][ T7360] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  123.046349][ T7364] team0: left allmulticast mode
[  123.049226][ T7371] IPVS: lc: FWM 3 0x00000003 - no destination available
[  123.078778][ T7364] team_slave_0: left allmulticast mode
[  123.085657][ T7364] team_slave_1: left allmulticast mode
[  123.091149][ T7364] team0: left promiscuous mode
[  123.096892][ T7364] team_slave_0: left promiscuous mode
[  123.102372][ T7364] team_slave_1: left promiscuous mode
[  123.143185][ T7375] netlink: 56 bytes leftover after parsing attributes in process `syz.0.376'.
[  123.172881][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'.
[  123.314991][ T7379] lo speed is unknown, defaulting to 1000
[  123.364511][ T7386] batman_adv: ªªªªª;: Interface deactivated: batadv_slave_1
[  123.464060][ T7386] batman_adv: ªªªªª;: Removing interface: batadv_slave_1
[  123.634596][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.662021][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.126414][ T7409] netlink: 'syz.4.382': attribute type 1 has an invalid length.
[  124.753216][ T7433] netlink: 'syz.3.388': attribute type 49 has an invalid length.
[  124.896015][ T7443] __nla_validate_parse: 4 callbacks suppressed
[  124.896033][ T7443] netlink: 144 bytes leftover after parsing attributes in process `syz.3.388'.
[  125.075023][ T7450] netlink: 'syz.1.392': attribute type 4 has an invalid length.
[  125.159445][ T7445] lo speed is unknown, defaulting to 1000
[  125.186992][    T9] lo speed is unknown, defaulting to 1000
[  125.215048][    T9] syz2: Port: 1 Link DOWN
[  125.370456][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.395'.
[  125.391049][ T7465] netlink: 'syz.1.395': attribute type 4 has an invalid length.
[  125.640412][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'.
[  125.744225][ T7474] team_slave_0: entered promiscuous mode
[  125.749906][ T7474] team_slave_1: entered promiscuous mode
[  125.777216][ T7474] macvtap2: entered promiscuous mode
[  125.789751][ T7474] team0: entered promiscuous mode
[  125.800519][ T7474] macvtap2: entered allmulticast mode
[  125.810617][ T7474] team0: entered allmulticast mode
[  125.825869][ T7474] team_slave_0: entered allmulticast mode
[  125.838215][ T7474] team_slave_1: entered allmulticast mode
[  125.854181][ T7474] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  125.887691][ T7481] team0: left allmulticast mode
[  125.904264][ T7481] team_slave_0: left allmulticast mode
[  125.920796][ T7481] team_slave_1: left allmulticast mode
[  125.939827][ T7481] team0: left promiscuous mode
[  125.993818][ T7481] team_slave_0: left promiscuous mode
[  125.999299][ T7481] team_slave_1: left promiscuous mode
[  126.336317][ T7519] netlink: 104 bytes leftover after parsing attributes in process `syz.2.403'.
[  126.405400][ T7495] syzkaller0: entered promiscuous mode
[  126.410899][ T7495] syzkaller0: entered allmulticast mode
[  126.540409][ T7525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'.
[  126.571558][ T7510] vlan2: entered allmulticast mode
[  126.589816][ T7510] dummy0: entered allmulticast mode
[  126.697864][ T7531] netlink: 'syz.0.408': attribute type 10 has an invalid length.
[  127.099567][ T7502] lo speed is unknown, defaulting to 1000
[  127.235269][ T7538] IPVS: lc: FWM 3 0x00000003 - no destination available
[  127.244461][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  127.740058][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'.
[  127.752479][ T7553] bridge_slave_1: left allmulticast mode
[  127.800945][ T7553] bridge_slave_1: left promiscuous mode
[  127.814194][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.851370][ T7553] bridge_slave_0: left allmulticast mode
[  127.899572][ T7553] bridge_slave_0: left promiscuous mode
[  127.946987][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.085533][ T7574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.418'.
[  129.229729][ T7621] IPVS: lc: FWM 3 0x00000003 - no destination available
[  129.282458][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  129.311249][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.412391][ T7616] lo speed is unknown, defaulting to 1000
[  129.454347][ T7625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.468303][ T7625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.078815][ T7648] netlink: 'syz.1.442': attribute type 12 has an invalid length.
[  130.133116][ T7648] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.442'.
[  130.154038][ T7641] netlink: 'syz.3.440': attribute type 3 has an invalid length.
[  130.507286][ T7663] lo speed is unknown, defaulting to 1000
[  130.775046][ T7673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.797319][ T7678] syzkaller0: entered promiscuous mode
[  130.817228][ T7678] syzkaller0: entered allmulticast mode
[  130.868860][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'.
[  130.941855][ T7673] tipc: Resetting bearer <eth:syzkaller0>
[  131.000310][ T7684] netlink: 'syz.4.450': attribute type 10 has an invalid length.
[  131.061072][ T7672] tipc: Resetting bearer <eth:syzkaller0>
[  131.067702][ T7685] netlink: 'syz.4.450': attribute type 10 has an invalid length.
[  131.087484][ T7672] tipc: Disabling bearer <eth:syzkaller0>
[  131.120754][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'.
[  131.154659][ T7685] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  131.783884][ T7707] Bluetooth: MGMT ver 1.23
[  131.808710][ T7707] tipc: Started in network mode
[  131.831698][ T7707] tipc: Node identity 42a28b1d87e9, cluster identity 4711
[  131.855394][ T7707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.874126][ T7721] syzkaller0: entered promiscuous mode
[  131.883701][ T7721] syzkaller0: entered allmulticast mode
[  131.924367][ T7706] tipc: Resetting bearer <eth:syzkaller0>
[  131.984608][ T7727] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  132.013963][ T7706] tipc: Disabling bearer <eth:syzkaller0>
[  132.064375][ T7727] netlink: 'syz.0.460': attribute type 1 has an invalid length.
[  132.169655][ T7729] lo speed is unknown, defaulting to 1000
[  132.290853][ T7735] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  132.435521][ T7742] netlink: 'syz.4.465': attribute type 4 has an invalid length.
[  132.471942][ T7734] Bluetooth: MGMT ver 1.23
[  132.527803][ T7745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.568871][ T7745] syzkaller0: MTU too low for tipc bearer
[  132.574933][ T7745] tipc: Disabling bearer <eth:syzkaller0>
[  132.750686][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  132.895340][ T7757] 8021q: VLANs not supported on vcan0
[  132.934014][ T7757] 8021q: adding VLAN 0 to HW filter on device bond2
[  132.958685][ T7757] ipvlan2: entered promiscuous mode
[  133.469759][ T7779] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  135.046737][ T7846] netlink: 'syz.4.495': attribute type 1 has an invalid length.
[  135.399559][ T7861] lo speed is unknown, defaulting to 1000
[  135.613303][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'.
[  135.674415][ T7873] team_slave_0: entered promiscuous mode
[  135.680135][ T7873] team_slave_1: entered promiscuous mode
[  135.692509][ T7873] macvtap3: entered promiscuous mode
[  135.707629][ T7873] team0: entered promiscuous mode
[  135.723644][ T7873] macvtap3: entered allmulticast mode
[  135.730614][ T7873] team0: entered allmulticast mode
[  135.739051][ T7873] team_slave_0: entered allmulticast mode
[  135.746724][ T7873] team_slave_1: entered allmulticast mode
[  135.754868][ T7873] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  135.778776][ T7877] team0: left allmulticast mode
[  135.795037][ T7877] team_slave_0: left allmulticast mode
[  135.811147][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'.
[  135.819795][ T7877] team_slave_1: left allmulticast mode
[  135.839973][ T7877] team0: left promiscuous mode
[  135.859209][ T7877] team_slave_0: left promiscuous mode
[  135.864743][ T7877] team_slave_1: left promiscuous mode
[  136.653735][ T7913] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  136.778306][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'.
[  136.824990][ T7919] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.878277][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[  136.903099][ T7918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'.
[  136.925446][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'.
[  136.945147][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'.
[  137.046401][ T7925] IPVS: lc: FWM 3 0x00000003 - no destination available
[  137.056675][ T7926] batman_adv: batadv0: Adding interface: dummy0
[  137.078004][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  137.089023][ T7926] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.171923][ T7926] batman_adv: batadv0: Interface activated: dummy0
[  137.247674][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.520'.
[  137.283171][ T7922] batadv0: mtu less than device minimum
[  137.296581][ T7922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.308633][ T7922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.320517][ T7922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.332435][ T7922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.344346][ T7922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.354482][ T7944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.356145][ T7922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  137.525245][ T7935] batman_adv: batadv0: Adding interface: ip6gretap1
[  137.545568][ T7935] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.575703][ T7935] batman_adv: batadv0: Interface activated: ip6gretap1
[  137.604545][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'.
[  137.766145][ T7945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.800640][ T7945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.995670][ T7945] team0: left allmulticast mode
[  138.004563][ T7945] team_slave_0: left allmulticast mode
[  138.010042][ T7945] team_slave_1: left allmulticast mode
[  138.015909][ T7945] team0: left promiscuous mode
[  138.020681][ T7945] team_slave_0: left promiscuous mode
[  138.026413][ T7945] team_slave_1: left promiscuous mode
[  138.076802][ T7954] macvtap2: entered promiscuous mode
[  138.098272][ T7954] team0: entered promiscuous mode
[  138.111572][ T7954] team_slave_0: entered promiscuous mode
[  138.121265][ T7954] team_slave_1: entered promiscuous mode
[  138.128411][ T7954] macvtap2: entered allmulticast mode
[  138.137508][ T7954] team0: entered allmulticast mode
[  138.144254][ T7954] team_slave_0: entered allmulticast mode
[  138.149988][ T7954] team_slave_1: entered allmulticast mode
[  138.160386][ T7954] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  138.192522][ T7955] team0: left allmulticast mode
[  138.206657][ T7955] team_slave_0: left allmulticast mode
[  138.220349][ T7955] team_slave_1: left allmulticast mode
[  138.226917][ T7955] team0: left promiscuous mode
[  138.232638][ T7955] team_slave_0: left promiscuous mode
[  138.239087][ T7955] team_slave_1: left promiscuous mode
[  138.264690][ T3558] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.288594][ T3558] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.357980][ T3558] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.385832][ T3558] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.412714][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout
[  138.418875][ T5865] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  138.677597][ T7994] netlink: 14 bytes leftover after parsing attributes in process `syz.4.534'.
[  138.700224][ T8000] netlink: 'syz.1.533': attribute type 11 has an invalid length.
[  139.935918][ T8037] netlink: 'syz.3.543': attribute type 3 has an invalid length.
[  140.281419][ T8063] trusted_key: syz.4.549 sent an empty control message without MSG_MORE.
[  140.799465][ T8084] __nla_validate_parse: 3 callbacks suppressed
[  140.799484][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'.
[  140.914440][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'.
[  141.150366][ T8093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.174110][ T8093] syzkaller0: entered promiscuous mode
[  141.195832][ T8093] syzkaller0: entered allmulticast mode
[  141.227169][ T8099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.562'.
[  141.253362][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.562'.
[  141.275783][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.562'.
[  142.350506][    T9] tipc: Node number set to 3310062365
[  142.727697][ T8108] tipc: Resetting bearer <eth:syzkaller0>
[  142.783367][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'.
[  142.902907][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'.
[  142.914027][ T8092] tipc: Resetting bearer <eth:syzkaller0>
[  142.959637][ T8092] tipc: Disabling bearer <eth:syzkaller0>
[  143.069601][ T8124] ipvlan2: entered promiscuous mode
[  143.190340][ T8137] vxcan1: entered allmulticast mode
[  143.437211][ T8137] veth3: entered promiscuous mode
[  143.627556][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.575'.
[  143.733219][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'.
[  143.770079][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'.
[  143.804427][ T8164] team_slave_0: entered promiscuous mode
[  143.810139][ T8164] team_slave_1: entered promiscuous mode
[  143.816531][ T8164] macvtap4: entered promiscuous mode
[  143.831493][ T8164] team0: entered promiscuous mode
[  143.853176][ T8164] macvtap4: entered allmulticast mode
[  143.870769][ T8164] team0: entered allmulticast mode
[  143.880864][ T8164] team_slave_0: entered allmulticast mode
[  143.898936][ T8164] team_slave_1: entered allmulticast mode
[  143.935258][ T8164] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  144.006597][ T8169] team0: left allmulticast mode
[  144.018550][ T8169] team_slave_0: left allmulticast mode
[  144.038977][ T8169] team_slave_1: left allmulticast mode
[  144.061181][ T8169] team0: left promiscuous mode
[  144.071818][ T8169] team_slave_0: left promiscuous mode
[  144.077350][ T8169] team_slave_1: left promiscuous mode
[  144.123311][ T8179] netlink: 'syz.2.581': attribute type 1 has an invalid length.
[  144.230371][ T8179] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.399099][ T8180] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.405516][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  144.409900][ T8180] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  144.433805][ T8180] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  144.546815][ T8194] team0: Device gtp0 is of different type
[  145.246280][ T8227] atomic_op ffff888028d9e998 conn xmit_atomic 0000000000000000
[  145.921875][ T8248] FAULT_INJECTION: forcing a failure.
[  145.921875][ T8248] name failslab, interval 1, probability 0, space 0, times 0
[  145.940382][ T8248] CPU: 0 UID: 0 PID: 8248 Comm: syz.4.600 Not tainted syzkaller #0 PREEMPT(full) 
[  145.940405][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  145.940415][ T8248] Call Trace:
[  145.940422][ T8248]  <TASK>
[  145.940430][ T8248]  dump_stack_lvl+0x189/0x250
[  145.940455][ T8248]  ? __pfx____ratelimit+0x10/0x10
[  145.940474][ T8248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.940493][ T8248]  ? __pfx__printk+0x10/0x10
[  145.940519][ T8248]  ? __pfx___might_resched+0x10/0x10
[  145.940540][ T8248]  should_fail_ex+0x414/0x560
[  145.940566][ T8248]  should_failslab+0xa8/0x100
[  145.940591][ T8248]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  145.940612][ T8248]  ? __get_vm_area_node+0x13f/0x300
[  145.940638][ T8248]  __get_vm_area_node+0x13f/0x300
[  145.940664][ T8248]  __vmalloc_node_range_noprof+0x301/0x12f0
[  145.940685][ T8248]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  145.940705][ T8248]  ? __lock_acquire+0xab9/0xd20
[  145.940770][ T8248]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  145.940790][ T8248]  ? __might_fault+0xb0/0x130
[  145.940812][ T8248]  ? _parse_integer_limit+0x1ae/0x1f0
[  145.940841][ T8248]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  145.940859][ T8248]  __vmalloc_noprof+0xb1/0xf0
[  145.940880][ T8248]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  145.940904][ T8248]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  145.940931][ T8248]  bpf_prog_alloc+0x3c/0x1a0
[  145.940953][ T8248]  bpf_prog_load+0x735/0x1930
[  145.940987][ T8248]  ? __pfx_bpf_prog_load+0x10/0x10
[  145.941031][ T8248]  ? bpf_lsm_bpf+0x9/0x20
[  145.941048][ T8248]  ? security_bpf+0x7e/0x300
[  145.941072][ T8248]  __sys_bpf+0x528/0x870
[  145.941094][ T8248]  ? __pfx___sys_bpf+0x10/0x10
[  145.941127][ T8248]  ? ksys_write+0x22a/0x250
[  145.941150][ T8248]  ? __pfx_ksys_write+0x10/0x10
[  145.941167][ T8248]  ? rcu_is_watching+0x15/0xb0
[  145.941191][ T8248]  __x64_sys_bpf+0x7c/0x90
[  145.941211][ T8248]  do_syscall_64+0xfa/0x3b0
[  145.941228][ T8248]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.941245][ T8248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.941261][ T8248]  ? clear_bhb_loop+0x60/0xb0
[  145.941281][ T8248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.941297][ T8248] RIP: 0033:0x7f3c46b8eba9
[  145.941312][ T8248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.941325][ T8248] RSP: 002b:00007f3c47ae9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  145.941343][ T8248] RAX: ffffffffffffffda RBX: 00007f3c46dd5fa0 RCX: 00007f3c46b8eba9
[  145.941356][ T8248] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  145.941366][ T8248] RBP: 00007f3c47ae9090 R08: 0000000000000000 R09: 0000000000000000
[  145.941376][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.941385][ T8248] R13: 00007f3c46dd6038 R14: 00007f3c46dd5fa0 R15: 00007ffe91518238
[  145.941414][ T8248]  </TASK>
[  145.941798][ T8248] syz.4.600: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  146.042925][ T8250] __nla_validate_parse: 5 callbacks suppressed
[  146.042942][ T8250] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.601'.
[  146.120799][ T8248] ,cpuset=/,mems_allowed=0-1
[  146.279262][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.4.600 Not tainted syzkaller #0 PREEMPT(full) 
[  146.279282][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  146.279292][ T8248] Call Trace:
[  146.279299][ T8248]  <TASK>
[  146.279305][ T8248]  dump_stack_lvl+0x189/0x250
[  146.279326][ T8248]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  146.279345][ T8248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.279360][ T8248]  ? __pfx__printk+0x10/0x10
[  146.279377][ T8248]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  146.279392][ T8248]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  146.279413][ T8248]  warn_alloc+0x214/0x310
[  146.279436][ T8248]  ? __pfx_warn_alloc+0x10/0x10
[  146.279455][ T8248]  ? __get_vm_area_node+0x13f/0x300
[  146.279475][ T8248]  ? __get_vm_area_node+0x2b5/0x300
[  146.279497][ T8248]  __vmalloc_node_range_noprof+0x326/0x12f0
[  146.279514][ T8248]  ? __lock_acquire+0xab9/0xd20
[  146.279552][ T8248]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  146.279568][ T8248]  ? __might_fault+0xb0/0x130
[  146.279586][ T8248]  ? _parse_integer_limit+0x1ae/0x1f0
[  146.279608][ T8248]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  146.279624][ T8248]  __vmalloc_noprof+0xb1/0xf0
[  146.279641][ T8248]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  146.279660][ T8248]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  146.279680][ T8248]  bpf_prog_alloc+0x3c/0x1a0
[  146.279699][ T8248]  bpf_prog_load+0x735/0x1930
[  146.279732][ T8248]  ? __pfx_bpf_prog_load+0x10/0x10
[  146.279766][ T8248]  ? bpf_lsm_bpf+0x9/0x20
[  146.279780][ T8248]  ? security_bpf+0x7e/0x300
[  146.279799][ T8248]  __sys_bpf+0x528/0x870
[  146.279816][ T8248]  ? __pfx___sys_bpf+0x10/0x10
[  146.279842][ T8248]  ? ksys_write+0x22a/0x250
[  146.279860][ T8248]  ? __pfx_ksys_write+0x10/0x10
[  146.279874][ T8248]  ? rcu_is_watching+0x15/0xb0
[  146.279892][ T8248]  __x64_sys_bpf+0x7c/0x90
[  146.279907][ T8248]  do_syscall_64+0xfa/0x3b0
[  146.279921][ T8248]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.279934][ T8248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.279947][ T8248]  ? clear_bhb_loop+0x60/0xb0
[  146.279963][ T8248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.279976][ T8248] RIP: 0033:0x7f3c46b8eba9
[  146.279987][ T8248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.279997][ T8248] RSP: 002b:00007f3c47ae9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  146.280011][ T8248] RAX: ffffffffffffffda RBX: 00007f3c46dd5fa0 RCX: 00007f3c46b8eba9
[  146.280020][ T8248] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  146.280029][ T8248] RBP: 00007f3c47ae9090 R08: 0000000000000000 R09: 0000000000000000
[  146.280037][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.280044][ T8248] R13: 00007f3c46dd6038 R14: 00007f3c46dd5fa0 R15: 00007ffe91518238
[  146.280065][ T8248]  </TASK>
[  146.280084][ T8248] Mem-Info:
[  146.290849][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'.
[  146.551165][ T8258] net_ratelimit: 35 callbacks suppressed
[  146.551182][ T8258] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  146.559516][ T8248] active_anon:6039 inactive_anon:0 isolated_anon:0
[  146.559516][ T8248]  active_file:3145 inactive_file:39888 isolated_file:0
[  146.559516][ T8248]  unevictable:768 dirty:218 writeback:0
[  146.559516][ T8248]  slab_reclaimable:10801 slab_unreclaimable:99035
[  146.559516][ T8248]  mapped:29517 shmem:1404 pagetables:1274
[  146.559516][ T8248]  sec_pagetables:0 bounce:0
[  146.559516][ T8248]  kernel_misc_reclaimable:0
[  146.559516][ T8248]  free:1318814 free_pcp:18046 free_cma:0
[  146.651656][ T8248] Node 0 active_anon:24156kB inactive_anon:0kB active_file:12580kB inactive_file:159348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118168kB dirty:872kB writeback:0kB shmem:4080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12248kB pagetables:4932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  146.660642][ T8252] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[  146.689366][ T8248] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  146.782064][ T8248] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  146.850962][ T8248] lowmem_reserve[]: 0 2497 2499 2499 2499
[  146.860584][ T8248] Node 0 DMA32 free:1375160kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23964kB inactive_anon:0kB active_file:12580kB inactive_file:157776kB unevictable:1536kB writepending:896kB present:3129332kB managed:2557400kB mlocked:0kB bounce:0kB free_pcp:47668kB local_pcp:26024kB free_cma:0kB
[  146.918405][ T8248] lowmem_reserve[]: 0 0 1 1 1
[  146.969189][ T8248] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  147.003233][ T8248] lowmem_reserve[]: 0 0 0 0 0
[  147.008690][ T8248] Node 1 Normal free:3886260kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21700kB local_pcp:9056kB free_cma:0kB
[  147.083734][ T8248] lowmem_reserve[]: 0 0 0 0 0
[  147.097987][ T8248] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  147.142174][ T8248] Node 0 DMA32: 435*4kB (M) 238*8kB (UME) 169*16kB (UME) 25*32kB (ME) 84*64kB (UME) 54*128kB (ME) 31*256kB (ME) 18*512kB (UME) 5*1024kB (M) 2*2048kB (UM) 316*4096kB (UM) = 1340140kB
[  147.178782][ T8276] netlink: 'syz.3.608': attribute type 5 has an invalid length.
[  147.194988][ T8248] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  147.211408][ T8248] Node 1 Normal: 233*4kB (UE) 50*8kB (UME) 50*16kB (UME) 69*32kB (UME) 19*64kB (UME) 6*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886260kB
[  147.231198][ T8248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  147.269991][ T8248] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  147.281099][ T8248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  147.350543][ T8248] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  147.388814][ T8248] 44387 total pagecache pages
[  147.412638][ T8248] 0 pages in swap cache
[  147.433146][ T8248] Free swap  = 124996kB
[  147.448386][ T8248] Total swap = 124996kB
[  147.467922][ T8248] 2097051 pages RAM
[  147.476781][ T8248] 0 pages HighMem/MovableOnly
[  147.481738][ T8248] 425675 pages reserved
[  147.504564][ T8248] 0 pages cma reserved
[  148.199956][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'.
[  148.399702][ T8315] openvswitch: netlink: Message has 8 unknown bytes.
[  148.403729][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'.
[  148.494845][ T8322] team_slave_0: entered promiscuous mode
[  148.500581][ T8322] team_slave_1: entered promiscuous mode
[  148.566200][ T8322] macvtap2: entered promiscuous mode
[  148.582181][ T8322] team0: entered promiscuous mode
[  148.594241][ T8322] macvtap2: entered allmulticast mode
[  148.603287][ T8322] team0: entered allmulticast mode
[  148.615937][ T8322] team_slave_0: entered allmulticast mode
[  148.632304][ T8322] team_slave_1: entered allmulticast mode
[  148.662377][ T8322] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  148.862302][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'.
[  148.887048][ T8338] netlink: 'syz.3.623': attribute type 1 has an invalid length.
[  148.976882][ T5865] Bluetooth: hci3: link tx timeout
[  148.982374][ T5865] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.001920][ T8352] netlink: 'syz.1.628': attribute type 1 has an invalid length.
[  149.031284][ T8342] lo speed is unknown, defaulting to 1000
[  149.130586][ T8363] netlink: 'syz.3.631': attribute type 10 has an invalid length.
[  149.172012][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.179713][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.206271][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.213470][ T8363] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.220965][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.228186][ T8363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.259183][ T8363] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  149.316940][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'.
[  149.380787][ T8363] bridge_slave_1: left allmulticast mode
[  149.389641][ T8363] bridge_slave_1: left promiscuous mode
[  149.403867][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.448905][ T8363] bridge_slave_0: left allmulticast mode
[  149.457101][ T8363] bridge_slave_0: left promiscuous mode
[  149.463696][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.517383][ T8363] bond0: (slave bridge0): Releasing backup interface
[  149.724376][ T5875] Bluetooth: hci3: link tx timeout
[  149.729983][ T5875] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  150.138961][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'.
[  150.202599][ T8386] team_slave_0: entered promiscuous mode
[  150.208302][ T8386] team_slave_1: entered promiscuous mode
[  150.242174][ T8386] macvtap5: entered promiscuous mode
[  150.247483][ T8386] team0: entered promiscuous mode
[  150.289041][ T8386] macvtap5: entered allmulticast mode
[  150.296328][ T8386] team0: entered allmulticast mode
[  150.301543][ T8386] team_slave_0: entered allmulticast mode
[  150.312913][ T8386] team_slave_1: entered allmulticast mode
[  150.320691][ T8386] 8021q: adding VLAN 0 to HW filter on device macvtap5
[  150.333880][ T8385] team0: left allmulticast mode
[  150.339151][ T8385] team_slave_0: left allmulticast mode
[  150.345256][ T8385] team_slave_1: left allmulticast mode
[  150.350881][ T8385] team0: left promiscuous mode
[  150.356822][ T8385] team_slave_0: left promiscuous mode
[  150.362329][ T8385] team_slave_1: left promiscuous mode
[  150.583219][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'.
[  150.634873][ T8405] netlink: zone id is out of range
[  150.940591][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'.
[  151.009293][ T8422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'.
[  151.053030][ T5875] Bluetooth: hci3: command 0x0406 tx timeout
[  151.306650][ T8437] __nla_validate_parse: 1 callbacks suppressed
[  151.306667][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'.
[  151.384846][ T8437] macsec2: entered promiscuous mode
[  151.390076][ T8437] batadv0: entered promiscuous mode
[  151.454437][ T8437] macsec2: entered allmulticast mode
[  151.459746][ T8437] batadv0: entered allmulticast mode
[  151.485472][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.648'.
[  151.532703][ T8437] batadv0: left allmulticast mode
[  151.537749][ T8437] batadv0: left promiscuous mode
[  151.951069][ T8449] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  152.185974][ T8463] sctp: [Deprecated]: syz.0.657 (pid 8463) Use of struct sctp_assoc_value in delayed_ack socket option.
[  152.185974][ T8463] Use struct sctp_sack_info instead
[  152.189784][ T8460] lo speed is unknown, defaulting to 1000
[  152.307285][ T8470] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  152.909382][ T8485] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  153.170732][ T8502] lo speed is unknown, defaulting to 1000
[  153.180169][ T8507] gtp0: entered promiscuous mode
[  153.180190][ T8507] gtp0: entered allmulticast mode
[  153.793175][ T8529] netlink: 'syz.1.673': attribute type 74 has an invalid length.
[  153.963338][ T8525] lo speed is unknown, defaulting to 1000
[  154.182070][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'.
[  154.277299][ T8548] netlink: 14 bytes leftover after parsing attributes in process `syz.0.676'.
[  154.472909][ T8548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.517025][ T8548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.530167][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'.
[  154.554037][ T8548] bond0 (unregistering): Released all slaves
[  154.939553][ T8565] netlink: 'syz.3.678': attribute type 2 has an invalid length.
[  155.014016][ T8568] tipc: Started in network mode
[  155.018903][ T8568] tipc: Node identity 3e1fb64c0b9a, cluster identity 4711
[  155.077945][ T8568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.184116][ T8572] syzkaller0: entered promiscuous mode
[  155.197750][ T8572] syzkaller0: entered allmulticast mode
[  155.241337][ T8585] tipc: Resetting bearer <eth:syzkaller0>
[  155.361007][ T8552] tipc: Resetting bearer <eth:syzkaller0>
[  155.464725][ T8552] tipc: Disabling bearer <eth:syzkaller0>
[  155.524353][ T8608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.684'.
[  155.588968][ T8620] netlink: 32 bytes leftover after parsing attributes in process `syz.3.686'.
[  155.609308][ T8620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.686'.
[  155.858911][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.688'.
[  155.908244][ T8633] netlink: 44 bytes leftover after parsing attributes in process `syz.4.688'.
[  156.474860][ T8656] IPVS: lc: FWM 3 0x00000003 - no destination available
[  156.491141][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'.
[  156.675287][ T8663] vlan2: entered promiscuous mode
[  156.698939][ T8663] dummy0: entered promiscuous mode
[  157.000066][ T8680] IPVS: set_ctl: invalid protocol: 136 172.30.1.2:3
[  157.096082][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'.
[  157.142703][ T8692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.248798][ T8692] tipc: Resetting bearer <eth:syzkaller0>
[  157.437168][ T8707] lo speed is unknown, defaulting to 1000
[  157.607433][ T8685] tipc: Disabling bearer <eth:syzkaller0>
[  157.893270][ T8732] IPVS: set_ctl: invalid protocol: 0 172.20.20.25:20003
[  158.006172][ T8680] lo speed is unknown, defaulting to 1000
[  158.291869][ T8745] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  158.519429][ T8756] netlink: 14 bytes leftover after parsing attributes in process `syz.3.713'.
[  159.145690][ T8752] syzkaller0: entered promiscuous mode
[  159.171656][ T8752] syzkaller0: entered allmulticast mode
[  165.534471][ T8829] IPVS: lc: FWM 3 0x00000003 - no destination available
[  165.556763][    C1] IPVS: lc: FWM 3 0x00000003 - no destination available
[  165.605430][ T8831] netlink: 36 bytes leftover after parsing attributes in process `syz.2.719'.
[  165.622377][ T8795] lo speed is unknown, defaulting to 1000
[  165.651428][ T8796] lo speed is unknown, defaulting to 1000
[  165.789593][ T8838] IPVS: lc: FWM 3 0x00000003 - no destination available
[  165.866256][ T8843] FAULT_INJECTION: forcing a failure.
[  165.866256][ T8843] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  165.922162][ T8843] CPU: 1 UID: 0 PID: 8843 Comm: syz.1.723 Not tainted syzkaller #0 PREEMPT(full) 
[  165.922201][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  165.922219][ T8843] Call Trace:
[  165.922226][ T8843]  <TASK>
[  165.922233][ T8843]  dump_stack_lvl+0x189/0x250
[  165.922266][ T8843]  ? __pfx____ratelimit+0x10/0x10
[  165.922284][ T8843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.922303][ T8843]  ? __pfx__printk+0x10/0x10
[  165.922325][ T8843]  ? __might_fault+0xb0/0x130
[  165.922356][ T8843]  should_fail_ex+0x414/0x560
[  165.922382][ T8843]  _copy_from_iter+0x1de/0x1790
[  165.922398][ T8843]  ? __lock_acquire+0xab9/0xd20
[  165.922422][ T8843]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  165.922444][ T8843]  ? policy_nodemask+0x27c/0x720
[  165.922463][ T8843]  ? __pfx__copy_from_iter+0x10/0x10
[  165.922486][ T8843]  ? set_page_refcounted+0xa0/0x1e0
[  165.922506][ T8843]  ? page_copy_sane+0x4e/0x280
[  165.922523][ T8843]  copy_page_from_iter+0xdd/0x170
[  165.922544][ T8843]  tun_get_user+0x1d7b/0x3e20
[  165.922570][ T8843]  ? tun_get_user+0x6f6/0x3e20
[  165.922595][ T8843]  ? aa_file_perm+0x44d/0x1550
[  165.922612][ T8843]  ? __pfx_tun_get_user+0x10/0x10
[  165.922628][ T8843]  ? _parse_integer_limit+0x1ae/0x1f0
[  165.922659][ T8843]  ? __lock_acquire+0xab9/0xd20
[  165.922686][ T8843]  ? ref_tracker_alloc+0x318/0x460
[  165.922705][ T8843]  ? __lock_acquire+0xab9/0xd20
[  165.922728][ T8843]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  165.922753][ T8843]  ? tun_get+0x1c/0x2f0
[  165.922775][ T8843]  ? tun_get+0x1c/0x2f0
[  165.922791][ T8843]  ? tun_get+0x1c/0x2f0
[  165.922813][ T8843]  tun_chr_write_iter+0x113/0x200
[  165.922833][ T8843]  vfs_write+0x5c9/0xb30
[  165.922857][ T8843]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  165.922874][ T8843]  ? __pfx_vfs_write+0x10/0x10
[  165.922904][ T8843]  ? __fget_files+0x2a/0x420
[  165.922928][ T8843]  ksys_write+0x145/0x250
[  165.922949][ T8843]  ? __pfx_ksys_write+0x10/0x10
[  165.922966][ T8843]  ? rcu_is_watching+0x15/0xb0
[  165.922987][ T8843]  ? do_syscall_64+0xbe/0x3b0
[  165.923008][ T8843]  do_syscall_64+0xfa/0x3b0
[  165.923024][ T8843]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.923041][ T8843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.923056][ T8843]  ? clear_bhb_loop+0x60/0xb0
[  165.923075][ T8843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.923090][ T8843] RIP: 0033:0x7f3c7638d65f
[  165.923106][ T8843] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  165.923119][ T8843] RSP: 002b:00007f3c77216000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  165.923137][ T8843] RAX: ffffffffffffffda RBX: 00007f3c765d5fa0 RCX: 00007f3c7638d65f
[  165.923149][ T8843] RDX: 000000000000004a RSI: 0000200000000240 RDI: 00000000000000c8
[  165.923160][ T8843] RBP: 00007f3c77216090 R08: 0000000000000000 R09: 0000000000000000
[  165.923170][ T8843] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  165.923180][ T8843] R13: 00007f3c765d6038 R14: 00007f3c765d5fa0 R15: 00007ffc8a99dae8
[  165.923209][ T8843]  </TASK>
[  166.724886][ T8868] sctp: [Deprecated]: syz.4.730 (pid 8868) Use of int in max_burst socket option.
[  166.724886][ T8868] Use struct sctp_assoc_value instead
[  166.726559][ T8870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.727'.
[  166.787163][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.730'.
[  166.858959][ T8878] hsr0: left promiscuous mode
[  166.889840][ T8878] hsr0: left allmulticast mode
[  166.915220][ T8878] hsr_slave_0: left allmulticast mode
[  166.976505][ T8878] hsr_slave_1: left allmulticast mode
[  166.996184][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'.
[  167.038254][ T8878] ipvlan1: left allmulticast mode
[  167.072082][ T8878] veth0_vlan: left allmulticast mode
[  167.124922][ T8878] bond1: left promiscuous mode
[  167.162177][ T8878] bond1: left allmulticast mode
[  167.197148][ T8878] macvtap1: left promiscuous mode
[  167.233350][ T8878] macvtap1: left allmulticast mode
[  167.250765][ T8878] macsec1: left promiscuous mode
[  167.533945][ T8897] vxlan0: entered promiscuous mode
[  167.545784][ T8897] vxlan0: entered allmulticast mode
[  167.581076][ T8902] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  167.702545][   T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.778832][   T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.794118][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'.
[  167.810320][   T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.869842][   T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.997804][ T8926] netlink: 'syz.1.739': attribute type 12 has an invalid length.
[  168.036653][ T8922] lo speed is unknown, defaulting to 1000
[  168.120214][ T8926] dvmrp1: tun_chr_ioctl cmd 1074025677
[  168.137949][ T8926] dvmrp1: linktype set to 773
[  168.363239][ T8938] netlink: 'syz.4.743': attribute type 3 has an invalid length.
[  168.426319][ T8938] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.743'.
[  168.896795][ T8962] FAULT_INJECTION: forcing a failure.
[  168.896795][ T8962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.954917][ T8962] CPU: 0 UID: 0 PID: 8962 Comm: syz.0.749 Not tainted syzkaller #0 PREEMPT(full) 
[  168.954939][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  168.954949][ T8962] Call Trace:
[  168.954956][ T8962]  <TASK>
[  168.954963][ T8962]  dump_stack_lvl+0x189/0x250
[  168.954987][ T8962]  ? __pfx____ratelimit+0x10/0x10
[  168.955006][ T8962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.955025][ T8962]  ? __pfx__printk+0x10/0x10
[  168.955059][ T8962]  should_fail_ex+0x414/0x560
[  168.955087][ T8962]  _copy_to_user+0x31/0xb0
[  168.955108][ T8962]  simple_read_from_buffer+0xe1/0x170
[  168.955136][ T8962]  proc_fail_nth_read+0x1b3/0x220
[  168.955158][ T8962]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  168.955180][ T8962]  ? rw_verify_area+0x2a6/0x4d0
[  168.955199][ T8962]  ? __lock_acquire+0xab9/0xd20
[  168.955219][ T8962]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  168.955239][ T8962]  vfs_read+0x200/0xa30
[  168.955258][ T8962]  ? fdget_pos+0x247/0x320
[  168.955277][ T8962]  ? __pfx___mutex_lock+0x10/0x10
[  168.955297][ T8962]  ? __pfx_vfs_read+0x10/0x10
[  168.955318][ T8962]  ? __fget_files+0x2a/0x420
[  168.955338][ T8962]  ? __fget_files+0x3a0/0x420
[  168.955352][ T8962]  ? __fget_files+0x2a/0x420
[  168.955377][ T8962]  ksys_read+0x145/0x250
[  168.955400][ T8962]  ? __pfx_ksys_read+0x10/0x10
[  168.955417][ T8962]  ? rcu_is_watching+0x15/0xb0
[  168.955440][ T8962]  ? do_syscall_64+0xbe/0x3b0
[  168.955462][ T8962]  do_syscall_64+0xfa/0x3b0
[  168.955479][ T8962]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.955496][ T8962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.955512][ T8962]  ? clear_bhb_loop+0x60/0xb0
[  168.955532][ T8962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.955548][ T8962] RIP: 0033:0x7f76d038d5bc
[  168.955563][ T8962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  168.955575][ T8962] RSP: 002b:00007f76d1265030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.955594][ T8962] RAX: ffffffffffffffda RBX: 00007f76d05d5fa0 RCX: 00007f76d038d5bc
[  168.955606][ T8962] RDX: 000000000000000f RSI: 00007f76d12650a0 RDI: 0000000000000004
[  168.955616][ T8962] RBP: 00007f76d1265090 R08: 0000000000000000 R09: 0000000000000000
[  168.955627][ T8962] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001
[  168.955636][ T8962] R13: 00007f76d05d6038 R14: 00007f76d05d5fa0 R15: 00007ffdb1175038
[  168.955666][ T8962]  </TASK>
[  169.258599][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'.
[  169.329584][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'.
[  169.368791][ T8974] macsec2: entered promiscuous mode
[  169.374322][ T8974] batadv0: entered promiscuous mode
[  169.379729][ T8974] macsec2: entered allmulticast mode
[  169.389795][ T8974] batadv0: entered allmulticast mode
[  169.848204][ T8974] batadv0: left allmulticast mode
[  169.859736][ T8974] batadv0: left promiscuous mode
[  170.101056][ T8998] syzkaller0: entered promiscuous mode
[  170.120029][ T8998] syzkaller0: entered allmulticast mode
[  170.185018][ T9009] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  170.506559][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'.
[  171.595395][ T9024] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.764'.
[  171.621367][ T9028] macvtap2: entered promiscuous mode
[  171.627940][ T9028] macvtap2: entered allmulticast mode
[  171.642411][ T9028] dummy0: entered allmulticast mode
[  171.808755][ T9046] netlink: 'syz.1.772': attribute type 49 has an invalid length.
[  171.969991][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'.
[  172.016452][ T9046] syzkaller0: entered promiscuous mode
[  172.046170][ T9046] syzkaller0: entered allmulticast mode
[  172.063260][ T9062] syzkaller0: entered promiscuous mode
[  172.075173][ T9062] syzkaller0: entered allmulticast mode
[  173.056856][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'.
[  173.256532][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'.
[  173.936077][ T9068] 
@0Ù: renamed from bond_slave_1 (while UP)
[  173.957134][ T9080] macvtap2: entered promiscuous mode
[  173.963011][ T9080] dummy0: entered promiscuous mode
[  173.968295][ T9080] macvtap2: entered allmulticast mode
[  173.979613][ T9080] dummy0: entered allmulticast mode
[  173.995678][ T9088] netlink: 'syz.0.784': attribute type 1 has an invalid length.
[  174.020886][ T9088] netlink: 228 bytes leftover after parsing attributes in process `syz.0.784'.
[  174.196444][ T9102] netlink: 14 bytes leftover after parsing attributes in process `syz.1.787'.
[  174.243526][ T9104] netlink: 556 bytes leftover after parsing attributes in process `syz.4.788'.
[  174.273748][ T9105] IPVS: lc: FWM 3 0x00000003 - no destination available
[  174.280752][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  174.349248][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.791'.
[  174.665819][ T9102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.687829][ T9102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.702209][ T9102] bond0 (unregistering): Released all slaves
[  174.891929][ T9121] netem: incorrect gi model size
[  175.006458][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'.
[  175.018880][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'.
[  175.078251][ T9128] netlink: 'syz.3.797': attribute type 5 has an invalid length.
[  175.179515][ T9131] lo speed is unknown, defaulting to 1000
[  175.190034][ T9137] netlink: 'syz.1.799': attribute type 10 has an invalid length.
[  175.259788][ T9137] macvlan1: entered promiscuous mode
[  175.279510][ T9137] macvlan1: entered allmulticast mode
[  175.290858][ T9137] veth1_vlan: entered allmulticast mode
[  175.301337][ T9137] team0: Port device macvlan1 added
[  175.360522][ T9138] lo speed is unknown, defaulting to 1000
[  175.425757][ T9136] delete_channel: no stack
[  175.502027][ T9151] lo speed is unknown, defaulting to 1000
[  175.651642][ T9158] batman_adv: batadv0: Interface deactivated: dummy0
[  175.664589][ T9158] batman_adv: batadv0: Removing interface: dummy0
[  175.677022][ T9160] netlink: 'syz.1.805': attribute type 10 has an invalid length.
[  175.701700][ T9158] team_slave_0: left allmulticast mode
[  175.709306][ T9158] team_slave_0: left promiscuous mode
[  175.733297][ T9158] team0: Port device team_slave_0 removed
[  175.745972][ T9158] team_slave_1: left allmulticast mode
[  175.752847][ T9158] team_slave_1: left promiscuous mode
[  175.766279][ T9158] team0: Port device team_slave_1 removed
[  175.777867][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.785817][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.803618][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.811130][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.819675][ T9158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  175.864633][ T9156] vxcan1: left allmulticast mode
[  175.871014][ T9160] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  175.916539][ T9164] macsec1: entered promiscuous mode
[  175.921766][ T9164] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  175.931708][ T9164] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  175.966055][ T9161] lo speed is unknown, defaulting to 1000
[  176.469065][ T9179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.679577][ T9173] syz.2.808 (9173) used greatest stack depth: 17864 bytes left
[  176.749538][ T9192] veth5: entered allmulticast mode
[  176.758283][ T9192] bridge2: port 1(veth5) entered blocking state
[  176.776654][ T9192] bridge2: port 1(veth5) entered disabled state
[  176.794828][ T9192] veth5: entered promiscuous mode
[  176.846516][ T9186] bridge2: port 2(veth0_to_bond) entered blocking state
[  176.892496][ T9186] bridge2: port 2(veth0_to_bond) entered disabled state
[  176.899822][ T9186] veth0_to_bond: entered allmulticast mode
[  176.921304][ T9202] IPVS: lc: FWM 3 0x00000003 - no destination available
[  176.923623][ T9186] veth0_to_bond: entered promiscuous mode
[  177.288495][ T9219] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  177.377697][ T9219] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  177.440168][ T9232] lo speed is unknown, defaulting to 1000
[  177.522544][ T9219] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  177.595600][ T9219] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  177.975755][ T9255] wg1: entered promiscuous mode
[  177.980865][ T9255] wg1: entered allmulticast mode
[  178.081741][ T9259] netlink: 'syz.2.828': attribute type 6 has an invalid length.
[  178.144933][ T9259] __nla_validate_parse: 8 callbacks suppressed
[  178.144948][ T9259] netlink: 176 bytes leftover after parsing attributes in process `syz.2.828'.
[  178.227232][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'.
[  178.263266][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'.
[  178.299653][ T9266] ip6tnl1: entered promiscuous mode
[  178.306176][ T9266] ip6tnl1: entered allmulticast mode
[  178.391007][ T9268] lo speed is unknown, defaulting to 1000
[  178.815732][ T9277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.834'.
[  178.841329][ T9279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.834'.
[  178.868198][ T9277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.834'.
[  178.881383][ T9279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.834'.
[  179.311801][ T9307] netlink: 'syz.1.841': attribute type 66 has an invalid length.
[  179.350040][ T9298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.449961][ T9302] syzkaller0: entered promiscuous mode
[  179.490499][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'.
[  179.494411][ T9302] syzkaller0: entered allmulticast mode
[  179.510454][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.2.843'.
[  179.589640][ T9306] syzkaller1: entered allmulticast mode
[  179.839020][ T9298] tipc: Resetting bearer <eth:syzkaller0>
[  179.915770][ T9337] pim6reg1: entered promiscuous mode
[  179.921139][ T9337] pim6reg1: entered allmulticast mode
[  179.999443][ T9340] netlink: 'syz.1.846': attribute type 1 has an invalid length.
[  180.039974][ T9340] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.846'.
[  180.070846][ T9346] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  180.452625][    T9] tipc: Node number set to 3894375015
[  180.505321][ T9360] netlink: 'syz.1.850': attribute type 21 has an invalid length.
[  180.597909][ T9283] tipc: Resetting bearer <eth:syzkaller0>
[  180.707696][ T9283] tipc: Disabling bearer <eth:syzkaller0>
[  180.814871][ T9371] netlink: 'syz.1.854': attribute type 10 has an invalid length.
[  181.326408][ T9392] lo speed is unknown, defaulting to 1000
[  181.369287][ T9399] netlink: 'syz.2.863': attribute type 13 has an invalid length.
[  181.385327][ T9393] lo speed is unknown, defaulting to 1000
[  181.393233][ T9399] netlink: 'syz.2.863': attribute type 17 has an invalid length.
[  181.574425][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.613899][ T9399] 8021q: adding VLAN 0 to HW filter on device team0
[  181.635320][ T9399] net_ratelimit: 54 callbacks suppressed
[  181.635330][ T9399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.956116][ T9417] IPVS: lc: FWM 3 0x00000003 - no destination available
[  181.999994][   T30] audit: type=1800 audit(1757534215.947:10): pid=9410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.864" name="cgroup.controllers" dev="tmpfs" ino=930 res=0 errno=0
[  182.419675][ T9436] netlink: 'syz.1.873': attribute type 4 has an invalid length.
[  182.913828][ T9460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.959715][ T9460] team0: entered promiscuous mode
[  182.995708][ T9460] team_slave_0: entered promiscuous mode
[  183.001567][ T9460] team_slave_1: entered promiscuous mode
[  183.015217][ T9460] 8021q: adding VLAN 0 to HW filter on device team0
[  183.270467][ T9470] lo speed is unknown, defaulting to 1000
[  183.289109][ T9466] netlink: 'syz.1.883': attribute type 1 has an invalid length.
[  183.323382][ T3558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.352668][ T9227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.360869][ T3558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.432463][ T9227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.880301][ T9505] __nla_validate_parse: 10 callbacks suppressed
[  183.880318][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'.
[  183.969690][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'.
[  183.980693][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.893'.
[  184.059215][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'.
[  184.076669][ T9505] erspan0: entered promiscuous mode
[  184.092448][ T9234] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.103092][ T9505] macvtap6: entered promiscuous mode
[  184.108742][ T9505] macvtap6: entered allmulticast mode
[  184.114737][ T9505] erspan0: entered allmulticast mode
[  184.186043][ T9509] erspan0: left allmulticast mode
[  184.191333][ T9509] erspan0: left promiscuous mode
[  184.358054][ T9524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'.
[  184.454999][ T9528] tipc: Started in network mode
[  184.473654][ T9528] tipc: Node identity ea25b5134379, cluster identity 4711
[  184.507049][ T9528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.525931][ T9532] IPVS: lc: FWM 3 0x00000003 - no destination available
[  184.534320][ T9529] syzkaller0: entered promiscuous mode
[  184.539791][ T9529] syzkaller0: entered allmulticast mode
[  184.586628][ T9537] syz_tun: entered allmulticast mode
[  184.640590][ T9534] dvmrp8: entered allmulticast mode
[  184.648998][ T9529] tipc: Resetting bearer <eth:syzkaller0>
[  184.696584][ T9529] tipc: Disabling bearer <eth:syzkaller0>
[  184.744468][ T9534] lo speed is unknown, defaulting to 1000
[  184.782673][ T9537] netlink: 'syz.2.900': attribute type 23 has an invalid length.
[  184.877522][ T9547] netlink: 68 bytes leftover after parsing attributes in process `syz.4.905'.
[  184.915658][ T9551] netlink: 5 bytes leftover after parsing attributes in process `syz.3.907'.
[  185.054819][ T9531] syz_tun: left allmulticast mode
[  185.098456][ T9531] dvmrp8: left allmulticast mode
[  185.280069][ T9559] lo speed is unknown, defaulting to 1000
[  185.535358][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'.
[  185.587309][ T9579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.611864][ T9579] syzkaller0: entered promiscuous mode
[  185.620946][ T9579] syzkaller0: entered allmulticast mode
[  185.624545][ T9581] netlink: 'syz.0.916': attribute type 21 has an invalid length.
[  185.716198][ T9590] tipc: Resetting bearer <eth:syzkaller0>
[  185.769495][ T9578] tipc: Resetting bearer <eth:syzkaller0>
[  185.804356][ T9578] tipc: Disabling bearer <eth:syzkaller0>
[  185.990242][ T9602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.921'.
[  186.066611][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'.
[  186.086379][ T9596] vcan0: tx address claim with dlc 0
[  186.405702][ T9631] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  186.490614][ T9636] lo: entered allmulticast mode
[  186.696754][ T9642] lo speed is unknown, defaulting to 1000
[  187.169192][ T9667] IPVS: lc: FWM 3 0x00000003 - no destination available
[  187.202680][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  187.772260][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  187.922621][ T9702] lo speed is unknown, defaulting to 1000
[  188.120210][ T9706] ieee802154 phy0 wpan0: encryption failed: -22
[  188.318845][ T9733] netlink: 'syz.0.958': attribute type 2 has an invalid length.
[  188.758285][ T9756] netlink: 'syz.0.963': attribute type 23 has an invalid length.
[  188.804134][   T61] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  188.814891][   T61] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  188.835683][ T9234] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  189.100456][ T9727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.130687][ T9771] netlink: 'syz.0.969': attribute type 58 has an invalid length.
[  189.140445][ T9771] __nla_validate_parse: 3 callbacks suppressed
[  189.140457][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.969'.
[  189.149004][ T9772] syzkaller1: entered promiscuous mode
[  189.161357][ T9772] syzkaller1: entered allmulticast mode
[  189.317576][ T9234] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  189.392317][ T9764] netlink: 348 bytes leftover after parsing attributes in process `syz.2.967'.
[  189.401417][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'.
[  189.468425][ T9787] netlink: 'syz.1.972': attribute type 2 has an invalid length.
[  189.495846][ T9767] IPVS: lc: FWM 3 0x00000003 - no destination available
[  189.525024][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  189.543872][ T9234] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  189.554757][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.972'.
[  189.804672][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.976'.
[  189.919294][ T9805] netlink: 'syz.2.977': attribute type 4 has an invalid length.
[  189.949560][ T9808] netlink: 'syz.4.978': attribute type 2 has an invalid length.
[  189.950845][ T9805] netlink: 'syz.2.977': attribute type 4 has an invalid length.
[  189.985253][ T9808] : entered promiscuous mode
[  190.250055][ T9822] pim6reg1: entered promiscuous mode
[  190.257352][ T9822] pim6reg1: entered allmulticast mode
[  190.279347][ T9826] IPVS: lc: FWM 3 0x00000003 - no destination available
[  190.330271][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'.
[  190.549621][ T9840] lo speed is unknown, defaulting to 1000
[  190.944278][ T9869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.994'.
[  191.504920][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'.
[  191.619433][ T9904] netlink: 'syz.1.1004': attribute type 10 has an invalid length.
[  191.744943][ T9920] netlink: 'syz.3.1009': attribute type 96 has an invalid length.
[  191.990881][ T9936] netlink: 'syz.2.1014': attribute type 32 has an invalid length.
[  192.052543][ T9933] lo speed is unknown, defaulting to 1000
[  192.110364][ T9939] IPVS: lc: FWM 3 0x00000003 - no destination available
[  192.121423][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[  192.134621][ T9941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1016'.
[  192.413645][ T9953] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1020'.
[  192.499264][ T9958] netlink: 'syz.0.1023': attribute type 6 has an invalid length.
[  192.512545][ T9958] IPv6: NLM_F_CREATE should be specified when creating new route
[  192.565572][ T9960] lo speed is unknown, defaulting to 1000
[  192.684641][ T9964] pimreg: entered allmulticast mode
[  192.729936][ T9967] netlink: 'syz.0.1025': attribute type 1 has an invalid length.
[  192.793796][ T9967] nbd: socks must be embedded in a SOCK_ITEM attr
[  192.812257][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  192.836455][ T9967] block nbd0: shutting down sockets
[  193.034701][ T9974] netlink: 'syz.1.1027': attribute type 13 has an invalid length.
[  193.046145][ T9974] netlink: 'syz.1.1027': attribute type 17 has an invalid length.
[  193.720385][ T9974] 8021q: adding VLAN 0 to HW filter on device team0
[  193.745660][ T9974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.772742][ T5865] Bluetooth: hci3: command 0x0406 tx timeout
[  193.817052][   T10] lo speed is unknown, defaulting to 1000
[  193.823317][   T10] syz2: Port: 1 Link ACTIVE
[  193.886953][ T9998] tipc: Enabled bearer <udp:syz2>, priority 10
[  194.066874][T10006] lo speed is unknown, defaulting to 1000
[  194.181321][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  194.223721][T10022] __nla_validate_parse: 5 callbacks suppressed
[  194.223736][T10022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1033'.
[  194.245720][T10022] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1033'.
[  194.305439][T10015] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.408971][T10026] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.420081][T10026] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  194.448576][T10026] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  194.523556][T10023] lo speed is unknown, defaulting to 1000
[  194.589173][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'.
[  194.632464][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'.
[  194.686647][T10045] IPVS: lc: FWM 3 0x00000003 - no destination available
[  194.696589][    C1] IPVS: lc: FWM 3 0x00000003 - no destination available
[  194.937110][T10058] bond3: entered promiscuous mode
[  194.943025][T10058] 8021q: adding VLAN 0 to HW filter on device bond3
[  194.995590][T10060] lo speed is unknown, defaulting to 1000
[  195.084492][T10069] IPVS: lc: FWM 3 0x00000003 - no destination available
[  195.085881][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'.
[  195.166621][T10074] validate_nla: 3 callbacks suppressed
[  195.166638][T10074] netlink: 'syz.3.1047': attribute type 4 has an invalid length.
[  195.261152][T10077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1052'.
[  195.276209][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'.
[  195.382756][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1047'.
[  195.565836][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1054'.
[  195.586111][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'.
[  195.671453][T10097] ip6gretap0: entered promiscuous mode
[  195.688861][T10097] @
: entered allmulticast mode
[  195.694303][T10097] ip6gretap0: entered allmulticast mode
[  195.801665][T10096] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.847051][T10113] netlink: 'syz.4.1060': attribute type 23 has an invalid length.
[  195.876371][T10096] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.969282][T10096] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.061719][T10096] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.255820][ T5875] Bluetooth: hci1: command 0x0406 tx timeout
[  196.263260][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout
[  196.263347][ T5879] Bluetooth: hci4: command 0x0406 tx timeout
[  196.269287][ T5874] Bluetooth: hci2: command 0x0406 tx timeout
[  196.285776][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.368664][ T3558] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.540995][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.683634][ T7362] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.732158][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  196.766032][T10126] dummy0: left allmulticast mode
[  196.883476][T10123] syzkaller1: entered promiscuous mode
[  196.892263][T10123] syzkaller1: entered allmulticast mode
[  197.227328][T10145] dummy0: left allmulticast mode
[  197.241927][T10149] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  197.772749][ T5869] Bluetooth: hci3: command 0x0406 tx timeout
[  198.049421][T10176] syzkaller1: entered promiscuous mode
[  198.070747][T10176] syzkaller1: entered allmulticast mode
[  198.408942][T10197] lo speed is unknown, defaulting to 1000
[  198.936338][T10212] netlink: 'syz.0.1088': attribute type 1 has an invalid length.
[  198.960318][T10212] 8021q: adding VLAN 0 to HW filter on device bond2
[  198.980532][T10212] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  198.999348][T10212] vlan2: entered allmulticast mode
[  199.004659][T10212] veth1: entered allmulticast mode
[  199.010204][T10212] bond2: (slave vlan2): Opening slave failed
[  199.151427][T10217] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  199.197390][T10217] gretap2: entered allmulticast mode
[  199.205626][T10217] bond3: (slave gretap2): making interface the new active one
[  199.214951][T10217] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  199.289233][T10222] lo speed is unknown, defaulting to 1000
[  199.753430][T10255] __nla_validate_parse: 7 callbacks suppressed
[  199.753447][T10255] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1103'.
[  199.771767][T10257] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1104'.
[  199.811625][T10255] syzkaller0: entered promiscuous mode
[  199.817227][T10255] syzkaller0: entered allmulticast mode
[  199.836755][T10242] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  199.838831][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'.
[  199.961063][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'.
[  200.118050][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'.
[  200.211420][T10266] lo speed is unknown, defaulting to 1000
[  200.484059][T10280] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1111'.
[  200.499517][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'.
[  202.198366][T10303] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.208898][T10308] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1115'.
[  202.386971][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'.
[  202.547529][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'.
[  202.638871][T10348] vlan2: entered allmulticast mode
[  202.644237][T10348] bridge0: entered allmulticast mode
[  202.649828][T10348] bridge3: port 1(vlan2) entered blocking state
[  202.660864][T10348] bridge3: port 1(vlan2) entered disabled state
[  202.679376][T10348] vlan2: entered promiscuous mode
[  202.687628][T10348] bridge0: entered promiscuous mode
[  204.006469][T10429] IPVS: Unknown mcast interface: vetN1_macvtap
[  204.037732][T10429] IPVS: Unknown mcast interface: vetN1_macvtap
[  204.087370][T10433] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[  204.130716][T10433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.498115][T10454] netlink: 'syz.1.1152': attribute type 10 has an invalid length.
[  204.620578][T10454] vlan3: entered allmulticast mode
[  204.665240][T10454] bridge_slave_0: entered allmulticast mode
[  204.855088][T10466] geneve2: entered promiscuous mode
[  204.905525][T10466] geneve2: entered allmulticast mode
[  205.098952][T10479] openvswitch: netlink: Missing key (keys=40, expected=80)
[  205.421419][T10492] lo speed is unknown, defaulting to 1000
[  255.615022][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  262.365311][T10548] __nla_validate_parse: 13 callbacks suppressed
[  262.365328][T10548] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1160'.
[  262.509603][T10567] lo speed is unknown, defaulting to 1000
[  262.537348][T10573] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  262.577898][T10568] lo speed is unknown, defaulting to 1000
[  262.693999][T10575] netlink: 'syz.4.1164': attribute type 1 has an invalid length.
[  262.701743][T10575] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1164'.
[  262.736269][T10572] lo speed is unknown, defaulting to 1000
[  262.824311][T10583] netlink: 'syz.0.1166': attribute type 10 has an invalid length.
[  262.839847][T10582] netlink: 'syz.2.1167': attribute type 3 has an invalid length.
[  262.842291][T10583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1166'.
[  262.870851][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  262.905270][T10582] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  262.977018][T10583] bridge0: port 3(dummy0) entered blocking state
[  262.988222][T10583] bridge0: port 3(dummy0) entered disabled state
[  262.996068][T10583] dummy0: entered allmulticast mode
[  263.009907][T10583] dummy0: left allmulticast mode
[  263.015585][T10583] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  263.318792][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'.
[  263.406713][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  263.497940][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'.
[  263.513990][T10609] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  263.568464][T10604] bond3: entered promiscuous mode
[  263.584941][T10604] 8021q: adding VLAN 0 to HW filter on device bond3
[  263.618852][T10613] netlink: 'syz.4.1171': attribute type 1 has an invalid length.
[  263.662411][T10613] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1171'.
[  263.695129][T10613] IPVS: lc: FWM 3 0x00000003 - no destination available
[  263.780846][T10593] 8021q: adding VLAN 0 to HW filter on device bond3
[  263.816073][T10593] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  263.850183][T10593] bond3: (slave wireguard0): Error -95 calling set_mac_address
[  263.997901][T10591] lo speed is unknown, defaulting to 1000
[  264.381154][T10645] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1173'.
[  264.512812][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'.
[  264.628657][T10653] ..0·: renamed from hsr0
[  264.630790][T10656] netlink: 'syz.1.1178': attribute type 1 has an invalid length.
[  264.641214][T10656] netlink: 'syz.1.1178': attribute type 1 has an invalid length.
[  264.646686][T10653] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  264.677302][T10653] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  264.689468][T10653] ..0·: entered allmulticast mode
[  264.695170][T10653] hsr_slave_0: entered allmulticast mode
[  264.703934][T10653] hsr_slave_1: entered allmulticast mode
[  264.711524][T10653] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check.
[  264.750782][T10651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.759621][T10654] syzkaller0: entered promiscuous mode
[  264.776796][T10654] syzkaller0: entered allmulticast mode
[  264.830665][T10660] netlink: 'syz.1.1178': attribute type 1 has an invalid length.
[  264.851936][T10651] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) !
[  264.873034][T10651] tipc: Resetting bearer <eth:syzkaller0>
[  264.906748][T10660] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.914230][T10650] tipc: Resetting bearer <eth:syzkaller0>
[  264.927502][T10650] tipc: Disabling bearer <eth:syzkaller0>
[  265.027116][T10664] siw: device registration error -23
[  265.088486][T10668] netlink: 'syz.3.1181': attribute type 1 has an invalid length.
[  265.140566][T10668] bond4: entered promiscuous mode
[  265.151762][T10668] 8021q: adding VLAN 0 to HW filter on device bond4
[  265.177474][T10670] 8021q: adding VLAN 0 to HW filter on device bond4
[  265.184697][T10670] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  265.195684][T10670] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  265.228554][T10670] bond4: (slave wireguard0): making interface the new active one
[  265.237227][T10670] wireguard0: entered promiscuous mode
[  265.245416][T10670] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  265.513774][T10697] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  265.829349][T10718] netlink: 'syz.2.1193': attribute type 10 has an invalid length.
[  265.927507][T10718] dummy0: left promiscuous mode
[  265.945355][T10718] team0: Device dummy0 failed to register rx_handler
[  266.251578][T10720] syzkaller0: entered promiscuous mode
[  266.260602][T10720] syzkaller0: entered allmulticast mode
[  268.376068][T10767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.391918][T10767] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  268.401792][T10767] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  268.416352][T10767] tipc: Resetting bearer <eth:syzkaller0>
[  268.537150][T10762] tipc: Resetting bearer <eth:syzkaller0>
[  268.563907][T10771] __nla_validate_parse: 8 callbacks suppressed
[  268.563921][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'.
[  268.819409][T10793] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1209'.
[  268.844911][T10794] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1209'.
[  268.955337][T10801] syzkaller0: entered promiscuous mode
[  268.972249][T10801] syzkaller0: entered allmulticast mode
[  269.378339][T10835] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1220'.
[  269.392985][T10838] netlink: 'syz.1.1221': attribute type 2 has an invalid length.
[  269.409126][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'.
[  269.431612][T10843] netlink: 'syz.1.1221': attribute type 2 has an invalid length.
[  269.485264][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  269.630841][T10849] delete_channel: no stack
[  269.701904][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1226'.
[  269.894625][T10865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1229'.
[  269.959126][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1232'.
[  270.103114][T10877] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  270.324151][T10886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.328185][T10888] netlink: 'syz.0.1237': attribute type 3 has an invalid length.
[  270.378222][T10886] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  270.403154][T10888] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1237'.
[  270.472274][T10896] netlink: 'syz.2.1240': attribute type 23 has an invalid length.
[  270.481074][T10896] FAULT_INJECTION: forcing a failure.
[  270.481074][T10896] name failslab, interval 1, probability 0, space 0, times 0
[  270.499549][T10896] CPU: 1 UID: 0 PID: 10896 Comm: syz.2.1240 Not tainted syzkaller #0 PREEMPT(full) 
[  270.499571][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  270.499582][T10896] Call Trace:
[  270.499590][T10896]  <TASK>
[  270.499598][T10896]  dump_stack_lvl+0x189/0x250
[  270.499622][T10896]  ? __pfx____ratelimit+0x10/0x10
[  270.499642][T10896]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.499661][T10896]  ? __pfx__printk+0x10/0x10
[  270.499689][T10896]  ? __pfx___might_resched+0x10/0x10
[  270.499706][T10896]  ? fs_reclaim_acquire+0x7d/0x100
[  270.499728][T10896]  should_fail_ex+0x414/0x560
[  270.499755][T10896]  should_failslab+0xa8/0x100
[  270.499785][T10896]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  270.499807][T10896]  ? __alloc_skb+0x112/0x2d0
[  270.499829][T10896]  __alloc_skb+0x112/0x2d0
[  270.499851][T10896]  netlink_ack+0x146/0xa50
[  270.499867][T10896]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.499907][T10896]  netlink_rcv_skb+0x28c/0x470
[  270.499922][T10896]  ? __lock_acquire+0xab9/0xd20
[  270.499944][T10896]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.499967][T10896]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  270.500006][T10896]  ? down_read+0x1ad/0x2e0
[  270.500028][T10896]  genl_rcv+0x28/0x40
[  270.500045][T10896]  netlink_unicast+0x82f/0x9e0
[  270.500079][T10896]  ? __pfx_netlink_unicast+0x10/0x10
[  270.500104][T10896]  ? netlink_sendmsg+0x642/0xb30
[  270.500119][T10896]  ? skb_put+0x11b/0x210
[  270.500141][T10896]  netlink_sendmsg+0x805/0xb30
[  270.500170][T10896]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.500191][T10896]  ? aa_sock_msg_perm+0xf1/0x1d0
[  270.500210][T10896]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  270.500227][T10896]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.500246][T10896]  __sock_sendmsg+0x21c/0x270
[  270.500273][T10896]  ____sys_sendmsg+0x505/0x830
[  270.500298][T10896]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.500328][T10896]  ? import_iovec+0x74/0xa0
[  270.500352][T10896]  ___sys_sendmsg+0x21f/0x2a0
[  270.500378][T10896]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.500438][T10896]  ? __fget_files+0x2a/0x420
[  270.500452][T10896]  ? __fget_files+0x3a0/0x420
[  270.500479][T10896]  __x64_sys_sendmsg+0x19b/0x260
[  270.500502][T10896]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.500532][T10896]  ? __pfx_ksys_write+0x10/0x10
[  270.500550][T10896]  ? __task_pid_nr_ns+0x28/0x470
[  270.500575][T10896]  ? do_syscall_64+0xbe/0x3b0
[  270.500598][T10896]  do_syscall_64+0xfa/0x3b0
[  270.500615][T10896]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.500632][T10896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.500648][T10896]  ? clear_bhb_loop+0x60/0xb0
[  270.500667][T10896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.500683][T10896] RIP: 0033:0x7fa4b8d8eba9
[  270.500699][T10896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.500714][T10896] RSP: 002b:00007fa4b9cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.500732][T10896] RAX: ffffffffffffffda RBX: 00007fa4b8fd5fa0 RCX: 00007fa4b8d8eba9
[  270.500744][T10896] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003
[  270.500755][T10896] RBP: 00007fa4b9cc9090 R08: 0000000000000000 R09: 0000000000000000
[  270.500772][T10896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.500782][T10896] R13: 00007fa4b8fd6038 R14: 00007fa4b8fd5fa0 R15: 00007fff1741f7d8
[  270.500812][T10896]  </TASK>
[  270.841797][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.860109][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.961790][T10891] macvtap1: left promiscuous mode
[  270.967293][T10891] macvtap2: left promiscuous mode
[  270.976084][T10891] macvtap3: left promiscuous mode
[  270.981346][T10891] macvtap4: left promiscuous mode
[  270.986926][T10891] macvtap5: left promiscuous mode
[  270.992359][T10891] macvtap6: left promiscuous mode
[  271.004311][T10891] bond4: left promiscuous mode
[  271.009081][T10891] wireguard0: left promiscuous mode
[  271.017997][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'.
[  271.049038][T10562] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.078160][T10562] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.087555][T10562] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.106631][T10562] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.321198][T10918] can: request_module (can-proto-5) failed.
[  271.845048][T10943] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  272.021207][T10957] bond0: entered promiscuous mode
[  272.026601][T10957] bond_slave_0: entered promiscuous mode
[  272.032485][T10957] bond_slave_1: entered promiscuous mode
[  272.039791][T10957] bond0: left promiscuous mode
[  272.044928][T10957] bond_slave_0: left promiscuous mode
[  272.059557][T10962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.072457][T10957] bond_slave_1: left promiscuous mode
[  272.412870][ T5869] Bluetooth: hci4: command 0x0406 tx timeout
[  272.448523][T10986] netlink: 'syz.0.1262': attribute type 11 has an invalid length.
[  272.516164][T10978] netlink: 'syz.2.1260': attribute type 10 has an invalid length.
[  272.598489][T10989] netlink: 'syz.4.1263': attribute type 1 has an invalid length.
[  272.936035][T11009] netlink: 'syz.3.1271': attribute type 12 has an invalid length.
[  273.201388][T11029] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  273.225509][T11029] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  273.307985][T11029] sctp: [Deprecated]: syz.2.1277 (pid 11029) Use of int in maxseg socket option.
[  273.307985][T11029] Use struct sctp_assoc_value instead
[  273.582304][T11053] __nla_validate_parse: 44 callbacks suppressed
[  273.582321][T11053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'.
[  273.641351][T11050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.807271][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'.
[  273.930757][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'.
[  273.955648][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  273.959995][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1288'.
[  273.976354][T11071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1288'.
[  273.987549][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'.
[  274.014286][T11074] netlink: 'syz.1.1289': attribute type 11 has an invalid length.
[  274.030927][T11071] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1288'.
[  274.061254][T11078] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  274.230409][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'.
[  274.239784][T11080] netlink: 'syz.4.1292': attribute type 19 has an invalid length.
[  274.252061][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'.
[  274.289981][ T7362] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  274.382313][ T7362] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.400698][ T7362] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.611737][T11080] 8021q: adding VLAN 0 to HW filter on device bond6
[  274.630939][T11080] bond5: (slave bond6): making interface the new active one
[  274.680188][T11080] bond5: (slave bond6): Enslaving as an active interface with an up link
[  274.725934][ T7362] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.759735][T11120] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  274.777626][T11114] ==================================================================
[  274.785725][T11114] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  274.793795][T11114] Write of size 8 at addr ffff888054f10ce8 by task syz.2.1299/11114
[  274.801775][T11114] 
[  274.804099][T11114] CPU: 1 UID: 0 PID: 11114 Comm: syz.2.1299 Not tainted syzkaller #0 PREEMPT(full) 
[  274.804128][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  274.804140][T11114] Call Trace:
[  274.804147][T11114]  <TASK>
[  274.804155][T11114]  dump_stack_lvl+0x189/0x250
[  274.804180][T11114]  ? __kasan_check_byte+0x12/0x40
[  274.804206][T11114]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.804225][T11114]  ? lock_release+0x4b/0x3e0
[  274.804249][T11114]  ? __virt_addr_valid+0x4a5/0x5c0
[  274.804270][T11114]  print_report+0xca/0x240
[  274.804286][T11114]  ? __xfrm_state_delete+0x666/0xca0
[  274.804304][T11114]  kasan_report+0x118/0x150
[  274.804326][T11114]  ? __xfrm_state_delete+0x666/0xca0
[  274.804349][T11114]  __xfrm_state_delete+0x666/0xca0
[  274.804372][T11114]  xfrm_state_flush+0x45f/0x770
[  274.804395][T11114]  pfkey_flush+0x13f/0x340
[  274.804416][T11114]  ? __pfx_pfkey_flush+0x10/0x10
[  274.804435][T11114]  ? kmem_cache_free+0x18f/0x400
[  274.804462][T11114]  pfkey_sendmsg+0xbfb/0x1090
[  274.804485][T11114]  ? trace_sched_exit_tp+0x36/0x110
[  274.804509][T11114]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  274.804540][T11114]  ? aa_sock_msg_perm+0xf1/0x1d0
[  274.804557][T11114]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.804575][T11114]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  274.804595][T11114]  __sock_sendmsg+0x21c/0x270
[  274.804619][T11114]  ____sys_sendmsg+0x505/0x830
[  274.804642][T11114]  ? __pfx_____sys_sendmsg+0x10/0x10
[  274.804666][T11114]  ? import_iovec+0x74/0xa0
[  274.804686][T11114]  ___sys_sendmsg+0x21f/0x2a0
[  274.804707][T11114]  ? __pfx____sys_sendmsg+0x10/0x10
[  274.804740][T11114]  ? __fget_files+0x2a/0x420
[  274.804753][T11114]  ? __fget_files+0x3a0/0x420
[  274.804772][T11114]  __x64_sys_sendmsg+0x19b/0x260
[  274.804793][T11114]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  274.804818][T11114]  ? rcu_is_watching+0x15/0xb0
[  274.804837][T11114]  ? do_syscall_64+0xbe/0x3b0
[  274.804858][T11114]  do_syscall_64+0xfa/0x3b0
[  274.804875][T11114]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.804892][T11114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.804909][T11114]  ? clear_bhb_loop+0x60/0xb0
[  274.804928][T11114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.804944][T11114] RIP: 0033:0x7fa4b8d8eba9
[  274.804960][T11114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.804975][T11114] RSP: 002b:00007fa4b9ca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.804992][T11114] RAX: ffffffffffffffda RBX: 00007fa4b8fd6090 RCX: 00007fa4b8d8eba9
[  274.805005][T11114] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  274.805016][T11114] RBP: 00007fa4b8e11e19 R08: 0000000000000000 R09: 0000000000000000
[  274.805026][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.805037][T11114] R13: 00007fa4b8fd6128 R14: 00007fa4b8fd6090 R15: 00007fff1741f7d8
[  274.805057][T11114]  </TASK>
[  274.805063][T11114] 
[  275.089928][T11114] Allocated by task 10970:
[  275.094323][T11114]  kasan_save_track+0x3e/0x80
[  275.098992][T11114]  __kasan_slab_alloc+0x6c/0x80
[  275.103828][T11114]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  275.109270][T11114]  xfrm_state_alloc+0x24/0x2f0
[  275.114014][T11114]  xfrm_add_sa+0x17d1/0x4070
[  275.118587][T11114]  xfrm_user_rcv_msg+0x7a3/0xab0
[  275.123507][T11114]  netlink_rcv_skb+0x208/0x470
[  275.128251][T11114]  xfrm_netlink_rcv+0x79/0x90
[  275.132908][T11114]  netlink_unicast+0x82f/0x9e0
[  275.137654][T11114]  netlink_sendmsg+0x805/0xb30
[  275.142395][T11114]  __sock_sendmsg+0x21c/0x270
[  275.147053][T11114]  ____sys_sendmsg+0x505/0x830
[  275.151795][T11114]  ___sys_sendmsg+0x21f/0x2a0
[  275.156451][T11114]  __x64_sys_sendmsg+0x19b/0x260
[  275.161369][T11114]  do_syscall_64+0xfa/0x3b0
[  275.165851][T11114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.171722][T11114] 
[  275.174026][T11114] Freed by task 5944:
[  275.177979][T11114]  kasan_save_track+0x3e/0x80
[  275.182636][T11114]  kasan_save_free_info+0x46/0x50
[  275.187639][T11114]  __kasan_slab_free+0x5b/0x80
[  275.192382][T11114]  kmem_cache_free+0x18f/0x400
[  275.197127][T11114]  xfrm_state_gc_task+0x52d/0x6b0
[  275.202137][T11114]  process_scheduled_works+0xae1/0x17b0
[  275.207658][T11114]  worker_thread+0x8a0/0xda0
[  275.212228][T11114]  kthread+0x70e/0x8a0
[  275.216279][T11114]  ret_from_fork+0x3fc/0x770
[  275.220849][T11114]  ret_from_fork_asm+0x1a/0x30
[  275.225601][T11114] 
[  275.227903][T11114] The buggy address belongs to the object at ffff888054f10cc0
[  275.227903][T11114]  which belongs to the cache xfrm_state of size 928
[  275.241843][T11114] The buggy address is located 40 bytes inside of
[  275.241843][T11114]  freed 928-byte region [ffff888054f10cc0, ffff888054f11060)
[  275.255533][T11114] 
[  275.257839][T11114] The buggy address belongs to the physical page:
[  275.264225][T11114] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54f10
[  275.272974][T11114] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  275.281447][T11114] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  275.289404][T11114] page_type: f5(slab)
[  275.293369][T11114] raw: 00fff00000000040 ffff8880222ea640 0000000000000000 0000000000000001
[  275.301934][T11114] raw: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000
[  275.310521][T11114] head: 00fff00000000040 ffff8880222ea640 0000000000000000 0000000000000001
[  275.319171][T11114] head: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000
[  275.327823][T11114] head: 00fff00000000002 ffffea000153c401 00000000ffffffff 00000000ffffffff
[  275.336469][T11114] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  275.345112][T11114] page dumped because: kasan: bad access detected
[  275.351508][T11114] page_owner tracks the page as allocated
[  275.357197][T11114] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6728, tgid 6726 (syz.2.201), ts 105338628414, free_ts 105298021449
[  275.376363][T11114]  post_alloc_hook+0x240/0x2a0
[  275.381115][T11114]  get_page_from_freelist+0x21e4/0x22c0
[  275.386636][T11114]  __alloc_frozen_pages_noprof+0x181/0x370
[  275.392418][T11114]  alloc_pages_mpol+0x232/0x4a0
[  275.397250][T11114]  allocate_slab+0x8a/0x370
[  275.401730][T11114]  ___slab_alloc+0xbeb/0x1420
[  275.406390][T11114]  kmem_cache_alloc_noprof+0x283/0x3c0
[  275.411836][T11114]  xfrm_state_alloc+0x24/0x2f0
[  275.416577][T11114]  xfrm_add_sa+0x17d1/0x4070
[  275.421151][T11114]  xfrm_user_rcv_msg+0x7a3/0xab0
[  275.426069][T11114]  netlink_rcv_skb+0x208/0x470
[  275.430811][T11114]  xfrm_netlink_rcv+0x79/0x90
[  275.435468][T11114]  netlink_unicast+0x82f/0x9e0
[  275.440212][T11114]  netlink_sendmsg+0x805/0xb30
[  275.444951][T11114]  __sock_sendmsg+0x21c/0x270
[  275.449608][T11114]  ____sys_sendmsg+0x505/0x830
[  275.454352][T11114] page last free pid 6661 tgid 6660 stack trace:
[  275.460654][T11114]  __free_frozen_pages+0xbc4/0xd30
[  275.465754][T11114]  __slab_free+0x303/0x3c0
[  275.470150][T11114]  qlist_free_all+0x97/0x140
[  275.474719][T11114]  kasan_quarantine_reduce+0x148/0x160
[  275.480157][T11114]  __kasan_slab_alloc+0x22/0x80
[  275.484988][T11114]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  275.490861][T11114]  kmalloc_reserve+0xbd/0x290
[  275.495518][T11114]  __alloc_skb+0x142/0x2d0
[  275.499912][T11114]  inet6_ifmcaddr_notify+0xeb/0x1d0
[  275.505092][T11114]  __ipv6_dev_mc_dec+0x2dc/0x330
[  275.510010][T11114]  ipv6_mc_destroy_dev+0x33c/0x5a0
[  275.515102][T11114]  addrconf_ifdown+0x139e/0x1880
[  275.520023][T11114]  addrconf_notify+0x1bc/0x1010
[  275.524857][T11114]  notifier_call_chain+0x1b3/0x3e0
[  275.529948][T11114]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  275.536345][T11114]  ops_undo_list+0x3dc/0x990
[  275.540916][T11114] 
[  275.543222][T11114] Memory state around the buggy address:
[  275.548831][T11114]  ffff888054f10b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  275.556867][T11114]  ffff888054f10c00: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  275.564906][T11114] >ffff888054f10c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  275.572942][T11114]                                                           ^
[  275.580372][T11114]  ffff888054f10d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  275.588408][T11114]  ffff888054f10d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  275.596447][T11114] ==================================================================
[  275.604596][T11114] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  275.611786][T11114] CPU: 1 UID: 0 PID: 11114 Comm: syz.2.1299 Not tainted syzkaller #0 PREEMPT(full) 
[  275.621156][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  275.631205][T11114] Call Trace:
[  275.634479][T11114]  <TASK>
[  275.637395][T11114]  dump_stack_lvl+0x99/0x250
[  275.641975][T11114]  ? __asan_memcpy+0x40/0x70
[  275.646554][T11114]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.651734][T11114]  ? __pfx__printk+0x10/0x10
[  275.656313][T11114]  vpanic+0x281/0x750
[  275.660279][T11114]  ? __pfx_vpanic+0x10/0x10
[  275.664766][T11114]  ? irqentry_exit+0x74/0x90
[  275.669341][T11114]  panic+0xb9/0xc0
[  275.673046][T11114]  ? __pfx_panic+0x10/0x10
[  275.677446][T11114]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  275.683320][T11114]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  275.689200][T11114]  ? __xfrm_state_delete+0x666/0xca0
[  275.694469][T11114]  check_panic_on_warn+0x89/0xb0
[  275.699391][T11114]  ? __xfrm_state_delete+0x666/0xca0
[  275.704656][T11114]  end_report+0x78/0x160
[  275.708883][T11114]  kasan_report+0x129/0x150
[  275.713375][T11114]  ? __xfrm_state_delete+0x666/0xca0
[  275.718646][T11114]  __xfrm_state_delete+0x666/0xca0
[  275.723743][T11114]  xfrm_state_flush+0x45f/0x770
[  275.728577][T11114]  pfkey_flush+0x13f/0x340
[  275.732976][T11114]  ? __pfx_pfkey_flush+0x10/0x10
[  275.737894][T11114]  ? kmem_cache_free+0x18f/0x400
[  275.742822][T11114]  pfkey_sendmsg+0xbfb/0x1090
[  275.747483][T11114]  ? trace_sched_exit_tp+0x36/0x110
[  275.752666][T11114]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  275.757766][T11114]  ? aa_sock_msg_perm+0xf1/0x1d0
[  275.762685][T11114]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  275.767954][T11114]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  275.773048][T11114]  __sock_sendmsg+0x21c/0x270
[  275.777711][T11114]  ____sys_sendmsg+0x505/0x830
[  275.782459][T11114]  ? __pfx_____sys_sendmsg+0x10/0x10
[  275.787729][T11114]  ? import_iovec+0x74/0xa0
[  275.792215][T11114]  ___sys_sendmsg+0x21f/0x2a0
[  275.796873][T11114]  ? __pfx____sys_sendmsg+0x10/0x10
[  275.802066][T11114]  ? __fget_files+0x2a/0x420
[  275.806634][T11114]  ? __fget_files+0x3a0/0x420
[  275.811295][T11114]  __x64_sys_sendmsg+0x19b/0x260
[  275.816216][T11114]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  275.821675][T11114]  ? rcu_is_watching+0x15/0xb0
[  275.826439][T11114]  ? do_syscall_64+0xbe/0x3b0
[  275.831106][T11114]  do_syscall_64+0xfa/0x3b0
[  275.835593][T11114]  ? lockdep_hardirqs_on+0x9c/0x150
[  275.840775][T11114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.846820][T11114]  ? clear_bhb_loop+0x60/0xb0
[  275.851478][T11114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.857353][T11114] RIP: 0033:0x7fa4b8d8eba9
[  275.861752][T11114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.881342][T11114] RSP: 002b:00007fa4b9ca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  275.889741][T11114] RAX: ffffffffffffffda RBX: 00007fa4b8fd6090 RCX: 00007fa4b8d8eba9
[  275.897694][T11114] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  275.905649][T11114] RBP: 00007fa4b8e11e19 R08: 0000000000000000 R09: 0000000000000000
[  275.913603][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.921556][T11114] R13: 00007fa4b8fd6128 R14: 00007fa4b8fd6090 R15: 00007fff1741f7d8
[  275.929518][T11114]  </TASK>
[  275.932740][T11114] Kernel Offset: disabled
[  275.937043][T11114] Rebooting in 86400 seconds..