last executing test programs:

4.12747422s ago: executing program 0 (id=2583):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) (async)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, 0x0, 0x4000800)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x23}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)

3.888601106s ago: executing program 0 (id=2588):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502202000ff02ff02001a000008000100ac1414aa0c00090008f3"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x10}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000000000000000000212687055b6000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
pipe(&(0x7f00000007c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00018008"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x8}}, 0xfffd, 0x7ffe}, 0x90)
r9 = accept4$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14, 0x80c00)
setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000440)=0xcf02, 0x4)
splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20)
recvfrom(r3, 0x0, 0x0, 0x2041, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x10, 0x70bd29, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10000084}, 0x400c0)
socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000340)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x14)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)

2.503121745s ago: executing program 0 (id=2601):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r3, 0x1, 0xfffffffd, 0x25dfdbff, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xb029}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x5}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40)
poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}], 0x1, 0x4)
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf251e0000000c000600030000000000000008000300", @ANYRES32=r7, @ANYBLOB="9c002f80640003802000038006000100ffff000006000300a3aa00000c0004000200aaaaaaaaaaaa08000100000000000500020000000000080004000800000028000380080002000300000006000100ffff00000c0004008201aaaaaaaaaaaa06000300a3aa000008000100070000000c000200"], 0xcc}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000004)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {}, {0x0, @struct, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f00000001c0)={{r4}, {@val={r10}, @actul_num={@val=0x2d, 0x8, 0x65}}})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xb029}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x5}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40)
r12 = socket$kcm(0x2, 0xa, 0x2)
r13 = socket$inet6_udplite(0xa, 0x2, 0x88)
r14 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r14, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$can_bcm(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r16=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_RESIZE(r13, 0x50009403, &(0x7f00000001c0)={{r12}, {@val={r16}, @actul_num={@val=0x2d, 0x8, 0x65}}})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000240)={0x0, 0x3, 0x4, 0x1})
syz_emit_ethernet(0x5a, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[@hopopts={0x8, 0x0, '\x00', [@generic={0x7, 0x3, "801a8f"}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

2.502152033s ago: executing program 2 (id=2603):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000003a00030724bd7002f8db27df250d0000006da04efb59a4a08319c3ab124dec774364c9cc56728e209498817df3"], 0x14}}, 0x4008800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r8, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x4c, r8, 0x600, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x98}, 0x4810)
syz_emit_ethernet(0x11, &(0x7f0000000780)={@local, @broadcast, @void, {@llc={0x4, {@llc={0xc4, 0xff, 'w'}}}}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000e6", @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001380)={&(0x7f0000000380)="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", &(0x7f00000002c0)=""/125, &(0x7f0000000040)="d2622c766a575653e3d049611824030c1c69843b6dbdde03124a348a917044065fce92c6c7b53e026cd75a4fb0", &(0x7f0000000240)="dc65b9eec7b1f0707b972605f89a8f88978fba549c03bf42057d2deea040f785842f1c719de363ed793b5548fa33c46e7da5f6fc4cfac9655b896e7c1f93102b", 0xd, r3, 0x4}, 0x38)

2.432177303s ago: executing program 2 (id=2606):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000000c0)=0x2)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', <r6=>0x0})
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r7, 0x0, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet6(r7, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040001)
sendmsg$sock(r7, &(0x7f0000000240)={&(0x7f00000000c0)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x80, 0x0}, 0x20008001)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={@private0, 0x58, r6})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a919}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

1.504967459s ago: executing program 0 (id=2611):
socket$can_raw(0x1d, 0x3, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket(0x1, 0x803, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x400000000010, 0x3, 0x0)
sendfile(r1, r0, 0x0, 0xffffffff000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x27c8}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000006c0)=r2}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value=r7}}, 0x1c)
syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[], 0x0)

1.461985464s ago: executing program 2 (id=2614):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x2, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5c}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa)

1.396075148s ago: executing program 4 (id=2615):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x0, @remote}, &(0x7f0000000000)=0x80, 0x80800)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x41)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000010405000000000000000000070000000a000200000000719a"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2048004)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x0)
write(r3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x80)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000680)={<r5=>0x0, 0x2}, &(0x7f0000000800)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000840)={r5, 0xe, "a1d73a4727d33f3c4fcf079d8d81"}, &(0x7f0000000880)=0x16)
recvmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/61, 0x3d}], 0x1, &(0x7f0000000600)=""/35, 0x23}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="f7d5708a628e804f582e88e905275971d113e898f0c22be3416ef6f0ffefd5088d7f8d18ef0fbd857a61ae72504e270a0710546aed7e513aa5d2851a2a6389e582426dba3bd28c7f514756adeda6a46ae4a4a2912c62dffc874c14214f2d18fcd39a8b364d2bec8cee2833525ed3eeb423fb97a5d559c616d27956cc495ce441836745414c08dad852999464e60a97ad5af43615e1ecacda1041e3282c31bb816a6df9", 0xa3)

1.366858576s ago: executing program 3 (id=2616):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0}) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r4=>0x0}) (async)
r5 = gettid()
r6 = socket(0x10, 0x803, 0x0) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3)
sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, r7, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfffff997}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40805)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@remote, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r12, &(0x7f0000000140)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r13, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac1414bb06000e00020000008d7c14cc245cfd3d2284ff2e72ed3b1c48cb82a69552bb6e0ddd2a9d683f9d6d6997dfae514ff1bdb77c4c88a26517eaf6259d1e64da171f15988c61dc1ab9ede92b12f4cd8d8a"], 0x40}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010003904020022212dc6df309e9dd2e2c1f77ad15c00"/35, @ANYRES32=r13, @ANYBLOB="4010000000410400100012800800010067726500040002800800040006000000"], 0x38}}, 0x4044080)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) (async, rerun: 64)
sendmsg$WG_CMD_SET_DEVICE(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4005}, 0x8040) (async, rerun: 64)
sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.248955174s ago: executing program 4 (id=2617):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.175620644s ago: executing program 2 (id=2618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
unshare(0x400) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="500000000000060000000000000095000100"/32], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0xc, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffffa, 0x6, 0xfffffffd, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xf0, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0xb, 0x401, 0xffffffff, 0x1000, 0x101, 0x50, 0x8, 0xa, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x8, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x0, 0x3, 0xf, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x6, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec17, 0x7, 0x5, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa85, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xfffeffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x800004, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x9, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0x7, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x8001, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0x3, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0xff, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x80000001, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x4, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x2, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x6c, 0x100, 0x9, 0x8, 0x9, 0x8, 0x3, 0x1, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff29, 0x5, 0x222, 0xe0, 0x6, 0xc26, 0x3, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x17, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x2, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x44d, 0xe0, 0x9, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0x0, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0xff, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x3, 0x8, 0x0, 0x4, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0xb, 0x1, 0x0, 0x2c46512a, 0x3, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x6, 0xbb16, 0x4f7, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0xc, 0x2, 0x4, 0x2e4, 0xc5, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x100, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x9, 0x6, 0x9, 0x6, 0x101, 0x8, 0x4, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8003, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000340)=0xfffffffffffffee6) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) (async)
recvmmsg(r6, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
unshare(0x62040200) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)

1.101261247s ago: executing program 2 (id=2619):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0xffffffbfffff8000, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r4, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}]}, 0x3c}}, 0x8800)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0xfff, 0x0, 0xffc, 0x7, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44c}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x27}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c000004004580480201"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64=r10, @ANYRES32=r4, @ANYRESOCT=r10], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r11}, 0x10)
r12 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r12, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800ec1a005378048cb3197fe49cd03d92"], 0x18}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x44}}, 0x20008040)
close(r0)
close(r2)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r13, 0x5ec37000)
mmap(&(0x7f00009aa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0)

1.090718751s ago: executing program 1 (id=2620):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000070000000700000000000007000000000300000000000007000000000d0000000000001105000000ffffffff0f0000000000000900000000080000000000000b01000000002e5f2e305f00c635fe4046e962488610d7837f80f520ade848d8d1b9dd41ba5a90c9c2faabb859750ab94dff5292d7babab37c50e1cfccb56caf363109f17309d6126a553d99698de2da99e12286bb7fb97b8ab63a85be960f3094b18597c91a169e5d400e04111f400946872be655c298771aceccd717eb078592e8dadb4b812ad39d8c2caa8b532b55d2e738aa437e44a8c7e6ede16b053b"], &(0x7f0000000100)=""/49, 0x5f, 0x31, 0x0, 0x9}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0)
r3 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000fd080000b981e050a52a47de1efe6fee166114ac0000000000040000"], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xbe, &(0x7f000000cf3d)=""/190, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, r1}, 0x94)

967.189256ms ago: executing program 0 (id=2621):
syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
listen(r2, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="40baeb7bee58de310700000004000000dc6a0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000009500000000db0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="09000000c376b6b00000000000000000af35bf6e247ecd880a000000"], 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000480))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0x0)

965.89034ms ago: executing program 4 (id=2622):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket(0x2, 0x80805, 0x0)
unshare(0x20000400)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r4=>0x0})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0x0, &(0x7f0000000300)=0x18)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r9 = accept4(r8, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
readv(r9, &(0x7f0000000140)=[{0x0}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10)
sendmsg$inet(r0, 0x0, 0x4)

963.321853ms ago: executing program 3 (id=2623):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x25000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1b, 0x8, 0x70bd26, 0x25dfdbff, {0x13}, [@typed={0x8, 0x38, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x18, 0x67, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private0}]}]}, 0x34}}, 0x4000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket(0x11, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, @private1, @loopback={0x0, 0xffff888101827518}, 0x7, 0x7, 0xffffffff}})
r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000440)=0x9400, 0x7ffff000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x0)

817.831811ms ago: executing program 3 (id=2624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
unshare(0x2000200)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'caif0\x00', <r4=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @remote}, &(0x7f0000000380)=0xc) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={<r5=>0x0, @initdev, @remote}, &(0x7f0000000380)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'wg0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000500)={0x3c4, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x46}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4880}, 0x10)
unshare(0x10000e00) (async)
unshare(0x10000e00)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x40, 0x0) (async)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x40, 0x0)
ioctl$PPPIOCSMRRU(r9, 0x4004743b, &(0x7f00000009c0)=0xd2)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) (async)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa4, r11, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf8e}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1555e}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa4, r11, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf8e}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1555e}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000005)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000bc0))
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x242, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0x1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0x1, <r13=>0xffffffffffffffff}, 0x4)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)='%pS    \x00'}, 0x20)
r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x0, 0x10, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0xba, &(0x7f0000000d40)=""/186, 0x40f00, 0x60, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[r13, r14, r15, 0x1, r0, r16], 0x0, 0x10, 0x4ddf6bc1}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x0, 0x10, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0xba, &(0x7f0000000d40)=""/186, 0x40f00, 0x60, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[r13, r14, r15, 0x1, r0, r16], 0x0, 0x10, 0x4ddf6bc1}, 0x94)
r17 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r17, 0x6b, 0x3, &(0x7f0000001140)=0x5, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x20, &(0x7f00000014c0)={&(0x7f0000001300)=""/160, 0xa0, 0x0, &(0x7f00000013c0)=""/251, 0xfb}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x20, &(0x7f00000014c0)={&(0x7f0000001300)=""/160, 0xa0, <r18=>0x0, &(0x7f00000013c0)=""/251, 0xfb}}, 0x10)
r19 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0x16, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8a0000}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x4, 0x9, 0x0, 0xae9, 0xa5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001600)='GPL\x00', 0xc6ae, 0x70, &(0x7f0000001640)=""/112, 0x41100, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001700)={0x1, 0xe, 0x7f, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001740)=[r16], &(0x7f0000001780)=[{0x2, 0x2, 0x6, 0x3}], 0x10, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x4, 0xa, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000001200)='GPL\x00', 0x7, 0x2e, &(0x7f0000001240)=""/46, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x7, 0x10, 0x401}, 0x10, r18, r19, 0x5, &(0x7f0000001880)=[r14, r13, r12], &(0x7f00000018c0)=[{0x1, 0x4, 0xe, 0x7}, {0x4, 0x5, 0x8, 0x5}, {0x2, 0x1, 0xc, 0x1}, {0x4, 0x2, 0xf, 0x2}, {0x1, 0x5, 0xb}], 0x10, 0xdaf}, 0x94)

803.188768ms ago: executing program 2 (id=2625):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000ac0)="f4000900862b3325fe80000000000000dc8b850f2323fcb11e7155c7b5d0f3a3508466cc00007aec2a9c", 0x2a}], 0x1}, 0x4008000) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg0\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02008000000000000000000000000000000000001fc2781b5167ec14232ab11d823493f870fde53287ffb42ed555677f0a6130063c4627dc0ceecdc065cbb7a28b9b77b085997dc7e4aef7e3325861680e7de4fbf6d9c871a56597c7e8aa51da12083dac9970414942af2f50de009d8bb6426ce4826892063a87ea829207b2e953d501f9bc1b76affc8bad42ed6cae73f688da46c057ef5d177afd2f7ea824ba918064cbf36a68bb0926dd04e20ccd4a11abf5dfa7336185a078db439f80da48b3f1b8a9964185739b04f95c7d35c4534d3de01ccb87", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x22, 0x800, 0x2)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000036c0)=@delchain={0x1754, 0x65, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xb, 0xc}, {0x10, 0x7}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8}]}}, @f_rsvp6={{0xa}, {0x4}}, @f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_POLICE={0x4c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x3, 0x7fffffff}, {0x1000, 0x8, 0xcd}, 0x5e, 0x0, 0xb}}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x6}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}, @f_rsvp6={{0xa}, {0x89c, 0x2, [@TCA_RSVP_POLICE={0x878, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x0, 0x4, 0x0, 0x0, {0x7, 0x2, 0x1, 0x5, 0x6, 0xc}, {0x7, 0x1, 0xc, 0xa, 0x8, 0x4}, 0x4, 0x7f, 0xffff60d4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x7ff, 0x0, 0x4, 0x8001, 0x80, 0xfffffff9, 0xc, 0x8, 0x7, 0xf, 0x6, 0x2, 0x5, 0x9, 0x5, 0x400, 0xfffffffe, 0x4, 0xa, 0x2, 0x7ff, 0xa47, 0x7, 0x100, 0x4, 0x10, 0x92, 0x7, 0xdc0, 0x7, 0x0, 0x1, 0x6, 0x4, 0x6, 0x7, 0xae42, 0x0, 0x1000, 0x7a, 0x4525, 0xbc, 0x8, 0x18, 0x8001, 0x800, 0x2, 0x4, 0x40, 0x0, 0x8, 0x3, 0x0, 0x4, 0xc27, 0x1, 0x7, 0x8e, 0x9, 0xc, 0x786f5729, 0x323c, 0x8, 0x0, 0x8, 0x9, 0x7, 0xc8, 0x0, 0x0, 0x101, 0x6, 0x9, 0x8, 0x8, 0x9, 0xffff, 0x80, 0x4, 0x0, 0x8, 0x3, 0x7f, 0x40, 0x2d01, 0x9, 0x6, 0xc, 0xc, 0x7, 0xc000, 0x3, 0x2, 0x9, 0x2, 0x8a, 0x8, 0x14, 0x36, 0xc16c, 0x5, 0x200, 0x1000, 0x4, 0x5, 0x2, 0x7, 0x2, 0x5b39, 0xfffffffb, 0x3, 0x2e91, 0x8, 0xffffffc0, 0xbb, 0x4, 0x1, 0x6, 0x4, 0x1, 0x6, 0x8, 0x7, 0x4, 0x344, 0x40a7, 0xfffffff5, 0x2, 0x5, 0xba4a, 0xffffffff, 0x5d9, 0x0, 0x3, 0x6, 0x6, 0x965, 0x3, 0xe, 0xb, 0x400, 0x4, 0x0, 0xc, 0xb, 0x7, 0x3, 0x1096, 0x200, 0xbf0, 0x1, 0xdae3, 0x3ff, 0x5467, 0x2, 0xfffffff9, 0x5, 0x5, 0xffffffff, 0x6, 0x1, 0x4, 0xb, 0x10001, 0x289, 0xfffffffe, 0xfffffff9, 0x2, 0x800, 0x2, 0x3, 0x7, 0x5, 0xcd9, 0x6, 0x72bccf29, 0x8, 0xffff, 0x7fffffff, 0x5, 0x401, 0x8, 0x9, 0x1729, 0x9, 0x5, 0x4, 0x9, 0xac, 0x2, 0x7, 0x2, 0xbab, 0x5, 0xc8, 0x4, 0x1, 0x80000000, 0x0, 0x2, 0x8, 0x4, 0xff05, 0x3, 0x7, 0x3, 0x3, 0x40000, 0x8, 0x6, 0x0, 0x3, 0x2, 0x10001, 0xffff, 0x6, 0xfffffffa, 0x7fffffff, 0x4, 0x5, 0xf, 0x1, 0x6, 0x6, 0x3ff, 0x3, 0xfffffffc, 0x8000, 0x103, 0x1b6c8f2e, 0x3, 0x357c, 0x6, 0xc, 0xffffa292, 0x7, 0x40, 0x2460, 0x6, 0xe, 0x8001, 0xc, 0x7, 0xffff32d1, 0x5, 0xffff, 0x7ff, 0xd0, 0x9, 0x918, 0x3, 0xb833, 0x401, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0xffffffff, 0x80000000, 0x4, 0x1, 0x11b2, 0x3, 0x2, 0x7fffffff, 0x401, 0x3, 0xd, 0x12000, 0x86, 0x2, 0x9, 0x5, 0x7fffffff, 0x3, 0xffff, 0x3, 0x7, 0x6, 0x4, 0x6, 0xfffffffb, 0xb, 0x702, 0x6, 0x2, 0x1000, 0xd88a, 0x8, 0x8000, 0xf777, 0x3, 0xa, 0x1, 0x358, 0xb66, 0x4, 0x9, 0xc09, 0xb3, 0x10000, 0x8, 0x401, 0x4, 0xb37, 0x6, 0x277e, 0x7ff, 0xffffffff, 0x2e08, 0x400, 0x7, 0x1, 0x10000, 0x0, 0x4, 0x0, 0x3, 0x3, 0xff, 0x8, 0x2, 0x1, 0xe, 0x8, 0x0, 0x1, 0x1, 0xc83f, 0x7fff, 0xfffffffb, 0x0, 0x3, 0x81, 0xfffffff9, 0x5, 0x5f06af42, 0x4f5f, 0x7fff, 0x1d, 0x8, 0x0, 0x2, 0x2, 0x9, 0x8, 0xd, 0xfff, 0x1ff, 0x7, 0x29, 0x1, 0x9, 0x4, 0x5, 0x0, 0x5, 0x9a, 0x1, 0xd232, 0xfc7f, 0x401, 0x5, 0x0, 0x5, 0x7ff, 0x5, 0x8, 0x8, 0xdd4, 0x69, 0x0, 0x1ff, 0x2, 0x3, 0x7, 0x4, 0x3, 0xe, 0x6, 0x2, 0x1, 0xffffffff, 0x4, 0x2, 0x3, 0x400, 0xfd, 0x2, 0x7, 0xffffffff, 0x10000, 0xffffff18, 0x64, 0x8, 0x2, 0x3, 0x2, 0x1, 0x7, 0x555, 0x8001, 0x401, 0x9, 0x8, 0x4, 0xffffffff, 0x1000, 0x4, 0x8, 0xc, 0xffff0000, 0x1, 0x0, 0x7, 0x1, 0x80000000, 0xfff, 0x9, 0x6, 0x8, 0xaa9, 0x0, 0x2, 0x9, 0xc, 0xb3, 0x3cea, 0x9, 0x2, 0x4, 0xffffffff, 0x284, 0x9, 0x0, 0x4, 0x100, 0x0, 0x1f, 0x8, 0x9030, 0x0, 0x100, 0x7, 0x0, 0x22a, 0x73, 0x8000, 0x2, 0x80000001, 0x5, 0xab3, 0x7ff, 0x4, 0x1, 0x0, 0x4, 0x2be8, 0x471, 0x0, 0x35029e08, 0x54bd, 0x1, 0x6, 0x8, 0x5, 0xfffff800, 0xa, 0x9, 0xcba8, 0xfff, 0x100, 0x5, 0x6, 0x4, 0xfffffbff, 0x7f, 0x1ff, 0x80, 0x45ba, 0x1000, 0x6, 0x3, 0x5, 0x3f77, 0x8001, 0x3c, 0xfff, 0x0, 0x6, 0x4, 0x6, 0x6, 0x0, 0x9, 0x1, 0x3, 0x2, 0x3fc0, 0xb, 0xb36, 0xeaa8, 0x2e148000, 0xd69, 0x3, 0x6, 0x8, 0x2, 0x9, 0x6, 0x789262fb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x121f, 0x7}, {0x1, 0x5, 0xfffffffe}, 0x84, 0x40, 0x10}}]}}, @f_tcindex={{0xc}, {0x4f8, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x3ff}, @TCA_TCINDEX_ACT={0x4e4, 0x7, [@m_simple={0x12c, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x8, 0x4, 0x7, 0xe}}]}, {0xe7, 0x6, "e29dded32232a3984b5a8f4fa39f48de8d0c600b5cdde565996c73f3b84f51997350105bae74c738c58633c1635d76c52f9689adb3135b91a6e5f9e45ef01c70a8bceb33f667c929ddbd3ec6f87abe72109227824a5689581dc7b3403ddf937e86338043c0e3171b91e2d5532895fac81bead6516671e29906990f61d065b1938cba941538e0b6f26310bb89e1d8a1f3599a93ba40755161a428b92cd1e6eba0df3424a775188df491480b6d2546a16d7fd095f6e0ec6dc476778252188c34d2127f376128d6883f6990124293ae6bb17bc3edcd110dd90a4ff2b46376dbafeaef9243"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x124, 0x18, 0x0, 0x0, {{0xf}, {0x4}, {0xf3, 0x6, "a49ef9795a56d453fb4108fe946303b1e0d7b7717f7e1e964acce6ce4bedfa5ae5b5a741c611c87af4c8d58bf5d2f18ac0725c8f274889ad6d4c7e9c793433466916729732a9e01b00f4b4a6bb3bd5ac805f47bf8a4363bbd3d562e4de6f8f3170d08118c60a841ac658f37595f07d762f3e1061ab5d3e0723c8acc1a386007538f125bafe356d4cb7dc3924f91ff94688005436000a1d39812bb4bde05dd7f2a164ade97f2293189035170cada37752417506113c40955d43a709e22a2edbd33658c2a6a159daa0f5df6904836506f0dd50af8afc160fbdecdb6b2798070768e6f4dd97462d68e66a5b6d0a4074a1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xe0, 0xb, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x30, 0x6, {0x4, 'mangle\x00', 0x5, 0x9, "d5960e79a85b"}}, @TCA_IPT_TARG={0x4f, 0x6, {0x7, 'mangle\x00', 0x2, 0x1, "78744d504a094492d21b2b0ebf2828e84e60248706821812cfe2fcdf714bd800d4e4e41584"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffff3b}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x17, 0x6, "024bfca3c729782f044d7cbba0ccfb9d1c3c14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x4a5a2f02531b1a3}}}}, @m_ctinfo={0x14c, 0x18, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5691}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9d3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x26}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7, 0x10000000, 0x7, 0x3}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}]}, {0xc7, 0x6, "6eb76bacec3261aaf6e266d7f14feb7fff9aada115fab99654f0cd723eb3d62918bd1e1871355b388c71a4e03397b3422254e7bdc72a4ed4643ac9fb2ad296f583fcb2a808db84442d2f4a8dad11855ed2a9ccdb1dac438c377e420ddd9b1062ad2e98bc9580a1585711c0323b629ab42d9484f8dc73b770952eaad341831afb1d1e2c75a7a01b03e8401636c71e2c033cf136bdf99cbf8b0434020af5b21e28defe8df1ebffc14ea18bbe7f4f4f8076ff49a3170c07a09bb46c4f1ee297218c8d5f31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5b32}]}, {0x27, 0x6, "42d7a9447c002ee39d39620efe1bbfb00f14d3ff66ce8d77ffaab7e37ced5630726694"}, {0xc}, {0xc, 0x8, {0x4}}}}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0xb}}]}}, @f_tcindex={{0xc}, {0x89c, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x2, 0xfff2}}, @TCA_TCINDEX_POLICE={0x868, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1e0}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x5, 0x400, 0x1ff, 0x9, 0x9, 0x3, 0x7, 0x3, 0x3, 0x7, 0x2, 0xf9, 0x9, 0xfffffffa, 0x7, 0x400, 0x824, 0x8, 0x1, 0xca00, 0x7, 0x4, 0x6, 0xfffffff8, 0x4, 0xffffffff, 0xff, 0xc976, 0x3, 0x3, 0x931, 0xfffffffc, 0x5, 0x5, 0x6, 0x6, 0x8, 0xfffffff9, 0x0, 0x7, 0x6, 0x70000000, 0x6, 0x7, 0xffff, 0xfffffffe, 0x1, 0x8, 0x33d, 0x40, 0x1, 0x800, 0x8, 0x95dc, 0xd, 0x81, 0x9f50, 0x0, 0x8, 0x101, 0xfffffff7, 0x8, 0x0, 0xd4, 0x5, 0x7, 0xfffffffb, 0x2, 0x3, 0x6, 0x5, 0x7, 0x1, 0x4, 0x226, 0x7, 0x3, 0xa, 0x2, 0x5, 0x9, 0x8, 0x8, 0x302a, 0xfff, 0xc, 0xff, 0x1, 0x2, 0x101, 0x0, 0x92c, 0x800, 0x7fffffff, 0x0, 0x1, 0x8001, 0x5, 0x0, 0x1, 0xbc, 0xfff, 0x2, 0x5, 0xffffffff, 0x8, 0x4, 0x7, 0xfffffffb, 0x1, 0x24000, 0xffffffff, 0x2, 0x6, 0x10, 0xf, 0x3ae, 0x81, 0xd, 0xfffffffd, 0xd5, 0x0, 0x4, 0x6, 0xda, 0xd, 0x8, 0x2, 0x7, 0xfffffff9, 0x93d, 0x1, 0x100, 0xeee, 0x4, 0x1ff, 0xf9b, 0xf07f, 0x1, 0xff, 0x10000, 0xe19, 0xe, 0x6, 0x621, 0x2426, 0x4, 0x3, 0x2, 0x10001, 0x3, 0x8, 0xffffffff, 0x1, 0x9, 0xea2, 0x3, 0x1, 0x2, 0xfffffffc, 0x4, 0xe75, 0x11, 0x7, 0x5, 0xf, 0xe5, 0x0, 0x4, 0x9, 0x2, 0x400, 0x0, 0x2, 0x1ff, 0x800, 0x3, 0x400, 0x8, 0x604a, 0x49b, 0x3cd4, 0x8, 0x0, 0x8, 0x5, 0x3ff, 0x0, 0xf, 0x5, 0xfd, 0x2, 0x5, 0x200000, 0x5, 0x1, 0x0, 0x4, 0xffff, 0x2, 0x0, 0x5, 0xa, 0xe0, 0x1, 0x80, 0x6, 0x8, 0x4, 0x9, 0x7, 0x800, 0x0, 0x2, 0x2, 0x7fffffff, 0x400, 0xc9e5, 0x48c, 0xffff, 0x1, 0x8, 0x0, 0x7, 0x5, 0x56e, 0x4, 0xdf55, 0xc3, 0x2be7, 0x3, 0x0, 0x1, 0x2, 0x7e, 0x8000, 0x1, 0x9, 0xe, 0xffff, 0xffffff1e, 0x7fffffff, 0x4, 0x3a, 0x6, 0x0, 0xb, 0x6, 0x687, 0x4f8d, 0x81, 0xb02, 0x10001, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x7ff, 0x10, 0x517, {0x4, 0x0, 0xd2c2, 0x81, 0xd}, {0x6b, 0x0, 0xdc3, 0x4, 0x3}, 0x5729, 0x80, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x7d47, 0x80000001, 0x7, 0x6, 0x7, 0x3, 0x10, 0x200, 0x3, 0x4d, 0xf, 0x0, 0xffff, 0x460000, 0x0, 0x2, 0xfffffff8, 0xb460, 0x5, 0x9, 0x3, 0xc, 0x81, 0x26f, 0xa, 0x7d, 0x4, 0x200, 0xf4, 0x4, 0x7d3, 0x4, 0x1000, 0x3, 0x5, 0x6e649e34, 0xffff, 0x7, 0xd, 0x7, 0xecd, 0x6, 0x10001, 0xb, 0x7, 0x0, 0x8, 0x1, 0x2, 0x8, 0x4c, 0x3, 0xffffff81, 0x8, 0x1, 0x8000000, 0x7a, 0x5, 0x34f, 0x4381, 0x40, 0x6, 0x9, 0x7, 0x39c, 0x8, 0x80000001, 0x480000, 0x2, 0x8, 0x734, 0x2, 0x1, 0xd, 0x6, 0x7, 0x69dd, 0x7, 0x2, 0x0, 0x2, 0x5, 0x8, 0x58804dce, 0x2e0, 0x7, 0x4, 0x0, 0xfffff207, 0xb, 0x7fff, 0x0, 0x7, 0x0, 0x40, 0x3, 0x3, 0x2, 0xffff3c4d, 0x80, 0x5, 0x5, 0x9, 0x8, 0x5, 0x3, 0x5, 0x8, 0x6, 0x4, 0x5, 0x101, 0x9, 0x6, 0xed93, 0x7, 0x3ff, 0x1ff, 0x0, 0x7, 0x1, 0x8, 0x3c2, 0x1, 0x6d46, 0x2, 0x0, 0x800, 0x10001, 0xce6c, 0xffff0001, 0x8, 0x4e5932ea, 0x1, 0x9319, 0xfffffffe, 0x3, 0x0, 0x20000, 0x5, 0x1, 0x101, 0x8, 0x30, 0x7, 0x196, 0x3, 0xffff, 0xf, 0xedc, 0xb9, 0x4d, 0x8, 0x0, 0x9, 0x130, 0xc5, 0x1000, 0x8ce6, 0x2, 0xb3fa, 0x8, 0xc70, 0xf, 0xfffffff7, 0x9, 0x8, 0x6, 0x2, 0x7, 0x9, 0x0, 0x1ff, 0x1, 0x10001, 0x4c, 0x3, 0x1, 0x8, 0x3, 0x0, 0xe057, 0x6, 0x207, 0x7, 0x0, 0x3, 0x1, 0x9, 0x5526657a, 0xffff, 0x1, 0x1, 0x1000, 0x6, 0x1, 0x7, 0x7, 0x824, 0x401, 0x1ff, 0x122f, 0x9, 0x8, 0x2, 0x5, 0x3, 0x1, 0x9523, 0x7, 0x3, 0x10000, 0x4, 0x2101, 0xc, 0xa0, 0x8, 0x2d2d1b, 0x3, 0x10001, 0xf962, 0x3, 0x9, 0x694, 0x68a, 0x7, 0x1, 0x5d9a, 0x7ff, 0x8, 0x4, 0xc, 0x6, 0x9, 0x3, 0x8, 0x5, 0x3ff, 0x10000, 0x4, 0x3, 0x4, 0xd, 0x4, 0x0, 0x4, 0x3, 0x0, 0x9, 0x7, 0x8, 0x5, 0xfffffffc, 0x400, 0x4]}]}, @TCA_TCINDEX_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x6, 0xb}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff0, 0x4}}]}}]}, 0x1754}, 0x1, 0x0, 0x0, 0xc000}, 0x20000090) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 64)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) (async)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000)

719.312034ms ago: executing program 1 (id=2626):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000009c0108804c0000800400098024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e210000000700000000000000000000000000000001d20600004c01008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b000007"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000240)=0x8, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)

656.086854ms ago: executing program 4 (id=2627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251000000008000600", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="2d3f807407822359eb5c1aab374b04359e1ed3319c76265ea961"], 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00052f00fc000000000000000000000000000000ff"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={0x20, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x20}}, 0xc000)
pipe(0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x1d, 0x6, 0x8)
sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x4810)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

641.053025ms ago: executing program 3 (id=2628):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001340)="b96c1b2fa500f300d72782244db6", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000140)="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", 0x11d)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000100000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99f2}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x18, &(0x7f0000000900)=@raw=[@call={0x85, 0x0, 0x0, 0xbe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0xfffffffffffffffc}, @generic={0x5, 0x1, 0x0, 0x2, 0x66}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000280)='syzkaller\x00', 0x66a2, 0x1000, &(0x7f0000002380)=""/4096, 0x41100, 0x18, '\x00', 0x0, @sock_ops=0x3, r2, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xa, 0x1000, 0x8000}, 0x10, r5, r1, 0x3, 0x0, &(0x7f0000000500)=[{0x4, 0x5, 0xd, 0x3}, {0x3, 0x3, 0x2, 0x7}, {0x5, 0x1, 0xb, 0x6}], 0x10, 0x7}, 0x94)
r6 = socket(0x27, 0x3, 0x9)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000040))

581.186441ms ago: executing program 1 (id=2629):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r3, &(0x7f0000000100), 0xa, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdb2504000000140001800800050003000000060008"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x28, r7, 0x401, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x87}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r6)

448.313896ms ago: executing program 3 (id=2630):
socket$unix(0x1, 0x1, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
socket$kcm(0x11, 0x3, 0x0) (async)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x2, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x89, 0x3, 0x20000000, 0x7, 0x8}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000850)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fecbd680b650", 0x8}], 0x2}, 0x5)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) (async)
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0)

446.245192ms ago: executing program 4 (id=2631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll(&(0x7f00000005c0)=[{r0, 0xb0e1}], 0x1, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000003fd97ed604ca125a122000dd0000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
socketpair(0x27, 0x4, 0x8, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x48, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r8=>0x0})
setsockopt$sock_void(r7, 0x1, 0x3f, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x1, 0x4, 0x6, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7d666f03}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x306}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008080)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000002100fedbdf253900000008000300", @ANYRES32=r8, @ANYBLOB="10005a800c000480050009"], 0x2c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4004)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x25}, @void, @val={0xc, 0x99, {0x5, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]})
write$ppp(r11, &(0x7f0000000300)="5af9", 0x2)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r2)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x70, r14, 0x1, 0x70bd25, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0x70}}, 0x41)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xa0, r13, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

315.93317ms ago: executing program 1 (id=2632):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x6, &(0x7f0000000040)=@raw=[@exit, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @generic={0x7, 0x9, 0xa, 0x350f, 0x100}], &(0x7f0000000080)='GPL\x00', 0x2, 0xff, &(0x7f00000000c0)=""/255, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x0, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x1, 0xa, 0xc}, {0x0, 0x5, 0xb, 0x8}, {0x1, 0x1, 0x2, 0x5}, {0x5, 0x1, 0x9, 0xc}], 0x10, 0x28fb}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r2=>0x0}) (async)
r3 = gettid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r2, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f00000004c0)=[0x4, 0x3], 0xef8, 0x0, 0x0, r3}}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (rerun: 64)
sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000f45b", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c005100736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, &(0x7f0000000180)) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x1}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 64)
close(0x3) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0xc}, 0x50) (async)
r8 = socket$kcm(0x2b, 0x1, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r11, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a0001002cbd70000000000002000000000000000000000006001d00fffe000008001e80"], 0x2c}}, 0x0) (async)
sendmsg$inet(r8, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) (async, rerun: 64)
ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, &(0x7f0000000000)=0x6) (rerun: 64)
setsockopt$sock_attach_bpf(r8, 0x6, 0x19, &(0x7f0000000200)=r8, 0x21) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

174.332407ms ago: executing program 3 (id=2633):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x24}}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x44}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0)
r11 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000200)={'wlan1\x00'})
bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)

159.947883ms ago: executing program 1 (id=2634):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x1]}})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x20000000, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}}, 0x20000844)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r0)
r5 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d40)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x5c, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {0x8, 0xfff1}, {0xd, 0x1}}}, 0x24}}, 0x44080)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x5c, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x58, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf8, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x205, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffe, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@bridge_getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x21104}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}]}, 0x3c}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg(r10, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="10060000000000000000000051000000"], 0x10}}], 0x1, 0x20000081)
recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/254, 0xfe}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000400)=""/149, 0x95}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000580)=""/76, 0x4c}], 0x9, &(0x7f0000000940)=""/60, 0x3c}, 0x10161)
close(r8)

53.966166ms ago: executing program 1 (id=2635):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000061108c0000000000630a00ff0000000038916458568d1e952fa696a27651f039e3abee1d6831793fd534aeb6eb1630d351d5bfca1311ca7404"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x23d, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0xffffffffffffff4d}, 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r1}, 0x8) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000c00)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f00000008c0)="5c4d445d8ae29bc1d5b8ad6d8a98459487277ef223bd736900000000baf60280d3d967f1484ac995a4ef9a1a109ea94c36a001ee049132902cfbdaec64e27bda184c5e4c46685d9bb62996e1691b61c4094a66eb6ec09611261b34c2432c0618cc", 0x0}, 0x50) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'gre0\x00', <r3=>0x0, 0x8, 0x20, 0xffff, 0x5, {{0x14, 0x4, 0x2, 0x2e, 0x50, 0x66, 0x0, 0xe, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x96, 0x0, 0x5, [0x8, 0x4444]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x2e, [@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0xd, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x5, 0xffff, 0x100, 0x1, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r10, 0x0, 0x20000000}, 0x18)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) (async)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
syz_emit_ethernet(0x86, &(0x7f0000000c80)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2e08004500007800000000004a0ac8ef74606518119078000000000000000000001b59006490780200000003000000000000000002000000753904030405a024f0dd00000000000000000000000000000000009384bbeb3018ad591b661fe808b21bb128d777694c875dfb1be5d2a07a62022a1564a329d3a14a1d8c69aff6db4dd04fd305718db7cabd7565176b712ff5a4836c68aebe4925b73c7e79a877378b3b5a558558c67b12386f3ef0966583060a1791ff2ecca05379036399fe1515b70e7881b321d536f0b5a44456690eecb23c6cadc678d89e1a1915a4d42570dc0cdedd3dd4d65318dd"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x19, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x4, 0x1, 0x5, 0x9, 0x2, 0x50, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0x2d, &(0x7f0000000380)=""/45, 0x1f00, 0x9, '\x00', r3, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x5, 0x4}, 0x10, 0xffffffffffffffff, r0, 0xa, &(0x7f0000000600)=[r4, r8, r9], &(0x7f0000000640)=[{0x2, 0x3, 0x3, 0xb}, {0x2, 0x4, 0xd, 0x5}, {0x0, 0x1, 0x2}, {0x3, 0x4, 0x2, 0x8}, {0x2, 0x4, 0x7, 0x3}, {0x3, 0x4, 0xf, 0xc}, {0x1, 0x3, 0x9}, {0x0, 0x5, 0xc, 0x8}, {0x3, 0x3, 0x2, 0x6}, {0x1, 0x1, 0x4, 0x3}], 0x10, 0xfff}, 0x94)

51.757966ms ago: executing program 4 (id=2636):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000fc62013100000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00c166bc207890f87000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000980)=ANY=[@ANYRES64=r2, @ANYBLOB, @ANYRES16, @ANYBLOB="34670f4906c8f6a8c3878f21ff8918255b3381335647a679142bb011f6022bb3e884b8d434ef2d7ac4bf4c9aaf33744956c0bc54d0efed439f9574327231bb2ea3bce9cbc5bd7406518a227bc1ec7831fdb6e6bbb33af94d20cf4cd55479360e4960c4600c4414a0f57582642ad25a0f34079d4258c75c25a5c3469f07536c302a72dec0b78e3436583b490f36406128481fa4", @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='xprtrdma_cb_setup\x00', r3, 0x0, 0x8009}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYRESDEC, @ANYRESOCT=r1, @ANYRESHEX=r1], 0x1c}}, 0x40000)
sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02"], 0xe0}], 0x1}, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
recvmmsg(r7, &(0x7f0000000880), 0x0, 0x10120, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r9], 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x14, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESHEX=r9], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10)
r11 = socket$inet(0x10, 0x3, 0xfffdfffe)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)

0s ago: executing program 0 (id=2637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x434, 0x3f4, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x32, [0x3, 0x5, 0x6, 0xf4, 0x2, 0x5, 0x4, 0x8, 0x0, 0xbc, 0x61, 0x7, 0x1, 0xd, 0x7, 0x6, 0x3, 0x9, 0x4, 0x2, 0x9, 0x80000000, 0x5, 0x6, 0xff, 0xc0, 0x5, 0xd045, 0x219, 0x6, 0x2c, 0x8, 0x3, 0x5, 0xf19, 0x0, 0x9, 0xb, 0x0, 0x9, 0x2, 0x6, 0x2, 0x0, 0x335, 0x3, 0x5000, 0x8, 0x5, 0x0, 0x9, 0x7, 0x3, 0xfffffe00, 0x808, 0x7ff, 0x7, 0x4, 0x6, 0x2, 0x6, 0x4, 0xe06c0000, 0xec47], [0x6, 0x9, 0x3, 0x1, 0x9, 0x5, 0x1, 0xb, 0x7, 0x0, 0x3, 0x2829, 0x0, 0x1, 0x4f, 0x10000, 0xe, 0x5, 0xfffffffd, 0xcf7, 0xf0b2, 0x7ff, 0x101, 0xdb, 0x6, 0x1, 0xa, 0x4, 0xb7, 0x2, 0x10001, 0xd, 0x1, 0x0, 0x3, 0x6, 0x6, 0x52, 0x1, 0x2, 0x6, 0xfffffff9, 0xe, 0x2, 0x8, 0x7f, 0x4, 0x4, 0x0, 0x1000, 0x2, 0x101, 0x80000001, 0xff, 0x3, 0x6, 0x1, 0xfffffbff, 0x7, 0x4, 0xe44b, 0x5, 0x0, 0x8], [0x9, 0x9, 0x5, 0xffff3454, 0x4, 0x9, 0x7, 0xfffffff9, 0x7a, 0x7f, 0x4, 0x501a, 0x7, 0x9, 0x5, 0x4, 0x3, 0xa1, 0x0, 0x6, 0x6, 0x80e, 0x7, 0x8, 0xd, 0x8, 0x7f, 0xc, 0x1, 0xcf18, 0x5, 0x400, 0x2, 0x6, 0x93f, 0x3, 0x8, 0xffffffff, 0x4, 0x195b0000, 0x5, 0x5, 0x5, 0x4, 0x3, 0x4, 0xcd, 0x6, 0xde, 0x0, 0x0, 0x70c7662c, 0x4, 0x40, 0x6, 0x8c01, 0x2, 0x8, 0x8, 0xa79, 0x3, 0x1, 0x200, 0x3ff], [0x9, 0x5, 0x6, 0x9, 0x5, 0xc62, 0x0, 0x7, 0x3, 0x8, 0x7, 0x5, 0xfffffff8, 0x3, 0x0, 0x5, 0x1, 0xefcd, 0x6, 0x9, 0xfffffff9, 0x95, 0xfec, 0x1e, 0x9, 0x28, 0xfffff096, 0xffff, 0x8, 0x80000000, 0x5, 0xcc53ab8, 0x3, 0x60dc72c8, 0x9, 0x6, 0x8, 0xeca, 0x5, 0x6, 0xd4, 0x3, 0x5, 0xfff, 0x2, 0x6, 0x7, 0x9, 0x8, 0x4, 0x10000, 0xffff0001, 0x2, 0xfff, 0x8, 0x6, 0x2, 0x5, 0x2, 0x3, 0x4, 0xff, 0x2, 0xf], 0x14, ['\x00', '^.\\*\x00', '\x00', 'v-$#-/&&*^\x00', '/\x00']}, ["", "", "", "", ""]}, 0x434}}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

kernel console output (not intermixed with test programs):

family 0 port 20000 - 0
[  313.607542][T10213] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  313.619653][T10213] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  313.651261][T10213] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  313.721748][T11109] vxcan2: entered allmulticast mode
[  313.876544][T11105] lo speed is unknown, defaulting to 1000
[  314.341117][T11105] wg1 speed is unknown, defaulting to 1000
[  314.385989][T11123] team0: Caught tx_queue_len zero misconfig
[  314.605589][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'.
[  315.090126][T11142] __nla_validate_parse: 1 callbacks suppressed
[  315.090147][T11142] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1347'.
[  315.122472][T11146] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1348'.
[  315.263865][T11150] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1349'.
[  315.333589][T11153] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.359897][T11153] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  315.400451][T11153] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  315.453146][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'.
[  315.469001][T11158] netlink: 'syz.4.1352': attribute type 2 has an invalid length.
[  315.838788][T11178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'.
[  315.851107][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'.
[  315.860559][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'.
[  315.939521][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'.
[  315.960877][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'.
[  316.064485][T11192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1360'.
[  316.296484][T11202] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.306150][T11202] 8021q: adding VLAN 0 to HW filter on device team0
[  316.320490][T11202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  316.386292][T11206] team0: Port device bond0 removed
[  316.410890][T11206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.439022][T11206] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[  316.479909][T11206] bond0 (unregistering): Released all slaves
[  316.666840][T11222] macsec1: entered promiscuous mode
[  317.195451][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  317.205798][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.331712][T11261] netlink: 'syz.0.1380': attribute type 6 has an invalid length.
[  317.332726][T11259] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.340969][T11261] netlink: 'syz.0.1380': attribute type 5 has an invalid length.
[  317.405235][T11261] netlink: 'syz.0.1380': attribute type 4 has an invalid length.
[  317.415651][T11261] netlink: 'syz.0.1380': attribute type 4 has an invalid length.
[  317.673432][T11253] lo speed is unknown, defaulting to 1000
[  318.175164][T11253] wg1 speed is unknown, defaulting to 1000
[  318.319441][ T5147] Bluetooth: hci4: link tx timeout
[  318.326151][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  318.880873][T11318] IPVS: Error joining to the multicast group
[  319.395803][T11356] netlink: 'syz.1.1403': attribute type 2 has an invalid length.
[  319.779226][T11370] netlink: 'syz.2.1406': attribute type 1 has an invalid length.
[  320.113963][T11382] netlink: 'syz.2.1410': attribute type 3 has an invalid length.
[  320.381920][ T5147] Bluetooth: hci4: command 0x0405 tx timeout
[  320.641818][T11403] __nla_validate_parse: 14 callbacks suppressed
[  320.641840][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'.
[  320.968368][T11421] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1417'.
[  321.159736][T11430] netlink: 'syz.2.1420': attribute type 13 has an invalid length.
[  321.171638][T11430] netlink: 'syz.2.1420': attribute type 17 has an invalid length.
[  321.392386][T11430] 8021q: adding VLAN 0 to HW filter on device team0
[  321.699935][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'.
[  321.761945][T11430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  321.978403][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1427'.
[  322.179920][T11465] sctp: [Deprecated]: syz.4.1428 (pid 11465) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.179920][T11465] Use struct sctp_sack_info instead
[  322.315055][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'.
[  322.323303][T11442] lo speed is unknown, defaulting to 1000
[  322.418419][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'.
[  322.449722][T11471] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1430'.
[  322.695285][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'.
[  322.726264][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'.
[  322.773549][T11490] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1433'.
[  323.014294][T11463] lo speed is unknown, defaulting to 1000
[  323.028954][T11442] wg1 speed is unknown, defaulting to 1000
[  323.460879][T11463] wg1 speed is unknown, defaulting to 1000
[  323.625509][T11521] : renamed from veth0_to_bond (while UP)
[  324.400744][T11548] ipvlan0: entered promiscuous mode
[  324.416513][T11548] netlink: 'syz.0.1449': attribute type 22 has an invalid length.
[  324.539065][ T1152] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  324.562312][ T1152] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  324.590554][ T1152] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  324.608957][ T1152] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  324.766687][T11566] block nbd3: not configured, cannot reconfigure
[  325.019256][T11581] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  325.097137][T11591] openvswitch: netlink: IPv4 tun info is not correct
[  325.139120][T11591] tap0: tun_chr_ioctl cmd 1074025692
[  325.269984][T11593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  325.404620][T11610] netlink: 'syz.2.1467': attribute type 8 has an invalid length.
[  325.512913][T11617] syz.4.1470: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  325.516391][T11616] netlink: 'syz.0.1469': attribute type 16 has an invalid length.
[  325.575680][T11617] CPU: 1 UID: 0 PID: 11617 Comm: syz.4.1470 Not tainted syzkaller #0 PREEMPT(full) 
[  325.575709][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.575721][T11617] Call Trace:
[  325.575729][T11617]  <TASK>
[  325.575737][T11617]  dump_stack_lvl+0xe8/0x150
[  325.575769][T11617]  warn_alloc+0x214/0x310
[  325.575792][T11617]  ? stack_trace_save+0x9c/0xe0
[  325.575826][T11617]  ? __pfx_warn_alloc+0x10/0x10
[  325.575853][T11617]  ? kasan_save_track+0x4f/0x80
[  325.575872][T11617]  ? kasan_save_track+0x3e/0x80
[  325.575889][T11617]  ? __kasan_kmalloc+0x93/0xb0
[  325.575908][T11617]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  325.575926][T11617]  ? xskq_create+0x56/0x170
[  325.575953][T11617]  ? xsk_setsockopt+0x4dc/0x8d0
[  325.575976][T11617]  ? do_sock_setsockopt+0x17c/0x1b0
[  325.575996][T11617]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  325.576014][T11617]  ? do_syscall_64+0xec/0xf80
[  325.576037][T11617]  __vmalloc_node_range_noprof+0x134/0x16a0
[  325.576085][T11617]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  325.576112][T11617]  ? __kasan_kmalloc+0x93/0xb0
[  325.576137][T11617]  vmalloc_user_noprof+0xad/0xf0
[  325.576158][T11617]  ? xskq_create+0xbf/0x170
[  325.576186][T11617]  xskq_create+0xbf/0x170
[  325.576217][T11617]  xsk_init_queue+0xb0/0x110
[  325.576245][T11617]  xsk_setsockopt+0x4dc/0x8d0
[  325.576275][T11617]  ? __pfx_xsk_setsockopt+0x10/0x10
[  325.576302][T11617]  ? __pfx_aa_sk_perm+0x10/0x10
[  325.576330][T11617]  ? aa_sock_opt_perm+0xff/0x1a0
[  325.576358][T11617]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  325.576377][T11617]  ? __pfx_xsk_setsockopt+0x10/0x10
[  325.576406][T11617]  do_sock_setsockopt+0x17c/0x1b0
[  325.576432][T11617]  __x64_sys_setsockopt+0x13f/0x1b0
[  325.576461][T11617]  do_syscall_64+0xec/0xf80
[  325.576489][T11617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.576509][T11617]  ? trace_irq_disable+0x37/0x100
[  325.576534][T11617]  ? clear_bhb_loop+0x60/0xb0
[  325.576559][T11617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.576579][T11617] RIP: 0033:0x7f578cb8f749
[  325.576598][T11617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.576614][T11617] RSP: 002b:00007f578daef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  325.576636][T11617] RAX: ffffffffffffffda RBX: 00007f578cde5fa0 RCX: 00007f578cb8f749
[  325.576652][T11617] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  325.576664][T11617] RBP: 00007f578cc13f91 R08: 0000000000000004 R09: 0000000000000000
[  325.576678][T11617] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.576690][T11617] R13: 00007f578cde6038 R14: 00007f578cde5fa0 R15: 00007ffde06d6958
[  325.576721][T11617]  </TASK>
[  325.576742][T11617] Mem-Info:
[  325.868940][T11617] active_anon:5823 inactive_anon:0 isolated_anon:0
[  325.868940][T11617]  active_file:3543 inactive_file:39976 isolated_file:0
[  325.868940][T11617]  unevictable:2493 dirty:136 writeback:0
[  325.868940][T11617]  slab_reclaimable:12455 slab_unreclaimable:171971
[  325.868940][T11617]  mapped:29837 shmem:1883 pagetables:1024
[  325.868940][T11617]  sec_pagetables:0 bounce:0
[  325.868940][T11617]  kernel_misc_reclaimable:0
[  325.868940][T11617]  free:1242907 free_pcp:15336 free_cma:0
[  325.918222][T11617] Node 0 active_anon:24184kB inactive_anon:0kB active_file:14172kB inactive_file:159704kB unevictable:7128kB isolated(anon):0kB isolated(file):0kB mapped:119652kB dirty:648kB writeback:0kB shmem:6348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13568kB pagetables:4008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  326.049099][T11617] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  326.106779][T11617] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  326.169981][T11617] lowmem_reserve[]: 0 2499 2501 2501 2501
[  326.176681][T11643] __nla_validate_parse: 26 callbacks suppressed
[  326.176700][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'.
[  326.194497][T11617] Node 0 DMA32 free:1071660kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25684kB inactive_anon:0kB active_file:14172kB inactive_file:159704kB unevictable:1628kB writepending:648kB zspages:0kB present:3129332kB managed:2559512kB mlocked:92kB bounce:0kB free_pcp:42672kB local_pcp:18248kB free_cma:0kB
[  326.230055][T11617] lowmem_reserve[]: 0 0 1 1 1
[  326.235236][T11617] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  326.267626][T11617] lowmem_reserve[]: 0 0 0 0 0
[  326.283753][T11617] Node 1 Normal free:3891320kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16496kB local_pcp:10128kB free_cma:0kB
[  326.378831][T11617] lowmem_reserve[]: 0 0 0 0 0
[  326.383621][T11617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  326.403329][T11617] Node 0 DMA32: 2691*4kB (UE) 1339*8kB (U) 344*16kB (UME) 1094*32kB (UM) 148*64kB (UME) 191*128kB (UME) 142*256kB (UM) 68*512kB (UM) 53*1024kB (UME) 24*2048kB (UM) 195*4096kB (UM) = 1069220kB
[  326.464341][T11617] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  326.487618][T11617] Node 1 Normal: 190*4kB (UME) 46*8kB (UME) 41*16kB (UME) 128*32kB (UME) 36*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891320kB
[  326.523409][T11617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  326.542975][T11617] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  326.553666][T11617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  326.580176][T11617] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  326.608424][T11617] 45887 total pagecache pages
[  326.613180][T11617] 0 pages in swap cache
[  326.624222][T11617] Free swap  = 124996kB
[  326.630910][T11617] Total swap = 124996kB
[  326.635109][T11617] 2097051 pages RAM
[  326.639521][T11617] 0 pages HighMem/MovableOnly
[  326.644862][T11617] 425083 pages reserved
[  326.650918][T11617] 0 pages cma reserved
[  326.675677][T11643] netlink: 'syz.1.1476': attribute type 1 has an invalid length.
[  326.684054][T11643] netlink: 'syz.1.1476': attribute type 2 has an invalid length.
[  326.708886][T11655] syzkaller0: entered promiscuous mode
[  326.717920][T11655] syzkaller0: entered allmulticast mode
[  326.797894][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1478'.
[  326.857843][T11669] netlink: 'syz.2.1479': attribute type 1 has an invalid length.
[  326.924424][T11669] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.940327][T11675] bond0: (slave ip6gretap2): making interface the new active one
[  326.973587][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'.
[  326.997907][T11675] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[  327.035831][T11678] bridge_slave_1: left allmulticast mode
[  327.047838][T11678] bridge_slave_1: left promiscuous mode
[  327.053749][T11678] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.076697][T11683] netlink: 'syz.0.1484': attribute type 21 has an invalid length.
[  327.076872][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'.
[  327.129223][T11685] netlink: 'syz.0.1484': attribute type 21 has an invalid length.
[  327.161549][T11678] bridge_slave_0: left allmulticast mode
[  327.171302][T11678] bridge_slave_0: left promiscuous mode
[  327.233350][T11678] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.525797][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'.
[  327.617428][T11707] syzkaller0: entered promiscuous mode
[  327.622945][T11707] syzkaller0: entered allmulticast mode
[  327.732429][T11706] 8021q: adding VLAN 0 to HW filter on device bond5
[  327.835178][T11706] ip6gretap2: entered promiscuous mode
[  327.852668][T11706] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  327.877779][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1492'.
[  327.890862][T11706] bond5: (slave macvlan0): Enslaving as a backup interface with an up link
[  327.937447][T10214] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  327.937786][T11721] netlink: 'syz.3.1495': attribute type 10 has an invalid length.
[  328.027369][T11721] 8021q: adding VLAN 0 to HW filter on device team0
[  328.038870][T11721] bond0: (slave team0): Enslaving as an active interface with an up link
[  328.070134][T10214] bond5: (slave macvlan0): link status up again after 0 ms
[  328.091323][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  328.103761][T10214] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  328.155496][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'.
[  328.212948][T11732] : entered promiscuous mode
[  328.247137][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  328.358405][T11719] lo speed is unknown, defaulting to 1000
[  328.379780][T11738] syzkaller0: entered promiscuous mode
[  328.386277][T11738] syzkaller0: entered allmulticast mode
[  328.431704][T11738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.441190][T11737] tipc: Resetting bearer <eth:syzkaller0>
[  328.469699][T11737] tipc: Disabling bearer <eth:syzkaller0>
[  328.517876][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  328.624381][T11719] wg1 speed is unknown, defaulting to 1000
[  328.637461][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  328.745922][T11742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1502'.
[  328.938394][T11762] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1504'.
[  328.967896][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  329.020066][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  329.089320][ T6020] bond5: (slave macvlan0): failed to get link speed/duplex
[  329.229591][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  329.443177][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1509'.
[  329.733418][T11791] delete_channel: no stack
[  329.922594][T11813] xt_cgroup: path and classid specified
[  330.869328][T11861] macsec1: entered promiscuous mode
[  330.881346][T11863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.897398][T11866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.979887][T11863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.009775][T11868] FAULT_INJECTION: forcing a failure.
[  331.009775][T11868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.016199][T11863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.058049][T11868] CPU: 1 UID: 0 PID: 11868 Comm: syz.2.1535 Not tainted syzkaller #0 PREEMPT(full) 
[  331.058078][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  331.058090][T11868] Call Trace:
[  331.058098][T11868]  <TASK>
[  331.058106][T11868]  dump_stack_lvl+0xe8/0x150
[  331.058137][T11868]  should_fail_ex+0x414/0x560
[  331.058173][T11868]  _copy_to_user+0x31/0xb0
[  331.058196][T11868]  simple_read_from_buffer+0xe1/0x170
[  331.058221][T11868]  proc_fail_nth_read+0x1b3/0x220
[  331.058245][T11868]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  331.058269][T11868]  ? rw_verify_area+0x2a6/0x4d0
[  331.058287][T11868]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  331.058309][T11868]  vfs_read+0x200/0xa30
[  331.058327][T11868]  ? fdget_pos+0x247/0x320
[  331.058355][T11868]  ? __pfx___mutex_lock+0x10/0x10
[  331.058378][T11868]  ? __pfx_vfs_read+0x10/0x10
[  331.058398][T11868]  ? __fget_files+0x2a/0x420
[  331.058426][T11868]  ? __fget_files+0x3a0/0x420
[  331.058449][T11868]  ? __fget_files+0x2a/0x420
[  331.058481][T11868]  ksys_read+0x145/0x250
[  331.058502][T11868]  ? __pfx_ksys_read+0x10/0x10
[  331.058532][T11868]  do_syscall_64+0xec/0xf80
[  331.058552][T11868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.058570][T11868]  ? trace_irq_disable+0x37/0x100
[  331.058596][T11868]  ? clear_bhb_loop+0x60/0xb0
[  331.058620][T11868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.058638][T11868] RIP: 0033:0x7ff73498e15c
[  331.058656][T11868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  331.058674][T11868] RSP: 002b:00007ff7358df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  331.058694][T11868] RAX: ffffffffffffffda RBX: 00007ff734be5fa0 RCX: 00007ff73498e15c
[  331.058710][T11868] RDX: 000000000000000f RSI: 00007ff7358df0a0 RDI: 0000000000000005
[  331.058723][T11868] RBP: 00007ff7358df090 R08: 0000000000000000 R09: 0000000000000000
[  331.058735][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.058747][T11868] R13: 00007ff734be6038 R14: 00007ff734be5fa0 R15: 00007ffe3b183558
[  331.058779][T11868]  </TASK>
[  331.070827][T11863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.398439][T11866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.463551][T11880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.765974][T11897] __nla_validate_parse: 8 callbacks suppressed
[  331.765993][T11897] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1540'.
[  331.770570][T11896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.871602][T11894] sit0: entered promiscuous mode
[  331.874396][T11900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1543'.
[  331.887462][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'.
[  331.917240][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1542'.
[  332.025630][T11907] bond10: entered promiscuous mode
[  332.031598][T11907] bond10: entered allmulticast mode
[  332.040052][T11907] 8021q: adding VLAN 0 to HW filter on device bond10
[  332.275097][T11930] ieee802154 phy1 wpan1: encryption failed: -22
[  332.330127][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'.
[  332.407960][T11935] syzkaller0: entered promiscuous mode
[  332.413510][T11935] syzkaller0: entered allmulticast mode
[  332.533867][T11944] netlink: 'syz.2.1554': attribute type 2 has an invalid length.
[  332.558430][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'.
[  332.691107][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'.
[  332.781040][T11936] lo speed is unknown, defaulting to 1000
[  332.829727][T11960] netlink: 'syz.2.1559': attribute type 3 has an invalid length.
[  332.845200][T11959] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1559'.
[  332.874636][T11955] pim6reg1: entered promiscuous mode
[  332.898615][T11955] pim6reg1: entered allmulticast mode
[  333.057791][T10223] net_ratelimit: 26 callbacks suppressed
[  333.057811][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  333.177578][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  333.255434][T11936] wg1 speed is unknown, defaulting to 1000
[  333.275270][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'.
[  333.368781][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  333.390906][T11947] lo speed is unknown, defaulting to 1000
[  333.477469][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  333.588370][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  333.718824][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  333.838709][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  333.915479][T11986] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  333.963757][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  334.077448][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  334.184797][T12003] netlink: 'syz.2.1569': attribute type 23 has an invalid length.
[  334.192976][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  334.311473][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'.
[  334.404429][T11963] lo speed is unknown, defaulting to 1000
[  334.584797][T12020] netlink: 'syz.4.1574': attribute type 29 has an invalid length.
[  334.655266][T11957] lo speed is unknown, defaulting to 1000
[  334.668740][T11947] wg1 speed is unknown, defaulting to 1000
[  334.682541][T11963] wg1 speed is unknown, defaulting to 1000
[  335.162082][T12027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.185849][T12027] netem: change failed
[  335.191415][T12018] lo speed is unknown, defaulting to 1000
[  335.202351][T12027] tipc: Resetting bearer <eth:syzkaller0>
[  335.351646][T12018] wg1 speed is unknown, defaulting to 1000
[  335.375446][T11957] wg1 speed is unknown, defaulting to 1000
[  336.204436][ T7279] tipc: Node number set to 1230005451
[  337.314877][T12071] Cannot find add_set index 3 as target
[  337.406120][T12074] __nla_validate_parse: 6 callbacks suppressed
[  337.406139][T12074] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1591'.
[  337.815315][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'.
[  338.069646][ T3073] net_ratelimit: 23 callbacks suppressed
[  338.069668][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  338.163246][T12118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.197478][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  338.287900][T12122] netlink: 'syz.0.1601': attribute type 10 has an invalid length.
[  338.296359][T12122] veth0_macvtap: left promiscuous mode
[  338.304191][T12122] `: Device veth0_macvtap failed to register rx_handler
[  338.315817][T12122] netlink: 'syz.0.1601': attribute type 10 has an invalid length.
[  338.345339][T12122] `: Device veth0_macvtap failed to register rx_handler
[  338.367234][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  338.468636][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1602'.
[  338.497006][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  338.524724][T12130] netlink: 'syz.2.1603': attribute type 1 has an invalid length.
[  338.532853][T12130] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1603'.
[  338.542657][T12130] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1603'.
[  338.552067][T12130] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1603'.
[  338.562457][T12120] lo speed is unknown, defaulting to 1000
[  338.617016][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  338.736987][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  338.754735][T12136] netlink: 'syz.2.1603': attribute type 1 has an invalid length.
[  338.760789][T12120] wg1 speed is unknown, defaulting to 1000
[  338.825422][T12136] netlink: 'syz.2.1603': attribute type 3 has an invalid length.
[  338.857610][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  338.876766][T12136] netlink: 'syz.2.1603': attribute type 1 has an invalid length.
[  338.890838][T12136] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1603'.
[  338.919916][T12142] netlink: 'syz.1.1605': attribute type 8 has an invalid length.
[  338.934550][T12142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1605'.
[  338.965012][T12142] block nbd0: not configured, cannot reconfigure
[  338.977149][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  339.010391][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1606'.
[  339.258312][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'.
[  339.277777][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  339.342140][T12163] netlink: 'syz.1.1611': attribute type 4 has an invalid length.
[  340.173056][T12188] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  340.420938][T12175] lo speed is unknown, defaulting to 1000
[  340.647792][T12223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.655800][T12223] syzkaller0: entered promiscuous mode
[  340.663362][T12223] syzkaller0: entered allmulticast mode
[  340.703050][T12223] tipc: Resetting bearer <eth:syzkaller0>
[  340.801130][T12221] tipc: Resetting bearer <eth:syzkaller0>
[  340.952504][T12221] tipc: Disabling bearer <eth:syzkaller0>
[  341.190042][T12175] wg1 speed is unknown, defaulting to 1000
[  341.351193][T12248] netlink: 'syz.2.1631': attribute type 23 has an invalid length.
[  342.565859][T12279] __nla_validate_parse: 8 callbacks suppressed
[  342.565879][T12279] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1640'.
[  342.598746][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'.
[  342.637130][T12277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1642'.
[  343.162668][   T13] net_ratelimit: 26 callbacks suppressed
[  343.162691][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  343.412344][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  343.574839][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  343.597984][T12296] netlink: 'syz.4.1645': attribute type 1 has an invalid length.
[  343.691311][T12301] netlink: 'syz.2.1646': attribute type 2 has an invalid length.
[  343.748034][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  343.761887][T12306] macvlan3: entered promiscuous mode
[  343.780512][T12306] batman_adv: batadv0: Adding interface: macvlan3
[  343.789413][T12306] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.819395][T12306] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active
[  343.842098][T12310] netlink: 'syz.0.1649': attribute type 2 has an invalid length.
[  343.858424][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  343.972611][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'.
[  343.977696][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  344.117918][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  344.227261][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  344.347495][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  344.457528][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  348.197696][T10231] net_ratelimit: 33 callbacks suppressed
[  348.197719][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  348.317173][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  348.427455][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  348.538033][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  348.647487][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  348.757684][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  348.867543][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  348.977733][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  349.087473][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  349.197357][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  353.267348][T10210] net_ratelimit: 36 callbacks suppressed
[  353.267374][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  353.387507][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  353.497682][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  353.607506][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  353.717124][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  353.827215][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  353.937522][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  354.047172][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  354.157118][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  354.267070][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  358.367539][ T8045] net_ratelimit: 36 callbacks suppressed
[  358.367560][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  358.487101][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  358.597528][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  358.707460][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  358.817678][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  358.927514][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  359.037633][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  359.147432][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  359.258836][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  359.367502][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  363.457588][ T1152] net_ratelimit: 36 callbacks suppressed
[  363.457610][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  363.577664][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  363.687743][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  363.797676][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  363.907505][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  364.017581][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  364.127515][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  364.237639][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  364.347594][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  364.467326][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  368.547514][ T8045] net_ratelimit: 36 callbacks suppressed
[  368.547536][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  368.667451][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  368.777656][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  368.887440][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  368.997533][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  369.107529][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  369.217230][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  369.327414][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  369.437535][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  369.547397][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  373.647454][ T8045] net_ratelimit: 36 callbacks suppressed
[  373.647484][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  373.767386][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  373.877742][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  373.987322][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  374.097646][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  374.207323][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  374.317687][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  374.427029][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  374.537031][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  374.647311][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  378.620171][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.717075][T10231] net_ratelimit: 37 callbacks suppressed
[  378.717097][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  378.837095][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  378.947313][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  379.057477][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  379.167262][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  379.277801][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  379.387371][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  379.497956][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  379.607501][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  379.717751][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  383.807443][T10223] net_ratelimit: 36 callbacks suppressed
[  383.807464][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  383.927335][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  384.037708][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  384.147306][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  384.257654][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  384.367315][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  384.477687][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  384.587062][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  384.698518][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  384.807308][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  388.877088][T10231] net_ratelimit: 36 callbacks suppressed
[  388.877111][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  388.997126][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  389.107377][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  389.217585][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  389.327348][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  389.438045][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  389.547384][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  389.658123][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  389.767373][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  389.877749][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  393.957363][T10223] net_ratelimit: 36 callbacks suppressed
[  393.957385][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.077782][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.197659][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.307265][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.417627][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.527302][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.637628][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.757835][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.867304][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  394.977654][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.047351][T10231] net_ratelimit: 36 callbacks suppressed
[  399.047373][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.167308][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.277710][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.387269][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.497768][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.607256][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.717692][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.827256][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  399.937372][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  400.047280][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  404.147471][T10231] net_ratelimit: 36 callbacks suppressed
[  404.147493][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  404.267311][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  404.377365][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  404.487442][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  404.597367][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  404.707312][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  404.817708][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  404.927113][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  405.047342][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  405.157488][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  409.167369][T10223] net_ratelimit: 35 callbacks suppressed
[  409.167391][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  409.287334][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  409.407355][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  409.517454][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  409.627333][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  409.737700][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  409.847268][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  409.957724][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  410.067042][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  410.177052][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  414.302914][T12343] netlink: 'syz.4.1658': attribute type 1 has an invalid length.
[  414.319174][T10213] net_ratelimit: 36 callbacks suppressed
[  414.319201][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  414.335200][T12347] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1659'.
[  414.358968][T12351] netlink: 'syz.4.1658': attribute type 1 has an invalid length.
[  414.518590][T12350] kthread_run failed with err -4
[  414.540866][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  414.625628][T12364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1662'.
[  414.708760][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  414.720850][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'.
[  414.788578][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1665'.
[  414.817471][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  414.836078][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1665'.
[  414.877875][T12378] netlink: 'syz.0.1666': attribute type 1 has an invalid length.
[  414.896525][T12378] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1666'.
[  414.973597][T10213] bond5: (slave macvlan0): failed to get link speed/duplex
[  415.128015][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  415.228565][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'.
[  415.249027][T12395] netlink: 'syz.4.1670': attribute type 58 has an invalid length.
[  415.258735][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1670'.
[  415.267061][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  415.341201][T12362] lo speed is unknown, defaulting to 1000
[  415.388570][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  415.500200][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  415.522191][T12402] netlink: 'syz.4.1674': attribute type 3 has an invalid length.
[  415.546762][T12402] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1674'.
[  415.607958][T12403] pim6reg1: entered promiscuous mode
[  415.637093][T12403] pim6reg1: entered allmulticast mode
[  415.718510][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  415.783427][T12411] netlink: 'syz.1.1676': attribute type 9 has an invalid length.
[  415.791433][T12411] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1676'.
[  415.986230][T12426] netlink: 'syz.1.1680': attribute type 1 has an invalid length.
[  416.527217][T12358] lo speed is unknown, defaulting to 1000
[  416.535548][T12362] wg1 speed is unknown, defaulting to 1000
[  416.879476][T12454] syzkaller0: left promiscuous mode
[  416.903544][T12454] syzkaller0: left allmulticast mode
[  416.915823][T12455] netlink: 'syz.0.1684': attribute type 3 has an invalid length.
[  416.929975][T12455] netlink: 'syz.0.1684': attribute type 27 has an invalid length.
[  417.026298][T12453] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  417.034483][T12453] macsec1: left promiscuous mode
[  417.045890][T12453] bond10: left promiscuous mode
[  417.239561][T12469] ieee802154 phy1 wpan1: encryption failed: -22
[  417.369254][T12472] gre0: left promiscuous mode
[  417.390603][T12472] gre0: left allmulticast mode
[  417.409328][T12358] wg1 speed is unknown, defaulting to 1000
[  417.842726][T12498] SET target dimension over the limit!
[  419.351277][T12519] lo speed is unknown, defaulting to 1000
[  419.436930][T10214] net_ratelimit: 35 callbacks suppressed
[  419.436952][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  419.458785][   T30] audit: type=1800 audit(1767797987.152:5): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1713" name="memory.events" dev="tmpfs" ino=1559 res=0 errno=0
[  419.478046][T12551] __nla_validate_parse: 11 callbacks suppressed
[  419.478067][T12551] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1714'.
[  419.577567][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  419.670522][T12560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.687811][T12560] netlink: 'syz.4.1716': attribute type 21 has an invalid length.
[  419.697670][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  419.706719][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  419.746968][T12557] openvswitch: netlink: Flow actions attr not present in new flow.
[  419.755289][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  419.764684][T12560] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1716'.
[  419.817119][T12557] openvswitch: netlink: Flow actions attr not present in new flow.
[  419.825396][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  419.838138][T12557] openvswitch: netlink: Flow actions attr not present in new flow.
[  419.840687][ T6020] bond5: (slave macvlan0): failed to get link speed/duplex
[  419.884469][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  419.916960][T12557] openvswitch: netlink: Flow actions attr not present in new flow.
[  419.937204][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  419.946288][T12557] openvswitch: netlink: Flow actions attr not present in new flow.
[  419.977596][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  420.004767][T12570] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1718'.
[  420.007268][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  420.076220][T12527] lo speed is unknown, defaulting to 1000
[  420.088150][T12519] wg1 speed is unknown, defaulting to 1000
[  420.516608][T12527] wg1 speed is unknown, defaulting to 1000
[  421.845881][T12604] lo speed is unknown, defaulting to 1000
[  421.986784][T12649] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  422.601341][T12652] dvmrp0: entered allmulticast mode
[  422.694829][T12604] wg1 speed is unknown, defaulting to 1000
[  424.098628][T12710] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.531469][ T8045] net_ratelimit: 53 callbacks suppressed
[  424.531491][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  424.554115][T12731] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  424.565733][T12687] lo speed is unknown, defaulting to 1000
[  424.576129][T12730] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  424.648189][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  424.760845][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  424.814637][T12739] __nla_validate_parse: 33 callbacks suppressed
[  424.814658][T12739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1756'.
[  424.869755][T12738] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  424.881612][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  424.976240][T12691] lo speed is unknown, defaulting to 1000
[  424.983497][T12687] wg1 speed is unknown, defaulting to 1000
[  424.994198][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'.
[  425.020149][T12742] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1757'.
[  425.042971][T12742] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1757'.
[  425.450540][T10224] bond5: (slave macvlan0): failed to get link speed/duplex
[  425.568817][T10224] bond5: (slave macvlan0): failed to get link speed/duplex
[  425.658432][T12721] lo speed is unknown, defaulting to 1000
[  425.677461][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  425.797394][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  425.948527][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  425.989532][T12691] wg1 speed is unknown, defaulting to 1000
[  426.016655][T12722] lo speed is unknown, defaulting to 1000
[  426.039151][T12721] wg1 speed is unknown, defaulting to 1000
[  426.467273][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  426.542174][T12722] wg1 speed is unknown, defaulting to 1000
[  426.715897][T12786] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1771'.
[  426.883797][T12784] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1770'.
[  427.401265][T12797] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1773'.
[  427.673701][T12799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1776'.
[  427.840401][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'.
[  427.903389][T12806] netlink: 'syz.4.1775': attribute type 8 has an invalid length.
[  428.129690][T12815] veth0_to_team: entered allmulticast mode
[  428.411897][T12829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.420762][T12833] netlink: 'syz.3.1784': attribute type 10 has an invalid length.
[  428.422432][T12829] syzkaller0: entered promiscuous mode
[  428.440940][T12829] syzkaller0: entered allmulticast mode
[  428.466372][T12832] bond0: (slave team0): Releasing backup interface
[  428.491711][T12832] bond5: (slave dummy0): Releasing active interface
[  428.513358][T12832] dummy0: left allmulticast mode
[  428.526535][T12832] ¾x9ÿ: left promiscuous mode
[  428.532170][T12832] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  428.554627][T12832] bridge_slave_1: left allmulticast mode
[  428.570703][T12832] bridge_slave_1: left promiscuous mode
[  428.576727][T12832] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.592407][T12832] bond0: (slave bond_slave_0): Releasing backup interface
[  428.606780][T12832] bond0: (slave bond_slave_1): Releasing backup interface
[  428.620858][T12832] team0: Port device team_slave_0 removed
[  428.630981][T12832] team0: Port device team_slave_1 removed
[  428.639141][T12832] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.647770][T12832] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.659424][T12841] tipc: Resetting bearer <eth:syzkaller0>
[  428.686053][T12809] lo speed is unknown, defaulting to 1000
[  428.766594][T12844] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1786'.
[  428.883138][T12828] tipc: Resetting bearer <eth:syzkaller0>
[  428.933184][T12828] tipc: Disabling bearer <eth:syzkaller0>
[  428.953528][T12854] netlink: 'syz.4.1789': attribute type 4 has an invalid length.
[  429.129081][T12860] netlink: 'syz.2.1790': attribute type 1 has an invalid length.
[  429.270605][T12863] bond7 (unregistering): Released all slaves
[  429.316988][T12809] wg1 speed is unknown, defaulting to 1000
[  429.568362][ T6020] net_ratelimit: 18 callbacks suppressed
[  429.568382][ T6020] bond5: (slave macvlan0): failed to get link speed/duplex
[  429.703914][T10224] bond5: (slave macvlan0): failed to get link speed/duplex
[  429.724795][T12892] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  429.840926][T10224] bond5: (slave macvlan0): failed to get link speed/duplex
[  430.009634][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  430.010547][T12913] __nla_validate_parse: 8 callbacks suppressed
[  430.010563][T12913] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1799'.
[  430.020720][T12911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1801'.
[  430.072633][T12911] netlink: zone id is out of range
[  430.079580][T12911] netlink: zone id is out of range
[  430.085133][T12911] netlink: zone id is out of range
[  430.091506][T12911] netlink: zone id is out of range
[  430.097357][T12911] netlink: get zone limit has 4 unknown bytes
[  430.244142][T12915] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1802'.
[  430.255928][T12915] netlink: 'syz.0.1802': attribute type 10 has an invalid length.
[  430.336493][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'.
[  430.355172][T12917] ip6gretap1: entered promiscuous mode
[  430.361039][T12917] ip6gretap1: entered allmulticast mode
[  430.705828][T12934] netlink: 'syz.4.1805': attribute type 3 has an invalid length.
[  430.719327][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'.
[  430.751053][T12935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1808'.
[  430.781745][T12944] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1810'.
[  430.806522][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'.
[  430.921576][T12952] netlink: 'syz.2.1809': attribute type 46 has an invalid length.
[  430.935751][T12953] sctp: [Deprecated]: syz.1.1812 (pid 12953) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.935751][T12953] Use struct sctp_sack_info instead
[  431.095581][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'.
[  431.102187][T12963] xt_hashlimit: overflow, try lower: 0/0
[  431.184129][T12968] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003
[  431.331634][T12955] lo speed is unknown, defaulting to 1000
[  431.338806][T12974] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1818'.
[  431.461640][T12977] netlink: 'syz.2.1819': attribute type 21 has an invalid length.
[  431.506324][T12977] netlink: 'syz.2.1819': attribute type 32 has an invalid length.
[  431.610767][T12984] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  431.628926][T12977] bond8: Setting coupled_control to off (0)
[  431.635104][T12955] wg1 speed is unknown, defaulting to 1000
[  432.417911][T13023] xt_l2tp: v2 doesn't support IP mode
[  432.785694][T13004] lo speed is unknown, defaulting to 1000
[  433.063080][T13044] netlink: 'syz.4.1835': attribute type 1 has an invalid length.
[  433.108726][T13048] netlink: 'syz.4.1835': attribute type 1 has an invalid length.
[  433.209432][T13004] wg1 speed is unknown, defaulting to 1000
[  434.364128][T13093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.380461][T13093] syzkaller0: entered promiscuous mode
[  434.385985][T13093] syzkaller0: entered allmulticast mode
[  434.456072][T13091] tipc: Resetting bearer <eth:syzkaller0>
[  434.499618][T13091] tipc: Disabling bearer <eth:syzkaller0>
[  434.638655][   T13] net_ratelimit: 35 callbacks suppressed
[  434.638702][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  434.759639][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  434.888210][T10227] bond5: (slave macvlan0): failed to get link speed/duplex
[  435.087573][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  435.160607][T13132] __nla_validate_parse: 13 callbacks suppressed
[  435.160626][T13132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1861'.
[  435.191051][T13139] macvtap1: entered promiscuous mode
[  435.196397][T13139] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  435.237189][   T13] bond5: (slave macvlan0): failed to get link speed/duplex
[  435.366957][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  435.432966][T13153] tipc: New replicast peer: 255.255.255.255
[  435.452813][T13153] tipc: Enabled bearer <udp:syz2>, priority 10
[  435.498335][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  435.518726][T13153] netlink: 'syz.3.1869': attribute type 11 has an invalid length.
[  435.539990][T13153] netlink: 'syz.3.1869': attribute type 11 has an invalid length.
[  435.550304][T13153] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1869'.
[  435.657802][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  435.691798][T13153] bridge5: entered promiscuous mode
[  435.700147][T13153] bridge5: entered allmulticast mode
[  435.767447][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  435.811719][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'.
[  435.825687][T13166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1872'.
[  435.852764][T13165] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1871'.
[  435.980548][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  436.119760][T13185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1875'.
[  436.168508][T13185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1875'.
[  436.221553][T13185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1875'.
[  436.919749][T13207] vlan0: entered allmulticast mode
[  436.925070][T13207] veth1: entered allmulticast mode
[  437.122783][T13224] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1885'.
[  437.156539][T13226] syz0: rxe_newlink: already configured on lo
[  437.244467][T13229] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1888'.
[  437.343412][T13225] sit0: left promiscuous mode
[  437.364705][T13225] 8021q: adding VLAN 0 to HW filter on device `
[  437.676597][T13232] lo speed is unknown, defaulting to 1000
[  438.442237][T13240] lo speed is unknown, defaulting to 1000
[  438.450622][T13232] wg1 speed is unknown, defaulting to 1000
[  438.461549][T13255] FAULT_INJECTION: forcing a failure.
[  438.461549][T13255] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.553416][T13255] CPU: 1 UID: 0 PID: 13255 Comm: syz.1.1896 Not tainted syzkaller #0 PREEMPT(full) 
[  438.553443][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  438.553459][T13255] Call Trace:
[  438.553467][T13255]  <TASK>
[  438.553476][T13255]  dump_stack_lvl+0xe8/0x150
[  438.553505][T13255]  should_fail_ex+0x414/0x560
[  438.553540][T13255]  _copy_to_user+0x31/0xb0
[  438.553565][T13255]  simple_read_from_buffer+0xe1/0x170
[  438.553594][T13255]  proc_fail_nth_read+0x1b3/0x220
[  438.553625][T13255]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  438.553647][T13255]  ? rw_verify_area+0x2a6/0x4d0
[  438.553663][T13255]  ? tun_chr_write_iter+0x18a/0x200
[  438.553684][T13255]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  438.553705][T13255]  vfs_read+0x200/0xa30
[  438.553722][T13255]  ? fdget_pos+0x247/0x320
[  438.553748][T13255]  ? __pfx___mutex_lock+0x10/0x10
[  438.553768][T13255]  ? __pfx_vfs_read+0x10/0x10
[  438.553787][T13255]  ? __fget_files+0x2a/0x420
[  438.553812][T13255]  ? __fget_files+0x3a0/0x420
[  438.553834][T13255]  ? __fget_files+0x2a/0x420
[  438.553864][T13255]  ksys_read+0x145/0x250
[  438.553885][T13255]  ? __pfx_ksys_read+0x10/0x10
[  438.553914][T13255]  do_syscall_64+0xec/0xf80
[  438.553933][T13255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.553952][T13255]  ? trace_irq_disable+0x37/0x100
[  438.553975][T13255]  ? clear_bhb_loop+0x60/0xb0
[  438.553998][T13255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.554022][T13255] RIP: 0033:0x7f114f98e15c
[  438.554040][T13255] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  438.554057][T13255] RSP: 002b:00007f11507fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  438.554078][T13255] RAX: ffffffffffffffda RBX: 00007f114fbe5fa0 RCX: 00007f114f98e15c
[  438.554093][T13255] RDX: 000000000000000f RSI: 00007f11507fc0a0 RDI: 0000000000000004
[  438.554105][T13255] RBP: 00007f11507fc090 R08: 0000000000000000 R09: 0000000000000000
[  438.554116][T13255] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000001
[  438.554127][T13255] R13: 00007f114fbe6038 R14: 00007f114fbe5fa0 R15: 00007ffc43f1b308
[  438.554160][T13255]  </TASK>
[  439.092413][T13240] wg1 speed is unknown, defaulting to 1000
[  439.253654][T13269] sctp: [Deprecated]: syz.1.1900 (pid 13269) Use of struct sctp_assoc_value in delayed_ack socket option.
[  439.253654][T13269] Use struct sctp_sack_info instead
[  439.274750][T13269] sctp: [Deprecated]: syz.1.1900 (pid 13269) Use of struct sctp_assoc_value in delayed_ack socket option.
[  439.274750][T13269] Use struct sctp_sack_info instead
[  439.744193][ T1152] net_ratelimit: 23 callbacks suppressed
[  439.744215][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  439.978875][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  440.063628][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.178469][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  440.198654][T13306] __nla_validate_parse: 1 callbacks suppressed
[  440.198673][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'.
[  440.273317][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1911'.
[  440.322575][T13308] 8021q: adding VLAN 0 to HW filter on device batadv1
[  440.378244][T13308] batadv1: entered promiscuous mode
[  440.398998][T13308] batadv1: entered allmulticast mode
[  440.408287][T13308] team0: Port device batadv1 added
[  440.429156][T13311] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20002
[  440.435870][T13311] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20002
[  440.487073][T10214] bond5: (slave macvlan0): failed to get link speed/duplex
[  440.508765][T13311] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20002
[  440.519854][T13311] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20002
[  440.554400][T13311] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20002
[  440.563599][T13311] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20002
[  440.618352][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  440.727463][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  440.768233][T13321] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1912'.
[  440.949949][T13335] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1920'.
[  440.977249][T13337] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1920'.
[  440.988074][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'.
[  440.997668][T13337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'.
[  441.008236][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  441.136982][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  441.277446][T10223] bond5: (slave macvlan0): failed to get link speed/duplex
[  441.383056][T13368] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  441.428144][T10210] bond5: (slave macvlan0): failed to get link speed/duplex
[  441.592969][T13347] lo speed is unknown, defaulting to 1000
[  441.604592][T13374] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1932'.
[  442.156669][T13347] wg1 speed is unknown, defaulting to 1000
[  442.248120][T13383] lo speed is unknown, defaulting to 1000
[  442.326355][T13405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1941'.
[  442.621821][T13383] wg1 speed is unknown, defaulting to 1000
[  443.021079][T13429] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1947'.
[  443.310995][T13440] netlink: 'syz.4.1949': attribute type 6 has an invalid length.
[  443.681227][T13443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.749019][T13456] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  443.764591][T13452] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  443.795570][T13442] tipc: Resetting bearer <eth:syzkaller0>
[  446.174742][T13468] __nla_validate_parse: 1 callbacks suppressed
[  446.174763][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'.
[  446.234638][T13469] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1955'.
[  446.314885][T13442] tipc: Disabling bearer <eth:syzkaller0>
[  446.326449][T13454] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

Ï€ã,ÄûÔxµ…üb©)%ë�	]ô‚3DûLÌ¥
[  446.371199][T13466] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  446.392928][T13466] bond8 (unregistering): Released all slaves
[  446.434027][ T5895] tipc: Node number set to 683040247
[  446.453676][ T8045] net_ratelimit: 11 callbacks suppressed
[  446.453700][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  446.577642][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  446.707071][ T6020] bond5: (slave macvlan0): failed to get link speed/duplex
[  446.756256][T13489] ip_vti0: left promiscuous mode
[  446.762744][T13489] ip_vti0: left allmulticast mode
[  446.769795][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1961'.
[  446.780764][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1961'.
[  446.793418][T13491] netlink: 'syz.4.1959': attribute type 2 has an invalid length.
[  446.831340][T13492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  446.846875][T13491] netlink: 'syz.4.1959': attribute type 1 has an invalid length.
[  446.857688][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  446.918413][T13491] xt_CT: You must specify a L4 protocol and not use inversions on it
[  446.951678][T13494] syzkaller1: entered promiscuous mode
[  446.970641][T13494] syzkaller1: entered allmulticast mode
[  446.997210][ T1152] bond5: (slave macvlan0): failed to get link speed/duplex
[  447.032724][T13494] can: request_module (can-proto-0) failed.
[  447.049542][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'.
[  447.082547][T13482] lo speed is unknown, defaulting to 1000
[  447.108988][ T8045] bond5: (slave macvlan0): failed to get link speed/duplex
[  447.217001][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  447.302735][T13482] wg1 speed is unknown, defaulting to 1000
[  447.377380][T10231] bond5: (slave macvlan0): failed to get link speed/duplex
[  447.431512][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1966'.
[  447.646936][ T3073] bond5: (slave macvlan0): failed to get link speed/duplex
[  448.089908][T13539] ip6gretap2: left promiscuous mode
[  448.111041][T13534] pim6reg: entered allmulticast mode
[  448.182861][ T5840] lo speed is unknown, defaulting to 1000
[  448.195082][ T5840] syz0: Port: 1 Link ACTIVE
[  448.212477][ T9092] lo speed is unknown, defaulting to 1000
[  448.249410][T13534] pim6reg: left allmulticast mode
[  448.770577][T13573] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1982'.
[  448.781078][T13573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1982'.
[  448.998014][T13584] netlink: 'syz.3.1985': attribute type 21 has an invalid length.
[  449.028389][T13584] netlink: 'syz.3.1985': attribute type 1 has an invalid length.
[  449.036172][T13584] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1985'.
[  449.105656][T13551] lo speed is unknown, defaulting to 1000
[  449.489215][T13551] wg1 speed is unknown, defaulting to 1000
[  449.975328][T13601] netem: invalid attributes len -1
[  449.995042][T13601] netem: change failed
[  449.997775][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'.
[  450.211598][T13594] lo speed is unknown, defaulting to 1000
[  450.586056][T13618] bridge3: entered allmulticast mode
[  450.816015][T13594] wg1 speed is unknown, defaulting to 1000
[  451.001131][T13609] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  451.608671][T13638] netlink: 181360 bytes leftover after parsing attributes in process `syz.3.2001'.
[  451.676557][T13648] netlink: 'syz.1.2003': attribute type 13 has an invalid length.
[  451.686545][T13648] netlink: 'syz.1.2003': attribute type 17 has an invalid length.
[  451.704613][T13648] netlink: 'syz.1.2003': attribute type 27 has an invalid length.
[  451.912935][T13652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.981405][T13655] syzkaller1: entered promiscuous mode
[  451.989057][T13655] syzkaller1: entered allmulticast mode
[  452.067312][T13658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2006'.
[  452.808347][T13648] lo speed is unknown, defaulting to 1000
[  453.242452][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'.
[  453.449570][T13663] lo speed is unknown, defaulting to 1000
[  453.456557][T13648] wg1 speed is unknown, defaulting to 1000
[  453.512613][T13690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2014'.
[  453.885093][T13697] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2016'.
[  453.933095][T13663] wg1 speed is unknown, defaulting to 1000
[  454.138679][T13700] sit0: entered promiscuous mode
[  454.148224][T13700] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2017'.
[  454.528942][T13709] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 0, id = 0
[  454.556218][T13708] syzkaller1: entered promiscuous mode
[  454.563007][T13710] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2018'.
[  454.578623][T13708] syzkaller1: entered allmulticast mode
[  454.683274][T13704] netlink: 'syz.0.2018': attribute type 13 has an invalid length.
[  454.721886][T13704] netlink: 'syz.0.2018': attribute type 17 has an invalid length.
[  454.784874][T13704] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.954387][T13704] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  455.029280][T13713] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2020'.
[  455.622230][T13728] syzkaller0: entered promiscuous mode
[  455.639552][T13728] syzkaller0: entered allmulticast mode
[  455.659036][T13728] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  455.693858][T13728] macvtap1: entered promiscuous mode
[  455.702000][T13707] lo speed is unknown, defaulting to 1000
[  455.793185][T13732] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2027'.
[  455.998442][T13746] netlink: 'syz.3.2031': attribute type 1 has an invalid length.
[  456.109059][T13746] 8021q: adding VLAN 0 to HW filter on device bond11
[  456.207585][T13751] bond11: (slave gretap1): making interface the new active one
[  456.217244][T13751] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  456.229667][T13753] bond5: option mode: unable to set because the bond device has slaves
[  456.300419][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'.
[  456.355017][T13753] bond5: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  456.372795][T13707] wg1 speed is unknown, defaulting to 1000
[  456.665063][T13743] lo speed is unknown, defaulting to 1000
[  457.010059][T13755] lo speed is unknown, defaulting to 1000
[  457.127438][T13755] wg1 speed is unknown, defaulting to 1000
[  457.164969][T13743] wg1 speed is unknown, defaulting to 1000
[  458.225972][T13803] __nla_validate_parse: 1 callbacks suppressed
[  458.225992][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'.
[  458.256060][T13800] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2042'.
[  458.376569][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2043'.
[  458.799035][T13798] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  458.832610][T13798] bond3 (unregistering): Released all slaves
[  458.993183][T13828] 8021q: VLANs not supported on caif0
[  459.147464][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'.
[  459.340634][T13846] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2056'.
[  459.360321][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'.
[  459.408327][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2058'.
[  459.421460][T13849] geneve3: entered promiscuous mode
[  459.426719][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2058'.
[  459.431200][ T6020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.450672][ T6020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.462765][ T6020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.473708][ T6020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.510087][T13851] netlink: 'syz.4.2060': attribute type 1 has an invalid length.
[  459.540085][T13851] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2060'.
[  459.556756][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'.
[  459.977197][T13886] xt_TPROXY: Can be used only with -p tcp or -p udp
[  460.549480][T13933] xt_TPROXY: Can be used only with -p tcp or -p udp
[  460.960762][T13942] ip6gre0: entered promiscuous mode
[  460.970706][T13942] team0: Port device ip6gre0 added
[  461.370423][ T1102] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  461.384091][T13956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  461.636532][T13981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  461.648576][T13981] syzkaller0: entered promiscuous mode
[  461.654166][T13981] syzkaller0: entered allmulticast mode
[  461.702344][T13981] tipc: Resetting bearer <eth:syzkaller0>
[  461.728341][T13979] tipc: Resetting bearer <eth:syzkaller0>
[  461.774915][T13979] tipc: Disabling bearer <eth:syzkaller0>
[  461.878496][   T30] audit: type=1107 audit(1767798029.562:6): pid=13998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='®[ûŠ\ Û'
[  462.131607][T14011] bridge41: entered promiscuous mode
[  462.137875][T14011] bridge41: entered allmulticast mode
[  462.145692][T13993] netlink: 'syz.3.2090': attribute type 1 has an invalid length.
[  462.583843][T14028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  462.592926][T14028] syzkaller0: entered promiscuous mode
[  462.599021][T14028] syzkaller0: entered allmulticast mode
[  462.866760][T14046] netlink: 'syz.3.2108': attribute type 29 has an invalid length.
[  462.950106][T14043] pimreg3: entered allmulticast mode
[  463.049746][T14053] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  463.149458][T14066] netlink: 'syz.0.2113': attribute type 21 has an invalid length.
[  463.171097][T14066] netlink: 'syz.0.2113': attribute type 6 has an invalid length.
[  463.249023][T14058] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.316454][T14077] __nla_validate_parse: 17 callbacks suppressed
[  463.316475][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'.
[  463.318142][T14058] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.359270][T14078] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2115'.
[  463.518426][T14027] tipc: Resetting bearer <eth:syzkaller0>
[  463.540986][T14027] tipc: Disabling bearer <eth:syzkaller0>
[  463.564982][T14058] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.582550][T14058] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.582868][T14077] netlink: 63 bytes leftover after parsing attributes in process `syz.3.2116'.
[  463.602945][T14084] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2118'.
[  463.649508][T14058] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.659840][T14058] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.742444][T14058] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.760954][T14058] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.960297][ T6020] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  463.973615][ T6020] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.011531][ T6020] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  464.035101][ T6020] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.091906][ T6020] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  464.121868][ T6020] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.181470][ T6020] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  464.208793][ T6020] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.262765][T14107] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2123'.
[  464.273375][T14108] netlink: 'syz.2.2122': attribute type 1 has an invalid length.
[  464.291328][T14108] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2122'.
[  464.602404][T14118] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2124'.
[  464.638606][T14121] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2124'.
[  464.754450][T14120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.764155][T14120] syzkaller0: entered promiscuous mode
[  464.770411][T14126] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2128'.
[  464.787345][T14120] syzkaller0: entered allmulticast mode
[  464.858567][T14119] tipc: Resetting bearer <eth:syzkaller0>
[  464.914132][T14119] tipc: Disabling bearer <eth:syzkaller0>
[  465.012418][T14136] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  465.057707][T14136] syzkaller0: entered promiscuous mode
[  465.063237][T14136] syzkaller0: entered allmulticast mode
[  465.199610][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'.
[  465.606230][T14165] IPVS: Error connecting to the multicast addr
[  465.662902][T14168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.671776][T14168] syzkaller0: entered promiscuous mode
[  465.697686][T14168] syzkaller0: entered allmulticast mode
[  465.835634][T14170] tipc: Resetting bearer <eth:syzkaller0>
[  465.892472][T14170] tipc: Disabling bearer <eth:syzkaller0>
[  466.171619][T14195] syzkaller1: entered promiscuous mode
[  466.189310][T14195] syzkaller1: entered allmulticast mode
[  466.470857][T14184] lo speed is unknown, defaulting to 1000
[  466.852595][T14184] wg1 speed is unknown, defaulting to 1000
[  467.097283][T14234] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  467.392831][T14230] lo speed is unknown, defaulting to 1000
[  467.628504][T14230] wg1 speed is unknown, defaulting to 1000
[  468.504462][T14265] __nla_validate_parse: 4 callbacks suppressed
[  468.504482][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'.
[  468.517021][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2164'.
[  468.586998][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'.
[  468.602443][T14260] lo speed is unknown, defaulting to 1000
[  468.748023][T10214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.751569][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2165'.
[  468.755885][T10214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.786094][T14270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  468.817736][T14270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2166'.
[  468.832787][T14260] wg1 speed is unknown, defaulting to 1000
[  469.216338][T14277] bridge_slave_0: default FDB implementation only supports local addresses
[  469.480134][T14286] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2168'.
[  469.609184][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'.
[  469.996442][T14299] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  470.254550][T14304] syzkaller0: entered promiscuous mode
[  470.269420][T14304] syzkaller0: entered allmulticast mode
[  470.509773][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'.
[  470.554624][T14293] lo speed is unknown, defaulting to 1000
[  470.719022][T14316] netlink: 'syz.4.2179': attribute type 9 has an invalid length.
[  470.745885][T14320] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2180'.
[  471.058745][T14293] wg1 speed is unknown, defaulting to 1000
[  471.469151][T14342] ieee802154 phy1 wpan1: encryption failed: -90
[  471.570679][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'.
[  471.612020][T14344] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  472.084396][T14361] netlink: 'syz.0.2195': attribute type 9 has an invalid length.
[  472.102595][T14363] netem: change failed
[  473.206020][T14390] tap0: tun_chr_ioctl cmd 2147767507
[  473.380699][T14397] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  473.401380][T14397] netlink: 'syz.1.2207': attribute type 10 has an invalid length.
[  473.433681][T14397] macvtap0: left promiscuous mode
[  473.440165][T14397] macvtap0: left allmulticast mode
[  473.446307][T14397] batman_adv: batadv0: Adding interface: macvtap0
[  473.456192][T14397] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.495344][T14397] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  473.616145][T14408] netlink: 'syz.0.2211': attribute type 12 has an invalid length.
[  473.735398][T14410] tipc: Failed to remove unknown binding: 66,1,1/1230005451:1771953599/1771953601
[  473.782615][T14415] tipc: Failed to remove unknown binding: 66,1,1/1230005451:1771953599/1771953601
[  473.818755][T14410] tipc: Failed to remove unknown binding: 66,1,1/1230005451:1771953599/1771953601
[  473.852505][T14418] netlink: 'syz.0.2214': attribute type 3 has an invalid length.
[  473.857123][T14422] __nla_validate_parse: 4 callbacks suppressed
[  473.857140][T14422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2216'.
[  473.862436][T14410] tipc: Failed to remove unknown binding: 66,1,1/1230005451:1771953599/1771953601
[  473.899768][T14422] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20000
[  474.108124][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2218'.
[  474.139146][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2220'.
[  474.179032][T14436] netlink: 'syz.4.2220': attribute type 12 has an invalid length.
[  474.259676][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2220'.
[  474.270190][T14436] netlink: 'syz.4.2220': attribute type 12 has an invalid length.
[  474.553510][T14449] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2224'.
[  474.571888][T14449] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  475.082515][T14480] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  475.093212][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'.
[  475.102647][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2233'.
[  475.115407][T14480] bond8 (unregistering): Released all slaves
[  475.168418][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2234'.
[  475.188530][T14486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2234'.
[  475.318071][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2234'.
[  475.492379][T14504] IPVS: set_ctl: invalid protocol: 98 172.30.1.5:20001
[  475.631465][T14473] lo speed is unknown, defaulting to 1000
[  475.766147][T14521] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  475.982400][T14473] wg1 speed is unknown, defaulting to 1000
[  476.020968][T14537] netlink: 'syz.1.2249': attribute type 1 has an invalid length.
[  476.093547][T14542] bond4: entered promiscuous mode
[  476.100635][T14542] bond4: entered allmulticast mode
[  476.106393][T14542] 8021q: adding VLAN 0 to HW filter on device bond4
[  476.404842][T14549] netlink: 'syz.4.2253': attribute type 6 has an invalid length.
[  476.613361][T14549] team0: Device ip6tnl1 is of different type
[  477.620871][T14613] lo: left promiscuous mode
[  477.638005][T14613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  477.867643][T14626] vxcan3: entered allmulticast mode
[  478.086013][T14634] netlink: 'syz.2.2272': attribute type 4 has an invalid length.
[  478.125352][T14604] lo speed is unknown, defaulting to 1000
[  479.236502][T14604] wg1 speed is unknown, defaulting to 1000
[  479.332483][T14690] __nla_validate_parse: 11 callbacks suppressed
[  479.332500][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'.
[  479.362843][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2287'.
[  479.480189][T14703] IPVS: set_ctl: invalid protocol: 0 10.1.1.4:20001
[  479.492909][T14704] lo: left allmulticast mode
[  479.508616][T14704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  479.721614][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'.
[  479.830910][T14721] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  480.184885][T14735] sctp: [Deprecated]: syz.3.2296 (pid 14735) Use of struct sctp_assoc_value in delayed_ack socket option.
[  480.184885][T14735] Use struct sctp_sack_info instead
[  480.202514][T14735] netlink: 'syz.3.2296': attribute type 1 has an invalid length.
[  480.258834][T14735] 8021q: adding VLAN 0 to HW filter on device bond13
[  480.367063][T14745] x_tables: duplicate underflow at hook 1
[  481.384443][T14748] lo speed is unknown, defaulting to 1000
[  481.463484][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2304'.
[  481.932325][T14748] wg1 speed is unknown, defaulting to 1000
[  482.291344][T14825] xt_TCPMSS: Only works on TCP SYN packets
[  482.394475][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2316'.
[  482.483733][T14838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2318'.
[  482.515573][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'.
[  482.633432][T14842] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2319'.
[  482.694546][T14847] netlink: 'syz.2.2321': attribute type 5 has an invalid length.
[  483.155975][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'.
[  483.220477][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2325'.
[  483.445256][T14871] 8021q: adding VLAN 0 to HW filter on device bond3
[  483.597826][T14885] netlink: 'syz.4.2330': attribute type 16 has an invalid length.
[  483.605865][T14885] netlink: 'syz.4.2330': attribute type 17 has an invalid length.
[  483.641813][T14887] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  483.776754][T14896] netlink: 'syz.0.2331': attribute type 13 has an invalid length.
[  484.574441][T14893] delete_channel: no stack
[  484.606639][T14885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.054996][T14885] tipc: Resetting bearer <eth:syzkaller0>
[  485.180469][T14899] syzkaller0: Caught tx_queue_len zero misconfig
[  485.219559][T14908] syzkaller1: entered promiscuous mode
[  485.226084][T14908] syzkaller1: entered allmulticast mode
[  485.238759][ T9097] wg1 speed is unknown, defaulting to 1000
[  485.245031][ T9097] syz: Port: 1 Link DOWN
[  485.249721][T10210] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.277682][T14918] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  485.297893][T10210] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.308617][T14918] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  485.317938][T10210] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.326614][T10210] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.339937][T14918] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  485.415876][T10210] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.425287][T10210] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.442710][T10210] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.463202][T10210] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.671333][T14938] siw: device registration error -23
[  485.742490][T14938] lo: Caught tx_queue_len zero misconfig
[  485.784478][T14940] __nla_validate_parse: 1 callbacks suppressed
[  485.784499][T14940] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2342'.
[  485.814266][T14947] SET target dimension over the limit!
[  485.831086][T14938] xt_TCPMSS: Only works on TCP SYN packets
[  486.221439][T14963] sctp: [Deprecated]: syz.3.2349 (pid 14963) Use of struct sctp_assoc_value in delayed_ack socket option.
[  486.221439][T14963] Use struct sctp_sack_info instead
[  486.239406][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2350'.
[  486.253585][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2350'.
[  486.409758][T14975] netlink: 'syz.3.2352': attribute type 32 has an invalid length.
[  486.448627][T14975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2352'.
[  486.516224][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'.
[  486.539054][T14981] netlink: 'syz.2.2353': attribute type 7 has an invalid length.
[  486.588705][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'.
[  486.613577][T14981] netlink: 'syz.2.2353': attribute type 7 has an invalid length.
[  486.792322][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2354'.
[  486.880114][T14991] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2355'.
[  487.068019][T14999] tunl0: left allmulticast mode
[  487.080189][T14999] gretap0: left allmulticast mode
[  487.093224][T14999] erspan0: left allmulticast mode
[  487.115650][T14999] ip6_vti0: left allmulticast mode
[  487.133029][T14999] sit0: left allmulticast mode
[  487.159487][T14999] ip6tnl0: left allmulticast mode
[  487.164840][T14999] ip6gre0: left allmulticast mode
[  487.181581][T14999] syz_tun: left allmulticast mode
[  487.188797][T14999] ip6gretap0: left allmulticast mode
[  487.194253][T14999] vcan0: left allmulticast mode
[  487.225587][T14999] bond0: left allmulticast mode
[  487.231657][T14999] team0: left allmulticast mode
[  487.236617][T14999] batadv1: left allmulticast mode
[  487.244091][T14999] dummy0: left allmulticast mode
[  487.250910][T14999] nlmon0: left allmulticast mode
[  487.256050][T14999] caif0: left allmulticast mode
[  487.263596][T14999] batadv0: left allmulticast mode
[  487.270074][T14999] vxcan0: left allmulticast mode
[  487.275772][T14999] vxcan1: left allmulticast mode
[  487.283140][T14999] veth0: left allmulticast mode
[  487.289278][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2358'.
[  487.300522][T14999] veth1: left allmulticast mode
[  487.305667][T14999] wg0: left allmulticast mode
[  487.311450][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2358'.
[  487.322769][T14999] wg1: left allmulticast mode
[  487.338085][T14999] wg2: left allmulticast mode
[  487.342958][T14999] veth0_to_bridge: left allmulticast mode
[  487.352870][T14999] bridge_slave_0: left allmulticast mode
[  487.360270][T14999] veth0_to_bond: left allmulticast mode
[  487.366063][T14999] bond_slave_0: left allmulticast mode
[  487.372429][T14999] team_slave_0: left allmulticast mode
[  487.379837][T14999] veth1_to_team: left allmulticast mode
[  487.385635][T14999] team_slave_1: left allmulticast mode
[  487.395015][T14999] veth0_to_batadv: left allmulticast mode
[  487.407975][T14999] batadv_slave_0: left allmulticast mode
[  487.413970][T14999] veth1_to_batadv: left allmulticast mode
[  487.422878][T14999] batadv_slave_1: left allmulticast mode
[  487.433359][T14999] xfrm0: left allmulticast mode
[  487.440274][T14999] veth0_to_hsr: left allmulticast mode
[  487.446075][T14999] veth1_to_hsr: left allmulticast mode
[  487.452394][T14999] hsr0: left allmulticast mode
[  487.459127][T14999] hsr_slave_0: left allmulticast mode
[  487.464658][T14999] hsr_slave_1: left allmulticast mode
[  487.470961][T14999] veth1_virt_wifi: left allmulticast mode
[  487.478829][T14999] veth0_virt_wifi: left allmulticast mode
[  487.484909][T14999] veth1_vlan: left allmulticast mode
[  487.491230][T14999] vlan1: left allmulticast mode
[  487.496218][T14999] macvlan0: left allmulticast mode
[  487.509396][T14999] macvlan1: left allmulticast mode
[  487.515574][T14999] ipvlan0: left allmulticast mode
[  487.522175][T14999] ipvlan1: left allmulticast mode
[  487.527784][T14999] veth0_vlan: left allmulticast mode
[  487.533231][T14999] veth1_macvtap: left allmulticast mode
[  487.540157][T14999] veth0_macvtap: left allmulticast mode
[  487.545948][T14999] macsec0: left allmulticast mode
[  487.551629][T14999] geneve0: left allmulticast mode
[  487.556787][T14999] geneve1: left allmulticast mode
[  487.564306][T14999] mac80211_hwsim hwsim9 wlan0: left allmulticast mode
[  487.571750][T14999] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  487.582057][T14999] bond1: left allmulticast mode
[  487.587620][T14999] bridge1: left allmulticast mode
[  487.592789][T14999] bridge2: left allmulticast mode
[  487.599679][T14999] bridge3: left allmulticast mode
[  487.604905][T14999] vti0: left allmulticast mode
[  487.610345][T14999] bridge0: left allmulticast mode
[  487.615540][T14999] gtp0: left allmulticast mode
[  487.621755][T14999] bond2: left allmulticast mode
[  487.627008][T14999] mac80211_hwsim hwsim18 wlan2: left allmulticast mode
[  487.634035][T14999] veth2: left allmulticast mode
[  487.640119][T14999] veth3: left allmulticast mode
[  487.646086][T14999] syztnl1: left allmulticast mode
[  487.652154][T14999] bridge4: left allmulticast mode
[  487.658565][T14999] bridge5: left allmulticast mode
[  487.664278][T14999] bridge6: left allmulticast mode
[  487.669941][T14999] bridge7: left allmulticast mode
[  487.675763][T14999] bridge8: left allmulticast mode
[  487.683660][T14999] bridge9: left allmulticast mode
[  487.690804][T14999] bridge10: left allmulticast mode
[  487.696207][T14999] bridge11: left allmulticast mode
[  487.702939][T14999] bridge12: left allmulticast mode
[  487.708654][T14999] bridge13: left allmulticast mode
[  487.713884][T14999] bridge14: left allmulticast mode
[  487.720885][T14999] bridge15: left allmulticast mode
[  487.726528][T14999] bridge16: left allmulticast mode
[  487.732262][T14999] bridge17: left allmulticast mode
[  487.738727][T14999] bridge18: left allmulticast mode
[  487.743940][T14999] bridge19: left allmulticast mode
[  487.750010][T14999] bridge20: left allmulticast mode
[  487.755235][T14999] bridge21: left allmulticast mode
[  487.761889][T14999] bridge22: left allmulticast mode
[  487.767842][T14999] bridge23: left allmulticast mode
[  487.773307][T14999] bridge24: left allmulticast mode
[  487.780265][T14999] bridge25: left allmulticast mode
[  487.785704][T14999] bridge26: left allmulticast mode
[  487.794693][T14999] bridge27: left allmulticast mode
[  487.801270][T14999] bridge28: left allmulticast mode
[  487.806552][T14999] bridge29: left allmulticast mode
[  487.812270][T14999] bridge30: left allmulticast mode
[  487.819080][T14999] bridge31: left allmulticast mode
[  487.824354][T14999] bridge32: left allmulticast mode
[  487.830213][T14999] bridge33: left allmulticast mode
[  487.835541][T14999] bridge34: left allmulticast mode
[  487.842002][T14999] bridge35: left allmulticast mode
[  487.847763][T14999] bridge36: left allmulticast mode
[  487.852997][T14999] macvlan2: left allmulticast mode
[  487.859608][T14999] veth4: left allmulticast mode
[  487.864756][T14999] veth5: left allmulticast mode
[  487.870355][T14999] bridge37: left allmulticast mode
[  487.875593][T14999] vxlan0: left allmulticast mode
[  487.882523][T14999] veth6: left allmulticast mode
[  487.887907][T14999] veth7: left allmulticast mode
[  487.892956][T14999] ip6gre1: left allmulticast mode
[  487.899561][T14999] bridge38: left allmulticast mode
[  487.904793][T14999] geneve2: left allmulticast mode
[  487.912534][T14999] ip6gretap1: left allmulticast mode
[  487.921004][T14999] bridge41: left allmulticast mode
[  487.926423][T14999] bond4: left allmulticast mode
[  487.932729][T15002] vetè0_virt_wif: renamed from lo
[  487.940753][T15009] ip6tnl0: Caught tx_queue_len zero misconfig
[  487.948096][T15009] netlink: 'syz.0.2358': attribute type 3 has an invalid length.
[  488.113061][T15032] ip6tnl1: entered allmulticast mode
[  488.268776][T15015] lo speed is unknown, defaulting to 1000
[  488.923126][T15015] wg1 speed is unknown, defaulting to 1000
[  489.539341][T15076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  489.614191][T15076] syzkaller0: entered promiscuous mode
[  489.635407][T15076] syzkaller0: entered allmulticast mode
[  489.804350][T15055] lo speed is unknown, defaulting to 1000
[  489.899030][T15094] netlink: 'syz.1.2385': attribute type 1 has an invalid length.
[  489.921898][T15090] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.050999][T15096] 8021q: adding VLAN 0 to HW filter on device batadv2
[  490.061642][T15096] bond5: (slave batadv2): making interface the new active one
[  490.077933][T15096] bond5: (slave batadv2): Enslaving as an active interface with an up link
[  490.135123][T15090] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.183456][T15055] wg1 speed is unknown, defaulting to 1000
[  490.320243][T15090] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.478810][T15090] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.741539][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  490.829334][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  490.871665][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  490.922328][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  490.944829][T15122] __nla_validate_parse: 12 callbacks suppressed
[  490.944851][T15122] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2393'.
[  491.041024][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'.
[  491.085905][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2394'.
[  491.632359][T15160] wg1: left promiscuous mode
[  491.639942][T15160] wg1: left allmulticast mode
[  491.647971][T15160] veth0_to_team: left allmulticast mode
[  491.669968][T15160] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  491.701089][T15160] bond1: left promiscuous mode
[  491.706103][T15160] bond1: left allmulticast mode
[  491.724353][T15160] bond2: left allmulticast mode
[  491.734816][T15170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2408'.
[  491.738300][T15160] dummy0: left allmulticast mode
[  491.768770][T15160] bond4: left promiscuous mode
[  491.788581][T15160] bond4: left allmulticast mode
[  491.794191][T15160] geneve2: left promiscuous mode
[  491.812342][T15160] geneve2: left allmulticast mode
[  491.841993][T15160] geneve3: left promiscuous mode
[  491.879974][ T1102] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.924884][ T1102] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  492.041904][ T1102] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  492.052694][ T1102] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  492.433401][T15208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2416'.
[  492.490668][T15217] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  492.665138][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'.
[  492.741560][T15189] lo speed is unknown, defaulting to 1000
[  493.147202][T15257] FAULT_INJECTION: forcing a failure.
[  493.147202][T15257] name failslab, interval 1, probability 0, space 0, times 0
[  493.168763][T15257] CPU: 1 UID: 0 PID: 15257 Comm: syz.1.2424 Not tainted syzkaller #0 PREEMPT(full) 
[  493.168792][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  493.168804][T15257] Call Trace:
[  493.168811][T15257]  <TASK>
[  493.168821][T15257]  dump_stack_lvl+0xe8/0x150
[  493.168876][T15257]  should_fail_ex+0x414/0x560
[  493.168910][T15257]  should_failslab+0xa8/0x100
[  493.168932][T15257]  __kmalloc_cache_noprof+0x84/0x700
[  493.168953][T15257]  ? sctp_add_bind_addr+0x8c/0x370
[  493.168978][T15257]  ? __pfx_sctp_get_port_local+0x10/0x10
[  493.169001][T15257]  sctp_add_bind_addr+0x8c/0x370
[  493.169025][T15257]  ? sctp_auto_asconf_init+0x15c/0x1e0
[  493.169048][T15257]  sctp_do_bind+0x5b0/0x9d0
[  493.169095][T15257]  sctp_inet_listen+0x5d4/0x900
[  493.169126][T15257]  ? __pfx_sctp_inet_listen+0x10/0x10
[  493.169154][T15257]  ? __pfx_aa_sk_perm+0x10/0x10
[  493.169177][T15257]  ? __fget_files+0x2a/0x420
[  493.169202][T15257]  ? apparmor_socket_listen+0xde/0x180
[  493.169229][T15257]  __x64_sys_listen+0x1c7/0x240
[  493.169251][T15257]  do_syscall_64+0xec/0xf80
[  493.169271][T15257]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.169290][T15257]  ? trace_irq_disable+0x37/0x100
[  493.169313][T15257]  ? clear_bhb_loop+0x60/0xb0
[  493.169336][T15257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.169355][T15257] RIP: 0033:0x7f114f98f749
[  493.169372][T15257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.169389][T15257] RSP: 002b:00007f11507db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[  493.169409][T15257] RAX: ffffffffffffffda RBX: 00007f114fbe6090 RCX: 00007f114f98f749
[  493.169425][T15257] RDX: 0000000000000000 RSI: 0000000040000000 RDI: 0000000000000004
[  493.169436][T15257] RBP: 00007f11507db090 R08: 0000000000000000 R09: 0000000000000000
[  493.169448][T15257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.169460][T15257] R13: 00007f114fbe6128 R14: 00007f114fbe6090 R15: 00007ffc43f1b308
[  493.169492][T15257]  </TASK>
[  493.404227][T15189] wg1 speed is unknown, defaulting to 1000
[  493.643581][T15262] netlink: 'syz.4.2428': attribute type 2 has an invalid length.
[  493.729687][T15271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'.
[  494.426904][T15279] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  494.860805][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'.
[  496.602695][T15334] netlink: 'syz.4.2447': attribute type 1 has an invalid length.
[  496.663135][T15338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2447'.
[  496.695293][T15310] lo speed is unknown, defaulting to 1000
[  496.746482][T15336] pim6reg1: entered promiscuous mode
[  496.779367][T15336] pim6reg1: entered allmulticast mode
[  496.831373][T15341] netlink: 'syz.3.2449': attribute type 9 has an invalid length.
[  496.837272][T15343] netlink: 'syz.3.2449': attribute type 9 has an invalid length.
[  496.855388][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2450'.
[  496.877501][T15343] netlink: 'syz.3.2449': attribute type 11 has an invalid length.
[  496.895749][T15343] netlink: 'syz.3.2449': attribute type 12 has an invalid length.
[  496.916043][T15343] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2449'.
[  496.968587][T15341] netlink: 'syz.3.2449': attribute type 11 has an invalid length.
[  496.980654][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2449'.
[  496.997194][T15341] netlink: 'syz.3.2449': attribute type 12 has an invalid length.
[  497.041616][T15341] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2449'.
[  497.052195][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2449'.
[  497.066202][T15347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2451'.
[  497.290484][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'.
[  497.306801][T15310] wg1 speed is unknown, defaulting to 1000
[  497.421981][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'.
[  497.525790][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'.
[  497.551089][T15366] openvswitch: netlink: Message has 8 unknown bytes.
[  498.027138][T15387] FAULT_INJECTION: forcing a failure.
[  498.027138][T15387] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  498.046540][T15387] CPU: 0 UID: 0 PID: 15387 Comm: syz.0.2465 Not tainted syzkaller #0 PREEMPT(full) 
[  498.046571][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  498.046584][T15387] Call Trace:
[  498.046592][T15387]  <TASK>
[  498.046600][T15387]  dump_stack_lvl+0xe8/0x150
[  498.046631][T15387]  should_fail_ex+0x414/0x560
[  498.046667][T15387]  _copy_to_user+0x31/0xb0
[  498.046699][T15387]  simple_read_from_buffer+0xe1/0x170
[  498.046729][T15387]  proc_fail_nth_read+0x1b3/0x220
[  498.046752][T15387]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  498.046775][T15387]  ? rw_verify_area+0x2a6/0x4d0
[  498.046793][T15387]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  498.046813][T15387]  vfs_read+0x200/0xa30
[  498.046828][T15387]  ? fdget_pos+0x247/0x320
[  498.046854][T15387]  ? __pfx___mutex_lock+0x10/0x10
[  498.046876][T15387]  ? __pfx_vfs_read+0x10/0x10
[  498.046896][T15387]  ? __fget_files+0x2a/0x420
[  498.046923][T15387]  ? __fget_files+0x3a0/0x420
[  498.046945][T15387]  ? __fget_files+0x2a/0x420
[  498.046976][T15387]  ksys_read+0x145/0x250
[  498.046996][T15387]  ? __pfx_ksys_read+0x10/0x10
[  498.047021][T15387]  do_syscall_64+0xec/0xf80
[  498.047038][T15387]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.047057][T15387]  ? trace_irq_disable+0x37/0x100
[  498.047082][T15387]  ? clear_bhb_loop+0x60/0xb0
[  498.047106][T15387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.047125][T15387] RIP: 0033:0x7f8cc098e15c
[  498.047142][T15387] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  498.047160][T15387] RSP: 002b:00007f8cc1828030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  498.047181][T15387] RAX: ffffffffffffffda RBX: 00007f8cc0be6090 RCX: 00007f8cc098e15c
[  498.047197][T15387] RDX: 000000000000000f RSI: 00007f8cc18280a0 RDI: 0000000000000007
[  498.047210][T15387] RBP: 00007f8cc1828090 R08: 0000000000000000 R09: 0000000000000000
[  498.047222][T15387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.047234][T15387] R13: 00007f8cc0be6128 R14: 00007f8cc0be6090 R15: 00007ffd1057d2f8
[  498.047268][T15387]  </TASK>
[  498.718737][T15407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  498.751603][T15407] syzkaller0: entered promiscuous mode
[  498.777578][T15407] syzkaller0: entered allmulticast mode
[  498.840958][T15407] tipc: Resetting bearer <eth:syzkaller0>
[  498.862033][T15405] tipc: Resetting bearer <eth:syzkaller0>
[  498.912299][T15405] tipc: Disabling bearer <eth:syzkaller0>
[  499.051543][T15421] netlink: 'syz.0.2476': attribute type 5 has an invalid length.
[  499.084132][T15421] ip6erspan0: entered promiscuous mode
[  499.665655][T15451] tipc: Resetting bearer <eth:syzkaller0>
[  499.726988][T15451] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  499.863234][T15450] 8021q: adding VLAN 0 to HW filter on device bond6
[  499.874519][T15453] netlink: 'syz.0.2481': attribute type 16 has an invalid length.
[  499.893013][T10210] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  499.917801][T10210] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.003052][T10210] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.026448][T10210] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.798005][ T9092] IPVS: starting estimator thread 0...
[  500.883792][T15479] lo speed is unknown, defaulting to 1000
[  500.920052][T15488] IPVS: using max 30 ests per chain, 72000 per kthread
[  501.154608][T15507] netlink: 'syz.0.2494': attribute type 1 has an invalid length.
[  501.276727][T15507] 8021q: adding VLAN 0 to HW filter on device bond4
[  501.340443][T15505] bond4: (slave ip6gretap1): making interface the new active one
[  501.379743][T15505] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  501.501413][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  501.591513][T15479] wg1 speed is unknown, defaulting to 1000
[  501.593321][T15485] lo speed is unknown, defaulting to 1000
[  501.620746][T15525] netlink: 'syz.1.2498': attribute type 21 has an invalid length.
[  501.642785][T15525] netlink: 'syz.1.2498': attribute type 5 has an invalid length.
[  501.667129][T15525] netlink: 'syz.1.2498': attribute type 6 has an invalid length.
[  501.674980][T15525] __nla_validate_parse: 24 callbacks suppressed
[  501.674998][T15525] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2498'.
[  501.749973][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2498'.
[  501.869856][T15530] xt_l2tp: invalid flags combination: 0
[  501.886422][T15531] xt_l2tp: invalid flags combination: 0
[  501.902401][T15533] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  501.917989][T15533] CPU: 1 UID: 0 PID: 15533 Comm: syz.0.2502 Not tainted syzkaller #0 PREEMPT(full) 
[  501.918018][T15533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  501.918030][T15533] Call Trace:
[  501.918038][T15533]  <TASK>
[  501.918047][T15533]  dump_stack_lvl+0xe8/0x150
[  501.918076][T15533]  sysfs_warn_dup+0x8e/0xa0
[  501.918099][T15533]  sysfs_do_create_link_sd+0xc0/0x110
[  501.918122][T15533]  device_add_class_symlinks+0x1cf/0x240
[  501.918147][T15533]  device_add+0x475/0xb80
[  501.918171][T15533]  wiphy_register+0x1d2e/0x2d20
[  501.918216][T15533]  ? __pfx_wiphy_register+0x10/0x10
[  501.918243][T15533]  ? __pfx_netdev_run_todo+0x10/0x10
[  501.918270][T15533]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  501.918301][T15533]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  501.918327][T15533]  ieee80211_register_hw+0x34a7/0x4110
[  501.918373][T15533]  ? ieee80211_register_hw+0x1451/0x4110
[  501.918406][T15533]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  501.918447][T15533]  ? __hrtimer_setup+0x181/0x200
[  501.918470][T15533]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  501.918498][T15533]  mac80211_hwsim_new_radio+0x2f6d/0x52f0
[  501.918550][T15533]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  501.918569][T15533]  ? kstrndup+0xbf/0x160
[  501.918601][T15533]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  501.918626][T15533]  ? __pfx___nla_validate_parse+0x10/0x10
[  501.918663][T15533]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  501.918691][T15533]  ? rcu_is_watching+0x15/0xb0
[  501.918718][T15533]  ? __nla_parse+0x40/0x60
[  501.918743][T15533]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  501.918773][T15533]  genl_family_rcv_msg_doit+0x215/0x300
[  501.918800][T15533]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  501.918834][T15533]  ? bpf_lsm_capable+0x9/0x20
[  501.918856][T15533]  ? security_capable+0x7e/0x2e0
[  501.918886][T15533]  genl_rcv_msg+0x60e/0x790
[  501.918912][T15533]  ? __pfx_genl_rcv_msg+0x10/0x10
[  501.918929][T15533]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  501.918965][T15533]  netlink_rcv_skb+0x208/0x470
[  501.918994][T15533]  ? __pfx_genl_rcv_msg+0x10/0x10
[  501.919015][T15533]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  501.919036][T15533]  ? genl_rcv+0x19/0x40
[  501.919083][T15533]  ? down_read+0x274/0x2e0
[  501.919104][T15533]  ? genl_rcv+0xd/0x40
[  501.919134][T15533]  genl_rcv+0x28/0x40
[  501.919160][T15533]  netlink_unicast+0x82f/0x9e0
[  501.919192][T15533]  ? __pfx_netlink_unicast+0x10/0x10
[  501.919213][T15533]  ? __alloc_skb+0x198/0x3a0
[  501.919233][T15533]  ? netlink_sendmsg+0x642/0xb30
[  501.919255][T15533]  ? skb_put+0x11b/0x210
[  501.919280][T15533]  netlink_sendmsg+0x805/0xb30
[  501.919315][T15533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.919344][T15533]  ? aa_sock_msg_perm+0xf1/0x1b0
[  501.919377][T15533]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  501.919395][T15533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.919421][T15533]  __sock_sendmsg+0x21c/0x270
[  501.919453][T15533]  ____sys_sendmsg+0x505/0x820
[  501.919483][T15533]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.919517][T15533]  ? import_iovec+0x74/0xa0
[  501.919545][T15533]  ___sys_sendmsg+0x21f/0x2a0
[  501.919571][T15533]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.919603][T15533]  ? futex_wait+0x285/0x360
[  501.919656][T15533]  ? __fget_files+0x2a/0x420
[  501.919679][T15533]  ? __fget_files+0x3a0/0x420
[  501.919715][T15533]  __x64_sys_sendmsg+0x19b/0x260
[  501.919742][T15533]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  501.919776][T15533]  ? rcu_is_watching+0x15/0xb0
[  501.919814][T15533]  do_syscall_64+0xec/0xf80
[  501.919834][T15533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.919852][T15533]  ? trace_irq_disable+0x37/0x100
[  501.919877][T15533]  ? clear_bhb_loop+0x60/0xb0
[  501.919901][T15533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.919920][T15533] RIP: 0033:0x7f8cc098f749
[  501.919938][T15533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.919956][T15533] RSP: 002b:00007f8cc1849038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.919977][T15533] RAX: ffffffffffffffda RBX: 00007f8cc0be5fa0 RCX: 00007f8cc098f749
[  501.919993][T15533] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  501.920006][T15533] RBP: 00007f8cc0a13f91 R08: 0000000000000000 R09: 0000000000000000
[  501.920023][T15533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  501.920036][T15533] R13: 00007f8cc0be6038 R14: 00007f8cc0be5fa0 R15: 00007ffd1057d2f8
[  501.920070][T15533]  </TASK>
[  502.545307][T15485] wg1 speed is unknown, defaulting to 1000
[  502.672347][T15525] lo speed is unknown, defaulting to 1000
[  502.831127][T15539] sctp: [Deprecated]: syz.4.2503 (pid 15539) Use of int in maxseg socket option.
[  502.831127][T15539] Use struct sctp_assoc_value instead
[  502.880289][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'.
[  503.197873][T15525] wg1 speed is unknown, defaulting to 1000
[  504.122379][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'.
[  504.164833][T15571] netlink: 'syz.0.2513': attribute type 2 has an invalid length.
[  504.323588][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2513'.
[  504.773493][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2520'.
[  504.968858][T15605] syzkaller0: left promiscuous mode
[  504.974125][T15605] syzkaller0: left allmulticast mode
[  505.188720][T15616] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2524'.
[  505.242173][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'.
[  505.322727][T15620] tipc: Resetting bearer <eth:rose0>
[  505.384771][T15602] lo speed is unknown, defaulting to 1000
[  505.465413][T15628] netlink: 'syz.1.2525': attribute type 13 has an invalid length.
[  505.738637][ T9092] lo speed is unknown, defaulting to 1000
[  505.744504][ T9092] syz0: Port: 1 Link DOWN
[  505.753975][T15630] ip6gre1: entered promiscuous mode
[  505.762012][T15630] ip6gre1: entered allmulticast mode
[  505.798113][T15602] wg1 speed is unknown, defaulting to 1000
[  505.800748][ T5963] lo speed is unknown, defaulting to 1000
[  506.087679][T15647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2533'.
[  506.481661][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.489005][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.496257][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.503550][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.510824][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.518095][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.525446][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.532735][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.540004][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.547355][T15658] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  506.977937][T15689] netlink: 'syz.1.2543': attribute type 2 has an invalid length.
[  507.000210][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'.
[  507.010446][T15660] lo speed is unknown, defaulting to 1000
[  507.184737][T15695] IPVS: Scheduler module ip_vs_sip not found
[  507.335773][   T30] audit: type=1800 audit(1767798075.022:7): pid=15702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2548" name=CB dev="tmpfs" ino=2528 res=0 errno=0
[  507.448536][T15714] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2551'.
[  507.501201][T15660] wg1 speed is unknown, defaulting to 1000
[  507.984243][T15753] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2556'.
[  508.017738][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'.
[  508.300509][T15734] lo speed is unknown, defaulting to 1000
[  508.553112][T15770] netlink: 'syz.0.2561': attribute type 10 has an invalid length.
[  508.569509][T15772] xt_cgroup: invalid path, errno=-2
[  508.585603][T15770] 8021q: adding VLAN 0 to HW filter on device `
[  508.663268][T15770] `: entered promiscuous mode
[  508.669615][T15770] team_slave_0: entered promiscuous mode
[  508.675384][T15766] netlink: 'syz.0.2561': attribute type 1 has an invalid length.
[  508.675491][T15770] team_slave_1: entered promiscuous mode
[  508.715831][T15770] bond0: (slave `): Enslaving as an active interface with an up link
[  508.938317][T15734] wg1 speed is unknown, defaulting to 1000
[  508.973559][T15777] rdma_rxe: rxe_newlink: failed to add bond0
[  509.346079][T15791] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  510.201855][T15827] netlink: 'syz.4.2575': attribute type 21 has an invalid length.
[  510.210146][T15827] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2575'.
[  510.252637][T15822] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  510.263612][T15827] netlink: 'syz.4.2575': attribute type 4 has an invalid length.
[  510.283169][T15827] netlink: 'syz.4.2575': attribute type 5 has an invalid length.
[  510.296028][T15827] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2575'.
[  510.328493][T15825] team0: Port device ip6gre0 removed
[  510.335792][T15827] netlink: 'syz.4.2575': attribute type 4 has an invalid length.
[  510.344559][T15825] bond0: (slave bridge_slave_1): Releasing backup interface
[  562.939951][ T1300] net_ratelimit: 3257 callbacks suppressed
[  562.939971][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  575.427048][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  575.445476][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2579'.
[  575.447440][T15846] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2578'.
[  575.479290][T15844] netlink: 'syz.1.2579': attribute type 5 has an invalid length.
[  575.487124][T15844] netlink: 'syz.1.2579': attribute type 6 has an invalid length.
[  575.996724][T15884] netlink: 'syz.2.2591': attribute type 8 has an invalid length.
[  576.010550][T15884] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2591'.
[  576.184684][T15894] geneve3: entered promiscuous mode
[  576.193320][T15894] geneve3: entered allmulticast mode
[  576.236784][T15900] tap0: tun_chr_ioctl cmd 2148553947
[  576.247986][T15900] tap0: tun_chr_ioctl cmd 2147767521
[  576.280486][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'.
[  576.289812][T15900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  576.298811][T15900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  576.307416][T15900] batman_adv: batadv0: Removing interface: macvtap0
[  576.340652][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'.
[  576.516702][T15910] openvswitch: netlink: Key type 149 is out of range max 32
[  576.562219][T15910] netlink: 'syz.3.2598': attribute type 8 has an invalid length.
[  577.223428][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'.
[  577.277945][T15929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.321594][T15937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2601'.
[  577.435732][T15937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  577.493895][T15944] vetè0_virt_wif: entered promiscuous mode
[  577.543656][T15944] tunl0: entered promiscuous mode
[  577.589102][T15944] gre0: entered promiscuous mode
[  577.610244][T15944] gretap0: entered promiscuous mode
[  577.635047][T15944] erspan0: entered promiscuous mode
[  577.675543][T15944] ip_vti0: entered promiscuous mode
[  577.702433][T15944] ip6_vti0: entered promiscuous mode
[  577.730211][T15944] sit0: entered promiscuous mode
[  577.743057][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2608'.
[  577.764501][T15944] ip6tnl0: entered promiscuous mode
[  577.772941][T15944] ip6gre0: entered promiscuous mode
[  577.781600][T15944] syz_tun: entered promiscuous mode
[  577.804988][T15944] ip6gretap0: entered promiscuous mode
[  577.824423][T15944] bridge0: entered promiscuous mode
[  577.853822][T15944] team0: entered promiscuous mode
[  577.865121][T15944] team_slave_0: entered promiscuous mode
[  577.882225][T15944] team_slave_1: entered promiscuous mode
[  577.901120][T15944] 8021q: adding VLAN 0 to HW filter on device team0
[  577.926476][T15944] dummy0: entered promiscuous mode
[  577.959027][T15944] nlmon0: entered promiscuous mode
[  577.985114][T15944] caif0: entered promiscuous mode
[  577.998395][T15944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  578.054872][T15945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  578.261659][T15968] netlink: 'syz.1.2612': attribute type 13 has an invalid length.
[  578.347329][T15973] xt_ecn: cannot match TCP bits for non-tcp packets
[  578.529176][T15988] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048)
[  578.623392][T15992] macvtap1: entered promiscuous mode
[  578.629295][T15992] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  578.709482][T15996] bond7: option ad_select: invalid value (34)
[  578.733075][T16005] netlink: zone id is out of range
[  578.738735][T16005] netlink: zone id is out of range
[  578.743877][T16005] netlink: zone id is out of range
[  578.749388][T16005] netlink: zone id is out of range
[  578.754028][T15996] bond7 (unregistering): Released all slaves
[  578.766186][T16008] netlink: 'syz.4.2622': attribute type 33 has an invalid length.
[  578.774523][T16008] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2622'.
[  579.149198][T16032] netlink: 'syz.3.2628': attribute type 4 has an invalid length.
[  579.236779][T16038] netlink: 'syz.1.2629': attribute type 8 has an invalid length.
[  579.696786][T16059] sit0: left promiscuous mode
[  579.721113][T16059] ip6gre0: left promiscuous mode
[  579.751538][T16059] ==================================================================
[  579.760142][T16059] BUG: KASAN: slab-use-after-free in arp_create+0x859/0x990
[  579.767468][T16059] Write of size 2 at addr ffff888031c51d50 by task syz.3.2633/16059
[  579.775767][T16059] 
[  579.778096][T16059] CPU: 0 UID: 0 PID: 16059 Comm: syz.3.2633 Not tainted syzkaller #0 PREEMPT(full) 
[  579.778119][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  579.778131][T16059] Call Trace:
[  579.778140][T16059]  <TASK>
[  579.778149][T16059]  dump_stack_lvl+0xe8/0x150
[  579.778176][T16059]  print_report+0xca/0x240
[  579.778193][T16059]  ? arp_create+0x859/0x990
[  579.778217][T16059]  kasan_report+0x118/0x150
[  579.778238][T16059]  ? __build_skb_around+0x22d/0x3c0
[  579.778257][T16059]  ? arp_create+0x859/0x990
[  579.778280][T16059]  arp_create+0x859/0x990
[  579.778303][T16059]  ? __pfx_arp_create+0x10/0x10
[  579.778327][T16059]  arp_send+0xa5/0x190
[  579.778349][T16059]  inetdev_event+0x1156/0x15b0
[  579.778371][T16059]  ? __pfx_inetdev_event+0x10/0x10
[  579.778394][T16059]  notifier_call_chain+0x19d/0x3a0
[  579.778417][T16059]  __dev_notify_flags+0x18d/0x2e0
[  579.778438][T16059]  ? __pfx___dev_notify_flags+0x10/0x10
[  579.778456][T16059]  ? __dev_change_flags+0x4af/0x680
[  579.778477][T16059]  ? __pfx___dev_change_flags+0x10/0x10
[  579.778495][T16059]  ? netif_state_change+0x289/0x380
[  579.778510][T16059]  ? lockdep_rtnl_is_held+0x26/0x40
[  579.778532][T16059]  ? __pfx_netif_state_change+0x10/0x10
[  579.778549][T16059]  netif_change_flags+0xe8/0x1a0
[  579.778571][T16059]  do_setlink+0xc55/0x41c0
[  579.778591][T16059]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  579.778621][T16059]  ? __pfx_do_setlink+0x10/0x10
[  579.778641][T16059]  ? __pfx_stack_trace_save+0x10/0x10
[  579.778672][T16059]  ? __mutex_trylock_common+0x153/0x260
[  579.778693][T16059]  ? __pfx___mutex_trylock_common+0x10/0x10
[  579.778714][T16059]  ? rcu_is_watching+0x15/0xb0
[  579.778734][T16059]  ? trace_contention_end+0x39/0x100
[  579.778754][T16059]  ? __mutex_lock+0x335/0x1350
[  579.778777][T16059]  ? rtnl_newlink+0x8ec/0x1c90
[  579.778795][T16059]  ? __pfx___mutex_lock+0x10/0x10
[  579.778816][T16059]  ? ns_capable+0x8a/0xf0
[  579.778834][T16059]  rtnl_newlink+0x14b0/0x1c90
[  579.778856][T16059]  ? __pfx_rtnl_newlink+0x10/0x10
[  579.778873][T16059]  ? __lock_acquire+0x6b6/0x2cf0
[  579.778892][T16059]  ? sched_clock_cpu+0x74/0x430
[  579.778909][T16059]  ? do_raw_spin_lock+0x121/0x290
[  579.778938][T16059]  ? rcu_is_watching+0x15/0xb0
[  579.778957][T16059]  ? trace_sched_exit_tp+0x36/0xf0
[  579.778980][T16059]  ? __schedule+0x14b1/0x4fd0
[  579.778994][T16059]  ? is_bpf_text_address+0x26/0x2b0
[  579.779023][T16059]  ? __lock_acquire+0x6b6/0x2cf0
[  579.779043][T16059]  ? __pfx___schedule+0x10/0x10
[  579.779057][T16059]  ? irqentry_exit+0x5dd/0x660
[  579.779076][T16059]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  579.779099][T16059]  ? __pfx_rtnl_newlink+0x10/0x10
[  579.779115][T16059]  rtnetlink_rcv_msg+0x7cf/0xb70
[  579.779133][T16059]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  579.779150][T16059]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  579.779166][T16059]  ? __lock_acquire+0x6b6/0x2cf0
[  579.779187][T16059]  netlink_rcv_skb+0x208/0x470
[  579.779213][T16059]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  579.779230][T16059]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  579.779254][T16059]  ? netlink_deliver_tap+0x2e/0x1b0
[  579.779277][T16059]  netlink_unicast+0x82f/0x9e0
[  579.779298][T16059]  ? __pfx_netlink_unicast+0x10/0x10
[  579.779314][T16059]  ? __alloc_skb+0x198/0x3a0
[  579.779331][T16059]  ? netlink_sendmsg+0x642/0xb30
[  579.779351][T16059]  ? skb_put+0x11b/0x210
[  579.779369][T16059]  netlink_sendmsg+0x805/0xb30
[  579.779394][T16059]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.779416][T16059]  ? aa_sock_msg_perm+0xf1/0x1b0
[  579.779438][T16059]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  579.779453][T16059]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.779474][T16059]  __sock_sendmsg+0x21c/0x270
[  579.779498][T16059]  ____sys_sendmsg+0x505/0x820
[  579.779519][T16059]  ? __pfx_____sys_sendmsg+0x10/0x10
[  579.779541][T16059]  ? import_iovec+0x74/0xa0
[  579.779561][T16059]  ___sys_sendmsg+0x21f/0x2a0
[  579.779581][T16059]  ? __pfx____sys_sendmsg+0x10/0x10
[  579.779602][T16059]  ? futex_wake+0x4b2/0x560
[  579.779632][T16059]  ? __fget_files+0x2a/0x420
[  579.779652][T16059]  ? __fget_files+0x3a0/0x420
[  579.779676][T16059]  __x64_sys_sendmsg+0x19b/0x260
[  579.779696][T16059]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  579.779719][T16059]  ? rcu_is_watching+0x15/0xb0
[  579.779742][T16059]  do_syscall_64+0xec/0xf80
[  579.779759][T16059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.779775][T16059]  ? trace_irq_disable+0x37/0x100
[  579.779796][T16059]  ? clear_bhb_loop+0x60/0xb0
[  579.779814][T16059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.779831][T16059] RIP: 0033:0x7f50a2d8f749
[  579.779848][T16059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.779864][T16059] RSP: 002b:00007f50a3c64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.779882][T16059] RAX: ffffffffffffffda RBX: 00007f50a2fe6180 RCX: 00007f50a2d8f749
[  579.779896][T16059] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000d
[  579.779907][T16059] RBP: 00007f50a2e13f91 R08: 0000000000000000 R09: 0000000000000000
[  579.779918][T16059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.779928][T16059] R13: 00007f50a2fe6218 R14: 00007f50a2fe6180 R15: 00007ffe4aa758d8
[  579.779949][T16059]  </TASK>
[  579.779955][T16059] 
[  580.288707][T16059] Allocated by task 16059:
[  580.293113][T16059]  kasan_save_track+0x3e/0x80
[  580.297789][T16059]  __kasan_slab_alloc+0x6c/0x80
[  580.302636][T16059]  kmem_cache_alloc_node_noprof+0x43c/0x720
[  580.308711][T16059]  kmalloc_reserve+0xbd/0x290
[  580.313407][T16059]  __alloc_skb+0x204/0x3a0
[  580.317814][T16059]  arp_create+0x189/0x990
[  580.322140][T16059]  arp_send+0xa5/0x190
[  580.326199][T16059]  inetdev_event+0x1156/0x15b0
[  580.331256][T16059]  notifier_call_chain+0x19d/0x3a0
[  580.336412][T16059]  __dev_notify_flags+0x18d/0x2e0
[  580.341708][T16059]  netif_change_flags+0xe8/0x1a0
[  580.346843][T16059]  do_setlink+0xc55/0x41c0
[  580.351351][T16059]  rtnl_newlink+0x14b0/0x1c90
[  580.356022][T16059]  rtnetlink_rcv_msg+0x7cf/0xb70
[  580.361146][T16059]  netlink_rcv_skb+0x208/0x470
[  580.365943][T16059]  netlink_unicast+0x82f/0x9e0
[  580.370705][T16059]  netlink_sendmsg+0x805/0xb30
[  580.375557][T16059]  __sock_sendmsg+0x21c/0x270
[  580.380326][T16059]  ____sys_sendmsg+0x505/0x820
[  580.385093][T16059]  ___sys_sendmsg+0x21f/0x2a0
[  580.389764][T16059]  __x64_sys_sendmsg+0x19b/0x260
[  580.394697][T16059]  do_syscall_64+0xec/0xf80
[  580.399233][T16059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.405249][T16059] 
[  580.407845][T16059] Freed by task 16059:
[  580.411905][T16059]  kasan_save_track+0x3e/0x80
[  580.416577][T16059]  kasan_save_free_info+0x46/0x50
[  580.421600][T16059]  __kasan_slab_free+0x5c/0x80
[  580.426358][T16059]  kmem_cache_free+0x197/0x620
[  580.431110][T16059]  pskb_expand_head+0x39e/0x1160
[  580.436049][T16059]  ip6gre_header+0x13c/0x820
[  580.440631][T16059]  arp_create+0x3fd/0x990
[  580.445131][T16059]  arp_send+0xa5/0x190
[  580.449192][T16059]  inetdev_event+0x1156/0x15b0
[  580.453957][T16059]  notifier_call_chain+0x19d/0x3a0
[  580.459072][T16059]  __dev_notify_flags+0x18d/0x2e0
[  580.464089][T16059]  netif_change_flags+0xe8/0x1a0
[  580.469132][T16059]  do_setlink+0xc55/0x41c0
[  580.473541][T16059]  rtnl_newlink+0x14b0/0x1c90
[  580.478206][T16059]  rtnetlink_rcv_msg+0x7cf/0xb70
[  580.483135][T16059]  netlink_rcv_skb+0x208/0x470
[  580.487979][T16059]  netlink_unicast+0x82f/0x9e0
[  580.492731][T16059]  netlink_sendmsg+0x805/0xb30
[  580.497484][T16059]  __sock_sendmsg+0x21c/0x270
[  580.502260][T16059]  ____sys_sendmsg+0x505/0x820
[  580.507035][T16059]  ___sys_sendmsg+0x21f/0x2a0
[  580.511706][T16059]  __x64_sys_sendmsg+0x19b/0x260
[  580.516657][T16059]  do_syscall_64+0xec/0xf80
[  580.521361][T16059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.527346][T16059] 
[  580.529684][T16059] The buggy address belongs to the object at ffff888031c51d40
[  580.529684][T16059]  which belongs to the cache skbuff_small_head of size 704
[  580.544258][T16059] The buggy address is located 16 bytes inside of
[  580.544258][T16059]  freed 704-byte region [ffff888031c51d40, ffff888031c52000)
[  580.558095][T16059] 
[  580.560514][T16059] The buggy address belongs to the physical page:
[  580.567034][T16059] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31c50
[  580.575896][T16059] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  580.584486][T16059] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  580.592036][T16059] page_type: f5(slab)
[  580.596062][T16059] raw: 00fff00000000040 ffff88801d6e1c80 dead000000000122 0000000000000000
[  580.604865][T16059] raw: 0000000000000000 0000000080130013 00000000f5000000 0000000000000000
[  580.613990][T16059] head: 00fff00000000040 ffff88801d6e1c80 dead000000000122 0000000000000000
[  580.622750][T16059] head: 0000000000000000 0000000080130013 00000000f5000000 0000000000000000
[  580.631511][T16059] head: 00fff00000000002 ffffea0000c71401 00000000ffffffff 00000000ffffffff
[  580.640652][T16059] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  580.649319][T16059] page dumped because: kasan: bad access detected
[  580.655735][T16059] page_owner tracks the page as allocated
[  580.661442][T16059] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16059, tgid 16050 (syz.3.2633), ts 579733121729, free_ts 429869578042
[  580.683078][T16059]  post_alloc_hook+0x234/0x290
[  580.687851][T16059]  get_page_from_freelist+0x24e0/0x2580
[  580.693510][T16059]  __alloc_frozen_pages_noprof+0x181/0x370
[  580.699518][T16059]  alloc_pages_mpol+0x232/0x4a0
[  580.704629][T16059]  allocate_slab+0x86/0x3b0
[  580.709740][T16059]  ___slab_alloc+0xe53/0x1820
[  580.714679][T16059]  __slab_alloc+0x65/0x100
[  580.719535][T16059]  kmem_cache_alloc_node_noprof+0x4ce/0x720
[  580.725496][T16059]  kmalloc_reserve+0xbd/0x290
[  580.730193][T16059]  __alloc_skb+0x204/0x3a0
[  580.735239][T16059]  inet_ifmcaddr_notify+0x7e/0x150
[  580.740914][T16059]  ____ip_mc_inc_group+0x9a8/0xdd0
[  580.746836][T16059]  ip_mc_up+0x115/0x2e0
[  580.752231][T16059]  inetdev_event+0xf93/0x15b0
[  580.757460][T16059]  notifier_call_chain+0x19d/0x3a0
[  580.762949][T16059]  __dev_notify_flags+0x18d/0x2e0
[  580.768076][T16059] page last free pid 5186 tgid 5186 stack trace:
[  580.774633][T16059]  __free_frozen_pages+0xbc8/0xd30
[  580.779757][T16059]  __slab_free+0x2ce/0x320
[  580.784346][T16059]  qlist_free_all+0x97/0x100
[  580.788956][T16059]  kasan_quarantine_reduce+0x148/0x160
[  580.794496][T16059]  __kasan_slab_alloc+0x22/0x80
[  580.799341][T16059]  __kmalloc_node_track_caller_noprof+0x526/0x820
[  580.806038][T16059]  kmalloc_reserve+0x136/0x290
[  580.811879][T16059]  __alloc_skb+0x204/0x3a0
[  580.816735][T16059]  alloc_skb_with_frags+0xca/0x890
[  580.822741][T16059]  sock_alloc_send_pskb+0x84d/0x980
[  580.828244][T16059]  unix_dgram_sendmsg+0x454/0x1840
[  580.834213][T16059]  __sock_sendmsg+0x21c/0x270
[  580.839794][T16059]  __sys_sendto+0x3bd/0x520
[  580.844398][T16059]  __x64_sys_sendto+0xde/0x100
[  580.849490][T16059]  do_syscall_64+0xec/0xf80
[  580.854144][T16059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.860482][T16059] 
[  580.862799][T16059] Memory state around the buggy address:
[  580.868420][T16059]  ffff888031c51c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  580.876470][T16059]  ffff888031c51c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  580.884524][T16059] >ffff888031c51d00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  580.892574][T16059]                                                  ^
[  580.899337][T16059]  ffff888031c51d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  580.907546][T16059]  ffff888031c51e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  580.915880][T16059] ==================================================================
[  580.944326][T16062] __nla_validate_parse: 3 callbacks suppressed
[  580.944345][T16062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2637'.
[  580.951217][T16059] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  580.951237][T16059] CPU: 0 UID: 0 PID: 16059 Comm: syz.3.2633 Not tainted syzkaller #0 PREEMPT(full) 
[  580.951260][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  580.951273][T16059] Call Trace:
[  580.991222][T16059]  <TASK>
[  580.994169][T16059]  vpanic+0x1e0/0x670
[  580.998180][T16059]  panic+0xb9/0xc0
[  581.001954][T16059]  ? __pfx_panic+0x10/0x10
[  581.006481][T16059]  ? preempt_schedule_thunk+0x16/0x30
[  581.012249][T16059]  ? arp_create+0x859/0x990
[  581.016921][T16059]  check_panic_on_warn+0x89/0xb0
[  581.022433][T16059]  ? arp_create+0x859/0x990
[  581.026962][T16059]  end_report+0x6f/0x140
[  581.031222][T16059]  kasan_report+0x129/0x150
[  581.035896][T16059]  ? __build_skb_around+0x22d/0x3c0
[  581.041212][T16059]  ? arp_create+0x859/0x990
[  581.045838][T16059]  arp_create+0x859/0x990
[  581.050216][T16059]  ? __pfx_arp_create+0x10/0x10
[  581.055161][T16059]  arp_send+0xa5/0x190
[  581.059365][T16059]  inetdev_event+0x1156/0x15b0
[  581.064408][T16059]  ? __pfx_inetdev_event+0x10/0x10
[  581.069712][T16059]  notifier_call_chain+0x19d/0x3a0
[  581.074835][T16059]  __dev_notify_flags+0x18d/0x2e0
[  581.079862][T16059]  ? __pfx___dev_notify_flags+0x10/0x10
[  581.085416][T16059]  ? __dev_change_flags+0x4af/0x680
[  581.090618][T16059]  ? __pfx___dev_change_flags+0x10/0x10
[  581.096155][T16059]  ? netif_state_change+0x289/0x380
[  581.101344][T16059]  ? lockdep_rtnl_is_held+0x26/0x40
[  581.106732][T16059]  ? __pfx_netif_state_change+0x10/0x10
[  581.112574][T16059]  netif_change_flags+0xe8/0x1a0
[  581.117620][T16059]  do_setlink+0xc55/0x41c0
[  581.122039][T16059]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  581.128222][T16059]  ? __pfx_do_setlink+0x10/0x10
[  581.133091][T16059]  ? __pfx_stack_trace_save+0x10/0x10
[  581.138481][T16059]  ? __mutex_trylock_common+0x153/0x260
[  581.144028][T16059]  ? __pfx___mutex_trylock_common+0x10/0x10
[  581.150101][T16059]  ? rcu_is_watching+0x15/0xb0
[  581.154963][T16059]  ? trace_contention_end+0x39/0x100
[  581.160269][T16059]  ? __mutex_lock+0x335/0x1350
[  581.165073][T16059]  ? rtnl_newlink+0x8ec/0x1c90
[  581.169836][T16059]  ? __pfx___mutex_lock+0x10/0x10
[  581.174861][T16059]  ? ns_capable+0x8a/0xf0
[  581.179190][T16059]  rtnl_newlink+0x14b0/0x1c90
[  581.183871][T16059]  ? __pfx_rtnl_newlink+0x10/0x10
[  581.188895][T16059]  ? __lock_acquire+0x6b6/0x2cf0
[  581.193833][T16059]  ? sched_clock_cpu+0x74/0x430
[  581.198677][T16059]  ? do_raw_spin_lock+0x121/0x290
[  581.203826][T16059]  ? rcu_is_watching+0x15/0xb0
[  581.208715][T16059]  ? trace_sched_exit_tp+0x36/0xf0
[  581.213840][T16059]  ? __schedule+0x14b1/0x4fd0
[  581.218600][T16059]  ? is_bpf_text_address+0x26/0x2b0
[  581.223810][T16059]  ? __lock_acquire+0x6b6/0x2cf0
[  581.228760][T16059]  ? __pfx___schedule+0x10/0x10
[  581.233818][T16059]  ? irqentry_exit+0x5dd/0x660
[  581.238685][T16059]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  581.243816][T16059]  ? __pfx_rtnl_newlink+0x10/0x10
[  581.248837][T16059]  rtnetlink_rcv_msg+0x7cf/0xb70
[  581.253909][T16059]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  581.259028][T16059]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  581.264494][T16059]  ? __lock_acquire+0x6b6/0x2cf0
[  581.269974][T16059]  netlink_rcv_skb+0x208/0x470
[  581.275003][T16059]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  581.280461][T16059]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  581.285761][T16059]  ? netlink_deliver_tap+0x2e/0x1b0
[  581.290969][T16059]  netlink_unicast+0x82f/0x9e0
[  581.295761][T16059]  ? __pfx_netlink_unicast+0x10/0x10
[  581.301232][T16059]  ? __alloc_skb+0x198/0x3a0
[  581.305849][T16059]  ? netlink_sendmsg+0x642/0xb30
[  581.310796][T16059]  ? skb_put+0x11b/0x210
[  581.315049][T16059]  netlink_sendmsg+0x805/0xb30
[  581.319814][T16059]  ? __pfx_netlink_sendmsg+0x10/0x10
[  581.325186][T16059]  ? aa_sock_msg_perm+0xf1/0x1b0
[  581.330221][T16059]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  581.335507][T16059]  ? __pfx_netlink_sendmsg+0x10/0x10
[  581.340799][T16059]  __sock_sendmsg+0x21c/0x270
[  581.345487][T16059]  ____sys_sendmsg+0x505/0x820
[  581.350341][T16059]  ? __pfx_____sys_sendmsg+0x10/0x10
[  581.355633][T16059]  ? import_iovec+0x74/0xa0
[  581.360158][T16059]  ___sys_sendmsg+0x21f/0x2a0
[  581.364836][T16059]  ? __pfx____sys_sendmsg+0x10/0x10
[  581.370035][T16059]  ? futex_wake+0x4b2/0x560
[  581.374545][T16059]  ? __fget_files+0x2a/0x420
[  581.379130][T16059]  ? __fget_files+0x3a0/0x420
[  581.383809][T16059]  __x64_sys_sendmsg+0x19b/0x260
[  581.388832][T16059]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  581.394307][T16059]  ? rcu_is_watching+0x15/0xb0
[  581.399090][T16059]  do_syscall_64+0xec/0xf80
[  581.403688][T16059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.410112][T16059]  ? trace_irq_disable+0x37/0x100
[  581.415156][T16059]  ? clear_bhb_loop+0x60/0xb0
[  581.419859][T16059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.425754][T16059] RIP: 0033:0x7f50a2d8f749
[  581.430432][T16059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  581.451169][T16059] RSP: 002b:00007f50a3c64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  581.459603][T16059] RAX: ffffffffffffffda RBX: 00007f50a2fe6180 RCX: 00007f50a2d8f749
[  581.467867][T16059] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000d
[  581.476003][T16059] RBP: 00007f50a2e13f91 R08: 0000000000000000 R09: 0000000000000000
[  581.483981][T16059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  581.491961][T16059] R13: 00007f50a2fe6218 R14: 00007f50a2fe6180 R15: 00007ffe4aa758d8
[  581.500037][T16059]  </TASK>
[  581.503521][T16059] Kernel Offset: disabled
[  581.507842][T16059] Rebooting in 86400 seconds..