last executing test programs:

4.841554853s ago: executing program 3 (id=4500):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x6, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xb09a], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0)
socket$kcm(0x2, 0xa, 0x2) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x7}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x5, 0x1, 0x6}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, '\x00', 0x14, 0x6, 0xff, @private2, @mcast1, {[], {{0x4e1e, 0x4e64, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x100, 0x0, 0x9}}}}}}}}, 0x52)

4.462754325s ago: executing program 3 (id=4509):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c0002800800014000000004"], 0xc0}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0)

4.357728006s ago: executing program 3 (id=4512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)
accept4(r1, &(0x7f0000000040)=@alg, &(0x7f0000000100)=0x80, 0x80000)

4.221391929s ago: executing program 3 (id=4515):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1, [@hopopts={0x11}], "fafb17c133d11e591c2199cf1fae5505"}}}}}}}, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)

3.693325876s ago: executing program 1 (id=4522):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r2}, 0x2)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
r4 = socket(0x22, 0xa, 0x2)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffc62}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000010018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000a500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x72, &(0x7f0000000000)=""/114}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x38, r9, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdc, 0x4baa, 0x2, 0x800, 0xc594, 0x6, 0x8, 0x100]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='GPL\x00', 0x402, &(0x7f0000000200)={@align=0x5, {0xfff8, 0x0, 0x1, 0x7a8}}, 0x7f, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x4})

3.342823489s ago: executing program 3 (id=4525):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0xb390157c4d563ef8, 0x1, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000040)=0xfffffffb)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="5d5c1ebf9fa14a4a13bd1c0a896aa9d2467200001000010000000000690000000500000a3c000000090a010400000000000000000a0000040900010073797a310000002208000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000dc000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000100000000003cd752e6175c9e8d7fc2a1c72fae469ec438642ce30de9b8a9bdd12c38d7617dad78cb197b2c4da51251133f793ffc17540e9fdbf46a6b634584097a7cbd502714e36d67d35c1203ed2e5e72"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054)
write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16], 0x14)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, r9, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:null_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:sshd_key_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x98}, 0x1, 0x0, 0x0, 0x44840}, 0x4004004)

3.125498655s ago: executing program 3 (id=4526):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
shutdown(r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2e00}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0x160, 0x60, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010106, 0xff, 0xffffffff, 'gretap0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0xf0, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x11, 0x0, 0x0, 0xfffffffd, 0x533, 0xffffffff, 0x7, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x1000, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea68dba902bdc2ff8a930811d5ab686316d51d4773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8)
r7 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r8, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYBLOB="080428bd7000fcdb00", @ANYRES32=r9, @ANYBLOB="04000380"], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x80)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x41, @mcast2, @local, 0x7800, 0x0, 0x0, 0x6}})
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

2.627868595s ago: executing program 1 (id=4534):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.541066517s ago: executing program 1 (id=4535):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x100, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xffffff6e}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44)

2.421922011s ago: executing program 2 (id=4537):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0xfc}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000002000000000000000027c3acb9b7f222015357abbec82f86f1d144772554ed8a89bb42bdaffab962fd4fcb0e8ae9d02a28e1f6c4fbbe990e41bb313c638367", @ANYRES64=r0, @ANYBLOB="000000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x27f, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
unshare(0x20000400)
r4 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept4$phonet_pipe(r5, 0x0, &(0x7f0000000300), 0x80800)
r6 = accept4(r4, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x9, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040010)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3], 0x0, 0x42, 0x0, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000007c423919b556d952687f67fab42cc16c000000001d00"/34, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000200"/28], 0x50)
poll(&(0x7f0000000380)=[{r6, 0x414e}], 0x1, 0x6)
socket$netlink(0x10, 0x3, 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

2.315667742s ago: executing program 1 (id=4538):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)={0x4f8, r2, 0x22, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x4}, {0x2, 0x4}, {}, {0x4, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x7, 0xa}, {0x3, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0x8}, {0x4}, {0x2, 0x6}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x6}, {0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x3, 0x5}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x8}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xb, 0x400, 0x0, 0xe4, 0x7, 0x11]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0x6, 0x927a, 0x7fff, 0xff01, 0x9, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8523, 0x401, 0x2000, 0x6, 0x3ff, 0x2, 0x3, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3a7d, 0x3, 0x0, 0x4, 0x0, 0x7000, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x40, 0x4, 0x32, 0x7fff, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff7, 0x6e, 0x5, 0x4, 0x8b8, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x18, 0x3c, 0x24, 0x5, 0xb, 0xc, 0xc, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6}, {0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x5, 0xa}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x2}, {}, {0x6, 0x5}, {0x4}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x7, 0x5}, {0x5, 0x8}, {0x4, 0x5}, {0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x3}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0xa}, {0x3, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xd3a, 0x9, 0x9, 0x5, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x3, 0x5, 0x0, 0x8, 0x7, 0xfff, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x9}, {0x4, 0x6}, {0x3, 0x7}, {0x5}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x9}, {0x2, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf18c, 0xffff, 0x8001, 0x4, 0x0, 0x7, 0x1]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x42, 0xe, 0x4, 0x33, 0x7fff, 0x101]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x1b, 0x6c, 0x16, 0x30, 0xb, 0x6c, 0x30, 0x1b, 0x24, 0x6, 0x3, 0x6c, 0x6, 0x4, 0x6d, 0x36, 0xc, 0x4, 0x36, 0x6, 0x2b, 0x6, 0x1b, 0x12, 0x60, 0x0, 0x8]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x0, 0x2, 0x9, 0x60, 0xb, 0x48, 0x24, 0x48, 0x7, 0x16, 0x9, 0x16, 0x2, 0xb, 0x18, 0x3, 0xb, 0x0, 0xb, 0x0, 0x60, 0x2, 0x30, 0x12, 0x1, 0x2, 0x9, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x1, 0x9, 0x5, 0x9, 0x6, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}]}]}, @NL80211_ATTR_TX_RATES={0x290, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x1, 0x12, 0x18, 0x18, 0x3, 0x9, 0x63, 0x2, 0x60, 0xb, 0x2, 0x12, 0x16, 0xb, 0x6c, 0x3, 0x36, 0x48, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x5, 0xfff5, 0x9, 0x59a, 0x5, 0x3]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x2}, {0x1, 0x1}, {0x5, 0xa}, {0x7, 0x2}, {0x3, 0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x7, 0x1}, {0x4, 0x6}, {0x4}, {0x7}, {0x3, 0xa}, {0x0, 0x3}, {0x6, 0xa}, {0x4, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x9}, {0x7}, {0x5, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x7, 0x3}, {0x1, 0x7}, {}, {0x3, 0x3}, {0x0, 0x4}, {0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x7}, {}, {0x4, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x3, 0x6}, {0x4, 0x7}, {0x5, 0x5}, {0x5, 0x2}, {0x6, 0x6}, {0x4, 0x6}, {0x4, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x8}, {0x2, 0x7}, {0x3}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x4, 0x8, 0x2, 0x1, 0xae]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x9}, {0x6, 0x9}, {0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x6, 0xa}, {0x6, 0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x6}, {0x3, 0x4}, {0x5, 0x7}, {0x6, 0x3}, {}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x6, 0x5}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x6}, {0x5, 0x8}, {0x7, 0x5}, {0x5, 0x2}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x5}, {0x1, 0x7}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x60, 0xc, 0x36, 0x24, 0x1b, 0x36, 0x1, 0x16, 0x1b, 0x12, 0x6, 0x5, 0x2, 0x36, 0x35, 0x1, 0x6c, 0x6, 0x48, 0x36, 0x1, 0x48, 0x48, 0x16, 0x1b, 0x1b]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe529, 0xffb0, 0x8, 0x2, 0x3, 0xb, 0xcc, 0x1]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x4}, {}, {0x3, 0x5}, {0x4}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x7}, {0x2, 0x5}, {0x3, 0x4}, {0x2, 0x5}, {0x6, 0xa}, {0x6}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0xa}, {0x0, 0x1}, {0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {0x1, 0x8}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x6}, {}, {0x7, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x7}, {0x5, 0x7}, {0x7}, {0x5, 0x1}, {0x7, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x4}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x6, 0x8}, {0x2, 0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x6, 0x9}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3, 0x40, 0x3, 0x8, 0xa, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x0, 0x400, 0xac, 0x6, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0xb, 0x12, 0x16, 0x12, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x7, 0x0, 0xfffc, 0x6, 0x5, 0x5, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x5, 0x1, 0xfffd, 0x2, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x954191022104c1eb}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x539, 0xc, 0x4, 0x1, 0x5, 0x4, 0x5, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0xfff, 0x0, 0x6, 0x2, 0x6, 0xa6]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x48, 0x16, 0x3, 0x36, 0x2, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0x6, 0xfff, 0x8, 0x5, 0xd, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x518, 0x1ff, 0x1ff, 0x9, 0x7, 0x5, 0x3, 0x81]}}]}]}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x40800}, 0xc080)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000001080)={0xa, 0x4e20, 0xa, @empty, 0xfffffffd}, 0x1c)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000040)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', r9, 0x700, 0x8000, 0x5, 0x1, {{0x4f, 0x4, 0x3, 0x8, 0x13c, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp={0x44, 0x24, 0x6, 0x0, 0xf, [0x5, 0x1, 0x10003, 0x3, 0x39b3, 0x3, 0x4, 0xe6ad]}, @cipso={0x86, 0x4b, 0x1, [{0x1, 0xf, "95c90859e14c429d1e36247707"}, {0x5, 0xb, "911e16625a3dc48d9a"}, {0x2, 0x5, "665c84"}, {0x5, 0xc, "1c5f7308bc72e87d604d"}, {0x7, 0x8, "2b9152b5358e"}, {0x2, 0xf, "1505bacc6513aafb4b04dbfa6e"}, {0x6, 0x3, '}'}]}, @timestamp_addr={0x44, 0x14, 0x1f, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@rand_addr=0x64010102, 0xa5c}]}, @noop, @rr={0x7, 0x13, 0x85, [@remote, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x34}]}, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x7, 0xb, "91e46da3c3c4f5b8c1"}, {0x7, 0xe, "bc043e827826d1c114629cbc"}, {0x7, 0xf, "2db11ab72eee9ae9ba158b1f4b"}, {0x1, 0xd, "4dcba495d2dba597148310"}, {0x5, 0xd, "e4caa9db2e7c51070ffc36"}, {0x0, 0xe, "9ae6d23ed60a4c36de7989db"}, {0xe, 0x10, "717d7b516e5ab360e90000000000"}]}, @noop, @timestamp_prespec={0x44, 0x4, 0xa, 0x3, 0x3}, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x4, [0xfd3dbcb, 0xc, 0x800]}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@local, 0x8001}, {@multicast2, 0x4}]}]}}}}})
recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.093919121s ago: executing program 4 (id=4540):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, 0x0, 0x0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000000)="0a000000010001", 0x7)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xe07c1000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x408a3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x3}, @IFLA_VTI_IKEY={0x8, 0x2, 0x8}]]}}}]}, 0x40}}, 0x0)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@loopback, @multicast1, 0x8, "000017d60f2811d48c822cc60c4380bc46000000b40703002864280a9c0f4eb5", 0x3, 0x3, 0xfffffffe, 0x2}, 0x3c)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c)
unshare(0x68040200)

1.470441225s ago: executing program 2 (id=4543):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB="2e01a57e744e2e0000000000"])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x11bae)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff16000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000240)=0x81, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}}, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r6 = socket(0x2b, 0x1, 0x1)
connect$inet6(r6, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xc}, {0x0, 0x10}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xe6, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40010)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002400)={r5, 0x58, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmmsg$inet6(r6, &(0x7f0000002dc0)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5638db16, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000002c0)="052fb4c2c1a983ee372813178153e2e3ca42d3440c9805bf90729ec25756d10604a1b091f608f65805762d779512c7813a6c106ae128640c26250d781b45bd87b3d2dc26d149a3a9f46ae10027c1470de6e3c9089d34d3a8f99fd53ecfccd6d09c5bf902524890219d9bdfee2cbda0c22f592bf183dc21a187", 0x79}, {&(0x7f0000000340)="ae2de9e0e6842d032c2eff0be15ffdd5e924dc23def556a1768437f80924a526c9704f38c4df88f08e80b345b54ba29cf16a9bf1f8366a0a963dcd12d441", 0x3e}, {&(0x7f0000000480)="1d90b8b15adfcd04416643279e7bc9a0f226bf194518b448d41e021a9efc6e91e5a75bbe3b72a11591918d6a9086d722639898d47bc8d050a5ebee3c8b66997372c7d656d293656c2e274328d03d043c0a93ea301e7a4d950f774f079d7c93ae59a6d1fc9c2db2084ea877c71acf7ef6404d99e667d79e27abd805b805d70ccc1fe80b48c7563080d3d5dad7008939781a321a67b7353157f47de99835e0d95ed4dabf0e445c42e5c1b7fc8d7ed465912defe6f2a49c57efcd6683d3975caefa5814e0d5d83bbe371df903d861c357c49b75009bcd85d1c98a8bdb36eb29a7f54b289e7a7d086cf77d859f5aa34a9f96f34ed422e362d4c8e111af8bd916aa", 0xff}, {&(0x7f0000000800)="268bb761236b7f6e56ea271bc950938e2f65e80c3552d14dfff29807606f972f0a9e5756984b1a2d8c694d4c414a6d2b259b22826f7a644b7d416558cd43938fd169064336b5bc83bc46297e120a8d8cb1eb20c715f46ed3a6b877877128a1acf801e0e1b08d39083e95a66a36a4133d28d78b812d6134902fcdebbf4972fba925d6e6d1f03a018acb1a286aaa5669effc9d0b972ed8e68470db74895c259694384a1c7af6dbdae2b512ab4d612d40b8a502e28968dbeb80476e2b402bbb6234f488a335925fe5266bf9000ef2c1c1da4e4ce5431de69b291f28e5d9df9c812229d378f4561a6d33804618ec51683d590f824386a6a0cb257f3e30e11a6c6cc4ea301be5b51d5902af4a6ac84268cfb6307fb7a8e5008d21f5c86365caf63a7474b492ec386352dc2f5fef6ef1854cbb0d00f5f8cd1d821337b00e7316b29aa5ef05241210ef2ea900c9e4024938de858808d410d97382cf58fd5ce37d2f9a453e0bcbedcb565ab1fb44344027634e61c63d1a942a85ac3b22dd9214fc1b4b6ffc644a2d96bef3c1fabf53c3e2ad0b947da09eb7229525efc65781c2de1d1e3f46cf3071035d0029ad401978c666b880c456c4691006522ae9538e3efbbbd412b4412f9492b7846248623eaa376c08fb1a5c5f415c3e37eade71d10cdb11aacc2316a316c3f0bc76011fb21e52f9cf9c8ae108aa4b4a9857cbb626f24a2643fc6854df866c6757c7b3fd139573475b53b78fcd72d58283dcd647a718c29b7caf8c09bb75df02f990f9578cba29656b3b10423964b6c2ef2e131a8996633cadeb358b0861f04aa3226ddafbae0a09016fc7d267f9dbf201dd35dadf8e313c3905103f6af87c59e2d8b97f18253311bdc9aa271700409da45aa3944c94b0bf9258ff1e94b3e044b338a5702ad45f6946710a1ee6baa8fa0a710360172106763cdcfd83e3d46ddf19e236f0d593cc6ba9cf2b669646657231a6e124c88ba16713b182a53874f7490e91c090bdc4e20ff8fcea40c25df6c647b32f3422871c33152ed2012d507b5dc9030506dc7b634401a66a2fadd2efa9752c5275a90e43e88e07e6a65bff85262d4d697703881f8bdee8fe4add486257e89f36df3e3f50d57b50db5ac560d1bba8efd5d65599da8376cbfc714cd95b7b2c19b8df316b57aa88940e8836907f23f66f742b07daffa196bc6e7912af02bc7023619dbc161a77ceeb9fe3b81d1634f5b1289fa221f601f36a85c7e74ff80a7ad7a11de4e21b6e85327e3d134f639379d4b993023d19fc7aa059f41661d06357eae9b3e34086fa0e36762f31f7aad6a40a3ae862605ae5fbc4e4d294bd48efae71df92d352c366b0e7dbf653629cbf232ceb1564f0eeefc8d9ef9d3962faa385316e52a4b9e02e7ef460356d591cea88427383f7043527c793ce71b84fe6a14d905a87c8ba98828447769ba0b12fefd2226d6cee7075fc69525eaa106c06d85117a1f8b6ff43f39e922a2edf6fffe7b93002748976ab59d195ac3a9c229e09a58761a7e230ab845099e2a0880fc917f12d396afd836526461275163381db177ac2269b1d5100429efe104d007e165a84242074332f5d76ca857b6d558d9f9910cbf8cfb864bc73b07f73403dc751f29a742f2dd80e4886a99674b8a1c91252c18dee4329667ac6e7b02c615607ac7485c5c5e561ee4a8769d609de280ceaabb4d9e41977949d93ea0c044eca11172ac867f0f8b7076480305a0ef3f794ff4119c7c037aa15b08148c8f783501aa6addc2aa199260423269f891347ef1554265b8ca28aa5fd7a7104c517b146252eff8384802f1b95254151afae0de105236096b44736f78fd889aeebf7961f08b6146911a75fbd990f3cef88d3ed8cd536469be96424fca6a9c187a497da8b1780680cab8e3d224675ad2bbac8907277b83f4444a3e279416bf32e2db9d116b8a80865e3392a233cdddf2a9c49ed9563d5fffaba035fb38305d8c6a6df40cd27494889e6a14e6992e8333eadf1bf1a98427e0c525360982fb9d01bb71faa4820ec08c236b8f51d29071183552a3e1158c31d97e76381fb7b65187309b9c1fb3f41df5ddc79863b6e9591fd6fd4ec9ec31b91026a84d4dad375eab2ae9822425a277915d35ac275c4112b21a1bc0ee5217dfe98c5de85d9adfe315d15b9443f99ecf930967504ebffe27636e997ab6f8e15dd7063175382defbd5292da6026f7dc5478c81caac26e67fa1629d8931f819ab3b45d8644c189dc78e3150bd4146a8c0bf890e6c5c2831ce705455154f2a71b9cdf8673357f7bbc8f9f5a1556941a1678b62b2b09253ef3ed5468cd7c93e1c90f91f06dcf029662f7c7155cb285d954a8e2ffc2e8dd55fdcd66e73e17b626c31eecfea8d847e151639cc214e79cfe4b034ab45bd51e3fe56ffe391ce522c243866cbe8d1d5471e6ca50f93a32bbc27b24841b85b96b158f2309def760f4f9bd952aa56ac31ebf7e1461071b011b3f0b5b50631975de3225a1e80276639eb55ade90604168429f08af9db4e031216929603c45daa40732435680866f4e2512945a0d315afec998992cd833a3861bd86b9de45605bce5ae65f2b3038209e966ebfdf0e4cb975c1d767c7695a21da4c9fc68866e7718b503cc466184498ad579bcf1b4c2b99125aa3a2d2356b075b7559713d5278974eec1dfd1aa9a3ae366f6502fd40aae8a7222b78ecc13e23f6d1f431fa0bc765998939a21f04454258fe93dce57794202b337e20647b054e6c93e2d43d9a5e27b0caf4c241f495b1c0f08823f4784f2837934ff1842c9c63e40ad42c9d4a0412f41225fd97425881398e9127ac0244170f1ab631b8d67d2f443798e462384ba415c3d42b20f40130caaaf66ec1085991308c9cf376d5a0d1af5ad85e6f1fbefa34ad30010e4f068c146bd9af2deb27dfa5bcd83ca971c227f0219308a27c4c9ceb5a2e1a903c5826d625d818bb48ca3536a2cfd112dac85a63f8bee8d5b2680f2f39d3028969266907fbca9e5f4d446c4b384f6d217cd189d746439400b2c13084113d19d9bbcd1776ea8b36e1a069cc192de7f2274850a51eb434ac8e7f0a560f8da1ccdb8a4a701b107d2f77d26f137e3751c8d36fc2868801be5365f3e4f1485c01ef75b9905578de4cb0cca5ceb51e6c93edb7e34afff262581386a628e17b27d12437110465a1019bce4ca427f53c5b41a16fec0e81deced82057a831d2ed6ef78da02cb7f891b06887b44cc6cf232bda0df741427b00ae5a2b1a07c6ab752ee39cd608a3f2fdd3923f2958f094425219d611a1f231493c1e22f0e646be90feae08d998e8d1778bfbe5b3f8297d87e33c752b01ed69dac6da8e1eede0271859fcee5139410245b8a6a7eed9c9ec381fc4ccddd76c397f9992cd62bcf884df6f6eb7768871b4db018be3671561adc90da40a9d14f32fd4fca36a7b42fc3827008c12235f68ee3c8d7413bbdb398018e6f5693535ab24bcbbd705965e44fa64bafcb8e018086fde23d0d99f908cf64becffd425e0c1eccbd14f8902453c1ca13b69ae975b92806e58645553308ed004a69fbde67534fb37953295d9140ac17f76fe61a6b42e667f72aabd98ebc95c066b8e5b08a67a248b7484a6221273779a17ed1c018df2026c88d24fa3692ffe3ec42068c9726b88fdd200308a2e6be5a66750b01969232bbfda63ca2435fd55d8463067df57c82c09106f5d1efe9d3f415b0e5d692d32b814d0359c97787f10b3b54c72c3f10bf05c1d1615c6add4fd9a6921d21be46380a45949bfb88a9b9e40b8ac182938af61d56e0a2e60b3b14c08f8283447f53bc954ad155fb2457732daf6d19fedecb9cbe7fa7549c623ea68b9ebe87ed25c9fb22086593653daca8f33b3281e34b2a1dfb621b7d08b60c111088805d88ff2f838d6570830296b11554a892e90f6e700b035a204f3d55e869e5ea5727a4830e6500bb4c5a968482789f8d03ed2d0683bb6673dc50fb17ddd12b8075a031598fcf302d824514bf0c792e32e05a5ff4b8ce565c49b58f6cc4baa250fe9587acdd80d8999a14dd5b123a840e809bf9c27ea01f997fbba735607ebc4cfd3d093964f5adc719824a9e4cec06a1c69059faba832666efc4fa45e23f43f9751227a67e409c4ef5d3f6eb7421650b44032740d15acbcc27b39a6ff482b9cefc186b1110927edd053bd278931392f456d5335355f15902f3c334c926c908bd7e523d82eeeff848da164238f1023887db7c6553e951e4bb354bcf24b5faaffa16b9fa6a5667de141051fe6ed0e8a1fac93a3ed8222cd3579c1847226a33856d79c52ef5ed63c3daab5c0ce0edf9f84530ea8b0f355a20be2ba5b08ac428b44f5881fead9d81ada371765a03e7428feb8dc80e4d685c8c551612696880d69ce4ddc9c0191ccfa3dca19ef88849d4f51c5cdcfcdaec810a2bb2e7a61e072a21e3f49af74ca8d6a74a45594a63cb20d56522adc770ebbdbce6118ba361d5b69d758386a9392ae14ba38be9fb9d35c61b960ff1a95e6efe2dbc520e76ed99ce87ea064599c9739d487208da06fa3552172cd56a0dd793e13385d2e71bbc4c872953da3d68067ed73e6c5cbd3abcba32046d84aa915e31e4b1d9ba36812f78dab8ca94fd3aab9be3a7894720d478de9a063abba95d756073cebeb7066d2983a178347e0db98284c767a4ad874caea587d2f2876893ea92abd37b3f37be4b976988a6cd1e0054fa5762965180d36d23c753f6d13bdd18cb98e3b9208a3c661507cb104916b72dd0e5b1fcd828b91a8de57f2fdddd2830242029d42bdee4e0f23fbf5c4401500b4ffd4c5686596c3886a6b735d111a18b081f5a73ab40711834f6b15b15640747301bdb3f2b264abfeb03f97ddfd37b61f7813d85690b46c057e8271a3b879e86ef3797b7d12f6989181ddd1876001818799336c83da01f6778e19f1459ee9372cd31a84d081d8568a85338ffe434282289a53e2e2147032cfc0e3b897fac410faece33b7adb1120540dde5fccdcc4e1bf657bfcf3ce180c90b9868f24316ba6e17ef40d3fa897f003d16a5cf09b1610f73ddda5b77d2506377be454144b4eb72da8ae4ad918160bf4dcfe164232271e9a6ef1297d220b59967d3c17ab0cb96338099ad041b1ee91d5ec6f2845a77eee95aa44d5e152f5b135e0342e8e50cd315a3e80ac53028cfc2daea74f036cf00956560ab67fc46d430614af60fc7cfcf3f1ca5c2dbe9f554685ac4d23f1313b16fa3bc60f151948ecb9677f8c7479ffc9831ab6ddf24619390955cf473f728628b17f9635a9f873d60b349f1c1a37d5cc0ff10dd7c217803ea885e56c1c2115f7f208a27b9d8bb7f6b2f35d8bc769d7d4303d548ca082ce438e317943b8b290ab00dcc8a85b6149eabc3d8c7fc426795b1a94ed9b8a933ebc62b12b53e5c40ee5e4f4b6513bb1645cb97666a8ffc71b7efd6b24a2718b29f1aa57c1bc9ebd6032d579c549ee412a0e98a069a86616dce0ddd5e6869c8a69994236e0e7d140e4106b74f58540a88487cbec6fb709203fa63b0b258eae551ce00ab2105ca5178f775c177633a0cfe64573c6381321e47240afcd7f70cf8dfb40807c541c73ba4e88ac7f06ee356166b696015e51b45da41825555b9492a1aaf1ca11597d6a47fd010b85b8f89be095285c054a948754733a278544ff9a40bbfc4176a8fd2e3550854e0499488bc928048d149b97c35c9689f9afbc942e0136b5a7f18b3a89ff20f74d4415ab1d54efd3c210a31cfb329bff9e795745ba51f9db6c9a0e14dfc5a700f44d", 0x1000}, {&(0x7f0000000380)="8b89b64b7ca371f1cffc3bb8ff7986d21407eee1ec0565ec424a4418514d06b7e1bdf9b18d1059b763ce5a1fb9b43f24ff617e1c76ff36852af79b4658d1da55b597f952c9c505193de7c58e5f82342ed8988858364960521f3137e418b1dc0bd35b535bee0725a8f4cebc1f0a624f4bb7dadb2272dc", 0x76}], 0x5, &(0x7f0000002f00)=ANY=[@ANYBLOB="c695ec7fc672ac9629000000340000000000008000000000dfa3d064147d1aa18e56a5778ff84e08770f20aa8454a94c2a664839b62818ba2b6e36ddc382ba5072d1cd654e733a758e942533f100fc53"], 0x18}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001800)="e68753dfd1ff40e8cd377857408b320bfb27ddc2d603544e01785ec990323cc4c30884c211f0d6a4792a28414faa3157e8e00fadb0da388dc9ff7391", 0x3c}, {&(0x7f0000001840)="d1ad76eeef1d267effb388c8a311032207f2368ef9289258e28f815a4d7e35ae013e2e28040f0bb7294cb492b6f20225c287f6c9323b31e8bf9307c6ee445b7b16118a0abae23f77cdcfc3177b816dddee8985254c2a2ad0c80c480fce37e8610fa06eea1ebca8f5c35cfe85122f34f45c6e9472f9ab7e1caaca2822ccba44b1bde5933451febfdf49286e9d2ea208ba226835c406ab1daba6e20926a435e554509076c5727c8b1a42912229e0e296279387fc7429c79fa365400d3d88fb87", 0xbf}, {&(0x7f0000001900)="24acbe2712bd33c438d98745e8f7d99102685d92e25ce5ff5caed46eb6bfd2dae26d50890f17753373b80d9710a30c51be48043e650d495ec7b3d5c0569967b94e97a6af0e2bedea6d1898e6205451735867b90077a4e846b089d428cafcbde8875feafe7326df3702bb82d2c3344942f92b697bb708e55f9c3ae0bb8b4ab08cb0fb5647d6c8ac1c2a90c09e00efa9184840b1ac6d7900ccefba64c09619fb437858e75dce47ccfaa747ae488e2e1c619a4956b9cbbdd58904ff7a5f30a56ae7f84abe754ef00e79c663dacb33ca84d1ed82163d0425cb8b72b2b67ff00f7104252e7693bb76620ab163465dea24794f", 0xf0}, {&(0x7f0000001a00)="e97bc19f6c88be7039b4707c491ff6c7f28ca4bda228d3cbe87dbcfb6888ac04f571730f53f56fbe9ff6c503aded55c34c9a0704d9ce19cedfd1050b89b4be8fc3658a5dbe368068ae8e0d36e6385006c0d26537767c4e461c109e398cac893aacd9b2242036a7db02115c3ad8c63839b9405f7220bf08c9605ad5f7e5c54a36ee53c2275795cc4cb50f87f851c6bc3c5a515c821088dd8a8aece332919c5eab307f6391ab8fbb55805dd29d1f07375dd82a6d2d889592cc67e29e0b32d171817ab5b0d64d55f4c6e3f7906c4a899f586270f5098a1bbaf17c85f32c61b02a85ef5e", 0xe2}, {&(0x7f0000001b00)="40b4a735474adc0edca76455b5d2f48fa3ed34235d", 0x15}, {&(0x7f0000001b40)="297259a0648482aa19809b2ebffac5e73911b18adf3f1e9ef29beea42e10de10bc19a1450f376ee5c4f48d10993ba28f9cdaabc4d4ba9b7df02312c659192e3972f400e1f741ea0d00734fb3342196814f273a1bdda71c80e71662fed52295325b6217a56437a644b40549cee9a08e5d386bb14d690d775cfabdecc4faebee3d4023cb1b15265fcfcf93777f1f2dafda5216d34505c9f59a10a2645c581bd9b79acafaa2679abb4ac35d9ee024549c8129420dba5c6c4effc428a275d4ae45f687c138d47c12b3dd1169bb9763a0869291bc6ff5a094e7d909d8c7891841d26675f31a106a5654a5c4fb757cc7357fdd5c07715cb80b2a", 0xf7}, {&(0x7f0000001c40)='S', 0x1}, {&(0x7f0000001c80)="63244f8d54d2ceb59fe34a08adca3c5822115011cf28e8317f2af2c8c8295cdb5b60318fca7c47b4c8229d6cfb1f4998f7d65b7a8ff0351eb135499fc0c1da1e0d9011b218b0e9a0460d30a7a303d6cb1d5368e887bc57594b9b7146d039d8ae7188763111b6dc7d14a53f5850166e526bb4292254a44a21d9ce1880eec78ae409170a3d6122c078606cccb85de38afe99dc93046f65231aff2de89d7348842ab76498e1d938d063872b1b7850f26a8e021207a18acc089e113898097aaf7f5de1490a63eee76d808c84a69f2ab4d20f870b2ec17a7933ef3272e6daca166c5b854cdcc7aac3b7c7ec7da6558dd61111", 0xf0}, {&(0x7f0000001d80)="b24d6b6ded66dc834f866260fac71b3b0838f1bf4ab7b969fb81b07ac3106b5bac66", 0x22}, {&(0x7f0000001dc0)="3d3476176f9069478af482d28b84d8be7fd51eb8abc0bac925e5008af23b71503ee3dd8ee9801276f9a801e06aeeffb933f2e9f1d5070bb62ce9387608cd82de30e9fb64ca00e26fc347c5c289ec40da04651b0d748f339d96ab9a27bcf0f5fb1b06402dfc7e264c6327cecb6864dbb8069ec3a59088022d73a5f2b50136dd5bf65190de7eb7fcb8370bd093e667a60d28ffa03851a86a1aac078cd3fdb7e0ece36f427d762614ffc15d741f47ee03aee3c63ee2d8634f0ebb1ab5bcb157f4e4dc86429364259fc14cc82ef9dd909f93be02065d5ae9431c35d862af0db08cac62fc200ab2e6f1eac82d631c55b5062837293a2130aab7fc7bf05e", 0xfb}], 0xa, &(0x7f0000001f80)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r8}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7f}}], 0x40}}, {{&(0x7f0000001fc0)={0xa, 0x4e24, 0xc57, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb6}, 0x1c, &(0x7f00000020c0)=[{&(0x7f0000002000)="44556738b0b91f83a22582b0", 0xc}, {&(0x7f0000002040)="c46050f270b7ce399203e69859207ed4000be3e7b428c60860e0291e9cc059bbd164983967c53107eb2d8eb3f854a4f938449a419433006175c6afc3edcda0d9738e3a8ea2417fe8cde43b822c490889e4e15176e3c40502d6ba5c7b3c53259d02e411", 0x63}], 0x2}}, {{&(0x7f0000002100)={0xa, 0x4e20, 0x5, @empty, 0x7}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000002140)="7266ca0fb8423267e178c7209967499ffe6fe6a071112eb5e3a4b109790a9f202cf3946ccbfbac8580a782d14858b20800550be73735f38426cd2bda65612118a78f8aae99fcbf47d834d2d79992899b3616b20ba749e0f2a50c20acba665c53164eb9bf4437485be84c452945c17f238cd5da4ba795f2087e2c46076086c923f77ef95eee4285ee4c70d4ae0a75143ba14e6123fd7f3194e3283996f102926220c7c6fb3586196cf21b59256f8b01a11e580b7046206bad44ef3a17e7e0e96bd6430b4abdc0883aec720666b3a61e9dc890e898ef4881c94ee10e90d6d75a483136", 0xe2}, {&(0x7f0000002240)="a3a585da54", 0x5}, {&(0x7f0000002280)="b822cc227021794bf2cc736988f9c2e3fb72d5e3b9c49d923bef6456caad58331b8e7c89c260318833ffd23352fda38838243f2bb91b38661c9f94469ab53b66f7f05d09b8d9ac37dfd280e2f0546b1eb8506ebaef5fc8b401316ade96dea6b2c7dea0e17122d4d0af66c7e3fe07109f589b06ca3976d25f771bdfa7faee93f587e6d04ad7759df04a881ea26f39270875f0576fa36981", 0x97}], 0x3, &(0x7f0000002440)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0xa1}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}], 0x90}}, {{&(0x7f0000002500)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000002540)="4e07164b5c4f99733905b04722dabef2a252b50e3f10878c3a031a03ca77e14168e3cadc4ab08a05db2eba00ad118a26ce385ebed5d6d531f98aca0fcdfaca526957633aa5166d8d7575d2e5716d73a76c75c1a41d486e16770aa0b81220536b995ddd76af1bf058663b691be51acebd1e31d6d1de482618987f2abf52bda95106ac81da1703164840ab1ea177e9f89a75b1dae7e48e2dff845803689e94a713c3", 0xa1}, {&(0x7f0000002600)="989dd008c625408280bb7ef0ac7b8ba0b72548c0e709a1044798e35c00ab540068f8c021af32ed2d6a3f89c21f4c81a71165d921861364b6e972403ea589eb0a", 0x40}, {&(0x7f0000002640)="aed7ee8be40836b8db09812e0f4f522fadaecc42971982e41e5bd8ba2a1fddf06260474a369bfe926defaf2a13cb8ee47c9c739ba14ab53ddeb9684eea94597c79a893288a8ecc19ff99735411fdb65ecff51546a2e1967c6169da831c7e5e11c1a300f17eb5ec9793e251ef528326e0bb6f8405a8bccbb5a5dea6b4c648c2cd486b7175377035ec76dcbad729687b8f5ae15ffd4d1757f0b277e3ce680dcdad7de245d75ddbe139331467dd090e16d54a9b3d4fa7d99b28245391e941048422749a3a946a5f8ef1b1cb9c8c7c206a1eb2f91a915e3ad02938e00c4440a1e98f2657c6b053cc2638c5cd238024afcfc0a420b6428d86", 0xf6}, {&(0x7f0000002740)="fc951fe11f2c44801b75a7593ed0428b151a26dc54e10e991d1116935af98d277f730360d3ea6c0d744db2b962cef305c4c243f3a368584f78f41f012427072ce3ef77affa4708d73498f6b18f710c0d0a7f89f6", 0x54}, {&(0x7f00000027c0)="25db47dae01fdd01c0e2012eb4382c39e4092ca8ff6307725abda5b6db1e944d845ed026dbd4818de59af89d4ca21c9a1ac120cc28837bbd57f893b4f4d7cf4f084b867540af51765559a69721d9f2816a899b60ab5ea17dbeebd5a1a43fe2fea708ac54a458a633a38a78a182207ba44abf6d22c1144d43949915350789729b997e3af2a68bb3fa8b0ea9133b9711c385ee63367679088e486ab7dd2288c80127a68186031176773f714ffe9727c61800503f58b9767ea0bb05d77d046f4d2cc9d91edd46eee6e3056a5a5bbe7a24ead4bf5e93964ed8ea39a30b14ba851cab54161651", 0xe4}], 0x5, &(0x7f00000038c0)=[@rthdrdstopts={{0x40, 0x29, 0x37, {0x929a5ab08b4e8382, 0x4, '\x00', [@ra={0x5, 0x2, 0x10}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x87, 0xa, 0x0, 0xa, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts={{0x298, 0x29, 0x36, {0x3c, 0x4f, '\x00', [@generic={0x77, 0xd9, "66ef7d95c50b68da8799378d5dc216ddc05977c0467d494d5449f79b7410030cc85110c9aeb794d837c2767fcf3d4141db02e6986ef11f0251a4a2a7f92a0a90ef3915f47acb25a9003714cec416df8ccaf3213b4edc7dc957bb060bf47262dc7729d646e5d37bb7276ba4e4ecb14dcd69bb052b3920eaf03546e36d7ddf61e44aa98ca64f580cadfc11b33e9fe631559ea2f34cef19828992c1c7036e883dd5df97afa2f7d67c2999d7e4ef50bdcd677811ca46e74bb5a41543021ac76a1d208a0bf717303d737cac08aabec4f3a8908702e6bb9846b7b559"}, @jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7, 0xff, [0x7, 0x41, 0x6800, 0x7, 0x8, 0xa2c, 0x3]}}, @enc_lim={0x4, 0x1, 0xc9}, @ra={0x5, 0x2, 0x8001}, @generic={0x7, 0xbf, "3279243f765400010d893412f762f0c1111ccc0427cfa149b436bf8c4f4a10b450d50272cdd5ff8c1ed5d40e92c66d41441af9349bed995a4a21ebb5f043b34d195f078c813422b452cd837ddd07ac6e3891f540459710ee4b28a6dbcddd60cdeedc4e90c222370818ed330448d278885147d0216061fa7f99333c0882f6a2f4242c4002f51413f0cf6ba659b5336e8dec1ec64725c637d6f5c17c81230ad47ea53de9847504511dba58d1fd163c74743daebf93b99ab182d19a38e65d705e"}, @generic={0x2, 0x7d, "4615c7643a94ac59e9167e6926304308be399db604e1232ea2e1d9e073936cc620297c4e03afcad58560c04860c7dda2449200f70213c88b65865d576db969fe04532357d8c819e0d5c476ebd9d2070b3804948ada18724a6620633321389d645b822c237facee8d8a6c5a6b079919ca4624756a579bf9cc1868e951ea"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x33, 0xa, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0xbd, 0x6, [0x0, 0x20000000000000, 0x5, 0x2, 0x7]}}, @pad1, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x1d, 0xe, '\x00', [@generic={0x7, 0x72, "bb6e8be500c0fab02a37347458f18b1aa6b18c2c30ea95f99103b2f97294a191fbedb5a20efa09c488aa676302afc53d2570cc9f2175614b48ebf9cf48d308c8248ff7d7bb2649c5a9269c2b1eaec00b430fbef7a5a5e8db93b925432e27c1729223898f48a40d4516e253cfa47de279b180"}, @enc_lim={0x4, 0x1, 0x8}]}}}], 0x470}}], 0x5, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
openat$cgroup(r10, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
r11 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r11, 0x0, 0x29, 0x0, 0x0)

1.267485041s ago: executing program 1 (id=4544):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9a00fe00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0xa, 0x5, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000580)={r3})
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x29, 0x0, &(0x7f0000000100))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0xcc, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdae7004}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0xd8, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0x7f, 0xc, "2039f63c4806f0669ba6e38c8d263654e3b912d9ca4a7844e41da827cfdf905bfc29b061443ff6d3c3ebd6be24c83f56a529d2552b4cec46ff3dc81b9410185c684350285a0f992db5fe2a0d097af6d8300af0387dab38940a50c9cd545a64a1173202746387f5dae6d48470318d5679bb5e380a460d532e4d2951"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xebc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x1cc}}, 0xc410)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b70000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r6 = socket$kcm(0x10, 0x100000000002, 0x4)
recvmsg$kcm(r6, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40010002)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x4)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0xe, 0x8)
setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000200)=0x3ff, 0x4)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc00000019000100000000000000008000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000a0ad5fd3a4ae70b9319278d9e6c740f2b8e86ba47509db43c9f2fb7c18bc409bbbd11acf069564eefef317d3d640a1475e868e255c9343d8b0da69d1020c0b39f9b7d268926f7a0c20c20108d8d33c38e1449fe0d665af79c77f3bb6f5d994d29a05f3c813c5c8337d0c66e75072a6b224b03f0ace57", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000000000000000000000000000000000000102000000040300"/180], 0xfc}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000000000000000013c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.2665672s ago: executing program 2 (id=4545):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, &(0x7f0000000180), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f0000000500)="128b9306006d4810e529c670669e7567ef1e73ee7ea1a050ac5040adac01847839fc378469d5765b9cc2418408adc1498194a7197b4dcefb", 0x38}], 0x3}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.249942666s ago: executing program 0 (id=4546):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008009000b70300000180000085000000b200000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)

1.110063896s ago: executing program 2 (id=4547):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x7c}}, 0x2000c450)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x7ffffff7, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000540)="53381529fd7da3848b25", 0xa}, {&(0x7f0000000580)="49d3cdec4ab80fd7820be0e959e0116677f4a880c097a98fa3f8482f134ce192dea681072f8955e90673011875b0ce", 0x2f}, {&(0x7f0000000600)="72753b80f447f9522dbbd4deabe64881fd4c085521b608ce13b6215c03369fe5e203b8d4671a356483a5a1f294d67502604cf5e87f698864470e338e00f8d435d93ae00b73cdf9506e0ce0327d009330df8d785fad7372e066183054bda0219c", 0x60}, {&(0x7f0000000680)="9e62b09958a83b110abecb4e6e804d184aecb1a060f4e6897394bf2f2ba2ef72d833b1f6e5a74c4cf1ff59e76157501a952a8abb58237068647bd681f019b8b152afb228fbbaad3d75678a8eb38ab97cec29d78a76149e74f552286b3aaffa230f452b7ea822ce2de121f09a755b077b817ad7806067a02f3d8d0f69f32e119fa138de20e18157e3f77ee6542847b152aac179beda71d7b5860a6d364eca2a71c1743c3cc6f9ca49dd2530bf10d914c286b37a796dfbd6e97cc6ac8b86", 0xbd}], 0x4}}], 0x1, 0x20008000)
recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123)
shutdown(r3, 0x1)
socketpair(0x25, 0x4, 0x8, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'pim6reg0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008084}, 0x8000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000a80)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffff000}, @iv={0xd0, 0x117, 0x2, 0xb7, "b96777d61cb7613cc46b6970270c621a67d26a1b5e6cf1943280c1cf67b8572cdfff74ce12c053249cdbc360a74699fe984c578b02ad5d079d58fc98e4039f175133ceaaa8837a9441076a3218676eefdcb90fd7f8224e85749b113a04404aa082bb08524df41efbfe380b8025f52cde6fd901dd65a669bea724fddd19547531fc74099e4b6497370b097659e1d457d4295d10de32d4255fe22d917dcf577a2eae69bdd10e9d0a70da9fef093aebfdcc00822a8679bb26"}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x130, 0x48001}], 0x1, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00")
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)="d7")
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000002c0)=0xffff876e, 0x4)

1.048392371s ago: executing program 4 (id=4548):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x3}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x6c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28)
setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040), 0x44)

1.047827897s ago: executing program 0 (id=4549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff}) (async)
r2 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x20, 0x0, [{@dev}, {@local}]}}) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

815.604121ms ago: executing program 4 (id=4550):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x7c}}, 0x2000c450)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x7ffffff7, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000540)="53381529fd7da3848b25", 0xa}, {&(0x7f0000000580)="49d3cdec4ab80fd7820be0e959e0116677f4a880c097a98fa3f8482f134ce192dea681072f8955e90673011875b0ce", 0x2f}, {&(0x7f0000000600)="72753b80f447f9522dbbd4deabe64881fd4c085521b608ce13b6215c03369fe5e203b8d4671a356483a5a1f294d67502604cf5e87f698864470e338e00f8d435d93ae00b73cdf9506e0ce0327d009330df8d785fad7372e066183054bda0219c", 0x60}, {&(0x7f0000000680)="9e62b09958a83b110abecb4e6e804d184aecb1a060f4e6897394bf2f2ba2ef72d833b1f6e5a74c4cf1ff59e76157501a952a8abb58237068647bd681f019b8b152afb228fbbaad3d75678a8eb38ab97cec29d78a76149e74f552286b3aaffa230f452b7ea822ce2de121f09a755b077b817ad7806067a02f3d8d0f69f32e119fa138de20e18157e3f77ee6542847b152aac179beda71d7b5860a6d364eca2a71c1743c3cc6f9ca49dd2530bf10d914c286b37a796dfbd6e97cc6ac8b86", 0xbd}], 0x4}}], 0x1, 0x20008000)
recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123)
shutdown(r3, 0x1)
socketpair(0x25, 0x4, 0x8, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'pim6reg0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008084}, 0x8000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="dcf28da711b24c5dc5734dfb3453e1eef0cfb2aaba72e07b3ce159404fc22a54b43ad5a5e0eb2c34c159e1f67fe34be852de93b987a1d3ef470900916dbf92f4b5d6ab878db1e79b5e175939aa2d1e6cc4384bb6657bdd97b63e9a4c09025e865bc32cb4744e69791fe53f61e0686ae15f4dd30fc86542189dde08d816607ab227d6bc6ad20ea4a89141fef9d815a62d7d477e5d97461b9f63a4ddee447ec6d13f7f0ccd7db1e1b035ec983e97d487751dec84c4cabef9df2ca9a3da44b28bd16c6ad574e238a5485cb4ebec7b08ab12d9a1b661d99b6760532e42b3358254efe3b05e8c0fb7289be24db1b6cd5621be", 0xf0}, {&(0x7f0000000840)="12b7fd97d9142a2637dcd6c1c7a7191dadaac572be464ce0833fb26926d5fa325e699aed1bdaea30819be849bc61be30521ae63d386c6d6b09dcb49dbf3f07f5a399df995e3fdddb61fc43b65f7fa1b16a7a18ddee86303693f8ae33796052eb97a3d1c6b4123d3a378a0c60de2d0f84afc945e7306c3a76cfc3d601a0955e49eb4f2a4fd5f6f83931551a36f67b8785371f0c7054fba46892649508fbfc3f906647599f26db8b9412", 0xa9}, {&(0x7f0000000900)="ed32f71ea8bafc401761a6d116efa1e199b5dcf75ac72747e903171c7e517a53812a9cfb6194ea8528a92b3a1c055d8c566b62e4563a62d839b8591eb2118be92f58be1f1b202508c59338c8e3539692eb0f91ee3fb3824ad436292182a469e187494ef6942abcaf1abdcc02e773c6e0ecb68dca246154fb47acf888966b3e5a2cf346aadf", 0x85}], 0x5, &(0x7f0000000a80)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffff000}, @iv={0xd0, 0x117, 0x2, 0xb7, "b96777d61cb7613cc46b6970270c621a67d26a1b5e6cf1943280c1cf67b8572cdfff74ce12c053249cdbc360a74699fe984c578b02ad5d079d58fc98e4039f175133ceaaa8837a9441076a3218676eefdcb90fd7f8224e85749b113a04404aa082bb08524df41efbfe380b8025f52cde6fd901dd65a669bea724fddd19547531fc74099e4b6497370b097659e1d457d4295d10de32d4255fe22d917dcf577a2eae69bdd10e9d0a70da9fef093aebfdcc00822a8679bb26"}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x130, 0x48001}], 0x1, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00")
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)="d7")
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000002c0)=0xffff876e, 0x4)

813.19366ms ago: executing program 0 (id=4551):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6   \x00'}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x124, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000580)={'bridge_slave_0\x00'})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000e284969da2a7224a2a671fbde5a68fd67715b979f500adcdb7619ff78878373336659e7be558e452f377bf058a7956f4665a5d4ef1879834ef87635a205955e1ad781d328032bb752517b42c1c887131a6ab016be5daf14d74e41afa014f37faaaba4265cf5ac64bd5d111f3469cbff427e36fc7294311c14e47c59260941154121d30cb7b3bb6997e42652f6edf1e456dbb2e6cf3398c5d5aa4ea3e1092d59c9dd459b5f170cfeb2958fe5d9927639caac5142f56574570182287", @ANYRES16=r5, @ANYBLOB="010500000000000000000f000000"], 0x14}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0b2e4e00ff3f9596c9a2ecff2548f714000000100001e9ffff16e5d46caf8cafff00000000000000000a3cef7d59d8000000070a090000002ae4ad8f7efd161700000900010073797a30000000000900000073797a5f95b9729eae4efd4000000005080004400000000014"], 0x64}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x74c4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0)
socket$packet(0x11, 0x2, 0x300)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000095}, 0x0)
getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendto$packet(0xffffffffffffffff, &(0x7f0000000300)='}', 0x1, 0x8c1, &(0x7f0000000200)={0x11, 0x6, r10, 0x1, 0x8, 0x6, @random="156f5faf7478"}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x28, &(0x7f0000000280)=ANY=[@ANYRES64=r9, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185700000c000000000000000000000018450000030000000000000000000000852000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018230000", @ANYRES32=r1, @ANYBLOB="00000000f500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b3080000030000007b8af8ff00000000bfa200c4e80000000702000096395591b703000008000000b7040000010000008500000082000000bf91000000000000b7020000012200008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x83, &(0x7f00000003c0)=""/131, 0x40f00, 0x35, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x401}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000004c0)=[{0x4, 0x5, 0x9, 0x1}, {0x1, 0x5, 0xb, 0x8}, {0x4, 0x3, 0xb}, {0x7, 0x2, 0x9}, {0x0, 0x2, 0x5, 0x8}, {0x1, 0x4, 0x9, 0xd}, {0x5, 0x4, 0x3, 0x1}, {0x24, 0x1, 0xb, 0x1}, {0x1, 0x5, 0x8, 0xb}], 0x10, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x28, &(0x7f0000000280)=ANY=[@ANYRES64=r9, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185700000c000000000000000000000018450000030000000000000000000000852000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018230000", @ANYRES32=r1, @ANYBLOB="00000000f500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b3080000030000007b8af8ff00000000bfa200c4e80000000702000096395591b703000008000000b7040000010000008500000082000000bf91000000000000b7020000012200008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x83, &(0x7f00000003c0)=""/131, 0x40f00, 0x35, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x401}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000004c0)=[{0x4, 0x5, 0x9, 0x1}, {0x1, 0x5, 0xb, 0x8}, {0x4, 0x3, 0xb}, {0x7, 0x2, 0x9}, {0x0, 0x2, 0x5, 0x8}, {0x1, 0x4, 0x9, 0xd}, {0x5, 0x4, 0x3, 0x1}, {0x24, 0x1, 0xb, 0x1}, {0x1, 0x5, 0x8, 0xb}], 0x10, 0x2}, 0x94)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)={0x40, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)={0x40, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20008044) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20008044)
socket(0x10, 0x3, 0x0) (async)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newqdisc={0x9c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x401, 0x0, 0x10000}, 0x609d, 0x4, 0x8, 0xfffffffa, 0x2738, 0x2, 0x18, 0x1, 0x6, 0xe, {0xe389, 0x5, 0x5, 0x0, 0x9, 0x2}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0x7, 0x0, 0xa8, 0x0, 0x2, 0x65}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x24008080)

526.308538ms ago: executing program 2 (id=4552):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0)

462.763666ms ago: executing program 4 (id=4553):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000001800060018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)

298.672347ms ago: executing program 2 (id=4554):
r0 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x300, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x200, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="ed09f3bb6bfc0b670104535f0f8b", 0x0, 0xdff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff00000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000080ffffffffffffff00"/112], 0xb8}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r4, @ANYRES8=r4, @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df250200000008000100ac1414bb08000b00", @ANYRES32=0x0, @ANYBLOB="a9a15007ba8eb4bc58b8d33f148293bb986371976b74bb26117ef1a92766c6eba1edc6a3e85d48732227f6b6440201f03423751ddac4e9e1f85ccb0056cf918651ee54697ce09923"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)

297.985855ms ago: executing program 4 (id=4555):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
shutdown(r2, 0x8c5d47e95537ac9b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty, 0xfffffffd}, 0x57)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xa, [{0xa, 0x3}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @typedef={0x7}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x5f]}}, 0x0, 0x58}, 0x28)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet6(r1, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

297.347583ms ago: executing program 0 (id=4556):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x101, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x2c}}, 0x20044800)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x4, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfc28, 0x7, 0x9, 0x7}, {0xffff, 0xf7, 0x2, 0x80000000}, {0x5e, 0x8, 0x5, 0x7fff}, {0x3, 0xf8, 0xbf, 0x4}, {0x4, 0x7, 0x8, 0x7}, {0x9, 0x1, 0x40, 0x4}]}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000001600010025bd7000ffdbdf2500000000000000000000ffff64010100ff"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)

181.638975ms ago: executing program 0 (id=4557):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, &(0x7f0000000180), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f0000000500)="128b9306006d4810e529c670669e7567ef1e73ee7ea1a050ac5040adac01847839fc378469d5765b9cc2418408adc1498194a7197b4dcefb", 0x38}], 0x3}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)

46.874838ms ago: executing program 4 (id=4558):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100))
r1 = socket$kcm(0x10, 0x653f15cf7a7b48eb, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
close(0x3)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000180)={0x3, 'bridge0\x00', 0x1}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e210004000000230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8810)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2)

1.54153ms ago: executing program 1 (id=4559):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080)
pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x24004010)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

0s ago: executing program 0 (id=4560):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socket(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'vxcan1\x00', {'netdevsim0\x00'}, 0xfff7})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, &(0x7f0000000600)={0x6, 0xffff, 0x2, 0x6, 0x2, 0x400000, 0x0, 0x6}, &(0x7f00000005c0)=0x20)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x800, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000140))
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x3, 0xbd}, 0x8)
write$rfkill(r2, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
write$cgroup_subtree(r0, 0x0, 0x32600)

kernel console output (not intermixed with test programs):

med from eth2
[  333.556051][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'.
[  333.565907][T16077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3005'.
[  333.582014][T15783] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  333.962070][  T128] IPVS: stop unused estimator thread 0...
[  333.967800][T15783] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.038440][T16096] gre0 speed is unknown, defaulting to 1000
[  334.051466][T15783] 8021q: adding VLAN 0 to HW filter on device team0
[  334.096055][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.103252][ T9629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.151255][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.158462][ T8630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.328511][T16120] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3016'.
[  334.406832][T16123] netlink: 'syz.0.3018': attribute type 1 has an invalid length.
[  334.443278][T16123] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3018'.
[  334.866391][T16096] lo speed is unknown, defaulting to 1000
[  334.899130][T16096] wg1 speed is unknown, defaulting to 1000
[  335.082295][T15783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.130772][T16149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3025'.
[  335.320066][T15783] veth0_vlan: entered promiscuous mode
[  335.413810][T15949] block nbd64: NBD_DISCONNECT
[  335.468899][T16161] sctp: [Deprecated]: syz.0.3029 (pid 16161) Use of int in max_burst socket option deprecated.
[  335.468899][T16161] Use struct sctp_assoc_value instead
[  335.556810][T15949] udevd[15949]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  335.734505][T16168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3030'.
[  335.851350][T16172] netlink: 'syz.0.3032': attribute type 1 has an invalid length.
[  335.859347][T16172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3032'.
[  337.639530][T15783] veth1_vlan: entered promiscuous mode
[  337.719743][T15783] veth0_macvtap: entered promiscuous mode
[  337.745497][T15783] veth1_macvtap: entered promiscuous mode
[  337.796582][T15783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.811924][T16189] netlink: 'syz.2.3037': attribute type 3 has an invalid length.
[  337.835490][T15783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.886278][ T9629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.905169][ T9629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.914238][T16196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3040'.
[  337.928341][ T9629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.941884][T16191] netlink: 'syz.4.3036': attribute type 1 has an invalid length.
[  338.002111][ T9629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.038444][T16191] bond9: (slave geneve3): making interface the new active one
[  338.072508][T16191] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  338.086100][ T9629] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  338.152914][ T9629] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  338.181279][ T9629] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  338.209215][ T9629] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  338.246982][T16212] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  338.368050][T16212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3046'.
[  338.384508][ T9629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.409392][ T9629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.487193][ T9629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.503451][ T9629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.673977][T16236] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3053'.
[  338.734955][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'.
[  338.774451][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'.
[  338.957544][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.976581][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.990261][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  339.001578][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  339.010964][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  339.129287][T16251] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3055'.
[  339.222094][T16253] veth0: entered promiscuous mode
[  339.275052][T16253] veth0: left promiscuous mode
[  339.290382][T16245] gre0 speed is unknown, defaulting to 1000
[  339.463948][T16260] netlink: 'syz.3.3060': attribute type 1 has an invalid length.
[  339.506511][T16260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3060'.
[  339.548434][T16260] ip6tnl0: entered promiscuous mode
[  339.553676][T16260] ip6tnl0: entered allmulticast mode
[  339.657844][T16245] lo speed is unknown, defaulting to 1000
[  339.665711][T16245] wg1 speed is unknown, defaulting to 1000
[  339.768433][T16277] netlink: 'syz.4.3065': attribute type 1 has an invalid length.
[  339.838684][T16276] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  339.853600][T16276] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  339.882782][T16277] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3065'.
[  339.891822][T16245] chnl_net:caif_netlink_parms(): no params data found
[  339.961038][T16276] netlink: 'syz.4.3065': attribute type 21 has an invalid length.
[  339.979482][T16285] gre0 speed is unknown, defaulting to 1000
[  340.001201][T16276] netlink: 'syz.4.3065': attribute type 21 has an invalid length.
[  340.012814][T16277] netlink: 'syz.4.3065': attribute type 21 has an invalid length.
[  340.016863][T16245] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.030864][T16245] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.040449][T16245] bridge_slave_0: entered allmulticast mode
[  340.049143][T16245] bridge_slave_0: entered promiscuous mode
[  340.058860][T16245] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.066470][T16245] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.073807][T16245] bridge_slave_1: entered allmulticast mode
[  340.082259][T16245] bridge_slave_1: entered promiscuous mode
[  340.127611][T16245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.140593][T16245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.189186][T16245] team0: Port device team_slave_0 added
[  340.198471][T16245] team0: Port device team_slave_1 added
[  340.257221][T16245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.269847][T16245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.296683][T16245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.309002][T16285] lo speed is unknown, defaulting to 1000
[  340.310671][T16245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.322124][T16245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.348798][T16245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.361859][T16285] wg1 speed is unknown, defaulting to 1000
[  340.439488][T16245] hsr_slave_0: entered promiscuous mode
[  340.446163][T16245] hsr_slave_1: entered promiscuous mode
[  340.452266][T16245] debugfs: 'hsr0' already exists in 'hsr'
[  340.458176][T16245] Cannot create hsr debugfs directory
[  340.799543][T16303] __nla_validate_parse: 5 callbacks suppressed
[  340.799560][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'.
[  340.821500][T16303] macvlan6: entered promiscuous mode
[  340.827370][T16303] macvlan6: entered allmulticast mode
[  340.832777][T16303] veth1_to_batadv: entered allmulticast mode
[  341.064499][ T5831] Bluetooth: hci3: command tx timeout
[  342.488578][T16264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  342.510567][T16245] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  342.590687][T16245] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  342.639893][T16308] netlink: 'syz.2.3070': attribute type 1 has an invalid length.
[  342.647470][T16245] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  342.655164][T16308] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3070'.
[  342.677106][T16308] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3070'.
[  342.686687][T16245] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  342.841618][T16330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  342.855694][T16308] netlink: 'syz.2.3070': attribute type 10 has an invalid length.
[  342.863543][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3070'.
[  342.868338][T16327] syzkaller0: entered promiscuous mode
[  342.881184][T16327] syzkaller0: entered allmulticast mode
[  342.929570][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'.
[  342.949299][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'.
[  342.968668][T16308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3070'.
[  342.999252][T16332] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20002
[  343.019577][T16245] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.086101][T16334] netlink: 'syz.3.3075': attribute type 11 has an invalid length.
[  343.147416][ T5831] Bluetooth: hci3: command tx timeout
[  343.523687][T16344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3079'.
[  343.533929][T16344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3079'.
[  344.645747][T16348] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  344.684738][T16348] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  344.695810][T16245] 8021q: adding VLAN 0 to HW filter on device team0
[  344.714603][T16348] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  344.716316][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.730534][ T8630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.780011][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.787224][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.040370][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3087'.
[  345.224418][ T5831] Bluetooth: hci3: command tx timeout
[  345.230972][T16245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.293038][T16384] gre0 speed is unknown, defaulting to 1000
[  345.422330][T16386] netlink: 'syz.4.3092': attribute type 22 has an invalid length.
[  345.486329][T16384] lo speed is unknown, defaulting to 1000
[  345.493828][T16384] wg1 speed is unknown, defaulting to 1000
[  345.779716][T16394] IPVS: set_ctl: invalid protocol: 37528 176.64.2.152:37532
[  345.994076][T16386] netlink: 'syz.4.3092': attribute type 22 has an invalid length.
[  346.016328][T16386] __nla_validate_parse: 1 callbacks suppressed
[  346.016345][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'.
[  346.023544][T16245] veth0_vlan: entered promiscuous mode
[  346.061127][T16405] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3097'.
[  346.079714][T16407] netlink: 'syz.0.3098': attribute type 5 has an invalid length.
[  346.154426][T16245] veth1_vlan: entered promiscuous mode
[  346.289016][T16245] veth0_macvtap: entered promiscuous mode
[  346.289694][T16410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3099'.
[  346.301460][T16245] veth1_macvtap: entered promiscuous mode
[  346.333510][T16245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.400191][T16245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.457799][ T9629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.479358][ T9629] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.512263][ T9629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.539211][ T9629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.812074][ T9629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.841410][T16419] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  346.854415][ T9629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.880625][T16419] bond11: (slave lo): Enslaving as an active interface with an up link
[  346.944395][T16419] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  347.015521][T16429] netlink: 'syz.3.3107': attribute type 1 has an invalid length.
[  347.021718][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.048888][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.163010][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'.
[  347.304449][ T5831] Bluetooth: hci3: command tx timeout
[  347.582213][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  347.592692][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  347.621864][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  347.635815][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  347.643861][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  347.918417][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3119'.
[  347.935779][T16456] gre0 speed is unknown, defaulting to 1000
[  347.989742][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'.
[  348.120217][ T9629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.183140][T16477] openvswitch: netlink: Message has 496 unknown bytes.
[  348.220625][T16477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.352996][ T9629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.406367][T16456] lo speed is unknown, defaulting to 1000
[  348.457224][T16484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3124'.
[  349.707731][   T51] Bluetooth: hci2: command tx timeout
[  350.051533][T16456] wg1 speed is unknown, defaulting to 1000
[  350.076388][ T9629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.229311][ T9629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.323780][T16509] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3132'.
[  350.642405][T16531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3138'.
[  350.642993][T16529] openvswitch: netlink: Message has 496 unknown bytes.
[  350.662519][T16531] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3138'.
[  350.682265][T16529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.705626][T16531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.739889][ T9629] dvmrp0: left allmulticast mode
[  351.029491][ T9629] bond7 (unregistering): (slave gretap1): Releasing active interface
[  351.043020][ T9629] batman_adv: batadv0: Removing interface: gretap2
[  351.083148][ T9629] bond2 (unregistering): (slave geneve2): Releasing active interface
[  351.188532][ T9629] bond11 (unregistering): (slave bridge2): Releasing backup interface
[  351.268630][ T9629] bond0 (unregistering): left allmulticast mode
[  351.275218][ T9629] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  351.282037][ T9629] bond0 (unregistering): left promiscuous mode
[  351.288672][ T9629] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  351.301589][ T9629] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  351.312435][ T9629] bond0 (unregistering): Released all slaves
[  351.322616][ T9629] bond1 (unregistering): Released all slaves
[  351.337174][ T9629] bond2 (unregistering): Released all slaves
[  351.349956][ T9629] bond3 (unregistering): Released all slaves
[  351.363541][ T9629] bond4 (unregistering): Released all slaves
[  351.379434][ T9629] bond5 (unregistering): (slave vcan1): Releasing backup interface
[  351.387731][ T9629] vcan1: left promiscuous mode
[  351.393753][ T9629] bond5 (unregistering): Released all slaves
[  351.415996][ T9629] bond6 (unregistering): Released all slaves
[  351.428527][ T9629] bond7 (unregistering): Released all slaves
[  351.441612][ T9629] bond8 (unregistering): Released all slaves
[  351.458379][ T9629] bond9 (unregistering): Released all slaves
[  351.477890][ T9629] bond10 (unregistering): Released all slaves
[  351.491246][ T9629] bond11 (unregistering): Released all slaves
[  351.685111][ T9629] tipc: Disabling bearer <udp:syz0>
[  351.700897][ T9629] tipc: Left network mode
[  351.733140][T16456] chnl_net:caif_netlink_parms(): no params data found
[  351.795616][   T51] Bluetooth: hci2: command tx timeout
[  351.846417][T16561] syzkaller1: entered promiscuous mode
[  351.852020][T16561] syzkaller1: entered allmulticast mode
[  352.046460][T16565] syzkaller0: entered promiscuous mode
[  352.072113][T16565] syzkaller0: entered allmulticast mode
[  352.148821][T16567] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.179955][T16567] bridge_slave_0 (unregistering): left allmulticast mode
[  352.194431][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.198633][T16567] bridge_slave_0 (unregistering): left promiscuous mode
[  352.232349][T16567] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.831170][T16601] openvswitch: netlink: Duplicate or invalid key (type 0).
[  352.840150][T16601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.874475][   T51] Bluetooth: hci2: command tx timeout
[  354.171135][T16603] __nla_validate_parse: 1 callbacks suppressed
[  354.171154][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'.
[  354.275770][T16456] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.304929][T16456] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.317943][T16456] bridge_slave_0: entered allmulticast mode
[  354.333824][T16456] bridge_slave_0: entered promiscuous mode
[  354.364846][T16456] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.382346][T16456] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.394542][T16456] bridge_slave_1: entered allmulticast mode
[  354.410892][T16456] bridge_slave_1: entered promiscuous mode
[  354.495429][T16626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3160'.
[  354.610665][T16633] openvswitch: netlink: Duplicate or invalid key (type 0).
[  354.628080][T16618] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.640247][T16633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.683623][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.740296][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.880878][T16650] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3167'.
[  354.890672][T16650] unsupported nlmsg_type 40
[  354.898590][T16618] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.051655][T16456] team0: Port device team_slave_0 added
[  355.089635][T16456] team0: Port device team_slave_1 added
[  355.197305][T16618] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.296324][T16667] netlink: 'syz.4.3170': attribute type 4 has an invalid length.
[  355.304216][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'.
[  355.413010][T16618] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.557142][T16681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.590828][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.598059][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.626682][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.659462][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.678068][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.719595][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.816644][T16681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.881052][T16684] syzkaller0: entered promiscuous mode
[  355.886757][T16684] syzkaller0: entered allmulticast mode
[  355.935523][T16681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.954506][   T51] Bluetooth: hci2: command tx timeout
[  356.230922][T16702] openvswitch: netlink: Duplicate or invalid key (type 0).
[  356.238558][T16702] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.552015][T16681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.663974][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.701775][T16456] hsr_slave_0: entered promiscuous mode
[  357.711202][T16456] hsr_slave_1: entered promiscuous mode
[  357.718388][T16456] debugfs: 'hsr0' already exists in 'hsr'
[  357.732154][T16456] Cannot create hsr debugfs directory
[  357.767268][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.028525][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.065231][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.193111][T16736] netlink: 'syz.4.3183': attribute type 9 has an invalid length.
[  358.309386][ T1102] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.399343][ T9629] hsr_slave_0: left promiscuous mode
[  358.422489][ T9629] hsr_slave_1: left promiscuous mode
[  358.438967][ T9629] veth1_vlan: left allmulticast mode
[  358.469823][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3188'.
[  358.766813][ T8022] lo speed is unknown, defaulting to 1000
[  358.774685][ T8022] infiniband syz2: ib_query_port failed (-19)
[  358.876916][ T8630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.923985][ T8630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.946253][T16762] openvswitch: netlink: Duplicate or invalid key (type 0).
[  358.974402][T16762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.025857][ T8630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.091228][T16767] netlink: 'syz.3.3190': attribute type 1 has an invalid length.
[  359.110945][T16767] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3190'.
[  359.136755][T16766] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3191'.
[  360.336124][T16832] openvswitch: netlink: Duplicate or invalid key (type 0).
[  360.343388][T16832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.051868][T16456] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  362.086669][T16456] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  362.204730][T16863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'.
[  362.223017][T16456] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  362.253671][T16456] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  362.568605][T16886] openvswitch: netlink: Duplicate or invalid key (type 0).
[  362.576032][T16886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.958786][T16907] netlink: 'syz.1.3224': attribute type 1 has an invalid length.
[  363.118718][T16917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'.
[  364.762398][T16907] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  364.826446][T16456] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.870864][T16456] 8021q: adding VLAN 0 to HW filter on device team0
[  364.892899][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.900553][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.933569][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.940783][ T9629] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.505105][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.529142][T16966] netlink: 'syz.1.3238': attribute type 1 has an invalid length.
[  365.618842][ T8009] IPVS: starting estimator thread 0...
[  365.659587][T16456] veth0_vlan: entered promiscuous mode
[  365.672353][T16456] veth1_vlan: entered promiscuous mode
[  365.723034][T16973] IPVS: using max 55 ests per chain, 132000 per kthread
[  365.727994][T16456] veth0_macvtap: entered promiscuous mode
[  365.809728][T16456] veth1_macvtap: entered promiscuous mode
[  365.908409][T16979] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  366.053967][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3243'.
[  368.380250][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.402241][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.489975][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.516056][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.554775][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.572929][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.605577][T17059] ip6gre2: entered promiscuous mode
[  368.610916][T17059] ip6gre2: entered allmulticast mode
[  368.890318][ T9629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.910700][ T9629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.043115][T17089] sctp: [Deprecated]: syz.3.3262 (pid 17089) Use of int in maxseg socket option.
[  369.043115][T17089] Use struct sctp_assoc_value instead
[  369.088116][ T9629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.115002][ T9629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.143241][T17091] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.3263'.
[  369.777831][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.797120][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.807785][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.823233][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.840022][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.982073][T17123] gre0 speed is unknown, defaulting to 1000
[  370.011464][T17139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3274'.
[  370.255934][T17145] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  370.679164][T17156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'.
[  370.884114][T17123] wg1 speed is unknown, defaulting to 1000
[  371.263266][T17123] chnl_net:caif_netlink_parms(): no params data found
[  371.508911][T17196] netlink: 'syz.2.3291': attribute type 1 has an invalid length.
[  371.564354][T17123] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.582188][T17123] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.592389][T17123] bridge_slave_0: entered allmulticast mode
[  371.635735][T17123] bridge_slave_0: entered promiscuous mode
[  371.656001][T17123] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.685885][T17123] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.725352][T17123] bridge_slave_1: entered allmulticast mode
[  371.742692][T17123] bridge_slave_1: entered promiscuous mode
[  371.766424][T17196] team0: Port device ip6gretap1 added
[  371.867372][ T5831] Bluetooth: hci1: command tx timeout
[  371.928615][T17123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.944184][T17123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.987932][T17123] team0: Port device team_slave_0 added
[  371.996500][T17123] team0: Port device team_slave_1 added
[  372.072193][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3298'.
[  372.122301][T17226] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  372.161333][T17123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.194287][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.222347][T17230] xt_hashlimit: size too large, truncated to 1048576
[  372.255648][T17230] xt_hashlimit: overflow, try lower: 0/0
[  372.283810][T17123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.347894][T17235] batman_adv: batadv0: Adding interface: macvtap1
[  372.361871][T17235] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.388404][T17235] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  372.411430][T17123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.421492][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.506982][T17123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.125938][T17240] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  373.146087][T17123] hsr_slave_0: entered promiscuous mode
[  373.154933][T17240] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  373.169221][T17123] hsr_slave_1: entered promiscuous mode
[  373.198477][T17123] debugfs: 'hsr0' already exists in 'hsr'
[  373.226084][T17123] Cannot create hsr debugfs directory
[  373.406566][T17240] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  373.412641][T17240] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  373.424969][T17274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3309'.
[  373.831421][T17123] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.866400][T17285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3316'.
[  373.944872][ T5831] Bluetooth: hci1: command tx timeout
[  374.062900][T17123] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.074088][T17240] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  374.116190][T17240] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  374.130965][T17298] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3320'.
[  374.142696][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'.
[  374.157741][T17298] openvswitch: netlink: Flow actions attr not present in new flow.
[  374.220133][T17123] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.258391][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'.
[  374.295706][T17123] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.328313][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'.
[  374.496308][   T30] audit: type=1107 audit(1774015416.076:7): pid=17309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Êlœ9–56²¦ÒÓ]@ü�Á÷A1v ð¸MYQ6¼ÿµÀ”0âÀúžd0$u-—µ#�ïÚ<EÞy0¤’鉾‰%Å%;>)~³O oÙ»ÕÁ8Ä>bD	…©ÂxÇöߟ³Èw¯R¤ôh˜FGx¦5«÷'
[  374.532410][T17310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3326'.
[  374.541632][T17313] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  374.562367][T17123] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  374.589805][T17123] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  374.635751][T17123] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  374.654205][T17123] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  374.761736][T17319] syzkaller1: entered promiscuous mode
[  374.797459][T17319] syzkaller1: entered allmulticast mode
[  375.000255][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  375.012178][T17123] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.081840][T17123] 8021q: adding VLAN 0 to HW filter on device team0
[  375.123197][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.130418][ T9630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.152521][T17340] netlink: 'syz.3.3331': attribute type 1 has an invalid length.
[  375.181957][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.189327][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.540372][T17363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3338'.
[  375.723849][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.790542][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3341'.
[  375.902910][T17123] veth0_vlan: entered promiscuous mode
[  375.943252][T17123] veth1_vlan: entered promiscuous mode
[  376.020848][T17123] veth0_macvtap: entered promiscuous mode
[  376.053707][T17123] veth1_macvtap: entered promiscuous mode
[  376.142455][T17123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.176726][T17123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.216440][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.239651][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.275324][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.305664][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.516227][ T8630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.524094][ T8630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.607609][ T8630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.626089][ T8630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.819876][T17399] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  376.875398][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'.
[  376.906711][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'.
[  376.953912][T17403] netlink: 'syz.0.3353': attribute type 14 has an invalid length.
[  376.994301][T17403] netlink: 'syz.0.3353': attribute type 13 has an invalid length.
[  377.189692][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'.
[  377.348213][T17428] gre0 speed is unknown, defaulting to 1000
[  377.357713][T17431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3363'.
[  378.349838][T17428] wg1 speed is unknown, defaulting to 1000
[  378.450015][T17433] xt_CT: No such helper "snmp_trap"
[  378.993884][T17486] gre0 speed is unknown, defaulting to 1000
[  379.011640][T17494] ip6tnl1: entered promiscuous mode
[  379.231179][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  379.259145][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  379.270944][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  379.279754][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  379.288096][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  379.378244][T17501] openvswitch: netlink: Duplicate or invalid key (type 0).
[  379.414620][T17501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.603007][T17486] wg1 speed is unknown, defaulting to 1000
[  379.623071][T17497] gre0 speed is unknown, defaulting to 1000
[  380.023235][T17523] __nla_validate_parse: 3 callbacks suppressed
[  380.023254][T17523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3391'.
[  380.152209][T17497] wg1 speed is unknown, defaulting to 1000
[  380.153737][T17527] tipc: Started in network mode
[  380.169502][T17527] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711
[  380.181765][T17527] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  380.263177][T17534] xt_hashlimit: size too large, truncated to 1048576
[  380.273876][T17534] xt_hashlimit: overflow, try lower: 0/0
[  380.280695][T17528] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.293626][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'.
[  380.337310][T17528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.358564][T17528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.690675][T17523] hsr_slave_0: left promiscuous mode
[  380.706529][T17523] hsr_slave_1: left promiscuous mode
[  380.733159][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3395'.
[  380.748470][T17547] openvswitch: netlink: Duplicate or invalid key (type 0).
[  380.822858][ T9630] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  380.833725][T17547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.847528][ T9630] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  380.882513][ T9630] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  380.922769][ T9630] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.283021][T17535] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  381.306547][ T5831] Bluetooth: hci0: command tx timeout
[  381.319272][T17535] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  381.469142][T17497] chnl_net:caif_netlink_parms(): no params data found
[  381.505775][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'.
[  381.537602][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3398'.
[  381.555977][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'.
[  381.571983][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3398'.
[  381.727873][T17567] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.735560][T17567] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.937512][T17567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.962998][T17567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.121298][T17497] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.128989][T17497] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.136713][T17497] bridge_slave_0: entered allmulticast mode
[  382.163459][T17497] bridge_slave_0: entered promiscuous mode
[  382.179337][T17497] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.187543][T17497] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.205684][T17497] bridge_slave_1: entered allmulticast mode
[  382.223769][T17497] bridge_slave_1: entered promiscuous mode
[  382.255137][ T9630] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.337736][ T9630] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.360982][ T9630] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.386248][T17585] 8021q: VLANs not supported on wg1
[  382.400141][T17497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.423169][T17497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.462539][ T9630] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.598106][T17497] team0: Port device team_slave_0 added
[  382.622611][T17497] team0: Port device team_slave_1 added
[  382.726529][T17497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.757515][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.791260][T17611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3404'.
[  382.816674][T17497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.832029][T17497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.841271][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3405'.
[  382.841859][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.877785][T17497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.033896][T17497] hsr_slave_0: entered promiscuous mode
[  383.053080][T17497] hsr_slave_1: entered promiscuous mode
[  383.070363][T17497] debugfs: 'hsr0' already exists in 'hsr'
[  383.076838][T17497] Cannot create hsr debugfs directory
[  383.088189][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3408'.
[  383.698460][T17497] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.753924][T17497] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.796813][T17497] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  383.966387][T17497] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  384.007058][T17497] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.057637][T17497] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  384.371012][T17497] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  384.418685][T17497] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.474635][T17497] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  384.709867][T17497] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  384.746290][T17497] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.759196][T17497] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  385.270282][T17497] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  385.309089][T17497] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  385.341779][T17497] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  385.360784][T17706] netlink: 'syz.2.3427': attribute type 11 has an invalid length.
[  385.361233][T17497] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  385.386946][T17706] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  385.397738][T17706] __nla_validate_parse: 1 callbacks suppressed
[  385.397755][T17706] netlink: 199780 bytes leftover after parsing attributes in process `syz.2.3427'.
[  385.683280][T17497] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.750989][T17723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3431'.
[  385.763548][T17497] 8021q: adding VLAN 0 to HW filter on device team0
[  385.793276][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.800498][ T9632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.849060][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.856278][ T9632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.411894][T17497] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.474103][T17757] FAULT_INJECTION: forcing a failure.
[  386.474103][T17757] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  386.504203][T17757] CPU: 1 UID: 0 PID: 17757 Comm: syz.1.3445 Not tainted syzkaller #0 PREEMPT(full) 
[  386.504231][T17757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  386.504260][T17757] Call Trace:
[  386.504267][T17757]  <TASK>
[  386.504275][T17757]  dump_stack_lvl+0xe8/0x150
[  386.504402][T17757]  should_fail_ex+0x412/0x560
[  386.504498][T17757]  _copy_from_user+0x2d/0xb0
[  386.504541][T17757]  bpf_obj_get_info_by_fd+0x511/0x32f0
[  386.504591][T17757]  ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10
[  386.504611][T17757]  ? kstrtouint+0x6e/0xe0
[  386.504659][T17757]  ? __lock_acquire+0x6b5/0x2cf0
[  386.504700][T17757]  ? get_pid_task+0x20/0x1f0
[  386.504755][T17757]  ? bpf_lsm_bpf+0x9/0x20
[  386.504781][T17757]  ? security_bpf+0x7e/0x2d0
[  386.504851][T17757]  __sys_bpf+0x66e/0x950
[  386.504877][T17757]  ? __pfx___sys_bpf+0x10/0x10
[  386.504898][T17757]  ? kmem_cache_free+0x187/0x630
[  386.504954][T17757]  ? ksys_write+0x1fc/0x270
[  386.504983][T17757]  ? __pfx_ksys_write+0x10/0x10
[  386.505006][T17757]  __x64_sys_bpf+0x7c/0x90
[  386.505028][T17757]  do_syscall_64+0x14d/0xf80
[  386.505118][T17757]  ? trace_irq_disable+0x3b/0x150
[  386.505156][T17757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.505187][T17757]  ? clear_bhb_loop+0x40/0x90
[  386.505209][T17757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.505228][T17757] RIP: 0033:0x7f388d19c799
[  386.505246][T17757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.505261][T17757] RSP: 002b:00007f388dfd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  386.505280][T17757] RAX: ffffffffffffffda RBX: 00007f388d415fa0 RCX: 00007f388d19c799
[  386.505294][T17757] RDX: 0000000000000010 RSI: 0000200000000840 RDI: 000000000000000f
[  386.505304][T17757] RBP: 00007f388dfd2090 R08: 0000000000000000 R09: 0000000000000000
[  386.505315][T17757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  386.505326][T17757] R13: 00007f388d416038 R14: 00007f388d415fa0 R15: 00007ffc174bde28
[  386.505353][T17757]  </TASK>
[  387.103791][T17497] veth0_vlan: entered promiscuous mode
[  387.121427][T17497] veth1_vlan: entered promiscuous mode
[  387.169827][T17497] veth0_macvtap: entered promiscuous mode
[  387.186657][T17497] veth1_macvtap: entered promiscuous mode
[  387.210041][T17497] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.237787][T17497] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.261981][  T258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.311440][  T258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.334622][  T258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.343383][  T258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.652663][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.683674][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.759686][T17805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3458'.
[  387.779236][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.790452][T17808] openvswitch: netlink: Duplicate or invalid key (type 0).
[  387.815313][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.827305][T17808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.891536][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'.
[  387.897128][T17805] ip6tnl0: left promiscuous mode
[  387.954414][T17805] ip6tnl0: left allmulticast mode
[  388.017468][T17805] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.025161][T17805] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.101240][T17805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.116956][T17805] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.207065][T17811] hsr_slave_0: left promiscuous mode
[  388.214119][T17811] hsr_slave_1: left promiscuous mode
[  388.258611][ T9629] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.306908][ T9629] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.322694][ T9629] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.333191][ T9629] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.375525][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'.
[  388.415096][T17833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3467'.
[  388.538141][T17838] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3470'.
[  388.555270][T17838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3470'.
[  388.676450][T17839] gre0 speed is unknown, defaulting to 1000
[  388.763948][T17846] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3472'.
[  388.922920][T17839] wg1 speed is unknown, defaulting to 1000
[  389.067685][T17857] hsr0: entered promiscuous mode
[  389.076236][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3476'.
[  389.130252][T17863] openvswitch: netlink: Duplicate or invalid key (type 0).
[  389.138381][T17863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.187923][T17857] hsr_slave_0: left promiscuous mode
[  389.194201][T17857] hsr_slave_1: left promiscuous mode
[  389.240343][T17857] hsr0 (unregistering): left promiscuous mode
[  390.102906][T17899] openvswitch: netlink: Duplicate or invalid key (type 0).
[  390.111216][T17899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.387100][T17911] netlink: 'syz.1.3491': attribute type 3 has an invalid length.
[  390.412423][T17907] sctp: [Deprecated]: syz.1.3491 (pid 17907) Use of int in max_burst socket option.
[  390.412423][T17907] Use struct sctp_assoc_value instead
[  393.019385][T17890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  393.146853][T17928] __nla_validate_parse: 6 callbacks suppressed
[  393.146874][T17928] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3497'.
[  393.283675][T17938] openvswitch: netlink: Duplicate or invalid key (type 0).
[  393.301110][T17938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.525827][T17949] netlink: 'syz.1.3505': attribute type 8 has an invalid length.
[  393.532550][T17954] macsec0: entered allmulticast mode
[  393.541721][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3505'.
[  393.562314][T17951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3507'.
[  393.570692][T17949] netlink: 'syz.1.3505': attribute type 4 has an invalid length.
[  393.595795][T17949] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3505'.
[  393.691437][T17966] veth0: entered allmulticast mode
[  393.798786][T17973] netlink: 'syz.0.3512': attribute type 3 has an invalid length.
[  393.807813][T17973] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  393.994657][T17987] tipc: Started in network mode
[  394.006269][T17987] tipc: Node identity , cluster identity 4711
[  394.019116][T17987] tipc: Failed to obtain node identity
[  394.033192][T17987] tipc: Enabling of bearer <eth:sit0> rejected, failed to enable media
[  394.135207][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'.
[  394.149598][T17994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3521'.
[  394.346626][T18012] netlink: 'syz.4.3527': attribute type 1 has an invalid length.
[  394.355290][T18012] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3527'.
[  394.366079][T18012] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3527'.
[  394.377582][T18012] netlink: 'syz.4.3527': attribute type 1 has an invalid length.
[  394.385609][T18012] netlink: 634 bytes leftover after parsing attributes in process `syz.4.3527'.
[  394.525166][T18023] netlink: 'syz.3.3529': attribute type 3 has an invalid length.
[  394.533052][T18023] netlink: 'syz.3.3529': attribute type 1 has an invalid length.
[  394.695071][T18037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3536'.
[  396.286912][T18054] veth1_macvtap: left promiscuous mode
[  396.292421][T18054] macsec0: entered allmulticast mode
[  396.331100][T18059] veth0: entered allmulticast mode
[  396.594531][T18076] netlink: 'syz.4.3545': attribute type 3 has an invalid length.
[  396.611033][T18076] netlink: 'syz.4.3545': attribute type 1 has an invalid length.
[  397.009816][T18093] tipc: Started in network mode
[  397.031582][T18093] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711
[  397.062654][T18093] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  397.162314][T18093] xt_hashlimit: size too large, truncated to 1048576
[  397.169557][T18093] xt_hashlimit: overflow, try lower: 0/0
[  397.424147][ T8022] IPVS: starting estimator thread 0...
[  397.514322][T18116] IPVS: using max 34 ests per chain, 81600 per kthread
[  399.017926][T18133] gre0 speed is unknown, defaulting to 1000
[  399.077293][T18142] __nla_validate_parse: 3 callbacks suppressed
[  399.077310][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'.
[  399.134870][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'.
[  399.514793][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3570'.
[  399.558679][T18133] wg1 speed is unknown, defaulting to 1000
[  399.682391][T18165] validate_nla: 1 callbacks suppressed
[  399.682410][T18165] netlink: 'syz.1.3574': attribute type 1 has an invalid length.
[  399.721239][T18165] 8021q: adding VLAN 0 to HW filter on device bond1
[  399.741220][T18165] 8021q: adding VLAN 0 to HW filter on device batadv1
[  399.753448][T18165] bond1: (slave batadv1): making interface the new active one
[  399.763175][T18165] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  399.783119][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3574'.
[  399.941486][T18165] bond1 (unregistering): (slave batadv1): Releasing active interface
[  399.968230][T18165] bond1 (unregistering): Released all slaves
[  399.988905][T18177] netlink: 'syz.0.3576': attribute type 1 has an invalid length.
[  400.030043][ T9544] IPVS: starting estimator thread 0...
[  400.132203][T18182] IPVS: using max 27 ests per chain, 64800 per kthread
[  400.533269][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'.
[  400.576843][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3581'.
[  400.604846][T18198] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3581'.
[  400.616195][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3581'.
[  400.648556][T18205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3583'.
[  401.029154][T18221] netlink: 202128 bytes leftover after parsing attributes in process `syz.3.3589'.
[  401.248730][T18233] : entered promiscuous mode
[  404.067205][T18313] hsr_slave_1 (unregistering): left promiscuous mode
[  404.562864][T18342] __nla_validate_parse: 8 callbacks suppressed
[  404.562882][T18342] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3637'.
[  404.755962][T18345] bridge0: port 3(vlan2) entered blocking state
[  404.762473][T18345] bridge0: port 3(vlan2) entered disabled state
[  404.769083][T18345] vlan2: entered allmulticast mode
[  404.776524][T18345] geneve0: entered allmulticast mode
[  404.787177][T18345] vlan2: entered promiscuous mode
[  404.792250][T18345] geneve0: entered promiscuous mode
[  404.867194][T18361] netlink: 'syz.2.3640': attribute type 1 has an invalid length.
[  404.973843][T18361] bond1: (slave bridge1): making interface the new active one
[  404.992200][T18361] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  405.109078][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3648'.
[  405.203710][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3650'.
[  405.318220][T18382] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3653'.
[  405.344379][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3653'.
[  405.474286][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3654'.
[  405.516929][T18392] netlink: 'syz.2.3656': attribute type 3 has an invalid length.
[  405.527230][T18392] netlink: 'syz.2.3656': attribute type 1 has an invalid length.
[  405.581486][T18389] ip6gre1: entered promiscuous mode
[  405.592124][T18389] ip6gre1: entered allmulticast mode
[  405.779315][T18404] Bluetooth: MGMT ver 1.23
[  405.787741][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'.
[  405.817795][T18406] FAULT_INJECTION: forcing a failure.
[  405.817795][T18406] name failslab, interval 1, probability 0, space 0, times 0
[  405.831567][T18406] CPU: 1 UID: 0 PID: 18406 Comm: syz.3.3660 Not tainted syzkaller #0 PREEMPT(full) 
[  405.831591][T18406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  405.831602][T18406] Call Trace:
[  405.831609][T18406]  <TASK>
[  405.831617][T18406]  dump_stack_lvl+0xe8/0x150
[  405.831647][T18406]  should_fail_ex+0x412/0x560
[  405.831676][T18406]  should_failslab+0xa8/0x100
[  405.831722][T18406]  __kmalloc_cache_noprof+0x88/0x660
[  405.831742][T18406]  ? sctp_add_bind_addr+0x8c/0x370
[  405.831864][T18406]  sctp_add_bind_addr+0x8c/0x370
[  405.831888][T18406]  sctp_bind_addr_copy+0xb3/0x3c0
[  405.831908][T18406]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  405.831956][T18406]  sctp_connect_new_asoc+0x2ff/0x6b0
[  405.831986][T18406]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  405.832014][T18406]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  405.832067][T18406]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  405.832092][T18406]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  405.832119][T18406]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  405.832141][T18406]  ? security_sctp_bind_connect+0x7e/0x2c0
[  405.832168][T18406]  sctp_sendmsg+0x1528/0x2c10
[  405.832209][T18406]  ? __pfx_sctp_sendmsg+0x10/0x10
[  405.832249][T18406]  ? aa_sk_perm+0x6d5/0x900
[  405.832350][T18406]  ? __pfx_aa_sk_perm+0x10/0x10
[  405.832375][T18406]  ? sock_rps_record_flow+0x19/0x350
[  405.832468][T18406]  ? inet_sendmsg+0x2f4/0x370
[  405.832481][T18406]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  405.832503][T18406]  ____sys_sendmsg+0x80a/0x9f0
[  405.832572][T18406]  ? __pfx_____sys_sendmsg+0x10/0x10
[  405.832596][T18406]  ? import_iovec+0x73/0xa0
[  405.832641][T18406]  ___sys_sendmsg+0x2a5/0x360
[  405.832663][T18406]  ? __pfx____sys_sendmsg+0x10/0x10
[  405.832708][T18406]  ? __fget_files+0x2a/0x420
[  405.832736][T18406]  ? __fget_files+0x3a0/0x420
[  405.832764][T18406]  __x64_sys_sendmsg+0x1bd/0x2a0
[  405.832783][T18406]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  405.832810][T18406]  ? __pfx_ksys_write+0x10/0x10
[  405.832838][T18406]  do_syscall_64+0x14d/0xf80
[  405.832853][T18406]  ? trace_irq_disable+0x3b/0x150
[  405.832873][T18406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.832888][T18406]  ? clear_bhb_loop+0x40/0x90
[  405.832906][T18406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.832920][T18406] RIP: 0033:0x7f9d3d79c799
[  405.832936][T18406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.832950][T18406] RSP: 002b:00007f9d3e588028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  405.832966][T18406] RAX: ffffffffffffffda RBX: 00007f9d3da15fa0 RCX: 00007f9d3d79c799
[  405.832977][T18406] RDX: 000000002004c081 RSI: 0000200000000140 RDI: 0000000000000005
[  405.832986][T18406] RBP: 00007f9d3e588090 R08: 0000000000000000 R09: 0000000000000000
[  405.832995][T18406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.833003][T18406] R13: 00007f9d3da16038 R14: 00007f9d3da15fa0 R15: 00007ffd612d6eb8
[  405.833027][T18406]  </TASK>
[  407.418062][T18404] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  407.424163][  T258] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  407.483847][  T258] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  407.502811][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3662'.
[  407.512332][  T258] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  407.533856][T18416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3663'.
[  407.544145][  T258] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  407.981071][T18447] FAULT_INJECTION: forcing a failure.
[  407.981071][T18447] name failslab, interval 1, probability 0, space 0, times 0
[  407.995607][T18447] CPU: 0 UID: 0 PID: 18447 Comm: syz.3.3676 Not tainted syzkaller #0 PREEMPT(full) 
[  407.995632][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  407.995643][T18447] Call Trace:
[  407.995651][T18447]  <TASK>
[  407.995659][T18447]  dump_stack_lvl+0xe8/0x150
[  407.995689][T18447]  should_fail_ex+0x412/0x560
[  407.995718][T18447]  should_failslab+0xa8/0x100
[  407.995740][T18447]  ? dst_alloc+0x105/0x170
[  407.995887][T18447]  kmem_cache_alloc_noprof+0x87/0x650
[  407.995906][T18447]  ? __pfx_find_exception+0x10/0x10
[  407.995966][T18447]  ? fib_lookup+0x76/0x440
[  407.995986][T18447]  dst_alloc+0x105/0x170
[  407.996012][T18447]  ip_route_output_key_hash_rcu+0x14d0/0x25d0
[  407.996041][T18447]  ? ip_route_output_key_hash+0xd8/0x2a0
[  407.996062][T18447]  ip_route_output_key_hash+0x18d/0x2a0
[  407.996084][T18447]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  407.996108][T18447]  ? crng_fast_key_erasure+0x196/0x270
[  407.996174][T18447]  ? __pfx_crng_fast_key_erasure+0x10/0x10
[  407.996209][T18447]  ip_route_output_flow+0x2a/0x150
[  407.996263][T18447]  sctp_v4_get_dst+0x3f8/0x12b0
[  407.996293][T18447]  ? crng_make_state+0x2c5/0x600
[  407.996315][T18447]  ? lockdep_hardirqs_on+0x7a/0x110
[  407.996363][T18447]  ? crng_make_state+0x36a/0x600
[  407.996389][T18447]  ? __pfx_sctp_v4_get_dst+0x10/0x10
[  407.996411][T18447]  ? _get_random_bytes+0x1e7/0x260
[  407.996450][T18447]  ? dst_release+0x72/0x1b0
[  407.996475][T18447]  sctp_transport_route+0x118/0x2f0
[  407.996502][T18447]  sctp_assoc_add_peer+0x650/0x13b0
[  407.996540][T18447]  sctp_connect_new_asoc+0x329/0x6b0
[  407.996570][T18447]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  407.996599][T18447]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  407.996625][T18447]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  407.996648][T18447]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  407.996674][T18447]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  407.996696][T18447]  ? security_sctp_bind_connect+0x7e/0x2c0
[  407.996721][T18447]  sctp_sendmsg+0x1528/0x2c10
[  407.996762][T18447]  ? __pfx_sctp_sendmsg+0x10/0x10
[  407.996791][T18447]  ? aa_sk_perm+0x6d5/0x900
[  407.996823][T18447]  ? __pfx_aa_sk_perm+0x10/0x10
[  407.996850][T18447]  ? sock_rps_record_flow+0x19/0x350
[  407.996873][T18447]  ? inet_sendmsg+0x2f4/0x370
[  407.996890][T18447]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  407.996913][T18447]  ____sys_sendmsg+0x80a/0x9f0
[  407.996944][T18447]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.996974][T18447]  ? import_iovec+0x73/0xa0
[  407.996997][T18447]  ___sys_sendmsg+0x2a5/0x360
[  407.997024][T18447]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.997080][T18447]  ? __fget_files+0x2a/0x420
[  407.997105][T18447]  ? __fget_files+0x3a0/0x420
[  407.997141][T18447]  __x64_sys_sendmsg+0x1bd/0x2a0
[  407.997165][T18447]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  407.997202][T18447]  ? __pfx_ksys_write+0x10/0x10
[  407.997233][T18447]  do_syscall_64+0x14d/0xf80
[  407.997252][T18447]  ? trace_irq_disable+0x3b/0x150
[  407.997277][T18447]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.997296][T18447]  ? clear_bhb_loop+0x40/0x90
[  407.997319][T18447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.997337][T18447] RIP: 0033:0x7f9d3d79c799
[  407.997355][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.997371][T18447] RSP: 002b:00007f9d3e588028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.997391][T18447] RAX: ffffffffffffffda RBX: 00007f9d3da15fa0 RCX: 00007f9d3d79c799
[  407.997405][T18447] RDX: 000000002004c081 RSI: 0000200000000140 RDI: 0000000000000005
[  407.997417][T18447] RBP: 00007f9d3e588090 R08: 0000000000000000 R09: 0000000000000000
[  407.997429][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.997440][T18447] R13: 00007f9d3da16038 R14: 00007f9d3da15fa0 R15: 00007ffd612d6eb8
[  407.997470][T18447]  </TASK>
[  408.410853][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'.
[  408.491572][T18451] openvswitch: netlink: Flow key attr not present in new flow.
[  408.573392][T18452] openvswitch: netlink: Flow key attr not present in new flow.
[  409.213316][T18495] openvswitch: netlink: Message has 584 unknown bytes.
[  409.235526][T18495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.910128][ T9629] bond2 (unregistering): (slave gretap2): Releasing active interface
[  409.958808][  T258] smc: removing ib device syz1
[  410.089815][T18549] __nla_validate_parse: 3 callbacks suppressed
[  410.089832][T18549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3710'.
[  410.164738][ T9629] bond5 (unregistering): (slave bridge2): Releasing active interface
[  410.362326][ T9629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.378839][ T9629] bond_slave_0: left allmulticast mode
[  410.386439][ T9629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.396131][ T9629] bond_slave_1: left allmulticast mode
[  410.413799][ T9629] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  410.423961][ T9629] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  410.436027][ T9629] bond0 (unregistering): Released all slaves
[  410.457992][ T9629] bond1 (unregistering): Released all slaves
[  410.525053][ T9629] bond2 (unregistering): Released all slaves
[  410.550609][ T9629] bond3 (unregistering): Released all slaves
[  410.604306][ T9629] bond4 (unregistering): Released all slaves
[  410.646325][ T9629] bond5 (unregistering): Released all slaves
[  410.686428][ T9629] bond6 (unregistering): Released all slaves
[  410.743875][ T9629] bond7 (unregistering): Released all slaves
[  410.804313][   T24] gre0 speed is unknown, defaulting to 1000
[  410.814379][   T24] syz1: Port: 1 Link DOWN
[  410.934438][T18554] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20003
[  411.004778][T18556] netlink: 'syz.3.3713': attribute type 11 has an invalid length.
[  411.062219][T18559] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3714'.
[  411.453106][T18579] openvswitch: netlink: Message has 584 unknown bytes.
[  411.478025][T18579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.545995][T18584] netlink: 'syz.0.3724': attribute type 1 has an invalid length.
[  411.567936][T18584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3724'.
[  411.798086][T18594] veth1: entered promiscuous mode
[  411.807302][T18594] veth1: entered allmulticast mode
[  412.006454][T18604] netlink: 'syz.2.3733': attribute type 1 has an invalid length.
[  412.054539][T18605] netlink: 'syz.2.3733': attribute type 1 has an invalid length.
[  412.199044][T18604] 8021q: adding VLAN 0 to HW filter on device bond2
[  412.288787][T18626] x_tables: duplicate underflow at hook 1
[  412.424796][T18610] bond2: (slave veth3): Enslaving as an active interface with a down link
[  412.436854][T18633] netlink: 'syz.0.3742': attribute type 7 has an invalid length.
[  412.457851][T18633] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3742'.
[  412.689152][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3747'.
[  412.849149][ T9629] tipc: Disabling bearer <udp:syz2>
[  412.854747][ T9629] tipc: Left network mode
[  413.083326][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3754'.
[  413.096746][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3755'.
[  413.225165][T18678] bridge1: entered promiscuous mode
[  413.242428][T18678] bridge1: port 1(macvtap1) entered blocking state
[  413.275167][T18678] bridge1: port 1(macvtap1) entered disabled state
[  413.281934][T18678] macvtap1: entered allmulticast mode
[  413.319352][T18678] bridge1: entered allmulticast mode
[  413.327264][T18678] macvtap1: left allmulticast mode
[  413.332507][T18678] bridge1: left allmulticast mode
[  413.350257][T18678] bridge1: left promiscuous mode
[  413.615200][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3762'.
[  413.624191][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3762'.
[  413.668672][T18702] FAULT_INJECTION: forcing a failure.
[  413.668672][T18702] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  413.684367][T18695] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3762'.
[  413.694071][T18702] CPU: 1 UID: 0 PID: 18702 Comm: syz.2.3764 Not tainted syzkaller #0 PREEMPT(full) 
[  413.694095][T18702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  413.694106][T18702] Call Trace:
[  413.694114][T18702]  <TASK>
[  413.694121][T18702]  dump_stack_lvl+0xe8/0x150
[  413.694152][T18702]  should_fail_ex+0x412/0x560
[  413.694181][T18702]  _copy_from_user+0x2d/0xb0
[  413.694200][T18702]  dgram_setsockopt+0x115/0x640
[  413.694323][T18702]  ? __pfx_dgram_setsockopt+0x10/0x10
[  413.694343][T18702]  ? aa_sock_opt_perm+0xff/0x1a0
[  413.694405][T18702]  ? sock_common_setsockopt+0x36/0xc0
[  413.694460][T18702]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  413.694489][T18702]  do_sock_setsockopt+0x17c/0x1b0
[  413.694513][T18702]  __x64_sys_setsockopt+0x13d/0x1b0
[  413.694537][T18702]  do_syscall_64+0x14d/0xf80
[  413.694555][T18702]  ? trace_irq_disable+0x3b/0x150
[  413.694580][T18702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.694599][T18702]  ? clear_bhb_loop+0x40/0x90
[  413.694621][T18702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.694639][T18702] RIP: 0033:0x7fce1e59c799
[  413.694661][T18702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.694677][T18702] RSP: 002b:00007fce1f527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  413.694697][T18702] RAX: ffffffffffffffda RBX: 00007fce1e815fa0 RCX: 00007fce1e59c799
[  413.694710][T18702] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004
[  413.694721][T18702] RBP: 00007fce1f527090 R08: 0000000000000004 R09: 0000000000000000
[  413.694733][T18702] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  413.694745][T18702] R13: 00007fce1e816038 R14: 00007fce1e815fa0 R15: 00007ffdbb0882c8
[  413.694773][T18702]  </TASK>
[  413.934867][T18700] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  413.962553][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  413.981531][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.068720][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.138050][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.148889][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.182632][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.290631][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.311470][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.327829][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.370822][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  414.419793][ T9629] hsr_slave_0: left promiscuous mode
[  414.440486][ T9629] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  414.621284][T18749] FAULT_INJECTION: forcing a failure.
[  414.621284][T18749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.648492][T18749] CPU: 0 UID: 0 PID: 18749 Comm: syz.0.3780 Not tainted syzkaller #0 PREEMPT(full) 
[  414.648519][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  414.648531][T18749] Call Trace:
[  414.648538][T18749]  <TASK>
[  414.648547][T18749]  dump_stack_lvl+0xe8/0x150
[  414.648578][T18749]  should_fail_ex+0x412/0x560
[  414.648608][T18749]  _copy_to_user+0x31/0xb0
[  414.648630][T18749]  simple_read_from_buffer+0xe1/0x170
[  414.648661][T18749]  proc_fail_nth_read+0x1bb/0x230
[  414.648736][T18749]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  414.648765][T18749]  ? rw_verify_area+0x2a6/0x4d0
[  414.648783][T18749]  ? irqentry_exit+0x59e/0x620
[  414.648801][T18749]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  414.648828][T18749]  vfs_read+0x20c/0xa70
[  414.648855][T18749]  ? __pfx_vfs_read+0x10/0x10
[  414.648877][T18749]  ? __asan_memset+0x22/0x50
[  414.648896][T18749]  ? _copy_from_user+0x4c/0xb0
[  414.648915][T18749]  ? dgram_setsockopt+0x135/0x640
[  414.648947][T18749]  ksys_read+0x150/0x270
[  414.648968][T18749]  ? __pfx_ksys_read+0x10/0x10
[  414.648998][T18749]  do_syscall_64+0x14d/0xf80
[  414.649016][T18749]  ? trace_irq_disable+0x3b/0x150
[  414.649042][T18749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.649061][T18749]  ? clear_bhb_loop+0x40/0x90
[  414.649083][T18749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.649101][T18749] RIP: 0033:0x7f3cfa75cfce
[  414.649124][T18749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  414.649140][T18749] RSP: 002b:00007f3cfb6acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  414.649163][T18749] RAX: ffffffffffffffda RBX: 00007f3cfb6ad6c0 RCX: 00007f3cfa75cfce
[  414.649176][T18749] RDX: 000000000000000f RSI: 00007f3cfb6ad0a0 RDI: 0000000000000003
[  414.649188][T18749] RBP: 00007f3cfb6ad090 R08: 0000000000000000 R09: 0000000000000000
[  414.649200][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.649211][T18749] R13: 00007f3cfaa16038 R14: 00007f3cfaa15fa0 R15: 00007ffcdc1b3748
[  414.649239][T18749]  </TASK>
[  414.969373][ T9629] team0 (unregistering): Port device team_slave_1 removed
[  414.990334][ T9629] team0 (unregistering): Port device team_slave_0 removed
[  415.137987][T18764] __nla_validate_parse: 2 callbacks suppressed
[  415.138005][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3784'.
[  415.267464][T18695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  415.278169][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3782'.
[  415.374098][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3787'.
[  415.383213][T18753] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  415.436657][T18775] netlink: 'syz.3.3788': attribute type 1 has an invalid length.
[  415.591566][T18777] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  415.682214][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3790'.
[  415.719740][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3792'.
[  415.729963][T18791] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3792'.
[  415.732891][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3790'.
[  415.822624][ T9629] IPVS: stop unused estimator thread 0...
[  415.995620][T18805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3796'.
[  416.288465][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'.
[  416.311589][T18827] vlan2: entered promiscuous mode
[  416.316987][T18827] bridge0: entered promiscuous mode
[  416.428170][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3807'.
[  416.894678][T18872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.912150][T18872] syzkaller0: entered promiscuous mode
[  416.933112][T18872] syzkaller0: entered allmulticast mode
[  416.946067][T18877] tipc: Failed to remove unknown binding: 66,0,0/0:3031072626/3031072627
[  417.008631][T18872] tipc: Resetting bearer <eth:syzkaller0>
[  417.036424][T18871] tipc: Resetting bearer <eth:syzkaller0>
[  417.101858][T18871] tipc: Disabling bearer <eth:syzkaller0>
[  417.980467][T18915] geneve0: entered promiscuous mode
[  417.996043][T18915] geneve0: entered allmulticast mode
[  418.177525][T18922] syzkaller1: entered promiscuous mode
[  418.200126][T18922] syzkaller1: entered allmulticast mode
[  419.429063][T18996] netlink: 'syz.3.3873': attribute type 29 has an invalid length.
[  419.463060][T18996] netlink: 'syz.3.3873': attribute type 29 has an invalid length.
[  419.610039][T19014] netlink: 'syz.3.3879': attribute type 8 has an invalid length.
[  419.625034][T19014] bond0: entered promiscuous mode
[  419.630116][T19014] bond_slave_0: entered promiscuous mode
[  419.636470][T19014] bond_slave_1: entered promiscuous mode
[  419.652287][T19014] gretap0: entered promiscuous mode
[  419.675394][T19014] hsr_slave_0: entered promiscuous mode
[  419.682469][T19014] debugfs: 'hsr0' already exists in 'hsr'
[  419.688906][T19014] Cannot create hsr debugfs directory
[  419.726919][T19014] hsr0: entered promiscuous mode
[  420.208176][T19062] netlink: 'syz.1.3895': attribute type 1 has an invalid length.
[  420.268485][T19062] bond1: entered promiscuous mode
[  420.274014][T19062] 8021q: adding VLAN 0 to HW filter on device bond1
[  420.328929][T19062] bond1: (slave bridge1): making interface the new active one
[  420.347271][T19062] bridge1: entered promiscuous mode
[  420.374819][T19062] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  420.405165][T19073] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  420.474423][T19082] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  420.578121][T19082] xt_hashlimit: size too large, truncated to 1048576
[  420.587792][T19082] xt_hashlimit: overflow, try lower: 0/0
[  420.632407][T19088] __nla_validate_parse: 14 callbacks suppressed
[  420.632425][T19088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3904'.
[  421.015209][T19103] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3912'.
[  421.121455][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3910'.
[  421.195948][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3910'.
[  421.266958][T19111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3910'.
[  421.376577][T19113] netlink: 'syz.2.3915': attribute type 1 has an invalid length.
[  421.395909][T19111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3910'.
[  422.517450][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3938'.
[  422.697635][T19183] netlink: 'syz.2.3943': attribute type 2 has an invalid length.
[  422.724432][T19183] netlink: 'syz.2.3943': attribute type 1 has an invalid length.
[  422.888650][T19189] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3945'.
[  423.171867][T19203] netlink: 616 bytes leftover after parsing attributes in process `syz.2.3951'.
[  423.234009][T19206] batman_adv: batadv0: Adding interface: gretap1
[  423.244287][T19206] batman_adv: batadv0: The MTU of interface gretap1 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  423.276246][T19206] batman_adv: batadv0: Interface activated: gretap1
[  423.521385][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'.
[  423.777974][T19219] netlink: 'syz.3.3956': attribute type 3 has an invalid length.
[  423.851383][T19222] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  423.904426][T19219] netlink: 'syz.3.3956': attribute type 1 has an invalid length.
[  424.585827][T19256] ip6gre1: left promiscuous mode
[  424.610117][T19256] ip6gre1: left allmulticast mode
[  424.635172][T19258] netlink: 'syz.3.3971': attribute type 1 has an invalid length.
[  424.667204][T19256] bond1: left promiscuous mode
[  424.672008][T19256] bridge1: left promiscuous mode
[  425.261835][T19298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.565017][T19303] syzkaller1: entered promiscuous mode
[  425.570709][T19303] syzkaller1: entered allmulticast mode
[  426.054448][T19334] __nla_validate_parse: 4 callbacks suppressed
[  426.054466][T19334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3995'.
[  426.061860][T19338] tipc: Started in network mode
[  426.080384][T19338] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711
[  426.091300][T19338] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  426.238513][T19338] xt_hashlimit: size too large, truncated to 1048576
[  426.255034][T19338] xt_hashlimit: overflow, try lower: 0/0
[  426.936340][T19353] xt_CT: No such helper "syz0"
[  427.734681][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4015'.
[  427.773703][T19398] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4016'.
[  428.035460][   T24] IPVS: starting estimator thread 0...
[  428.136631][T19408] IPVS: using max 34 ests per chain, 81600 per kthread
[  428.345415][T19417] netlink: 'syz.4.4023': attribute type 3 has an invalid length.
[  428.412542][T19417] netlink: 'syz.4.4023': attribute type 1 has an invalid length.
[  428.612928][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'.
[  429.393480][T19422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4025'.
[  429.742237][T19474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4040'.
[  431.239512][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'.
[  432.154939][T19523] netlink: 'syz.4.4058': attribute type 2 has an invalid length.
[  432.168104][T19526] netlink: 'syz.1.4059': attribute type 1 has an invalid length.
[  432.178352][T19519] netlink: 64126 bytes leftover after parsing attributes in process `syz.3.4057'.
[  432.178479][T19528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4060'.
[  432.199444][T19523] netlink: 'syz.4.4058': attribute type 1 has an invalid length.
[  432.239918][T19531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4060'.
[  432.407372][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4066'.
[  432.454030][T19548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4062'.
[  433.955070][T19547] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4065'.
[  433.964537][T19547] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4065'.
[  434.107328][T19568] netlink: 'syz.4.4073': attribute type 3 has an invalid length.
[  434.130426][T19568] netlink: 'syz.4.4073': attribute type 1 has an invalid length.
[  434.408384][T19597] netlink: 'syz.2.4084': attribute type 10 has an invalid length.
[  434.427558][T19597] team0: Port device dummy0 added
[  434.440891][T19597] netlink: 'syz.2.4084': attribute type 10 has an invalid length.
[  434.461566][T19597] team0: Port device dummy0 removed
[  434.470891][T19597] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  434.644044][T19611] FAULT_INJECTION: forcing a failure.
[  434.644044][T19611] name failslab, interval 1, probability 0, space 0, times 0
[  434.660081][T19611] CPU: 0 UID: 0 PID: 19611 Comm: syz.0.4089 Not tainted syzkaller #0 PREEMPT(full) 
[  434.660106][T19611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  434.660117][T19611] Call Trace:
[  434.660124][T19611]  <TASK>
[  434.660132][T19611]  dump_stack_lvl+0xe8/0x150
[  434.660163][T19611]  should_fail_ex+0x412/0x560
[  434.660203][T19611]  should_failslab+0xa8/0x100
[  434.660228][T19611]  __kmalloc_noprof+0xe8/0x760
[  434.660249][T19611]  ? tomoyo_encode+0x28b/0x550
[  434.660381][T19611]  tomoyo_encode+0x28b/0x550
[  434.660414][T19611]  tomoyo_realpath_from_path+0x58d/0x5d0
[  434.660447][T19611]  ? tomoyo_path_number_perm+0x219/0x630
[  434.660470][T19611]  tomoyo_path_number_perm+0x246/0x630
[  434.660495][T19611]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  434.660522][T19611]  ? __lock_acquire+0x6b5/0x2cf0
[  434.660556][T19611]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  434.660628][T19611]  ? __fget_files+0x2a/0x420
[  434.660658][T19611]  ? __fget_files+0x2a/0x420
[  434.660682][T19611]  ? __fget_files+0x3a0/0x420
[  434.660706][T19611]  ? __fget_files+0x2a/0x420
[  434.660735][T19611]  security_file_ioctl+0xc3/0x2a0
[  434.660798][T19611]  __se_sys_ioctl+0x47/0x170
[  434.660831][T19611]  do_syscall_64+0x14d/0xf80
[  434.660850][T19611]  ? trace_irq_disable+0x3b/0x150
[  434.660875][T19611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.660894][T19611]  ? clear_bhb_loop+0x40/0x90
[  434.660916][T19611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.660938][T19611] RIP: 0033:0x7f3cfa79c799
[  434.660957][T19611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.660973][T19611] RSP: 002b:00007f3cfb6ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  434.660993][T19611] RAX: ffffffffffffffda RBX: 00007f3cfaa15fa0 RCX: 00007f3cfa79c799
[  434.661006][T19611] RDX: 0000000000000000 RSI: 00000000000089e0 RDI: 0000000000000003
[  434.661018][T19611] RBP: 00007f3cfb6ad090 R08: 0000000000000000 R09: 0000000000000000
[  434.661029][T19611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.661040][T19611] R13: 00007f3cfaa16038 R14: 00007f3cfaa15fa0 R15: 00007ffcdc1b3748
[  434.661070][T19611]  </TASK>
[  434.661235][T19611] ERROR: Out of memory at tomoyo_realpath_from_path.
[  435.099763][T19621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4091'.
[  435.121235][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4091'.
[  435.141569][T19619] netlink: 'syz.0.4093': attribute type 4 has an invalid length.
[  435.436854][T19644] FAULT_INJECTION: forcing a failure.
[  435.436854][T19644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.500865][T19644] CPU: 0 UID: 0 PID: 19644 Comm: syz.3.4104 Not tainted syzkaller #0 PREEMPT(full) 
[  435.500890][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  435.500901][T19644] Call Trace:
[  435.500908][T19644]  <TASK>
[  435.500916][T19644]  dump_stack_lvl+0xe8/0x150
[  435.500947][T19644]  should_fail_ex+0x412/0x560
[  435.500976][T19644]  _copy_to_user+0x31/0xb0
[  435.500999][T19644]  simple_read_from_buffer+0xe1/0x170
[  435.501028][T19644]  proc_fail_nth_read+0x1bb/0x230
[  435.501055][T19644]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  435.501084][T19644]  ? rw_verify_area+0x2a6/0x4d0
[  435.501102][T19644]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  435.501127][T19644]  vfs_read+0x20c/0xa70
[  435.501144][T19644]  ? fdget_pos+0x246/0x320
[  435.501174][T19644]  ? __pfx___mutex_lock+0x10/0x10
[  435.501195][T19644]  ? __pfx_vfs_read+0x10/0x10
[  435.501215][T19644]  ? __fget_files+0x2a/0x420
[  435.501243][T19644]  ? __fget_files+0x3a0/0x420
[  435.501267][T19644]  ? __fget_files+0x2a/0x420
[  435.501301][T19644]  ksys_read+0x150/0x270
[  435.501322][T19644]  ? __pfx_ksys_read+0x10/0x10
[  435.501339][T19644]  ? __pfx_sock_ioctl+0x10/0x10
[  435.501372][T19644]  do_syscall_64+0x14d/0xf80
[  435.501391][T19644]  ? trace_irq_disable+0x3b/0x150
[  435.501415][T19644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.501433][T19644]  ? clear_bhb_loop+0x40/0x90
[  435.501455][T19644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.501472][T19644] RIP: 0033:0x7f9d3d75cfce
[  435.501488][T19644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  435.501503][T19644] RSP: 002b:00007f9d3e587fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  435.501530][T19644] RAX: ffffffffffffffda RBX: 00007f9d3e5886c0 RCX: 00007f9d3d75cfce
[  435.501542][T19644] RDX: 000000000000000f RSI: 00007f9d3e5880a0 RDI: 0000000000000004
[  435.501553][T19644] RBP: 00007f9d3e588090 R08: 0000000000000000 R09: 0000000000000000
[  435.501564][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.501574][T19644] R13: 00007f9d3da16038 R14: 00007f9d3da15fa0 R15: 00007ffd612d6eb8
[  435.501603][T19644]  </TASK>
[  435.974151][T19664] FAULT_INJECTION: forcing a failure.
[  435.974151][T19664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.004366][T19664] CPU: 0 UID: 0 PID: 19664 Comm: syz.0.4110 Not tainted syzkaller #0 PREEMPT(full) 
[  436.004392][T19664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  436.004401][T19664] Call Trace:
[  436.004408][T19664]  <TASK>
[  436.004416][T19664]  dump_stack_lvl+0xe8/0x150
[  436.004445][T19664]  should_fail_ex+0x412/0x560
[  436.004473][T19664]  _copy_to_user+0x31/0xb0
[  436.004496][T19664]  simple_read_from_buffer+0xe1/0x170
[  436.004526][T19664]  proc_fail_nth_read+0x1bb/0x230
[  436.004555][T19664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  436.004583][T19664]  ? rw_verify_area+0x2a6/0x4d0
[  436.004602][T19664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  436.004638][T19664]  vfs_read+0x20c/0xa70
[  436.004656][T19664]  ? check_zeroed_user+0x11a/0x170
[  436.004675][T19664]  ? fdget_pos+0x246/0x320
[  436.004707][T19664]  ? __pfx___mutex_lock+0x10/0x10
[  436.004730][T19664]  ? __pfx_vfs_read+0x10/0x10
[  436.004751][T19664]  ? __fget_files+0x2a/0x420
[  436.004781][T19664]  ? __fget_files+0x3a0/0x420
[  436.004807][T19664]  ? __fget_files+0x2a/0x420
[  436.004841][T19664]  ksys_read+0x150/0x270
[  436.004864][T19664]  ? __pfx_ksys_read+0x10/0x10
[  436.004895][T19664]  do_syscall_64+0x14d/0xf80
[  436.004915][T19664]  ? trace_irq_disable+0x3b/0x150
[  436.004941][T19664]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.004960][T19664]  ? clear_bhb_loop+0x40/0x90
[  436.004984][T19664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.005002][T19664] RIP: 0033:0x7f3cfa75cfce
[  436.005020][T19664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  436.005037][T19664] RSP: 002b:00007f3cfb6acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  436.005057][T19664] RAX: ffffffffffffffda RBX: 00007f3cfb6ad6c0 RCX: 00007f3cfa75cfce
[  436.005071][T19664] RDX: 000000000000000f RSI: 00007f3cfb6ad0a0 RDI: 0000000000000007
[  436.005084][T19664] RBP: 00007f3cfb6ad090 R08: 0000000000000000 R09: 0000000000000000
[  436.005096][T19664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.005108][T19664] R13: 00007f3cfaa16038 R14: 00007f3cfaa15fa0 R15: 00007ffcdc1b3748
[  436.005139][T19664]  </TASK>
[  436.281759][T19667] batadv_slave_1: entered promiscuous mode
[  436.301118][T19667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  436.423777][T19670] __nla_validate_parse: 2 callbacks suppressed
[  436.423796][T19670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4113'.
[  436.491328][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4118'.
[  436.512375][T19665] batadv_slave_1: left promiscuous mode
[  436.567904][T19681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4117'.
[  436.620310][T19681] bond4 (unregistering): Released all slaves
[  436.705906][T19690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4117'.
[  436.758862][T19686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4119'.
[  437.327202][T19718] sctp: [Deprecated]: syz.0.4129 (pid 19718) Use of int in max_burst socket option.
[  437.327202][T19718] Use struct sctp_assoc_value instead
[  437.481851][T19726] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4132'.
[  437.492481][T19726] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4132'.
[  437.614866][T19733] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4132'.
[  437.727872][T19718] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4129'.
[  437.883542][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4138'.
[  438.569751][T19779] netlink: 'syz.4.4150': attribute type 1 has an invalid length.
[  438.594405][T19784] tipc: Failed to remove unknown binding: 66,0,0/0:2709353329/2709353330
[  438.603255][T19784] tipc: Failed to remove unknown binding: 66,0,0/0:2709353329/2709353330
[  438.748733][T19792] netlink: 'syz.2.4156': attribute type 30 has an invalid length.
[  438.812600][T19798] ip6t_REJECT: ECHOREPLY is not supported
[  439.290405][T19822] syzkaller0: entered promiscuous mode
[  439.296183][T19822] syzkaller0: entered allmulticast mode
[  439.355938][T19822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.391074][T19821] tipc: Resetting bearer <eth:syzkaller0>
[  439.441599][T19821] tipc: Disabling bearer <eth:syzkaller0>
[  440.234138][T19862] FAULT_INJECTION: forcing a failure.
[  440.234138][T19862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.258828][T19862] CPU: 1 UID: 0 PID: 19862 Comm: syz.3.4180 Not tainted syzkaller #0 PREEMPT(full) 
[  440.258856][T19862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  440.258868][T19862] Call Trace:
[  440.258875][T19862]  <TASK>
[  440.258884][T19862]  dump_stack_lvl+0xe8/0x150
[  440.258916][T19862]  should_fail_ex+0x412/0x560
[  440.258949][T19862]  _copy_to_user+0x31/0xb0
[  440.258975][T19862]  simple_read_from_buffer+0xe1/0x170
[  440.259005][T19862]  proc_fail_nth_read+0x1bb/0x230
[  440.259035][T19862]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  440.259064][T19862]  ? rw_verify_area+0x2a6/0x4d0
[  440.259084][T19862]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  440.259111][T19862]  vfs_read+0x20c/0xa70
[  440.259129][T19862]  ? fdget_pos+0x246/0x320
[  440.259159][T19862]  ? __pfx___mutex_lock+0x10/0x10
[  440.259181][T19862]  ? __pfx_vfs_read+0x10/0x10
[  440.259202][T19862]  ? __fget_files+0x2a/0x420
[  440.259232][T19862]  ? __fget_files+0x3a0/0x420
[  440.259257][T19862]  ? __fget_files+0x2a/0x420
[  440.259290][T19862]  ksys_read+0x150/0x270
[  440.259312][T19862]  ? __pfx_ksys_read+0x10/0x10
[  440.259343][T19862]  do_syscall_64+0x14d/0xf80
[  440.259363][T19862]  ? trace_irq_disable+0x3b/0x150
[  440.259389][T19862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.259408][T19862]  ? clear_bhb_loop+0x40/0x90
[  440.259431][T19862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.259449][T19862] RIP: 0033:0x7f9d3d75cfce
[  440.259467][T19862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  440.259484][T19862] RSP: 002b:00007f9d3e587fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  440.259503][T19862] RAX: ffffffffffffffda RBX: 00007f9d3e5886c0 RCX: 00007f9d3d75cfce
[  440.259517][T19862] RDX: 000000000000000f RSI: 00007f9d3e5880a0 RDI: 0000000000000005
[  440.259529][T19862] RBP: 00007f9d3e588090 R08: 0000000000000000 R09: 0000000000000000
[  440.259540][T19862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.259552][T19862] R13: 00007f9d3da16038 R14: 00007f9d3da15fa0 R15: 00007ffd612d6eb8
[  440.259581][T19862]  </TASK>
[  441.321327][T19906] netlink: 'syz.2.4198': attribute type 1 has an invalid length.
[  441.483612][T19915] __nla_validate_parse: 13 callbacks suppressed
[  441.483632][T19915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4198'.
[  442.871368][T19914] veth7: entered promiscuous mode
[  442.879211][T19914] bond4: (slave veth7): Enslaving as a backup interface with a down link
[  442.888702][T19915] 8021q: adding VLAN 0 to HW filter on device bond4
[  442.984105][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4204'.
[  443.238204][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4213'.
[  443.266313][T19949] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001
[  443.436777][T19960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4214'.
[  444.059879][T19987] netlink: 'syz.3.4217': attribute type 1 has an invalid length.
[  444.098659][T19990] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4216'.
[  444.248624][T19990] bond5: Unable to set down delay as MII monitoring is disabled
[  444.263602][T19990] bond5 (unregistering): Released all slaves
[  444.476008][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4222'.
[  444.619333][ T5831] block nbd3: Receive control failed (result -32)
[  444.700325][T20018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4225'.
[  444.723426][T20019] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4226'.
[  444.745576][T20023] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4228'.
[  444.769266][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4227'.
[  444.772745][T20023] ksmbd: Unknown IPC event: 1, ignore.
[  444.953908][T20034] syz_tun: entered allmulticast mode
[  444.981631][T20033] syz_tun: left allmulticast mode
[  445.016526][T20037] netlink: 'syz.4.4232': attribute type 1 has an invalid length.
[  445.869275][T20075] netlink: 'syz.0.4244': attribute type 2 has an invalid length.
[  445.884825][T20075] netlink: 'syz.0.4244': attribute type 2 has an invalid length.
[  446.138623][T20094] openvswitch: netlink: Message has 584 unknown bytes.
[  446.155014][T20094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.834040][T20120] __nla_validate_parse: 1 callbacks suppressed
[  446.834059][T20120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4258'.
[  446.927859][T20124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4258'.
[  448.429851][T20132] openvswitch: netlink: Message has 584 unknown bytes.
[  448.437398][T20132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.452066][T20130] FAULT_INJECTION: forcing a failure.
[  448.452066][T20130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.474613][T20130] CPU: 1 UID: 0 PID: 20130 Comm: syz.3.4260 Not tainted syzkaller #0 PREEMPT(full) 
[  448.474640][T20130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  448.474652][T20130] Call Trace:
[  448.474660][T20130]  <TASK>
[  448.474669][T20130]  dump_stack_lvl+0xe8/0x150
[  448.474701][T20130]  should_fail_ex+0x412/0x560
[  448.474734][T20130]  _copy_from_user+0x2d/0xb0
[  448.474756][T20130]  ___sys_recvmsg+0x175/0x590
[  448.474784][T20130]  ? __pfx____sys_recvmsg+0x10/0x10
[  448.474828][T20130]  ? __fget_files+0x3a0/0x420
[  448.474865][T20130]  do_recvmmsg+0x334/0x800
[  448.474895][T20130]  ? __pfx_do_recvmmsg+0x10/0x10
[  448.474927][T20130]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  448.474962][T20130]  __x64_sys_recvmmsg+0x198/0x250
[  448.474987][T20130]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  448.475020][T20130]  do_syscall_64+0x14d/0xf80
[  448.475039][T20130]  ? trace_irq_disable+0x3b/0x150
[  448.475076][T20130]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.475096][T20130]  ? clear_bhb_loop+0x40/0x90
[  448.475118][T20130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.475136][T20130] RIP: 0033:0x7f9d3d79c799
[  448.475154][T20130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.475171][T20130] RSP: 002b:00007f9d3e588028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  448.475191][T20130] RAX: ffffffffffffffda RBX: 00007f9d3da15fa0 RCX: 00007f9d3d79c799
[  448.475204][T20130] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003
[  448.475216][T20130] RBP: 00007f9d3e588090 R08: 0000000000000000 R09: 0000000000000000
[  448.475228][T20130] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  448.475239][T20130] R13: 00007f9d3da16038 R14: 00007f9d3da15fa0 R15: 00007ffd612d6eb8
[  448.475268][T20130]  </TASK>
[  448.790836][T20144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4263'.
[  448.830146][T20144] 8021q: adding VLAN 0 to HW filter on device bond1
[  449.027649][T20164] žÿ: renamed from team_slave_1 (while UP)
[  449.046175][T20166] sctp: [Deprecated]: syz.3.4272 (pid 20166) Use of int in max_burst socket option deprecated.
[  449.046175][T20166] Use struct sctp_assoc_value instead
[  449.172315][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4274'.
[  449.213840][T20176] netlink: 'syz.4.4276': attribute type 1 has an invalid length.
[  449.344078][T20183] netlink: 'syz.2.4279': attribute type 1 has an invalid length.
[  449.612147][T20199] openvswitch: netlink: Message has 584 unknown bytes.
[  449.620434][T20199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.975120][T20217] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4288'.
[  450.022671][T20219] netlink: 'syz.4.4289': attribute type 1 has an invalid length.
[  450.290693][T20239] openvswitch: netlink: Message has 592 unknown bytes.
[  450.298914][T20240] netlink: 'syz.4.4297': attribute type 1 has an invalid length.
[  450.299605][T20239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.509549][T20254] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4301'.
[  450.951423][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4308'.
[  450.966809][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4308'.
[  451.220872][T20288] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4312'.
[  451.422940][T20299] netlink: 'syz.4.4316': attribute type 1 has an invalid length.
[  451.457765][T20304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4319'.
[  451.593936][T20318] syzkaller0: entered promiscuous mode
[  451.599733][T20318] syzkaller0: entered allmulticast mode
[  452.343864][T20361] __nla_validate_parse: 1 callbacks suppressed
[  452.343884][T20361] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4339'.
[  452.619988][T20374] syzkaller1: entered promiscuous mode
[  452.637391][T20374] syzkaller1: entered allmulticast mode
[  452.664347][T20377] netlink: 'syz.3.4344': attribute type 1 has an invalid length.
[  452.728433][T20355] netlink: 'syz.2.4337': attribute type 1 has an invalid length.
[  453.002462][T20393] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  453.067224][T20393] xt_hashlimit: size too large, truncated to 1048576
[  453.099086][T20397] tipc: Started in network mode
[  453.109173][T20393] xt_hashlimit: overflow, try lower: 0/0
[  453.115850][T20397] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711
[  453.135505][T20397] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  453.172856][T20400] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4352'.
[  453.188303][T20397] xt_hashlimit: size too large, truncated to 1048576
[  453.224478][T20397] xt_hashlimit: overflow, try lower: 0/0
[  454.280740][T20437] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  454.411820][T20443] netlink: 'syz.2.4365': attribute type 1 has an invalid length.
[  454.494727][T20445] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4367'.
[  454.938361][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4373'.
[  455.666044][T20485] FAULT_INJECTION: forcing a failure.
[  455.666044][T20485] name failslab, interval 1, probability 0, space 0, times 0
[  455.738814][T20485] CPU: 0 UID: 0 PID: 20485 Comm: syz.3.4381 Not tainted syzkaller #0 PREEMPT(full) 
[  455.738842][T20485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  455.738854][T20485] Call Trace:
[  455.738862][T20485]  <TASK>
[  455.738872][T20485]  dump_stack_lvl+0xe8/0x150
[  455.738904][T20485]  should_fail_ex+0x412/0x560
[  455.738934][T20485]  should_failslab+0xa8/0x100
[  455.738961][T20485]  __kmalloc_cache_node_noprof+0x8a/0x6b0
[  455.738983][T20485]  ? __get_vm_area_node+0x13f/0x300
[  455.739044][T20485]  __get_vm_area_node+0x13f/0x300
[  455.739060][T20485]  ? unwind_next_frame+0xa5/0x23c0
[  455.739101][T20485]  __vmalloc_node_range_noprof+0x372/0x1730
[  455.739129][T20485]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  455.739159][T20485]  ? __lock_acquire+0x6b5/0x2cf0
[  455.739192][T20485]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  455.739213][T20485]  ? aa_file_perm+0x192/0x15e0
[  455.739242][T20485]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  455.739259][T20485]  __vmalloc_noprof+0xd2/0x120
[  455.739292][T20485]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  455.739312][T20485]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  455.739333][T20485]  bpf_prog_alloc+0x3c/0x1a0
[  455.739353][T20485]  bpf_prog_load+0x7ba/0x1ae0
[  455.739384][T20485]  ? __pfx_bpf_prog_load+0x10/0x10
[  455.739422][T20485]  ? bpf_lsm_bpf+0x9/0x20
[  455.739445][T20485]  ? security_bpf+0x7e/0x2d0
[  455.739472][T20485]  __sys_bpf+0x618/0x950
[  455.739502][T20485]  ? __pfx___sys_bpf+0x10/0x10
[  455.739542][T20485]  ? ksys_write+0x242/0x270
[  455.739565][T20485]  ? __pfx_ksys_write+0x10/0x10
[  455.739590][T20485]  __x64_sys_bpf+0x7c/0x90
[  455.739614][T20485]  do_syscall_64+0x14d/0xf80
[  455.739633][T20485]  ? trace_irq_disable+0x3b/0x150
[  455.739659][T20485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.739678][T20485]  ? clear_bhb_loop+0x40/0x90
[  455.739700][T20485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.739719][T20485] RIP: 0033:0x7f9d3d79c799
[  455.739736][T20485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.739752][T20485] RSP: 002b:00007f9d3e588028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  455.739772][T20485] RAX: ffffffffffffffda RBX: 00007f9d3da15fa0 RCX: 00007f9d3d79c799
[  455.739787][T20485] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005
[  455.739799][T20485] RBP: 00007f9d3e588090 R08: 0000000000000000 R09: 0000000000000000
[  455.739811][T20485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.739822][T20485] R13: 00007f9d3da16038 R14: 00007f9d3da15fa0 R15: 00007ffd612d6eb8
[  455.739855][T20485]  </TASK>
[  455.741009][T20485] syz.3.4381: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  456.037044][T20491] netlink: 'syz.1.4384': attribute type 1 has an invalid length.
[  456.042409][T20485] CPU: 0 UID: 0 PID: 20485 Comm: syz.3.4381 Not tainted syzkaller #0 PREEMPT(full) 
[  456.042435][T20485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  456.042447][T20485] Call Trace:
[  456.042455][T20485]  <TASK>
[  456.042463][T20485]  dump_stack_lvl+0xe8/0x150
[  456.042494][T20485]  warn_alloc+0x249/0x340
[  456.042522][T20485]  ? __pfx_warn_alloc+0x10/0x10
[  456.042546][T20485]  ? __get_vm_area_node+0x13f/0x300
[  456.042569][T20485]  ? __get_vm_area_node+0x2b5/0x300
[  456.042586][T20485]  ? unwind_next_frame+0xa5/0x23c0
[  456.042618][T20485]  __vmalloc_node_range_noprof+0x397/0x1730
[  456.042651][T20485]  ? __lock_acquire+0x6b5/0x2cf0
[  456.042687][T20485]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  456.042707][T20485]  ? aa_file_perm+0x192/0x15e0
[  456.042737][T20485]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  456.042754][T20485]  __vmalloc_noprof+0xd2/0x120
[  456.042779][T20485]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  456.042800][T20485]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  456.042823][T20485]  bpf_prog_alloc+0x3c/0x1a0
[  456.042843][T20485]  bpf_prog_load+0x7ba/0x1ae0
[  456.042874][T20485]  ? __pfx_bpf_prog_load+0x10/0x10
[  456.042912][T20485]  ? bpf_lsm_bpf+0x9/0x20
[  456.042934][T20485]  ? security_bpf+0x7e/0x2d0
[  456.042960][T20485]  __sys_bpf+0x618/0x950
[  456.042989][T20485]  ? __pfx___sys_bpf+0x10/0x10
[  456.043029][T20485]  ? ksys_write+0x242/0x270
[  456.043052][T20485]  ? __pfx_ksys_write+0x10/0x10
[  456.043079][T20485]  __x64_sys_bpf+0x7c/0x90
[  456.043110][T20485]  do_syscall_64+0x14d/0xf80
[  456.043130][T20485]  ? trace_irq_disable+0x3b/0x150
[  456.043155][T20485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.043175][T20485]  ? clear_bhb_loop+0x40/0x90
[  456.043197][T20485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.043216][T20485] RIP: 0033:0x7f9d3d79c799
[  456.043234][T20485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.043251][T20485] RSP: 002b:00007f9d3e588028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  456.043272][T20485] RAX: ffffffffffffffda RBX: 00007f9d3da15fa0 RCX: 00007f9d3d79c799
[  456.043286][T20485] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005
[  456.043298][T20485] RBP: 00007f9d3e588090 R08: 0000000000000000 R09: 0000000000000000
[  456.043309][T20485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  456.043321][T20485] R13: 00007f9d3da16038 R14: 00007f9d3da15fa0 R15: 00007ffd612d6eb8
[  456.043351][T20485]  </TASK>
[  456.043422][T20485] Mem-Info:
[  456.273797][T20489] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4383'.
[  456.289625][T20485] active_anon:10301 inactive_anon:0 isolated_anon:0
[  456.289625][T20485]  active_file:3420 inactive_file:40100 isolated_file:0
[  456.289625][T20485]  unevictable:768 dirty:186 writeback:0
[  456.289625][T20485]  slab_reclaimable:12895 slab_unreclaimable:116030
[  456.289625][T20485]  mapped:29616 shmem:1492 pagetables:1230
[  456.289625][T20485]  sec_pagetables:0 bounce:0
[  456.289625][T20485]  kernel_misc_reclaimable:0
[  456.289625][T20485]  free:1295449 free_pcp:13118 free_cma:0
[  456.374323][T20485] Node 0 active_anon:41404kB inactive_anon:0kB active_file:13680kB inactive_file:160196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118464kB dirty:740kB writeback:0kB shmem:4432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13944kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  456.474357][T20485] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  456.565622][T20485] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  456.617637][T20485] lowmem_reserve[]: 0 2492 2493 2493 2493
[  456.660712][T20485] Node 0 DMA32 free:1229392kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42804kB inactive_anon:0kB active_file:13680kB inactive_file:160196kB unevictable:3136kB writepending:540kB zspages:0kB present:3129332kB managed:2552504kB mlocked:1700kB bounce:0kB free_pcp:56664kB local_pcp:28740kB free_cma:0kB
[  456.737776][T20485] lowmem_reserve[]: 0 0 0 0 0
[  456.742537][T20485] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  456.831559][T20485] lowmem_reserve[]: 0 0 0 0 0
[  456.846943][T20485] Node 1 Normal free:3942524kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  456.910772][T20485] lowmem_reserve[]: 0 0 0 0 0
[  456.912427][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4385'.
[  456.924256][T20485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  456.954384][T20485] Node 0 DMA32: 5649*4kB (UME) 3606*8kB (UE) 908*16kB (UME) 156*32kB (UE) 131*64kB 
[  456.954494][T20495] netlink: 'syz.1.4385': attribute type 2 has an invalid length.
[  456.954500][T20485] (UME) 330*128kB (UME) 291*256kB (UM) 211*512kB (UME) 134*1024kB (UE) 80*2048kB (UM) 153*4096kB (UM) = 1231860kB
[  457.044719][T20485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  457.086401][T20485] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 6*16kB (UM) 10*32kB (UM) 5*64kB (UM) 7*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942524kB
[  457.121599][T20485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  457.145423][T20485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  457.185024][T20485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  457.216875][T20485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  457.229998][T20485] 45038 total pagecache pages
[  457.249759][T20485] 0 pages in swap cache
[  457.253946][T20485] Free swap  = 124996kB
[  457.275459][T20485] Total swap = 124996kB
[  457.279657][T20485] 2097051 pages RAM
[  457.283465][T20485] 0 pages HighMem/MovableOnly
[  457.296736][T20512] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4392'.
[  457.304254][T20485] 427089 pages reserved
[  457.310205][T20485] 0 pages cma reserved
[  457.587871][T20521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4395'.
[  458.329601][T20539] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4402'.
[  458.668987][T20549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4406'.
[  458.739908][T20549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4406'.
[  458.765623][T20553] macsec1: entered promiscuous mode
[  458.781213][T20553] geneve1: entered promiscuous mode
[  458.791483][T20553] macsec1: entered allmulticast mode
[  458.817341][T20553] geneve1: entered allmulticast mode
[  458.957396][T20557] syzkaller0: entered promiscuous mode
[  458.962910][T20557] syzkaller0: entered allmulticast mode
[  458.992109][T20559] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4412'.
[  459.003221][T20559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4412'.
[  459.143317][T20566] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4414'.
[  459.154654][T20565] netlink: 'syz.3.4412': attribute type 7 has an invalid length.
[  459.162497][T20565] netlink: 'syz.3.4412': attribute type 8 has an invalid length.
[  459.214299][T20565] netlink: 209828 bytes leftover after parsing attributes in process `syz.3.4412'.
[  459.326097][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'.
[  459.623570][T20586] sctp: [Deprecated]: syz.3.4423 (pid 20586) Use of int in max_burst socket option.
[  459.623570][T20586] Use struct sctp_assoc_value instead
[  459.665991][T20588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4422'.
[  460.093135][T20606] block nbd4: Unsupported socket: should be TCP or UNIX.
[  460.137364][T20608] netlink: 'syz.3.4430': attribute type 1 has an invalid length.
[  461.538137][T20608] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  461.955028][T20636] netlink: 'syz.3.4438': attribute type 10 has an invalid length.
[  462.453778][T20673] Cannot find add_set index 1 as target
[  462.841117][T20687] __nla_validate_parse: 8 callbacks suppressed
[  462.841138][T20687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4454'.
[  462.912810][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4454'.
[  464.079531][T20692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  464.181539][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4457'.
[  464.266139][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4459'.
[  465.187233][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4466'.
[  465.198727][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4466'.
[  465.210190][T20730] netlink: 'syz.1.4466': attribute type 9 has an invalid length.
[  465.215525][T20737] batman_adv: batadv0: Interface deactivated: gretap1
[  465.222293][T20730] netlink: 'syz.1.4466': attribute type 11 has an invalid length.
[  465.236209][T20737] geneve1: left allmulticast mode
[  465.239514][T20730] netlink: 'syz.1.4466': attribute type 12 has an invalid length.
[  465.242047][T20737] geneve1: left promiscuous mode
[  465.255165][T20738] netlink: 'syz.3.4468': attribute type 13 has an invalid length.
[  465.263373][T20738] netlink: 'syz.3.4468': attribute type 17 has an invalid length.
[  465.271601][T20730] netlink: 164864 bytes leftover after parsing attributes in process `syz.1.4466'.
[  465.383771][T20738] 8021q: adding VLAN 0 to HW filter on device bond0
[  465.396661][T20738] 8021q: adding VLAN 0 to HW filter on device team0
[  465.410379][T20738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  465.447855][T20746] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4471'.
[  465.523174][T20750] netlink: 'syz.4.4472': attribute type 1 has an invalid length.
[  465.856342][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'.
[  466.166769][T20790] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4484'.
[  466.295522][T20789] tipc: Enabled bearer <eth:geneve1>, priority 10
[  466.726793][T20814] vlan0: entered promiscuous mode
[  466.732533][T20814] bridge0: entered promiscuous mode
[  467.429459][T20857] 0ªX¹¦À: renamed from caif0
[  467.438157][T20857] 0ªX¹¦À: entered allmulticast mode
[  467.454396][T20857] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  467.521711][   T10] tipc: Node number set to 11777
[  467.643850][T20885] netlink: 'syz.2.4511': attribute type 38 has an invalid length.
[  467.991027][T20906] __nla_validate_parse: 9 callbacks suppressed
[  467.991048][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4516'.
[  468.025857][T20906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4516'.
[  468.046867][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4516'.
[  468.070687][T20906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4516'.
[  468.156059][T20909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4517'.
[  468.192470][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4517'.
[  468.270901][T20917] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4517'.
[  468.402347][T20920] xt_hashlimit: size too large, truncated to 1048576
[  468.675765][T20932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4524'.
[  468.761829][T20934] netlink: 'syz.3.4525': attribute type 1 has an invalid length.
[  468.969644][T20946] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  469.039049][T20948] xt_hashlimit: size too large, truncated to 1048576
[  469.064503][T20948] xt_hashlimit: overflow, try lower: 0/0
[  469.112024][T20950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4527'.
[  469.163344][T20952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4528'.
[  469.179040][T20952] nbd: illegal input index 38656
[  469.447514][T20969] IPVS: stopping backup sync thread 17313 ...
[  469.860191][T20979] Cannot find del_set index 2 as target
[  469.978517][T20984] FAULT_INJECTION: forcing a failure.
[  469.978517][T20984] name failslab, interval 1, probability 0, space 0, times 0
[  470.005863][T20984] CPU: 0 UID: 0 PID: 20984 Comm: syz.0.4539 Not tainted syzkaller #0 PREEMPT(full) 
[  470.005891][T20984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  470.005903][T20984] Call Trace:
[  470.005910][T20984]  <TASK>
[  470.005919][T20984]  dump_stack_lvl+0xe8/0x150
[  470.005952][T20984]  should_fail_ex+0x412/0x560
[  470.005983][T20984]  should_failslab+0xa8/0x100
[  470.006005][T20984]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  470.006026][T20984]  ? __alloc_skb+0x186/0x7d0
[  470.006044][T20984]  ? __alloc_skb+0x1d0/0x7d0
[  470.006060][T20984]  ? __local_bh_enable_ip+0xd0/0x130
[  470.006088][T20984]  __alloc_skb+0x1d0/0x7d0
[  470.006111][T20984]  netlink_sendmsg+0x5d4/0xb40
[  470.006247][T20984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.006269][T20984]  ? aa_sock_msg_perm+0xf1/0x1b0
[  470.006298][T20984]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  470.006323][T20984]  ____sys_sendmsg+0x972/0x9f0
[  470.006352][T20984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.006382][T20984]  ? import_iovec+0x73/0xa0
[  470.006405][T20984]  ___sys_sendmsg+0x2a5/0x360
[  470.006431][T20984]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.006483][T20984]  ? __fget_files+0x2a/0x420
[  470.006509][T20984]  ? __fget_files+0x3a0/0x420
[  470.006543][T20984]  __x64_sys_sendmsg+0x1bd/0x2a0
[  470.006567][T20984]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  470.006596][T20984]  ? __pfx_ksys_write+0x10/0x10
[  470.006636][T20984]  do_syscall_64+0x14d/0xf80
[  470.006655][T20984]  ? trace_irq_disable+0x3b/0x150
[  470.006681][T20984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.006699][T20984]  ? clear_bhb_loop+0x40/0x90
[  470.006721][T20984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.006739][T20984] RIP: 0033:0x7f3cfa79c799
[  470.006758][T20984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.006774][T20984] RSP: 002b:00007f3cfb6ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.006795][T20984] RAX: ffffffffffffffda RBX: 00007f3cfaa15fa0 RCX: 00007f3cfa79c799
[  470.006809][T20984] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  470.006821][T20984] RBP: 00007f3cfb6ad090 R08: 0000000000000000 R09: 0000000000000000
[  470.006833][T20984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.006844][T20984] R13: 00007f3cfaa16038 R14: 00007f3cfaa15fa0 R15: 00007ffcdc1b3748
[  470.006873][T20984]  </TASK>
[  470.647618][ T9629] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  470.657073][ T9629] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  470.668129][ T9629] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  470.731363][ T9629] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  471.159374][T21012] xt_CT: No such helper "snmp_trap"
[  471.310025][T21024] netlink: 'syz.0.4551': attribute type 1 has an invalid length.
[  471.809091][T21043] netlink: 'syz.4.4555': attribute type 1 has an invalid length.
[  472.340359][T21059] 
[  472.342732][T21059] ======================================================
[  472.349758][T21059] WARNING: possible circular locking dependency detected
[  472.356802][T21059] syzkaller #0 Not tainted
[  472.361226][T21059] ------------------------------------------------------
[  472.368249][T21059] syz.1.4559/21059 is trying to acquire lock:
[  472.374324][T21059] ffffffff8fd439b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  472.383773][T21059] 
[  472.383773][T21059] but task is already holding lock:
[  472.391143][T21059] ffff88802726cb70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630
[  472.400569][T21059] 
[  472.400569][T21059] which lock already depends on the new lock.
[  472.400569][T21059] 
[  472.410990][T21059] 
[  472.410990][T21059] the existing dependency chain (in reverse order) is:
[  472.420014][T21059] 
[  472.420014][T21059] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  472.428029][T21059]        _raw_spin_lock_bh+0x36/0x50
[  472.433337][T21059]        nr_rt_device_down+0x153/0x860
[  472.438809][T21059]        nr_device_event+0x137/0x150
[  472.444195][T21059]        notifier_call_chain+0x1be/0x400
[  472.449857][T21059]        __dev_notify_flags+0x16d/0x310
[  472.455480][T21059]        netif_change_flags+0xe8/0x1a0
[  472.460955][T21059]        dev_change_flags+0x130/0x260
[  472.466339][T21059]        dev_ioctl+0x7b4/0x1150
[  472.471309][T21059]        sock_do_ioctl+0x23e/0x320
[  472.476433][T21059]        sock_ioctl+0x5c6/0x7f0
[  472.481306][T21059]        __se_sys_ioctl+0xfc/0x170
[  472.486430][T21059]        do_syscall_64+0x14d/0xf80
[  472.491558][T21059]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.497987][T21059] 
[  472.497987][T21059] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  472.505840][T21059]        _raw_spin_lock_bh+0x36/0x50
[  472.511144][T21059]        nr_rt_device_down+0xbe/0x860
[  472.516503][T21059]        nr_device_event+0x137/0x150
[  472.521784][T21059]        notifier_call_chain+0x1be/0x400
[  472.527413][T21059]        __dev_notify_flags+0x16d/0x310
[  472.532950][T21059]        netif_change_flags+0xe8/0x1a0
[  472.538396][T21059]        dev_change_flags+0x130/0x260
[  472.543844][T21059]        dev_ioctl+0x7b4/0x1150
[  472.548691][T21059]        sock_do_ioctl+0x23e/0x320
[  472.553806][T21059]        sock_ioctl+0x5c6/0x7f0
[  472.558679][T21059]        __se_sys_ioctl+0xfc/0x170
[  472.563804][T21059]        do_syscall_64+0x14d/0xf80
[  472.568925][T21059]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.575339][T21059] 
[  472.575339][T21059] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  472.583270][T21059]        __lock_acquire+0x15a5/0x2cf0
[  472.588652][T21059]        lock_acquire+0xf0/0x2e0
[  472.593590][T21059]        _raw_spin_lock_bh+0x36/0x50
[  472.598880][T21059]        nr_remove_neigh+0x25/0xe0
[  472.603987][T21059]        nr_add_node+0x1e41/0x2630
[  472.609088][T21059]        nr_rt_ioctl+0xe59/0xf90
[  472.614012][T21059]        sock_do_ioctl+0x101/0x320
[  472.619124][T21059]        sock_ioctl+0x5c6/0x7f0
[  472.623969][T21059]        __se_sys_ioctl+0xfc/0x170
[  472.629080][T21059]        do_syscall_64+0x14d/0xf80
[  472.634182][T21059]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.640587][T21059] 
[  472.640587][T21059] other info that might help us debug this:
[  472.640587][T21059] 
[  472.650801][T21059] Chain exists of:
[  472.650801][T21059]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  472.650801][T21059] 
[  472.664803][T21059]  Possible unsafe locking scenario:
[  472.664803][T21059] 
[  472.672269][T21059]        CPU0                    CPU1
[  472.677634][T21059]        ----                    ----
[  472.682989][T21059]   lock(&nr_node->node_lock);
[  472.687748][T21059]                                lock(nr_node_list_lock);
[  472.694850][T21059]                                lock(&nr_node->node_lock);
[  472.702138][T21059]   lock(nr_neigh_list_lock);
[  472.706821][T21059] 
[  472.706821][T21059]  *** DEADLOCK ***
[  472.706821][T21059] 
[  472.714962][T21059] 1 lock held by syz.1.4559/21059:
[  472.720066][T21059]  #0: ffff88802726cb70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630
[  472.729896][T21059] 
[  472.729896][T21059] stack backtrace:
[  472.735775][T21059] CPU: 1 UID: 0 PID: 21059 Comm: syz.1.4559 Not tainted syzkaller #0 PREEMPT(full) 
[  472.735794][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  472.735804][T21059] Call Trace:
[  472.735813][T21059]  <TASK>
[  472.735822][T21059]  dump_stack_lvl+0xe8/0x150
[  472.735845][T21059]  print_circular_bug+0x2e1/0x300
[  472.735870][T21059]  check_noncircular+0x12e/0x150
[  472.735894][T21059]  __lock_acquire+0x15a5/0x2cf0
[  472.735920][T21059]  lock_acquire+0xf0/0x2e0
[  472.735938][T21059]  ? nr_remove_neigh+0x25/0xe0
[  472.735955][T21059]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  472.735970][T21059]  ? nr_remove_neigh+0x25/0xe0
[  472.735985][T21059]  _raw_spin_lock_bh+0x36/0x50
[  472.736007][T21059]  ? nr_remove_neigh+0x25/0xe0
[  472.736022][T21059]  nr_remove_neigh+0x25/0xe0
[  472.736038][T21059]  nr_add_node+0x1e41/0x2630
[  472.736055][T21059]  ? dev_get_by_name+0x21/0x200
[  472.736155][T21059]  ? dev_get_by_name+0x21/0x200
[  472.736172][T21059]  ? nr_call_to_digi+0x136/0x1b0
[  472.736187][T21059]  nr_rt_ioctl+0xe59/0xf90
[  472.736204][T21059]  ? kasan_quarantine_put+0xbb/0x1f0
[  472.736220][T21059]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  472.736237][T21059]  ? apparmor_capable+0x126/0x170
[  472.736257][T21059]  ? capable+0x88/0xe0
[  472.736275][T21059]  ? nr_ioctl+0x1b1/0x3b0
[  472.736296][T21059]  sock_do_ioctl+0x101/0x320
[  472.736316][T21059]  ? __pfx_sock_do_ioctl+0x10/0x10
[  472.736335][T21059]  ? do_futex+0x333/0x420
[  472.736374][T21059]  sock_ioctl+0x5c6/0x7f0
[  472.736393][T21059]  ? __pfx_sock_ioctl+0x10/0x10
[  472.736412][T21059]  ? __fget_files+0x2a/0x420
[  472.736433][T21059]  ? __fget_files+0x3a0/0x420
[  472.736453][T21059]  ? __fget_files+0x2a/0x420
[  472.736474][T21059]  ? bpf_lsm_file_ioctl+0x9/0x20
[  472.736493][T21059]  ? __pfx_sock_ioctl+0x10/0x10
[  472.736511][T21059]  __se_sys_ioctl+0xfc/0x170
[  472.736529][T21059]  do_syscall_64+0x14d/0xf80
[  472.736545][T21059]  ? trace_irq_disable+0x3b/0x150
[  472.736566][T21059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.736582][T21059]  ? clear_bhb_loop+0x40/0x90
[  472.736598][T21059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.736614][T21059] RIP: 0033:0x7f388d19c799
[  472.736629][T21059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.736643][T21059] RSP: 002b:00007f388dfb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  472.736659][T21059] RAX: ffffffffffffffda RBX: 00007f388d416090 RCX: 00007f388d19c799
[  472.736671][T21059] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000a
[  472.736681][T21059] RBP: 00007f388d232c99 R08: 0000000000000000 R09: 0000000000000000
[  472.736691][T21059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  472.736700][T21059] R13: 00007f388d416128 R14: 00007f388d416090 R15: 00007ffc174bde28
[  472.736717][T21059]  </TASK>
[  473.088555][T21050] __nla_validate_parse: 9 callbacks suppressed
[  473.088574][T21050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'.