last executing test programs:

14m44.496235922s ago: executing program 3 (id=6715):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8040480)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000080)=0x6, 0x4)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYRES32=r2], 0x58}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000001170127f2465e49e9d903000000000000000003000001"], 0x14}, 0x1, 0x0, 0x0, 0x80c1}, 0x200041c0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
socket$inet(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'syztnl1\x00', <r8=>0x0, 0x8, 0x7800, 0x10, 0xaa53, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@noop]}}}}})
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x6, 0x593, 0x6, 0x890, r7, 0x0, '\x00', r8, r9, 0x3, 0x3, 0x4, 0x2}, 0x50)

14m38.298365388s ago: executing program 3 (id=6738):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0})
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000fcff00020000200900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x5, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x0, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x1, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0x1ff, 0x9, 0x8, 0x5, 0xb, 0x8, 0xd, 0x6, 0x9, 0x8, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0x8, 0x400, 0x8, 0x6, 0x3, 0x16, 0xfffffc00, 0xfffffffe, 0xfff, 0xf, 0x3ff, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x97, 0x2, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x4, 0x6, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000001, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x900, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x0, 0x5, 0x5, 0x0, 0x2, 0x6, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ea, 0x7, 0x73, 0x10001, 0x7, 0x8f1b, 0x3, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x7d, 0x3ff, 0x2, 0xfffffefe, 0x1, 0x244f, 0x8, 0xffffffff, 0x7fff, 0xfffffff8, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0xfffffff9, 0x1, 0x101, 0x80, 0xd8, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x4cdd072, 0xd, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x4, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0xd3f, 0xe48e, 0x3, 0x8, 0x3, 0x8, 0x77, 0xf, 0xeca, 0x8d, 0xe051, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e4, 0x5, 0x8, 0x5e, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8c, 0xffffffff, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x5cd, 0x9, 0x277b, 0x3, 0x3, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x3069, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4815}, 0x0)

14m37.123638648s ago: executing program 3 (id=6746):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000006e93000000000000b50302000000000085000000b7000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701001c00128009000100626f6e64000000000c0002800800020038a8bf85"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls}, 0x94)
socketpair(0x29, 0x5, 0x7fff, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@float={0x5, 0x0, 0x0, 0x10, 0xc}, @fwd={0xf}, @enum64={0xd, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x10, 0x89}]}, @const={0x1, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/78, 0x57, 0x4e, 0x1, 0xd5, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x1, 0x2, 0x2}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)

14m36.910924295s ago: executing program 3 (id=6748):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @remote, 0x40, 0x0, 0x0, 0xfffffffe}})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)={0x114, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x4c, 0x64, 0x0, 0x1, [@nested={0x45, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f5", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9"]}]}, 0x114}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24004000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

14m36.332540887s ago: executing program 3 (id=6752):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000200000000004006f37a90a0017885c9b7d710000100073017226250c7b6973fc88161395c7eea45e3625f1270696fd00"/67], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="0400670004006755"], 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc02000000003a000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty}}, 0xff, 0x0, 0xfffffffd, 0x0, 0x51, 0x1000005, 0xd4}, 0x9c) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a80)={<r8=>r7})
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xe4, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'nr0\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x22}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_COMMENT={0x7, 0x1a, ' \x01\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_SKBPRIO={0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x32e}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x16c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@lifetime_val={0x24, 0x9, {0x7, 0x7ff, 0x100000000, 0x9}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2a, 0x200}}]}, 0x16c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x10, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {0xa, 0xc}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004010) (async)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r6, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0)
pipe(&(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r9, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x10, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8ad}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @generic={0x3, 0x1, 0x8, 0xf8, 0x4}], &(0x7f0000000640)='GPL\x00', 0x6, 0x17, &(0x7f0000000680)=""/23, 0x40f00, 0x14, '\x00', r11, 0x1a, r9, 0x8, &(0x7f0000000780)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0xfff, 0x8, 0x8, 0x1}, 0x10, 0x10c86, r10, 0x4, 0x0, &(0x7f0000000980)=[{0x3, 0x4, 0x3, 0xb}, {0x0, 0x3, 0xa, 0x9}, {0x0, 0x4, 0x4, 0x6}, {0x2, 0x3, 0x2, 0x3}]}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9b}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xea55}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

14m36.07333309s ago: executing program 3 (id=6755):
r0 = socket(0x23, 0x80002, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x4000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a010400000000000000000a0010010900010073797a31000000002c0004802800018007000100637400001c0002800800014000000001080002400000000d05000300010000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

14m21.027576513s ago: executing program 32 (id=6755):
r0 = socket(0x23, 0x80002, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x4000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a010400000000000000000a0010010900010073797a31000000002c0004802800018007000100637400001c0002800800014000000001080002400000000d05000300010000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

6m12.117571192s ago: executing program 2 (id=10469):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000300060000000000020000000000010038000000000000000200010000000000ffffffff7fffffff030005000000000002000000ac1414aa0000000000000000020008"], 0x60}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x1, 0x0, &(0x7f0000001b80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x8000)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000300060000000000020000000000010038000000000000000200010000000000ffffffff7fffffff030005000000000002000000ac1414aa0000000000000000020008"], 0x60}, 0x1, 0x7}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$inet_tcp_int(r4, 0x6, 0x1, 0x0, &(0x7f0000001b80)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x8000) (async)

6m11.614324916s ago: executing program 2 (id=10476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a2f"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x4000080)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2}, 0x1}], 0x1, 0x20, 0x0)

6m11.431709102s ago: executing program 2 (id=10477):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x22020600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x2020600)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9f00e7ffffff170000001808000002000000000080f2ffffff02000000000300000001000000ffff00000000d722d4446567310b"], &(0x7f0000000240)=""/14, 0x32, 0xe, 0x1}, 0x28)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff)
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691058000000000004000000000000009500000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240))
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000000000000010004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x260c8898)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x9, 0x4)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/142, &(0x7f0000000340), &(0x7f0000000440), 0x1, r1}, 0x38)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc, 0xd}, 0x10)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

6m10.848821405s ago: executing program 2 (id=10484):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
syz_genetlink_get_family_id$team(&(0x7f0000002c00), r0) (fail_nth: 14)

6m10.596310151s ago: executing program 2 (id=10487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2}, 0x1}], 0x1, 0x20, 0x0)

6m10.326443062s ago: executing program 2 (id=10489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r5, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}}, 0x8000)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc804}, 0x2400c010)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, 0xd, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008804}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYRESOCT=r5, @ANYRESDEC=r1], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)
r9 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@generic={0x2, "ab6fc373b88b760d5ff8347a87939e199bc4cf24ce03c4dbdf7c5da04f2aab11814b68484f76f48923c158fb2631e3a4d2d6a8284b70feda0a7e3d63103e6235170f8b9db9520a977155fecdd90d3dc89ad04c34eb4ffde1b7ee3bc9ee75bac401796b3171b30aadaa5653d9cc38d517c6a4592889f30ddedd87aebf0de4"}, 0x80, 0x0}, 0x20000095)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x800008}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)

5m55.23198308s ago: executing program 33 (id=10489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r5, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}}, 0x8000)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc804}, 0x2400c010)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, 0xd, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008804}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYRESOCT=r5, @ANYRESDEC=r1], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)
r9 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@generic={0x2, "ab6fc373b88b760d5ff8347a87939e199bc4cf24ce03c4dbdf7c5da04f2aab11814b68484f76f48923c158fb2631e3a4d2d6a8284b70feda0a7e3d63103e6235170f8b9db9520a977155fecdd90d3dc89ad04c34eb4ffde1b7ee3bc9ee75bac401796b3171b30aadaa5653d9cc38d517c6a4592889f30ddedd87aebf0de4"}, 0x80, 0x0}, 0x20000095)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x800008}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)

23.860703253s ago: executing program 5 (id=13030):
getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={<r1=>0x0, 0xfffffc00}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={<r2=>r1, 0xe, 0x10, 0x6, 0x7}, &(0x7f0000000140)=0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pK    \x00'}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', <r4=>0x0, 0x20, 0x20, 0x5, 0x2, {{0x13, 0x4, 0x3, 0x2, 0x4c, 0x66, 0x0, 0xd, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@rr={0x7, 0x7, 0x97, [@broadcast]}, @cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "ac5966cf7afcd2"}]}, @timestamp={0x44, 0x20, 0xdb, 0x0, 0xa, [0x3, 0x9, 0x6, 0x8, 0x6, 0x0, 0x7f]}]}}}}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x17, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x80000001}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba88}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}]}, &(0x7f0000000500)='GPL\x00', 0x5, 0x1b, &(0x7f0000000540)=""/27, 0x40f00, 0x11, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x3, 0xd, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000600)=[0x1], &(0x7f0000000640)=[{0x3, 0x5, 0x7, 0x8}, {0x4, 0x4, 0x0, 0x2}, {0x0, 0x2, 0x1, 0x1}], 0x10, 0xce38}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0xf, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdf5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @ldst={0x0, 0x2, 0x2, 0x9, 0x7, 0xfffffffffffffff8, 0x8}, @ldst={0x0, 0x0, 0x4, 0xb, 0x1, 0x18, 0x10}], &(0x7f00000002c0)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x26, '\x00', r4, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x5, 0x96a627a, 0x1}, 0x10, 0xffffffffffffffff, r5, 0x3, &(0x7f0000000780)=[r6], &(0x7f00000007c0)=[{0x2, 0x4, 0x10, 0xb}, {0x1, 0x5, 0x4, 0x9}, {0x3, 0x4, 0x10, 0x8}], 0x10, 0xffffffff}, 0x94)
setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000008c0)=0xfffffeff, 0x4)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000900)={0x1, 0x0, 0x8, r4, 0x7f}, 0xc)
ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000940)={'batadv_slave_0\x00'})
ioctl$XFS_IOC_ERROR_INJECTION(r8, 0x40085874, &(0x7f0000000980)={r7, 0x8})
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000009c0)={<r10=>r1, 0x6, 0x20, 0x8, 0x5}, &(0x7f0000000a00)=0x18)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000a40)={<r11=>r10, 0x1e16, 0x30, 0x0, 0x7}, &(0x7f0000000a80)=0x18)
r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000ac0)={r5, 0xffffffffffffffff, 0xa, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00)={r12}, 0x8)
socketpair(0xf, 0x6, 0x6, &(0x7f0000000b40)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
ioctl$FITRIM(r14, 0xc0185879, &(0x7f0000000b80)={0x0, 0x0, 0x1e})
setsockopt$inet_sctp_SCTP_MAXSEG(r13, 0x84, 0xd, &(0x7f0000000bc0)=@assoc_value={r11, 0x6}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r13, <r15=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r15, <r16=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r13}, 0x20)
r17 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r17, 0x111, 0x4, 0x1, 0x4)
connect$pppl2tp(r14, &(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r17, 0x4, 0x2, 0x0, 0x4, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x12}}}, 0x3a)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000dc0)={r2}, 0x8)
ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000f00)={<r18=>r16, &(0x7f0000000e00)='#\x00', 0x2a2900, &(0x7f0000000e40)={@align=0x1, {0xa9, 0x2, 0x4, 0xb}}, 0x200, &(0x7f0000000e80)={@_ha_fsid}, &(0x7f0000000ec0)})
getsockopt$inet6_int(r18, 0x29, 0x50, &(0x7f0000000f40), &(0x7f0000000f80)=0x4)

23.708090366s ago: executing program 5 (id=13033):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)
connect$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2, 0x800003, {0x2, 0xf0, 0x3}, 0xff}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0xffe0, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
r6 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00ff02000000000000000000000000000100000000000000000000ffff000000002421880b0000000000000021000086dd080088be000f0000108000000100000000000000080022eb00000004200000000220000000000000000000000800655800000000"], 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400c084}, 0x0)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x27, 0x5, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r11 = socket(0x1, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000600)={&(0x7f0000000200), 0xc, &(0x7f00000005c0)={&(0x7f0000000a80)=ANY=[@ANYRESOCT=r12, @ANYRES16=r13, @ANYRESOCT=r4, @ANYRES64=r0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4008010}, 0x20044010)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000700004000280080005005dab5cce59c22403ad8d8de971d63f453fdd11", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r13, 0x300, 0x70bd37, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x333}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x266}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0xc004)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

20.187457465s ago: executing program 0 (id=13070):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket(0x1, 0x803, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0081000000c6dd60f53a0400303a00fe8000000000000000000000000002bbff0200000000000000000000000000010100907802000000670f0d2900073300fc0100"/106], 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x11, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000380)='H', 0x1}], 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fcdbdf255100000005008a0003000000f805008a00060000"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x2b, 0x114, 0x1, {{}, {0x0, 0xfffffffffffffdcd}, &(0x7f0000000280)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="abec19639cf6ca65df33c9cc0086", 0x0, 0xcf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x82}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000010002000400000000300000041000000", @ANYRES32, @ANYBLOB="00002333f88a0000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r9}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r9, &(0x7f0000000580)="fd272c9f8bb271217dfd34a28f57c2e8c764f7be3e83da85b84efeb3c9ee125751671006f3"}, 0x20)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(r4, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000084)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)

19.939923711s ago: executing program 0 (id=13072):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x43, 0xa0, 0xf8, 0x98, 0x208, 0x178, 0x178, 0x208, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x12a, 0xd0, 0xf8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0xff}], 0x2, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa8, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x4, 0x4, 0x9, 'syz1\x00', 'syz1\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="611228000000000061133c0000000000bf1000000000000025000200f7e4ffff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0x9f}}}}}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x200}]}, 0x50}}, 0x0)
setsockopt$sock_int(r8, 0x1, 0x13, &(0x7f0000000000)=0x1ff, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r10 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'gre0\x00', r6, 0x1, 0x10, 0x8, 0x6, {{0x12, 0x4, 0x1, 0x9, 0x48, 0x67, 0x0, 0x6, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0x2b, 0xa0, [@multicast2, @local, @empty, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}]}, @generic={0x94, 0x7, "2ffc2899c3"}]}}}}})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f00000000c0)="daf9f4c43979bc85b5f4fde8ffad1372", 0x10, 0x4004851, &(0x7f0000000180)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', <r13=>0x0, 0x29, 0x7, 0x7, 0x1da7, 0x4, @local, @empty, 0x700, 0x8000, 0x7}})
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000001180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)={0x850, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9a9}}}]}}, {{0x8, 0x1, r6}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6cc6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x80, 0x1, 0x800}, {0x4040, 0x50, 0x2, 0x1}, {0x7, 0x5a, 0x5, 0x6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x4001}, 0x8005)
recvfrom$rxrpc(r10, &(0x7f0000000440)=""/226, 0xe2, 0x2000, &(0x7f0000000540)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24)

17.046522397s ago: executing program 0 (id=13078):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4004084)
socket$inet(0x2, 0x2, 0x1)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x10811)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48000)
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)
recvfrom$packet(r2, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0)

12.256927426s ago: executing program 0 (id=13090):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f00000005c0)=0xe8)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000040)="c51d37314d6bc8ace323d9168840cb", 0xf, 0x14000000, &(0x7f00000000c0)={0x11, 0x17, r2, 0x1, 0xff, 0x6, @local}, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
shutdown(r1, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
write$nci(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="420002"], 0x5)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0x9e3d206e4ff0beee}, {0xd, 0x6}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x240480c4)

10.426824014s ago: executing program 5 (id=13096):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0xc8}}, 0x20048000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, <r4=>0x0, 0x0]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x0, 0xb81d}, &(0x7f00000002c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0x108)

8.964715562s ago: executing program 0 (id=13100):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4004084)
socket$inet(0x2, 0x2, 0x1)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x10811)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48000)
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
recvfrom$packet(r2, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0)

8.661098042s ago: executing program 5 (id=13102):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4004084)
socket$inet(0x2, 0x2, 0x1)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3)
syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x10811)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000)
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)
recvfrom$packet(r2, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0)

8.656415661s ago: executing program 6 (id=13105):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000100)=0xa, 0x4)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x70000012})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendto$inet(r6, &(0x7f0000000200)="bc7891e8fe11b5cc67ac1e70ff2c39b49ba0dcd84e6c95fd448631dee6cda2edf097", 0x22, 0x4044080, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)

8.321345425s ago: executing program 4 (id=13108):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008b000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000ff7e00008500000086000000bf092000000000005509010000000080950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000a00008500000086000000bf91000000000000b7020000030000008500000084000007b70000000005000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

8.10123437s ago: executing program 4 (id=13111):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
unshare(0x2020400)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\"', @ANYRES16=r2, @ANYBLOB="01000000000f00000000080000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0)

7.69267839s ago: executing program 4 (id=13112):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c00028006001200", @ANYBLOB="0400140008001d00027f"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4)
sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x8010)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000007}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000004}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="030725bd7000000000001f0000001e9febd23f69cf300c4d38acb6b8ddc37c5ac4d92d129475e40873fefcc457115758083509ac53774177eb911e"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1)
getsockopt$inet_opts(r8, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b)
sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xd8\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810)
sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x44800)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004001}, 0x1)

7.54281951s ago: executing program 4 (id=13113):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0xc8}}, 0x20048000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, <r4=>0x0, 0x0]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x0, 0xb81d}, &(0x7f00000002c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0x108)

7.112556707s ago: executing program 4 (id=13116):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x75ddbfdedb4202d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="d3aa64fe1001000071101a000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91105f000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r7, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="240000001a0001beebbb5a4455a8c89123"], 0x24}}, 0x8000)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x417c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51b23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002580)={&(0x7f00000000c0)="0878b01cb729d537543ba36fa066c3a5e7886965b64a9e69662be155dffd9eae7bbe88a19d713701671edac497411198cb12c5ae535fd8bdc8b9c3f277a9e9119ac19985440e7c88ec", &(0x7f00000004c0)=""/4096, &(0x7f00000014c0), &(0x7f0000001500)="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", 0x5, r8}, 0x38)

6.926289017s ago: executing program 6 (id=13118):
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)
socket(0x2, 0x5, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x100000}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r2, 0x0, 0x0)

6.716661223s ago: executing program 1 (id=13119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000), 0x4)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x1ae1e7b2, 0x5, 0xffffffff]}, &(0x7f0000000140)=0x44)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x184, 0x10, 0x1, 0x70bd26, 0x100, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0x4}, {0xe, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x124, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xbaec}, @TCA_TAPRIO_ATTR_FLAGS={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7fffffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xbac4}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffff0000}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xc8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x940}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x38b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7e}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff60}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}]}]}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x184}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x0, @local}, {0xa, 0x6e23, 0x0, @empty, 0x6}, 0x1, {[0x0, 0x0, 0x0, 0x80000004, 0x0, 0x1, 0xfffffffe, 0x40]}}, 0x5c)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0)

6.715838973s ago: executing program 4 (id=13120):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=<r3=>0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080))
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r0], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c854}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000978e6a2ae5e62d0e93f7fc62c2f5ca2abfe782ef25bc05ce18fa07bdd256c69512ebc0", @ANYRES16=r6, @ANYBLOB="040026bd7000fddbdf256d000000"], 0x14}}, 0x20008894)
bind$inet(r7, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf2501000000080009000300000005000d002900000008000900010000000c0003000200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x804)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0)
recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000800)=""/21, 0x15}], 0x2}}], 0x2, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0)

6.427595147s ago: executing program 6 (id=13121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="050000000300000004000000ff"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$sock(r1, &(0x7f0000000c00)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000180)="13bcc9f829d203383c48208998c6bbde1558115b331c19f10a2b4e049814606e5df4adb9a0836d307160d21907e667dbbde0aa6759fbbfae6a94542f48c2e00bc2f752d8258e02418bcf9d46119793008f4ec819a5530ba0ed49dcc4030bfcf07cfe5a0f39e63cea99d375d5a87ea3bb26ef1af148f813edf19d95892ff847f3b463ada37456bde7d65c23f5fc62250a93bfd3eec464", 0x96}, {&(0x7f0000000380)="151ee955824735783d24101e78c10d95c040717af1d3038378b8153d40ff06a0d7d948605258594a2ebab744933932466f0ba0f48a82008a0a3e2b57175788ceca764249f21cabffd1aad5a7d3459df111530db23ddb8271cdfc7cea3ab276f84a7918b8bb10c88c6be27d71f23ed58ade396be67b2a93a191e1d2d1ae76f597763284e39f4917cc558cd22b31c708e56e4f5d36e2d62da2b0e07c152f254db6e44b3dd303b03e5b9fda167722366bd683c955163e534e580e6ca75ac8007e27f287b94012896dad0554adb83fca9acf06f64c7faa48481f3f4daf8f0759efe5558992d097719be88d529f90f0904a298c186dbfcf97", 0xf6}, {&(0x7f0000000480)="16c5de4c6715984267b074406ff666144cbec001d2fc94653ece71f8f38c77da8ea4c83cf7ff6c75211a7343540a7bbf92a8fd0ec9b1b7ab4af2a14422f7a6241fd6564de25532e32535dd1afca307f5", 0x50}, {&(0x7f0000000580)="a18b3468c97b525493d3124099f14a39a1dc6f534b58d45b1ef672ffd8e849ee15a39cd8de8af5075c328b4fc02a04250da24885c2bc4597ffa3d00b90514c9a39441c8cee8e548725a0fec59a6e01995281daa78e17f368569436a3fc1f3a7b5d027613b8cee4b5f684691749feb84a3b876f94321bc9739cd5660a2207967a5d013dc7477c1f7ffcf19ec5bf6088c9d230d4c61e0b8f60", 0x98}, {&(0x7f0000000640)="3cccf8ed32fc37cb50b86f917837722f7b92f4ab9b4f9ffadf7dbc612fa0da5a6f4a283c53e18ef2e4368878470740ff442e2df112cba1c046702942d96de86f8ad1eac78b042790d2e14bca9817fe7bf995b0dba111fcbb4e4d3579ebe838d65a54c8932c1434b8b156d8219702259063dae4ec8d903c824a87b3d1d49cc84c5064a910c2faae713094bdd3c52e2179ebb7ed2689ee1b4474b126ea4760b57cb909776e985f", 0xa6}, {&(0x7f0000000700)="9162b0d019002edb49bba963f2c212e70330d847a3d1a0cf6f7015d4deef73ecfa9bc93143d805039f780a742ed4fbc18cd1879fc6be11d5f9c770ab8811114ecd9e01449e3077f7ecf5d945f05398b3f9cc60bec814bdf452928cb991da1643157b4172360dbb561c490d1d574aedaf9cf642952975cece56a86ccdd2ba767da9d3d2a082ee3369dcf28304535fb5e56cefc98bd074ee0499dbe631dc6671c73cbca9ed21b607afd88179cfe5f40de65c741b610ab2e6", 0xb7}, {&(0x7f00000007c0)="41cb315c254867baf448836030277119a6e09429ccfb19074d6207f98ba4af99a4ee608cd0e7895524c9c8293f27de09724db9f91b", 0x35}, {&(0x7f0000000800)="30161a399c397d60eb35539fd2efbea4c72f69585ca1d9e0cebc7bb472cbdcc63fcbcdbd07230373534bee272bdc6355856b1ab61139c1baa9b6b14e43bf44cff7e827b5d8ddece8671f17cbacd94b81d9e4d2520dd2fffeec7d4dd096d30a133600e86f3b0749389013890ddf86414e53855fc7d95862532bdf3a6b81a45a08e498066db1b87656c46b1fce5da67e81ab381a928c17cd0ef2a754414ea89973466f75e8f95670726ce0059027fd", 0xae}, {&(0x7f00000008c0)="c57c6f3aad6521a5b862b12d8fd2cc1c8906c8f2d4a7c6b37606b045c556eded53d4392e78fcf6d0906b2b3ca304c8e99523ddd07b50ad6d876e870e0283914e55a3063ebad2a1ab708f20d24110cb2e92b238b31111a59577744accfd331c474714963232ea5801fd310fee1f24", 0x6e}, {&(0x7f00000009c0)="6740b3b0696c0ce2f03466c9a4fe5e42f05d20e108f000e4877172b28f342a2234670675e3d27da465237ed77c18952609a1a08fcb1272553b5b3f5dff36c9399a4e0c174a6d964cbe35882735bae35000174a85c2f29b82d69cf4e3b71a95f756ff9749c8782809cfae577c40243a28700b70503081cbf23f1b8fea78062172f72c6886df3dba7bb9668f1c469ab8e59fede0e54b4ab75d349e4420c9c24a37d939648d40f2da369378f4420b143e", 0xaf}], 0xa, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x381}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0xc0}, 0x8000)

6.233650373s ago: executing program 6 (id=13122):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
r3 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000000c0)=0x8000) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c)
read$nci(0xffffffffffffffff, &(0x7f0000000140)=""/169, 0xa9) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000200)) (async)
ioctl(r0, 0x8001, &(0x7f0000000240)="f8e40e09f5b70ad8b07e041c44b44523015a8187b67810c9aaef6f3b86b5dbb133e4985641e23b34d1ab1dc78b92262fe13fd09a7f4184f5fd167e98f7f515f0e7629897027a9544f38c3a54b1856df9feebac00848efb98c40873b41a441d2e727e1ceff5c084aab307a05fcbab7bc06194875e3df1034b0b5281e43f2eba4e6e014222d9bebbff400393c2266bb44f65878fbd551bd95511413f54e2c18d8021108701ca7b82be") (async)
r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
write(r5, &(0x7f0000000300)="5c13f4eeb7bd132fb04f1017fedf26c18e1a665f1c0a12385ef0571aabac838968c3adc84a90f09518", 0x29) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1098}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbde}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x80}, 0x1, 0x0, 0x0, 0x2805}, 0x4094) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x500, 0x208, 0x118, 0xffffffff, 0x118, 0x118, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, &(0x7f0000000480), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"bf94", 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv6=@remote, @ipv4=@local, @port=0x4e23, @gre_key=0x4}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xff, 0xffffff00, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x4, 0x1, 0x10}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @icmp_id=0x64, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@mh={{0x28}, {"b2e0"}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xd9e, 0xd, 0x3, 0xfffffffb, 0x8, 0xdfec, 0x6]}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, [0xff000000, 0xff000000, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xffffffff, 0xffffffff], 'veth0_to_batadv\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x88, 0x3, 0x0, 0x50}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@mcast2, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @icmp_id=0x67, @gre_key=0xc000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e40)={&(0x7f0000000a80)="8c8748b447b9cf22554c3d5952ff3c601426580949f63c8d089d4188a12fe495df30b75b4aead2f895d315c26b16cb8a5c81ee5fd5ab4735527824c740284b896a2b9ccc11abe2edeb3295a2dbd17a2ccd42f79312019a89c1b3137aef8511e54f1a2f16844178ff", &(0x7f0000000b00)=""/144, &(0x7f0000000bc0)="37cad7d7a71284330b2b19bcdade46a8d22e76ca87b93c46f1c5fc6ece97ee4bfa468f4e7c0868dd01db356e5b66a666f61140cb1be043fbd3eaf5718624daab35ddf747172412a98e05de1c7f372644b553aaa8bc066942585f3d29a108d9b739afd3fd0a35f0b6c61dc2ce5b1666842b460c1318b4c55d57102fd0d22be1fccb9951c12ae38f016d8a8a5fc0dc9761efc9dae4388680c52203f8e4774ae7bafbdc1fea2cee", &(0x7f0000000c80)="09967d758a5fa5653f2be279a1d817c3280918c27d746bbed725191e9089a362dd61ac8f34a1f6e95dbd48d7dbe371e65df39dd620b24bc47bb773c6d311cc3d8162faf5a44a2348452a00343845305d033d8ceb67d8e1f51fdcbc03d10dd0915537915352026496f093a235f6beb5f991404c35b14e4f7023e2e2701e97fe05ad595d6f817841cd2f0f0f41f5241900bcff86d70393f4f2b833bce03396df932124516cbd96d54613233a0ddcc6d287b616574f16c37aff5848a267f881bedf20fd7c7be2de20728322fc3b79575aceb16951671986891a8d67fd460f60a5", 0x7cb, r6, 0x4}, 0x38) (async)
r7 = accept(r4, 0x0, &(0x7f0000000e80))
bind$802154_raw(r7, &(0x7f0000000ec0)={0x24, @none={0x0, 0x1}}, 0x14) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000000f00)={0x0, 0x6}) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r7) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xe0, r8, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x18}}}}, [@NL80211_ATTR_IE={0x23, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x6400, 0x3, 0x7, 0x0, {0x400, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0xca9b, 0x9}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x0, 0x6, 0x0, {0xe, 0x4, 0x0, 0xab, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x7ce, 0x2}}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_KEYS={0x38, 0x51, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b03fe524e295f2abc87d64fb89"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ac3b495de57c8863dee9e084c6"}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xe}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x2, 0x0, 0x0, {0x6a86, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0x7f, 0x40}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) (async)
r10 = socket(0x1, 0x3, 0x9)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000001180)={0x0, 0x1000, "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"}, &(0x7f00000021c0)=0x1008) (async)
socket$kcm(0x29, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002280)={'sit0\x00', &(0x7f0000002200)={'syztnl2\x00', r2, 0x700, 0x700, 0x7fffffff, 0x0, {{0x18, 0x4, 0x0, 0x2b, 0x60, 0x67, 0x0, 0xd, 0x29, 0x0, @remote, @broadcast, {[@rr={0x7, 0x13, 0x87, [@empty, @multicast2, @empty, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x7, [{@remote, 0x5}]}, @lsrr={0x83, 0x1f, 0xb6, [@dev={0xac, 0x14, 0x14, 0x28}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @local, @rand_addr=0x64010101]}, @rr={0x7, 0xb, 0xc, [@remote, @loopback]}]}}}}}) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000003880)={{<r11=>r0, &(0x7f00000022c0)=':)^}[\x00', 0x4000, &(0x7f0000002300)={@_ha_fsid={[0xeb2, 0x401]}, {0x3, 0x2, 0x8, 0x3}}, 0x5, &(0x7f0000002340)={@_ha_fsid}, &(0x7f0000002380)=0xc0e0}, 0x5, &(0x7f00000037c0)=[{0x2, 0xa, &(0x7f00000023c0)='U{\xb6}\x00', &(0x7f0000002400)="13b222755aebc51e3be31746525fcadc296ad1db9c33960c9293c2248463f84dba93bcba94aa91aff45e1474349318614ec4d07937903b5aa7825782bcb1591202d2e03d32d04c0f2403d053ea6010700691e8f72988af7a80b0bd7326cdc09402e71f0f9802b850f37de2fdcd3842e06596723b4a0f857d1bdb563ce6af12c23fa9f6fed165c50a59fd3dd521f57f49ae96a881609e5e1e65c22e7880484bc522b33ab44e9049c994a01f8d0045043f010c68206eae7d20182974194a14ba78070ef3d2", 0xc4, 0x18}, {0x2, 0x3913, &(0x7f0000002500)='(:*+*\x00', &(0x7f0000002540)="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", 0x1000, 0x22}, {0x3, 0x44, &(0x7f0000003540)='syz1\x00', &(0x7f0000003580)="506c96a30d5d0a808f3e7eb36eeca5a073fbdbbc1006b86a2cc3796bce1bc68a5a47530ef2b83fd34aa2542c4302ca0e557246c2d3e4878143a48d7249a4cce93a15e8f280016b9d62a8", 0x4a}, {0x2, 0x1fc, &(0x7f0000003600)='sit0\x00', &(0x7f0000003640)="49cc1732a6d9a85eba68f91957e85d6b012d2562f85315e1d625522249a6790284a26b93f01159dcf0351e1456134e5706186c7bdda16ff46c1d01f75abd0be247e5fd72dfbc8bc4ebc70514316e95705d1a81f9d5e5e42de1d1bf75c976a39aca7cc13accce3cdba2a6eadb6cebadfeb30f749ede00ec9983684fa9e6d31d84714f2067cb9972ad2f17", 0x8a, 0x2}, {0x3, 0x6, &(0x7f0000003700)='veth1_to_batadv\x00', &(0x7f0000003740)="119d2a6170c3fef3e30049f5b6d4167084bd535b96ec45b3cba994f9738b889458b8857fa991bad5219ae048031e9e51f25feba523d530a03ac9db23709b7d0368673412432b22b3f2583caec3f67704c3edbbc56adc1833c7eac33e06e71194631b311234d5007422ecd9694c66c58df2083f", 0x73, 0x32}]})
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000003900)=0x7, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003c80)={r11, 0x0, 0xbc, 0x81, &(0x7f0000003940)="8afd564da67deb4fe44939f1fd5075a8175d37ecc6890763c185366d2ac324fe9d74f54a1ea12785b7e366f7fb674828c2b6673b2f090e47199fac6a708b6c31edce00dec5239628fd3528097ef528044a4febe5cb7500e0953b218ab1f09e6448a2496618a708e96258741ca37aab77afc46653e796147bf9dd1cc1c5ba766bf18e7bc3df95c85a96246f411f735a84229c4e8fc8545966e8b5361bbdb4cd04ed26b4cc13f5bfc7364f36a47c5970db184e934ad5cbc217b58a30df", &(0x7f0000003a00)=""/129, 0x7, 0x0, 0xb4, 0xee, &(0x7f0000003ac0)="2c85ca6bf821498677501317891db7d448fb4fdffce022b79289075ed65b216e78188cf9dc7556d08069df539c0cabd7a7652653bcf1b74a2f0c12a6c25fa1fbbbd050c1a30ccd2856c3ced56de74e04c287ee2c62dbf59b7352cb2ee881b9ddbbad3d6ae4f0d523dd7ce6fae0f677430420d9cdc43d1c4d8991ce3bb9ecdd9b9cfe58737b9c9f8e9fc3443c2607f7319e73c96c29952680ed82c1553232cac8e8df9d20000c52b704d0d3dd13a68199a0decf46", &(0x7f0000003b80)="63f074ee525f30cfa8d1e14a36b8bf68b095e2569e8c2ed35434a65a82bef2a96f1c41584021c0dee9bb25ff5b636632848aab85c8eaa6d71814a7ebc988e325b6cc827842b0040dd3bea617ff80e6b3f3f2068a5f622cfa5268f72e5e656bacd21bcf08989632af71a96a962f28fffec10985e9f203f930510eb3e1681c4c11d3d3e9d01465e037ce8a9abe630180e82e4ef3f9ce6b2c3bb92f83bb1400a9f4dfbdb9dfffe7a1bc4f78e473c896af41bb29655a0b89cc9f8917a697fb80e1269cae03d4f1dca8496b239409e6fc8d2984d1bd0a890fcb6c98036b2263d50690bb4a2ac09b8acc84e28183bd035e", 0x2, 0x0, 0x7}, 0x50)

6.004704733s ago: executing program 6 (id=13123):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf252d000000060004000000000008000200", @ANYRES32=0x0, @ANYBLOB="060006000000000008000200", @ANYRES32=0x0, @ANYBLOB="05002e0005000201aaaaaaaaaaaa"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000010)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PTAB={0x404, 0x3, [0xf1, 0x1, 0x10001, 0x7, 0x4, 0xced, 0x1, 0x7e5, 0x0, 0x1, 0x0, 0x0, 0x5, 0x9, 0x0, 0x1, 0x958, 0x8, 0x0, 0x0, 0xca, 0x0, 0x9, 0x6, 0x28000000, 0x2, 0x1f1, 0x9, 0x401f, 0x5, 0xd, 0x7fff, 0x7, 0x3, 0x6, 0x1, 0x8a02, 0xfffffff9, 0x10001, 0x5, 0x6, 0x2, 0x4, 0x2, 0x8001, 0x3d, 0x7, 0x5, 0x4f, 0x8, 0x401, 0x80000001, 0x10000, 0x7f, 0xc, 0xfffffffe, 0x1, 0x0, 0x8, 0x4, 0x3, 0xfff, 0x4, 0x2047, 0x9, 0x5, 0x0, 0xffff, 0x5, 0xc20, 0x1, 0x4, 0x4, 0x0, 0x9, 0x163c, 0x6, 0x0, 0x7, 0x1, 0x8, 0x3, 0x5a1, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x79c, 0x0, 0x6, 0x6, 0x401, 0x7, 0x10001, 0x3, 0x6, 0xbb29, 0xc, 0x9, 0x8, 0x7, 0x7, 0x8, 0x3, 0x9, 0x10001, 0x80000001, 0x3ff, 0x4, 0x80, 0xfffff801, 0x5, 0x80000000, 0x166f, 0x0, 0x2, 0x3, 0x4, 0x0, 0xe8, 0x8, 0x9, 0x4, 0xffff, 0x2, 0xbec2, 0x8, 0x10, 0xfffffffe, 0x9, 0x7, 0x1, 0x5, 0x1000, 0x8, 0x40000000, 0x0, 0x10008, 0x3, 0x80000000, 0x4, 0x3, 0x9, 0x0, 0x9, 0xb85, 0x4, 0x6, 0x3, 0x59ad, 0x3ff, 0x8, 0xa, 0x1965, 0x2, 0x5, 0x7, 0xb03, 0x5cbd, 0x9, 0x96b7, 0xe, 0x101, 0x2, 0x0, 0x4d, 0x5, 0x100, 0xff, 0x3, 0xfffff001, 0x8000, 0x2, 0x10, 0x7, 0x4, 0xc3, 0xf, 0x3, 0x1, 0x8, 0xee9, 0xd5f5, 0x6, 0x80000001, 0x4d5, 0x7, 0xfffffff7, 0x2, 0x6, 0x7, 0x4, 0x4, 0x3ff, 0x7, 0x5, 0x2, 0xb2, 0x0, 0x2, 0x5, 0x5, 0xc026, 0x4b1e851, 0x100, 0x80000001, 0x8000, 0xfff, 0x5a9, 0x8001, 0xdd98, 0x4, 0x1e81, 0x1, 0x3000000, 0x5c0, 0x514, 0xe000, 0x97, 0x8, 0x3, 0x2, 0x80000001, 0x93, 0x7, 0xb9, 0x5, 0x6, 0xc, 0xa, 0x9, 0x401, 0x0, 0xc, 0x5, 0x2, 0xb, 0x10000, 0x5, 0xfffffff8, 0x9, 0x7, 0xf, 0x8001, 0x3, 0x4, 0x1, 0x6, 0xffffffff, 0xb93b, 0x0, 0x800, 0x7, 0x0, 0x9]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r8, 0x25, 0x0, @void}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x48001)
sendmsg$NFT_BATCH(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010)
sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010)
close(r10)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4850)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xf, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x1, 0xffff}, {0xb, 0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x328, "c54830ce90fc10b73bf9208a15134a54"}}}]}, 0x48}}, 0x20004040)
setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, r14}, 0xc)

5.877731217s ago: executing program 1 (id=13124):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0xfffffffffffffffd, 0x1, 0x0, 0x0, @multicast1}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048003}, 0x0) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)

5.700892993s ago: executing program 1 (id=13125):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020020008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10)

5.594923358s ago: executing program 1 (id=13126):
r0 = socket(0x1d, 0x2, 0x6) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) (async)
unshare(0x22020400) (async)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff}) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000140), &(0x7f0000000280)=r2}, 0x20)
pipe(&(0x7f00000007c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async)
close(r5)
splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000000fc520317f45840953bc100000000000000130000180100002020702500000000802020207baaf8ff00000000bda106000000000147010000f8ffb07ab216000008000000b70200000000002085000000050000001881000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00185075110f2f6818c3f809cd180fc1febf3207d6931e5f43cd5e8720"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r6, 0x8000001000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x2f)

5.160770694s ago: executing program 1 (id=13127):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008b000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000ff7e00008500000086000000bf092000000000005509010000000080950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000a00008500000086000000bf91000000000000b7020000030000008500000084000000b70000000005000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41100, 0x4b, '\x00', 0x0, 0x8000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

5.030023798s ago: executing program 1 (id=13128):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0xd}, 0x1c)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
r5 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) (async)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0xd}, 0x1c) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async)
socket(0x1e, 0x4, 0x0) (async)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14) (async)

3.363601016s ago: executing program 0 (id=13129):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYRES8=r4, @ANYRES16=0x0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendto$packet(r0, &(0x7f0000000100)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c5, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

2.915033672s ago: executing program 5 (id=13130):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0x37df697b}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2)
recvmmsg(r2, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000940)=""/9, 0x9}, {&(0x7f0000000980)=""/71, 0x47}, {&(0x7f0000002e80)=""/4112, 0x1010}], 0x3}, 0xfffff001}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (async)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
close(r4)
socket(0x1e, 0x5, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x28) (async)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x28)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28)
setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f0000000040), 0x44)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, 0x0, 0x0) (async)
bind$inet6(r6, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r10, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1}, 0x4}], 0x1, 0x2000, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01003de4ea433c6051670200000008000300", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01003de4ea433c6051670200000008000300", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

621.294µs ago: executing program 5 (id=13131):
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)
socket(0x2, 0x5, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1, 0x30}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r2, 0x0, 0x0)

0s ago: executing program 6 (id=13132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1c8, 0x0, 0x1e39fd15f9cfc5be, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6731}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xc3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfffc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x24008044}, 0x4004000)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d000005000900020000000c00088004"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000)
sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000027bd7000fcdbdf256d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000080)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
socket$kcm(0x29, 0x1, 0x0)
write$tun(r10, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r12, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0)
readv(r10, &(0x7f0000000380), 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0)
close(0x4)

kernel console output (not intermixed with test programs):

g bearer <eth:syzkaller0>
[ 1738.533777][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1738.614766][T26859] Bluetooth: hci1: command tx timeout
[ 1738.697306][T14621] net_ratelimit: 9 callbacks suppressed
[ 1738.697324][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1738.833698][T19418] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1738.883970][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1738.921518][T19418] 8021q: adding VLAN 0 to HW filter on device team0
[ 1739.001080][T14628] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1739.010751][T14628] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1739.093322][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1739.177006][T14628] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1739.184228][T14628] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1739.414141][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1739.574627][T14633] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1739.718165][T19658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12233'.
[ 1739.723361][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1739.782236][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12233'.
[ 1739.848799][T19658] macsec1: entered allmulticast mode
[ 1739.854121][T19658] bond0: entered allmulticast mode
[ 1739.859241][T19658] bond_slave_0: entered allmulticast mode
[ 1739.864969][T19658] bond_slave_1: entered allmulticast mode
[ 1739.888644][T19658] bond_slave_0: entered promiscuous mode
[ 1739.894334][T19658] bond_slave_1: entered promiscuous mode
[ 1739.935832][T19658] 8021q: adding VLAN 0 to HW filter on device macsec1
[ 1740.169021][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1740.743445][T26859] Bluetooth: hci1: command tx timeout
[ 1741.094128][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1741.273993][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1741.387522][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1741.545125][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1741.805095][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12239'.
[ 1742.184353][T19721] netlink: 'syz.1.12244': attribute type 1 has an invalid length.
[ 1742.379803][T19721] bond15: entered promiscuous mode
[ 1742.385315][T19721] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1742.400537][T19721] netlink: 'syz.1.12244': attribute type 1 has an invalid length.
[ 1742.401340][T19418] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1742.651603][T19721] bond16: entered promiscuous mode
[ 1742.657160][T19721] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1742.664548][T19721] netlink: 'syz.1.12244': attribute type 1 has an invalid length.
[ 1742.776157][T19721] bond17: entered promiscuous mode
[ 1742.841800][T19721] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1742.904444][T19721] netlink: 'syz.1.12244': attribute type 1 has an invalid length.
[ 1742.990244][T19721] bond18: entered promiscuous mode
[ 1743.001599][T19721] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1743.222885][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12249'.
[ 1743.288588][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12249'.
[ 1743.343751][T19765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12251'.
[ 1743.539476][T19418] veth0_vlan: entered promiscuous mode
[ 1743.622519][T19418] veth1_vlan: entered promiscuous mode
[ 1743.769794][T19418] veth0_macvtap: entered promiscuous mode
[ 1743.784777][T19418] veth1_macvtap: entered promiscuous mode
[ 1743.833836][T19418] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1743.855269][T19418] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1743.877849][T14622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1743.897125][T14622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1744.008991][T14622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1744.232926][T14622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1744.382308][T14624] net_ratelimit: 11 callbacks suppressed
[ 1744.382326][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1744.583254][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1744.671901][T14621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1744.679802][T14621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1744.716446][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1744.888458][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12257'.
[ 1745.217746][T19823] bridge_slave_0: left allmulticast mode
[ 1745.223423][T19823] bridge_slave_0: left promiscuous mode
[ 1745.233684][T19823] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1745.296057][T19823] bridge_slave_1: left allmulticast mode
[ 1745.301725][T19823] bridge_slave_1: left promiscuous mode
[ 1745.307478][T19823] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1745.338417][T19823] bond0: (slave bond_slave_0): Releasing backup interface
[ 1745.346640][T19823] bond_slave_0: left allmulticast mode
[ 1745.357688][T19823] bond_slave_0: left promiscuous mode
[ 1745.385242][T19823] bond0: (slave bond_slave_1): Releasing backup interface
[ 1745.405092][T19823] bond_slave_1: left allmulticast mode
[ 1745.410574][T19823] bond_slave_1: left promiscuous mode
[ 1745.451274][T19823] team0: Port device team_slave_0 removed
[ 1745.514835][T19823] team0: Port device team_slave_1 removed
[ 1745.544165][T19823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1745.561783][T19823] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1745.598506][T19823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1745.605960][T19823] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1745.615567][T19823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1745.637506][T14621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1745.653790][T14621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1745.693327][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1745.708430][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1745.829143][T19831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12263'.
[ 1745.945021][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1746.056984][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1746.244232][T14633] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1746.383436][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1746.530113][T19857] tipc: Started in network mode
[ 1746.554669][T19857] tipc: Node identity 7e6cbe7d4626, cluster identity 4711
[ 1746.587240][T19857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1746.860220][T19859] syzkaller0: entered promiscuous mode
[ 1746.883558][T19859] syzkaller0: entered allmulticast mode
[ 1746.914691][T19859] tipc: Resetting bearer <eth:syzkaller0>
[ 1746.921166][T19857] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[ 1747.092860][T19861] veth1_macvtap: left promiscuous mode
[ 1747.098486][T19861] macsec0: entered promiscuous mode
[ 1747.103702][T19861] macsec0: entered allmulticast mode
[ 1747.252925][T19852] tipc: Resetting bearer <eth:syzkaller0>
[ 1747.535751][T19852] tipc: Disabling bearer <eth:syzkaller0>
[ 1747.803810][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12271'.
[ 1747.832287][T19875] netlink: 'syz.6.12272': attribute type 111 has an invalid length.
[ 1748.070062][T19882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12274'.
[ 1748.127874][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12271'.
[ 1748.397255][T19885] netlink: 'syz.0.12273': attribute type 322 has an invalid length.
[ 1748.732567][T19897] hmó3)ó: entered promiscuous mode
[ 1748.758081][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12280'.
[ 1749.008535][T19911] netlink: 'syz.5.12281': attribute type 8 has an invalid length.
[ 1749.016789][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12281'.
[ 1749.090170][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12282'.
[ 1749.185432][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12282'.
[ 1749.218877][T19920] lo speed is unknown, defaulting to 1000
[ 1749.298516][T19922] macsec1: entered promiscuous mode
[ 1749.443459][T14624] net_ratelimit: 18 callbacks suppressed
[ 1749.443479][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1750.055524][T19940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12291'.
[ 1750.096951][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1750.109474][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1750.259103][T19944] x_tables: duplicate underflow at hook 1
[ 1750.293514][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1750.442861][T14633] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1750.733085][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1750.774620][T19959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12295'.
[ 1750.870783][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1750.900775][T19953] lo speed is unknown, defaulting to 1000
[ 1751.089115][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1751.200726][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1751.216578][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1752.136213][T19983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12302'.
[ 1752.332518][T19995] netlink: 2 bytes leftover after parsing attributes in process `syz.6.12303'.
[ 1752.406689][T19995] netlink: 2 bytes leftover after parsing attributes in process `syz.6.12303'.
[ 1752.448062][T19995] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12303'.
[ 1753.049458][T20003] veth6: entered allmulticast mode
[ 1753.500934][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12311'.
[ 1753.858132][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12311'.
[ 1753.947342][T20028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1754.031884][T20028] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1754.041896][T20028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1754.077058][T20028] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1754.085100][T20028] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1754.513067][    C0] net_ratelimit: 12 callbacks suppressed
[ 1754.513087][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1754.803410][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1754.962912][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1755.049940][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12321'.
[ 1755.058115][T20026] lo speed is unknown, defaulting to 1000
[ 1755.181891][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1755.401376][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1755.445243][T20076] netlink: 80 bytes leftover after parsing attributes in process `syz.6.12325'.
[ 1755.541311][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12326'.
[ 1755.613527][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1755.637086][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12326'.
[ 1755.650952][T14633] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1755.663897][T14633] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1755.699401][T14633] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1755.727539][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1755.767785][T20086] netlink: 'syz.0.12330': attribute type 3 has an invalid length.
[ 1755.773191][T14633] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1755.789976][T20084] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.12328'.
[ 1755.960812][T20095] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12328'.
[ 1756.034273][T20095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12328'.
[ 1756.223579][T26859] Bluetooth: hci2: command tx timeout
[ 1756.256324][T20099] netlink: 240 bytes leftover after parsing attributes in process `syz.4.12331'.
[ 1756.296887][T20099] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12331'.
[ 1756.693267][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1757.470672][T20091] macsec0: left promiscuous mode
[ 1757.487985][T20091] macsec0: left allmulticast mode
[ 1757.672595][T20091] bond0: left allmulticast mode
[ 1757.686293][T20091] macsec1: left allmulticast mode
[ 1757.724083][T20084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1757.743253][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1757.772309][T14633] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1757.801660][T14633] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1757.810562][T14633] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1757.851449][T14633] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1757.877954][T20103] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12335'.
[ 1757.951767][T20103] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12335'.
[ 1758.049853][T20116] netlink: 'syz.0.12333': attribute type 30 has an invalid length.
[ 1758.293272][T26859] Bluetooth: hci2: command tx timeout
[ 1758.848866][T14633] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1758.913893][T14633] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1758.922799][T14633] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1758.931659][T14633] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1759.276185][T14622] bond0: (slave netdevsim1): Releasing backup interface
[ 1759.598979][T20026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1759.606689][T20026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1759.613336][T20165] netlink: 'syz.5.12344': attribute type 11 has an invalid length.
[ 1759.614295][T20026] bridge_slave_0: entered allmulticast mode
[ 1759.630266][T20026] bridge_slave_0: entered promiscuous mode
[ 1759.639453][T20026] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1759.646825][T20026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1759.655495][T20026] bridge_slave_1: entered allmulticast mode
[ 1759.663723][T20026] bridge_slave_1: entered promiscuous mode
[ 1759.718763][T20026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1759.784761][T14622] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[ 1759.820065][T20026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1759.874445][    C0] net_ratelimit: 4 callbacks suppressed
[ 1759.874465][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1759.934780][T20026] team0: Port device team_slave_0 added
[ 1759.957280][T20026] team0: Port device team_slave_1 added
[ 1759.967280][T20168] netlink: 'syz.6.12346': attribute type 1 has an invalid length.
[ 1760.006296][T20168] netlink: 'syz.6.12346': attribute type 1 has an invalid length.
[ 1760.029841][T20026] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1760.047920][T20026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1760.097773][T20026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1760.110696][T20026] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1760.118406][T20026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1760.174776][T20026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1760.322021][T20026] hsr_slave_0: entered promiscuous mode
[ 1760.344651][T20026] hsr_slave_1: entered promiscuous mode
[ 1760.361394][T20026] debugfs: 'hsr0' already exists in 'hsr'
[ 1760.373976][T26859] Bluetooth: hci2: command tx timeout
[ 1760.381754][T20026] Cannot create hsr debugfs directory
[ 1760.613543][T20193] __nla_validate_parse: 7 callbacks suppressed
[ 1760.613561][T20193] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12356'.
[ 1760.787510][T20203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1760.979264][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1760.998958][T14622] bridge_slave_1: left allmulticast mode
[ 1761.004628][T14622] bridge_slave_1: left promiscuous mode
[ 1761.010411][T14622] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1761.018017][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12361'.
[ 1761.035583][T14622] bridge_slave_0: left allmulticast mode
[ 1761.041237][T14622] bridge_slave_0: left promiscuous mode
[ 1761.046970][T14622] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1761.143802][T14622] dvmrp8: left allmulticast mode
[ 1761.265173][T14622] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[ 1761.437869][T14622] erspan0 (unregistering): left promiscuous mode
[ 1761.693366][T14622] bond2 (unregistering): (slave bridge2): Releasing backup interface
[ 1761.715964][T14622] bond3 (unregistering): (slave bridge3): Releasing backup interface
[ 1761.786807][T14622] bond5 (unregistering): (slave bridge6): Releasing backup interface
[ 1762.016162][T14622] bond14 (unregistering): (slave bridge17): Releasing backup interface
[ 1762.057117][T14622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1762.067538][T14622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1762.076804][T14622] bond0 (unregistering): Released all slaves
[ 1762.099881][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1762.111011][T14622] bond1 (unregistering): Released all slaves
[ 1762.126563][T14622] bond2 (unregistering): Released all slaves
[ 1762.147304][T14622] bond3 (unregistering): Released all slaves
[ 1762.167623][T14622] bond4 (unregistering): Released all slaves
[ 1762.185934][T14622] bond5 (unregistering): Released all slaves
[ 1762.207689][T14622] bond6 (unregistering): Released all slaves
[ 1762.231733][T14622] bond7 (unregistering): Released all slaves
[ 1762.248221][T14622] bond8 (unregistering): Released all slaves
[ 1762.267211][T14622] bond9 (unregistering): Released all slaves
[ 1762.283842][T14622] bond10 (unregistering): Released all slaves
[ 1762.300156][T14622] bond11 (unregistering): Released all slaves
[ 1762.318656][T14622] bond12 (unregistering): Released all slaves
[ 1762.334847][T14622] bond13 (unregistering): Released all slaves
[ 1762.355185][T14622] bond14 (unregistering): Released all slaves
[ 1762.371152][T14622] bond15 (unregistering): Released all slaves
[ 1762.386984][T14622] bond16 (unregistering): Released all slaves
[ 1762.402406][T14622] bond17 (unregistering): Released all slaves
[ 1762.417797][T14622] bond18 (unregistering): Released all slaves
[ 1762.475175][T26859] Bluetooth: hci2: command tx timeout
[ 1762.513818][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1762.787026][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12369'.
[ 1762.840984][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12369'.
[ 1762.890453][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12369'.
[ 1762.933885][T14622] tipc: Disabling bearer <eth:syzkaller0>
[ 1762.989004][T14622] tipc: Left network mode
[ 1763.042145][T20251] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12372'.
[ 1763.058763][T20251] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12372'.
[ 1763.191886][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1763.232681][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1763.250641][T20261] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12373'.
[ 1763.278153][T20259] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12373'.
[ 1763.591056][T20279] lo speed is unknown, defaulting to 1000
[ 1763.741179][T20279] lo speed is unknown, defaulting to 1000
[ 1763.792940][T20282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1763.800592][T20282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1763.855638][T20282] bridge0: entered allmulticast mode
[ 1763.902847][T20279] lo speed is unknown, defaulting to 1000
[ 1764.009293][ T5293] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1764.032613][T20282] bridge_slave_1: left allmulticast mode
[ 1764.062131][T20282] bridge_slave_1: left promiscuous mode
[ 1764.107015][T20282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1764.125745][T20282] bridge_slave_0: left allmulticast mode
[ 1764.132594][T20282] bridge_slave_0: left promiscuous mode
[ 1764.146054][T20282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1764.299022][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1764.465378][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1764.487103][T20303] netlink: 'syz.6.12384': attribute type 8 has an invalid length.
[ 1764.495001][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12384'.
[ 1764.588197][T20279] infiniband syz1: set down
[ 1764.593288][T28785] lo speed is unknown, defaulting to 1000
[ 1764.610806][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1764.631832][T20279] infiniband syz1: added lo
[ 1764.652467][T20279] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 1764.661777][T20279] infiniband syz1: Couldn't open port 1
[ 1764.740918][T20279] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1764.807380][T20310] tun0: tun_chr_ioctl cmd 1074812117
[ 1764.813389][T20279] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1764.831155][T20279] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1764.989847][T20279] RDS/IB: syz1: added
[ 1764.995851][T20279] smc: adding ib device syz1 with port count 1
[ 1765.002037][T20279] smc:    ib device syz1 port 1 has no pnetid
[ 1765.111905][T28780] lo speed is unknown, defaulting to 1000
[ 1765.120582][T20279] lo speed is unknown, defaulting to 1000
[ 1765.135087][T14575] net_ratelimit: 1 callbacks suppressed
[ 1765.135103][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1765.204863][T20328] netlink: 'syz.4.12389': attribute type 7 has an invalid length.
[ 1765.212699][T20328] netlink: 'syz.4.12389': attribute type 8 has an invalid length.
[ 1765.226832][T20328] team0: entered promiscuous mode
[ 1765.231880][T20328] team_slave_0: entered promiscuous mode
[ 1765.237712][T20328] team_slave_1: entered promiscuous mode
[ 1765.245600][T20328] bond0: entered promiscuous mode
[ 1765.250642][T20328] bond_slave_0: entered promiscuous mode
[ 1765.256463][T20328] bond_slave_1: entered promiscuous mode
[ 1765.265548][T20328] erspan0: entered promiscuous mode
[ 1765.279908][T20328] debugfs: 'hsr1' already exists in 'hsr'
[ 1765.334539][T20328] Cannot create hsr debugfs directory
[ 1765.345633][T20328] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1765.406065][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1765.517223][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1765.905470][T20279] lo speed is unknown, defaulting to 1000
[ 1765.943165][T20347] __nla_validate_parse: 3 callbacks suppressed
[ 1765.943183][T20347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12392'.
[ 1765.963457][T14633] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1766.015845][T20026] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1766.057527][T20026] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1766.080018][T20026] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1766.125539][T20026] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1766.136106][T20026] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1766.160478][T20026] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1766.205225][T20355] netlink: 'syz.4.12394': attribute type 8 has an invalid length.
[ 1766.233675][T20352] team_slave_1: entered promiscuous mode
[ 1766.243340][T20026] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1766.267421][T20026] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1766.481484][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12397'.
[ 1766.512795][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1766.524539][T14633] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1766.599397][T20279] lo speed is unknown, defaulting to 1000
[ 1766.647423][T20026] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1766.648498][T20369] IPVS: Scheduler module ip_vs_sip not found
[ 1766.699422][T20026] 8021q: adding VLAN 0 to HW filter on device team0
[ 1766.730672][T14628] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1766.737834][T14628] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1766.791436][T14575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1766.798561][T14575] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1766.875720][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12400'.
[ 1767.219165][T20279] lo speed is unknown, defaulting to 1000
[ 1767.290415][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1767.436573][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1767.481523][T20386] xt_hashlimit: max too large, truncated to 1048576
[ 1767.488418][T20386] xt_hashlimit: overflow, try lower: 2/0
[ 1767.623686][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1767.637370][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1767.864158][T20279] lo speed is unknown, defaulting to 1000
[ 1767.876313][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12405'.
[ 1767.951112][T20401] team_slave_1: entered promiscuous mode
[ 1768.225377][T20405] netlink: 200 bytes leftover after parsing attributes in process `syz.6.12406'.
[ 1768.374952][T20026] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1768.454525][T20279] lo speed is unknown, defaulting to 1000
[ 1768.645185][T20026] veth0_vlan: entered promiscuous mode
[ 1768.665644][T20026] veth1_vlan: entered promiscuous mode
[ 1768.744082][T20026] veth0_macvtap: entered promiscuous mode
[ 1768.771973][T20026] veth1_macvtap: entered promiscuous mode
[ 1768.834663][T20026] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1768.878354][T20026] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1768.922031][T14607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1768.933000][T14607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.009823][T14607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.018953][T14607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.031815][T20279] lo speed is unknown, defaulting to 1000
[ 1769.235849][T14624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1769.243694][T14624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1769.382473][T14621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1769.443471][T14621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1769.550022][T20279] lo speed is unknown, defaulting to 1000
[ 1769.882001][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12413'.
[ 1769.923656][T20433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1769.982741][T20433] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1770.030193][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12415'.
[ 1770.202699][T20279] lo speed is unknown, defaulting to 1000
[ 1770.211035][T20443] netlink: 17132 bytes leftover after parsing attributes in process `syz.6.12416'.
[ 1770.251910][T20444] netlink: 68 bytes leftover after parsing attributes in process `syz.6.12416'.
[ 1770.433115][T14619] net_ratelimit: 12 callbacks suppressed
[ 1770.433134][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1770.573285][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1770.634083][T20279] lo speed is unknown, defaulting to 1000
[ 1770.683527][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1770.804171][T20448] tap0: tun_chr_ioctl cmd 1074025677
[ 1770.814823][T20448] tap0: linktype set to 774
[ 1770.828123][T20448] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12417'.
[ 1770.838812][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1770.858688][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1770.984499][T14633] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1771.003023][T20279] lo speed is unknown, defaulting to 1000
[ 1771.093584][T14633] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1771.291716][T20279] lo speed is unknown, defaulting to 1000
[ 1771.382900][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1771.476343][T20461] __nla_validate_parse: 2 callbacks suppressed
[ 1771.476360][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12422'.
[ 1771.524313][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1771.549373][T20463] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12422'.
[ 1771.621456][T20279] lo speed is unknown, defaulting to 1000
[ 1771.657679][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1771.675024][T20465] netlink: 296 bytes leftover after parsing attributes in process `syz.0.12423'.
[ 1771.887136][T20472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12426'.
[ 1772.005378][T20279] lo speed is unknown, defaulting to 1000
[ 1772.231489][T20279] lo speed is unknown, defaulting to 1000
[ 1772.324205][T20484] netlink: 732 bytes leftover after parsing attributes in process `syz.6.12430'.
[ 1772.333775][T20484] netlink: 732 bytes leftover after parsing attributes in process `syz.6.12430'.
[ 1772.668290][T20488] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12431'.
[ 1772.682572][T20279] lo speed is unknown, defaulting to 1000
[ 1773.030170][T20279] lo speed is unknown, defaulting to 1000
[ 1773.265162][T20394] lo speed is unknown, defaulting to 1000
[ 1774.328629][T14622] hsr_slave_0: left promiscuous mode
[ 1774.340761][T14622] batman_adv: batadv0: Removing interface: syzkaller0
[ 1774.513992][T20524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12441'.
[ 1774.523050][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12441'.
[ 1774.802749][T14622] team0 (unregistering): Port device team_slave_1 removed
[ 1774.822850][T14622] team0 (unregistering): Port device team_slave_0 removed
[ 1774.982062][T20524] macsec1: entered allmulticast mode
[ 1774.987427][T20524] bond0: entered allmulticast mode
[ 1774.992971][T20524] 8021q: adding VLAN 0 to HW filter on device macsec1
[ 1775.000750][T20530] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[ 1775.457759][T14605] net_ratelimit: 23 callbacks suppressed
[ 1775.457777][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1775.609161][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1775.702936][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12449'.
[ 1775.726813][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1775.742583][T20550] hsr_slave_0: left promiscuous mode
[ 1775.755454][T20550] hsr_slave_1: left promiscuous mode
[ 1775.867171][T20555] lo speed is unknown, defaulting to 1000
[ 1775.963537][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1776.083941][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1776.193817][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1776.276430][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1776.295185][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1776.307662][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1776.399522][T20555] lo speed is unknown, defaulting to 1000
[ 1776.443463][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1776.553462][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1776.890315][T20568] __nla_validate_parse: 1 callbacks suppressed
[ 1776.890362][T20568] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12453'.
[ 1776.896291][T14622] IPVS: stop unused estimator thread 0...
[ 1777.136067][T20570] netlink: 'syz.4.12454': attribute type 1 has an invalid length.
[ 1777.231938][T20572] xt_CT: No such helper "snmp_trap"
[ 1777.524304][T20570] bond1: entered promiscuous mode
[ 1777.542041][T20570] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1777.620886][T20576] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1777.637423][T20576] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[ 1777.640161][T20586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12457'.
[ 1777.671355][T20576] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[ 1777.698636][T20576] bond1: (slave vti0): making interface the new active one
[ 1777.715109][T20576] vti0: entered promiscuous mode
[ 1777.736255][T20576] bond1: (slave vti0): Enslaving as an active interface with an up link
[ 1778.152244][T20599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12462'.
[ 1778.448972][T20608] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12466'.
[ 1778.476418][T20608] netlink: 'syz.1.12466': attribute type 2 has an invalid length.
[ 1778.672230][T20615] syzkaller1: entered promiscuous mode
[ 1778.677749][T20615] syzkaller1: entered allmulticast mode
[ 1778.710213][T20622] tap0: tun_chr_ioctl cmd 1074025677
[ 1778.716376][T20622] tap0: linktype set to 768
[ 1779.216803][T20628] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1779.530104][T20649] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1779.543287][T20649] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1779.582577][T20649] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1779.744342][T20659] netlink: 'syz.5.12481': attribute type 1 has an invalid length.
[ 1779.845560][T20659] bond11: entered promiscuous mode
[ 1779.863867][T20659] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1779.914976][T20664] mac80211_hwsim hwsim169 wlan0: entered promiscuous mode
[ 1779.922126][T20664] mac80211_hwsim hwsim169 wlan0: entered allmulticast mode
[ 1779.937523][T20666] FAULT_INJECTION: forcing a failure.
[ 1779.937523][T20666] name failslab, interval 1, probability 0, space 0, times 0
[ 1779.974234][T20666] CPU: 0 UID: 0 PID: 20666 Comm: syz.6.12484 Not tainted syzkaller #0 PREEMPT(full) 
[ 1779.974259][T20666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1779.974271][T20666] Call Trace:
[ 1779.974279][T20666]  <TASK>
[ 1779.974288][T20666]  dump_stack_lvl+0xe8/0x150
[ 1779.974319][T20666]  should_fail_ex+0x40c/0x560
[ 1779.974356][T20666]  should_failslab+0xa8/0x100
[ 1779.974378][T20666]  kmem_cache_alloc_node_noprof+0x8f/0x680
[ 1779.974404][T20666]  ? __alloc_skb+0x189/0x7a0
[ 1779.974440][T20666]  ? __alloc_skb+0x1d7/0x7a0
[ 1779.974463][T20666]  ? __local_bh_enable_ip+0xd0/0x130
[ 1779.974488][T20666]  __alloc_skb+0x1d7/0x7a0
[ 1779.974517][T20666]  netlink_sendmsg+0x5d4/0xb40
[ 1779.974548][T20666]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1779.974571][T20666]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1779.974599][T20666]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1779.974622][T20666]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1779.974644][T20666]  ____sys_sendmsg+0x9b9/0xa20
[ 1779.974664][T20666]  ? __might_fault+0xaf/0x130
[ 1779.974692][T20666]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1779.974720][T20666]  ? import_iovec+0x73/0xa0
[ 1779.974745][T20666]  ___sys_sendmsg+0x2a5/0x360
[ 1779.974763][T20666]  ? __lock_acquire+0x683/0x2cd0
[ 1779.974787][T20666]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1779.974841][T20666]  ? __fget_files+0x2a/0x420
[ 1779.974863][T20666]  ? __fget_files+0x3a2/0x420
[ 1779.974894][T20666]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1779.974916][T20666]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1779.974943][T20666]  ? __pfx_ksys_write+0x10/0x10
[ 1779.974975][T20666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.974994][T20666]  do_syscall_64+0x174/0x580
[ 1779.975015][T20666]  ? trace_irq_disable+0x3b/0x140
[ 1779.975040][T20666]  ? clear_bhb_loop+0x40/0x90
[ 1779.975062][T20666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.975078][T20666] RIP: 0033:0x7f3fec19ce59
[ 1779.975094][T20666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1779.975109][T20666] RSP: 002b:00007f3fed10f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1779.975129][T20666] RAX: ffffffffffffffda RBX: 00007f3fec415fa0 RCX: 00007f3fec19ce59
[ 1779.975141][T20666] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003
[ 1779.975153][T20666] RBP: 00007f3fed10f090 R08: 0000000000000000 R09: 0000000000000000
[ 1779.975165][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1779.975176][T20666] R13: 00007f3fec416038 R14: 00007f3fec415fa0 R15: 00007ffc82e1ff48
[ 1779.975207][T20666]  </TASK>
[ 1780.288310][T20667] bond11: (slave bridge10): making interface the new active one
[ 1780.297526][T20667] bridge10: entered promiscuous mode
[ 1780.305541][T20667] bond11: (slave bridge10): Enslaving as an active interface with an up link
[ 1780.442958][T20678] netlink: 'syz.0.12488': attribute type 2 has an invalid length.
[ 1780.451796][T17620] IPVS: starting estimator thread 0...
[ 1780.517080][T20684] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12491'.
[ 1780.526152][T20684] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12491'.
[ 1780.529405][T20659] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1780.548410][T20680] IPVS: using max 40 ests per chain, 96000 per kthread
[ 1780.575818][T20659] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address
[ 1780.587341][    C0] net_ratelimit: 18 callbacks suppressed
[ 1780.587355][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1780.653290][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1780.674582][T20682] netlink: 'syz.4.12492': attribute type 1 has an invalid length.
[ 1780.815642][T20682] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1780.824242][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1780.891551][T20700] bond2: (slave veth3): Enslaving as an active interface with a down link
[ 1780.957272][T20682] bond2: (slave dummy0): making interface the new active one
[ 1780.966534][T20682] dummy0: entered promiscuous mode
[ 1780.972112][T20682] bond2: (slave dummy0): Enslaving as an active interface with an up link
[ 1781.039401][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1781.223458][T20714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12497'.
[ 1781.289674][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1781.375523][T20719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12501'.
[ 1781.490706][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1781.514304][T20725] FAULT_INJECTION: forcing a failure.
[ 1781.514304][T20725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1781.552296][T20725] CPU: 0 UID: 0 PID: 20725 Comm: syz.6.12503 Not tainted syzkaller #0 PREEMPT(full) 
[ 1781.552322][T20725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1781.552333][T20725] Call Trace:
[ 1781.552341][T20725]  <TASK>
[ 1781.552350][T20725]  dump_stack_lvl+0xe8/0x150
[ 1781.552377][T20725]  should_fail_ex+0x40c/0x560
[ 1781.552409][T20725]  _copy_from_iter+0x1d3/0x1660
[ 1781.552432][T20725]  ? rcu_is_watching+0x15/0xb0
[ 1781.552459][T20725]  ? __pfx__copy_from_iter+0x10/0x10
[ 1781.552476][T20725]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[ 1781.552508][T20725]  ? netlink_sendmsg+0x650/0xb40
[ 1781.552528][T20725]  ? skb_put+0x112/0x210
[ 1781.552549][T20725]  netlink_sendmsg+0x6c0/0xb40
[ 1781.552579][T20725]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1781.552603][T20725]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1781.552630][T20725]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1781.552652][T20725]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1781.552673][T20725]  ____sys_sendmsg+0x9b9/0xa20
[ 1781.552693][T20725]  ? __might_fault+0xaf/0x130
[ 1781.552721][T20725]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1781.552750][T20725]  ? import_iovec+0x73/0xa0
[ 1781.552782][T20725]  ___sys_sendmsg+0x2a5/0x360
[ 1781.552801][T20725]  ? __lock_acquire+0x683/0x2cd0
[ 1781.552824][T20725]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1781.552882][T20725]  ? __fget_files+0x2a/0x420
[ 1781.552903][T20725]  ? __fget_files+0x3a2/0x420
[ 1781.552932][T20725]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1781.552955][T20725]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1781.552983][T20725]  ? __pfx_ksys_write+0x10/0x10
[ 1781.553014][T20725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1781.553033][T20725]  do_syscall_64+0x174/0x580
[ 1781.553052][T20725]  ? trace_irq_disable+0x3b/0x140
[ 1781.553077][T20725]  ? clear_bhb_loop+0x40/0x90
[ 1781.553098][T20725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1781.553115][T20725] RIP: 0033:0x7f3fec19ce59
[ 1781.553132][T20725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1781.553147][T20725] RSP: 002b:00007f3fed10f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1781.553166][T20725] RAX: ffffffffffffffda RBX: 00007f3fec415fa0 RCX: 00007f3fec19ce59
[ 1781.553179][T20725] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003
[ 1781.553190][T20725] RBP: 00007f3fed10f090 R08: 0000000000000000 R09: 0000000000000000
[ 1781.553201][T20725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1781.553211][T20725] R13: 00007f3fec416038 R14: 00007f3fec415fa0 R15: 00007ffc82e1ff48
[ 1781.553243][T20725]  </TASK>
[ 1781.845366][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1781.879296][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1781.930849][T20730] block nbd14: Unsupported socket: should be TCP or UNIX.
[ 1782.071666][T20730] team0 (unregistering): Port device vlan0 removed
[ 1782.099244][T20730] bond4: left promiscuous mode
[ 1782.122734][T20730] team0 (unregistering): Port device macvlan4 removed
[ 1782.166952][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1782.284585][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1782.495963][T20746] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12509'.
[ 1782.520274][T20748] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1782.539897][T20748] bond5 (unregistering): Released all slaves
[ 1782.787824][T20753] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12512'.
[ 1782.811051][T20753] netlink: 112 bytes leftover after parsing attributes in process `syz.6.12512'.
[ 1782.932595][T20760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12514'.
[ 1783.034395][T20763] FAULT_INJECTION: forcing a failure.
[ 1783.034395][T20763] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1783.066063][T20763] CPU: 0 UID: 0 PID: 20763 Comm: syz.0.12515 Not tainted syzkaller #0 PREEMPT(full) 
[ 1783.066088][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1783.066099][T20763] Call Trace:
[ 1783.066107][T20763]  <TASK>
[ 1783.066115][T20763]  dump_stack_lvl+0xe8/0x150
[ 1783.066142][T20763]  should_fail_ex+0x40c/0x560
[ 1783.066174][T20763]  _copy_from_iter+0x1d3/0x1660
[ 1783.066197][T20763]  ? rcu_is_watching+0x15/0xb0
[ 1783.066224][T20763]  ? __pfx__copy_from_iter+0x10/0x10
[ 1783.066239][T20763]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[ 1783.066270][T20763]  ? netlink_sendmsg+0x650/0xb40
[ 1783.066290][T20763]  ? skb_put+0x112/0x210
[ 1783.066311][T20763]  netlink_sendmsg+0x6c0/0xb40
[ 1783.066339][T20763]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1783.066374][T20763]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1783.066396][T20763]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1783.066422][T20763]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1783.066445][T20763]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1783.066466][T20763]  ____sys_sendmsg+0x9b9/0xa20
[ 1783.066492][T20763]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1783.066521][T20763]  ? import_iovec+0x73/0xa0
[ 1783.066543][T20763]  ___sys_sendmsg+0x2a5/0x360
[ 1783.066560][T20763]  ? __lock_acquire+0x683/0x2cd0
[ 1783.066581][T20763]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1783.066632][T20763]  ? __fget_files+0x2a/0x420
[ 1783.066660][T20763]  ? __fget_files+0x3a2/0x420
[ 1783.066688][T20763]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1783.066710][T20763]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1783.066738][T20763]  ? __pfx_ksys_write+0x10/0x10
[ 1783.066761][T20763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1783.066787][T20763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1783.066806][T20763]  do_syscall_64+0x174/0x580
[ 1783.066828][T20763]  ? clear_bhb_loop+0x40/0x90
[ 1783.066850][T20763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1783.066868][T20763] RIP: 0033:0x7f8d6c39ce59
[ 1783.066885][T20763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1783.066900][T20763] RSP: 002b:00007f8d6d184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1783.066918][T20763] RAX: ffffffffffffffda RBX: 00007f8d6c615fa0 RCX: 00007f8d6c39ce59
[ 1783.066932][T20763] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003
[ 1783.066943][T20763] RBP: 00007f8d6d184090 R08: 0000000000000000 R09: 0000000000000000
[ 1783.066954][T20763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1783.066964][T20763] R13: 00007f8d6c616038 R14: 00007f8d6c615fa0 R15: 00007fff3fa5b108
[ 1783.066994][T20763]  </TASK>
[ 1783.393753][T20767] netlink: 'syz.6.12517': attribute type 1 has an invalid length.
[ 1783.411729][T20767] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[ 1783.518627][T20765] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12516'.
[ 1783.730553][T20783] xt_hashlimit: size too large, truncated to 1048576
[ 1784.006302][T20790] netlink: 298 bytes leftover after parsing attributes in process `syz.4.12524'.
[ 1784.424695][T20821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12527'.
[ 1784.457260][T20821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12527'.
[ 1784.482454][T20821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12527'.
[ 1784.812714][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12530'.
[ 1785.084073][T20837] bond5: entered promiscuous mode
[ 1785.121567][T20837] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1785.656013][T14622] net_ratelimit: 28 callbacks suppressed
[ 1785.656034][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1785.803507][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1785.821290][T20862] gretap0: entered promiscuous mode
[ 1785.925769][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1786.043512][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1786.098977][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1786.226366][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1786.351681][T20887] netlink: 'syz.6.12545': attribute type 1 has an invalid length.
[ 1786.377312][T20894] netlink: 'syz.1.12549': attribute type 19 has an invalid length.
[ 1786.515952][T20892] bond1: left promiscuous mode
[ 1786.520758][T20892] vti0: left promiscuous mode
[ 1786.542972][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1786.861660][T20887] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1787.014899][T20899] bond2: entered allmulticast mode
[ 1787.020404][T20899] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1787.181264][T20898] bond6: (slave veth7): Enslaving as an active interface with a down link
[ 1787.198734][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1787.235813][T20923] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002
[ 1787.260407][T20900] bond6: (slave dummy0): making interface the new active one
[ 1787.270606][T20900] dummy0: entered promiscuous mode
[ 1787.277343][T20900] bond6: (slave dummy0): Enslaving as an active interface with an up link
[ 1787.302407][T14622] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex
[ 1787.463382][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1787.537095][T20928] __nla_validate_parse: 7 callbacks suppressed
[ 1787.537112][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12558'.
[ 1787.640118][T20928] bond3: entered promiscuous mode
[ 1787.646737][T20928] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1787.655378][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1787.685848][T20928] FAULT_INJECTION: forcing a failure.
[ 1787.685848][T20928] name failslab, interval 1, probability 0, space 0, times 0
[ 1787.699199][T20928] CPU: 0 UID: 0 PID: 20928 Comm: syz.4.12558 Not tainted syzkaller #0 PREEMPT(full) 
[ 1787.699221][T20928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1787.699233][T20928] Call Trace:
[ 1787.699240][T20928]  <TASK>
[ 1787.699249][T20928]  dump_stack_lvl+0xe8/0x150
[ 1787.699277][T20928]  should_fail_ex+0x40c/0x560
[ 1787.699310][T20928]  should_failslab+0xa8/0x100
[ 1787.699331][T20928]  __kmalloc_noprof+0xe8/0x750
[ 1787.699356][T20928]  ? __pfx_dynamic_dname+0x10/0x10
[ 1787.699402][T20928]  ? tomoyo_encode+0x2ad/0x570
[ 1787.699434][T20928]  tomoyo_encode+0x2ad/0x570
[ 1787.699466][T20928]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1787.699502][T20928]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1787.699526][T20928]  tomoyo_path_number_perm+0x246/0x5f0
[ 1787.699552][T20928]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1787.699574][T20928]  ? __lock_acquire+0x683/0x2cd0
[ 1787.699610][T20928]  ? hook_file_ioctl+0x1f0/0x5c0
[ 1787.699711][T20928]  ? __fget_files+0x2a/0x420
[ 1787.699737][T20928]  ? __fget_files+0x2a/0x420
[ 1787.699757][T20928]  ? __fget_files+0x3a2/0x420
[ 1787.699777][T20928]  ? __fget_files+0x2a/0x420
[ 1787.699804][T20928]  security_file_ioctl+0xc3/0x2a0
[ 1787.699830][T20928]  __se_sys_ioctl+0x47/0x170
[ 1787.699856][T20928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1787.699876][T20928]  do_syscall_64+0x174/0x580
[ 1787.699898][T20928]  ? trace_irq_disable+0x3b/0x140
[ 1787.699922][T20928]  ? clear_bhb_loop+0x40/0x90
[ 1787.699944][T20928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1787.699962][T20928] RIP: 0033:0x7f7e3a59ce59
[ 1787.699979][T20928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1787.699995][T20928] RSP: 002b:00007f7e3b48b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1787.700014][T20928] RAX: ffffffffffffffda RBX: 00007f7e3a815fa0 RCX: 00007f7e3a59ce59
[ 1787.700028][T20928] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 0000000000000006
[ 1787.700040][T20928] RBP: 00007f7e3b48b090 R08: 0000000000000000 R09: 0000000000000000
[ 1787.700051][T20928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1787.700063][T20928] R13: 00007f7e3a816038 R14: 00007f7e3a815fa0 R15: 00007ffe1d926e48
[ 1787.700095][T20928]  </TASK>
[ 1787.700115][T20928] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1787.814515][T20937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12560'.
[ 1788.548649][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12567'.
[ 1788.707712][T20964] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12568'.
[ 1788.733906][T20964] gretap0: entered promiscuous mode
[ 1788.784025][T20964] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12568'.
[ 1788.793068][T20964] 0ªî{X¹¦: renamed from gretap0
[ 1788.818762][T20964] 0ªî{X¹¦: left promiscuous mode
[ 1788.828431][T20964] 0ªî{X¹¦: entered allmulticast mode
[ 1788.838686][T20969] sch_fq: defrate 4294967293 ignored.
[ 1788.873221][T20964] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12568'.
[ 1788.933479][T20964] 0ªî{X¹¦: entered promiscuous mode
[ 1788.938784][T20964] 0ªî{X¹¦: left allmulticast mode
[ 1789.661165][T21000] netlink: 'syz.1.12576': attribute type 21 has an invalid length.
[ 1790.025437][T21015] netlink: 68 bytes leftover after parsing attributes in process `syz.6.12577'.
[ 1790.140935][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12577'.
[ 1790.298380][T21020] bond7: entered promiscuous mode
[ 1790.304143][T21020] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1790.391087][T21031] netlink: 300 bytes leftover after parsing attributes in process `syz.0.12579'.
[ 1790.600090][T21041] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1790.613254][T21041] bond4 (unregistering): Released all slaves
[ 1790.678760][T21048] xt_bpf: check failed: parse error
[ 1790.991049][T21051] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12584'.
[ 1791.008210][T14575] net_ratelimit: 21 callbacks suppressed
[ 1791.008228][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1791.179836][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1791.197978][T21074] netlink: 'syz.6.12585': attribute type 1 has an invalid length.
[ 1791.314995][T21075] bond8: Unable to set up delay as MII monitoring is disabled
[ 1791.379013][T21075] bond8 (unregistering): Released all slaves
[ 1791.443925][T21078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1791.492475][T21074] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[ 1791.493665][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1791.522935][T21083] syz_tun: entered allmulticast mode
[ 1791.563947][T21082] syz_tun: left allmulticast mode
[ 1791.613959][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1791.679791][T21095] xt_cluster: node mask cannot exceed total number of nodes
[ 1791.722277][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1791.736476][T21095] IPVS: set_ctl: invalid protocol: 0 172.20.20.28:20000
[ 1791.884531][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1791.965524][T21102] netlink: 'syz.4.12593': attribute type 1 has an invalid length.
[ 1792.021439][T21099] netlink: 'syz.6.12592': attribute type 1 has an invalid length.
[ 1792.056107][T21102] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1792.064770][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1792.102407][T21106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1792.150205][T21103] netlink: 'syz.4.12593': attribute type 1 has an invalid length.
[ 1792.202879][T21103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1792.410925][T28783] IPVS: starting estimator thread 0...
[ 1792.523101][T21130] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1792.895242][T21145] __nla_validate_parse: 10 callbacks suppressed
[ 1792.895259][T21145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12610'.
[ 1792.943639][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12610'.
[ 1792.956513][T21146] 8021q: VLANs not supported on ip_vti0
[ 1792.963920][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12610'.
[ 1792.974442][T21145] 8021q: VLANs not supported on ip_vti0
[ 1793.330220][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12619'.
[ 1793.479467][T21171] sctp: [Deprecated]: syz.4.12616 (pid 21171) Use of int in max_burst socket option.
[ 1793.479467][T21171] Use struct sctp_assoc_value instead
[ 1793.503282][T21164] bond13: entered promiscuous mode
[ 1793.508763][T21164] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1793.533647][T21168] FAULT_INJECTION: forcing a failure.
[ 1793.533647][T21168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1793.546709][T21168] CPU: 0 UID: 0 PID: 21168 Comm: syz.5.12619 Not tainted syzkaller #0 PREEMPT(full) 
[ 1793.546732][T21168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1793.546743][T21168] Call Trace:
[ 1793.546751][T21168]  <TASK>
[ 1793.546759][T21168]  dump_stack_lvl+0xe8/0x150
[ 1793.546787][T21168]  should_fail_ex+0x40c/0x560
[ 1793.546821][T21168]  _copy_from_user+0x2d/0xb0
[ 1793.546843][T21168]  kstrtouint_from_user+0xd6/0x180
[ 1793.546874][T21168]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1793.546917][T21168]  proc_fail_nth_write+0x8e/0x210
[ 1793.546941][T21168]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1793.546973][T21168]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1793.546996][T21168]  vfs_write+0x296/0xba0
[ 1793.547031][T21168]  ? __pfx_vfs_write+0x10/0x10
[ 1793.547058][T21168]  ? __fget_files+0x2a/0x420
[ 1793.547084][T21168]  ? __fget_files+0x3a2/0x420
[ 1793.547105][T21168]  ? __fget_files+0x2a/0x420
[ 1793.547136][T21168]  ksys_write+0x150/0x270
[ 1793.547164][T21168]  ? __pfx_ksys_write+0x10/0x10
[ 1793.547198][T21168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1793.547225][T21168]  do_syscall_64+0x174/0x580
[ 1793.547246][T21168]  ? trace_irq_disable+0x3b/0x140
[ 1793.547271][T21168]  ? clear_bhb_loop+0x40/0x90
[ 1793.547294][T21168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1793.547312][T21168] RIP: 0033:0x7f86bbd5d68e
[ 1793.547331][T21168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1793.547347][T21168] RSP: 002b:00007f86b9ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1793.547366][T21168] RAX: ffffffffffffffda RBX: 00007f86b9ff66c0 RCX: 00007f86bbd5d68e
[ 1793.547380][T21168] RDX: 0000000000000001 RSI: 00007f86b9ff60a0 RDI: 0000000000000007
[ 1793.547392][T21168] RBP: 00007f86b9ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1793.547404][T21168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1793.547416][T21168] R13: 00007f86bc016128 R14: 00007f86bc016090 R15: 00007fffe7792be8
[ 1793.547449][T21168]  </TASK>
[ 1793.613615][T21179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12620'.
[ 1793.903888][T21189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12620'.
[ 1793.984386][T21194] netlink: 'syz.4.12627': attribute type 1 has an invalid length.
[ 1794.112514][T21194] bond5: entered promiscuous mode
[ 1794.118020][T21194] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1794.149684][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12627'.
[ 1794.274599][T21198] bond5: (slave bridge2): making interface the new active one
[ 1794.282216][T21198] bridge2: entered promiscuous mode
[ 1794.294220][T21198] bond5: (slave bridge2): Enslaving as an active interface with an up link
[ 1794.342821][T21208] syzkaller0: entered promiscuous mode
[ 1794.349920][T21208] syzkaller0: entered allmulticast mode
[ 1794.588267][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12633'.
[ 1794.943766][T21246] ipip0: entered promiscuous mode
[ 1794.949624][T21246] ipip0: entered allmulticast mode
[ 1795.105406][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12641'.
[ 1795.114955][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12641'.
[ 1795.399364][T14624] dummy0: left promiscuous mode
[ 1796.033577][T14619] net_ratelimit: 25 callbacks suppressed
[ 1796.033599][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1796.153357][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1796.263283][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1796.374344][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1796.483344][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1796.593574][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1796.703717][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1796.776439][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1796.833494][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1796.933489][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1796.943222][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1797.743271][T21233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1798.082616][T21301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12653'.
[ 1798.117764][T21301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12653'.
[ 1798.522943][T21284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1798.979733][T14634] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.031187][T14634] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.079332][T14634] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.104887][T14634] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.247117][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12662'.
[ 1799.250631][T21339] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12660'.
[ 1799.304378][T21345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12665'.
[ 1799.313988][T21345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12665'.
[ 1799.389340][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12661'.
[ 1799.419980][T21338] bond2: entered promiscuous mode
[ 1799.425445][T21338] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1799.457773][T21349] bond3: entered promiscuous mode
[ 1799.463944][T21349] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1799.562678][T21336] nbd: couldn't find a device at index 0
[ 1799.772896][T21367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12672'.
[ 1799.794914][T21367] syzkaller1: entered promiscuous mode
[ 1799.862446][T21367] syzkaller1: entered allmulticast mode
[ 1799.870960][T21368] bridge0: entered promiscuous mode
[ 1799.880139][T21368] bridge0: entered allmulticast mode
[ 1799.896277][T21370] syzkaller0: entered promiscuous mode
[ 1799.902032][T21370] syzkaller0: entered allmulticast mode
[ 1799.989172][T21382] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12676'.
[ 1799.998384][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12676'.
[ 1800.221277][T21385] bond3: entered promiscuous mode
[ 1800.315996][T21385] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1800.377849][T21393] netlink: 'syz.1.12679': attribute type 1 has an invalid length.
[ 1801.063404][T14607] net_ratelimit: 28 callbacks suppressed
[ 1801.063423][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1801.240164][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1801.464338][T21441] netlink: 'syz.6.12690': attribute type 1 has an invalid length.
[ 1801.741687][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1801.951734][T21441] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1802.024940][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1802.203486][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1802.313248][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1802.340255][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1802.428683][T21473] syz_tun: entered allmulticast mode
[ 1802.509982][T21477] bridge0: port 1(vlan2) entered blocking state
[ 1802.527772][T21477] bridge0: port 1(vlan2) entered disabled state
[ 1802.543372][T21477] vlan2: entered allmulticast mode
[ 1802.548521][T21477] geneve0: entered allmulticast mode
[ 1802.696080][T21469] syz_tun: left allmulticast mode
[ 1802.781508][T14624] dummy0: left promiscuous mode
[ 1802.803100][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1802.860506][T21474] infiniband syz0: set active
[ 1802.865262][T21474] infiniband syz0: added ipvlan0
[ 1802.926536][T21493] tipc: Enabling <eth:lo> not permitted
[ 1802.932204][T21493] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[ 1803.001290][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1803.078507][T21474] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1803.142430][T21474] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1803.167396][T21504] xt_policy: neither incoming nor outgoing policy selected
[ 1803.184902][T21474] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1803.224143][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1803.243167][T21504] xt_policy: neither incoming nor outgoing policy selected
[ 1803.273937][T21474] RDS/IB: syz0: added
[ 1803.289319][T21474] smc: adding ib device syz0 with port count 1
[ 1803.308571][T21474] smc:    ib device syz0 port 1 has no pnetid
[ 1803.374818][T21507] syzkaller0: entered promiscuous mode
[ 1803.380338][T21507] syzkaller0: entered allmulticast mode
[ 1803.412212][T21509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1803.453400][T21508] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1803.589861][T21506] tipc: Resetting bearer <eth:syzkaller0>
[ 1803.671613][T21517] __nla_validate_parse: 6 callbacks suppressed
[ 1803.671632][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12707'.
[ 1803.693399][T21506] tipc: Disabling bearer <eth:syzkaller0>
[ 1803.757895][T21517] team_slave_1: entered promiscuous mode
[ 1803.796597][T21517] team0: Port device team_slave_1 removed
[ 1804.226769][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12713'.
[ 1804.367701][T21536] pim6reg: entered allmulticast mode
[ 1804.369993][T21538] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1804.707530][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12719'.
[ 1804.781336][T21544] pim6reg0: tun_chr_ioctl cmd 35111
[ 1804.858405][T21555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12718'.
[ 1805.170419][T21562] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12721'.
[ 1805.184827][T21562] netlink: 'syz.0.12721': attribute type 10 has an invalid length.
[ 1805.192753][T21562] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12721'.
[ 1805.707668][T21581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12730'.
[ 1805.801591][T21588] team_slave_1: entered promiscuous mode
[ 1805.840502][T21593] FAULT_INJECTION: forcing a failure.
[ 1805.840502][T21593] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1805.853611][T21593] CPU: 0 UID: 0 PID: 21593 Comm: syz.0.12733 Not tainted syzkaller #0 PREEMPT(full) 
[ 1805.853633][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1805.853644][T21593] Call Trace:
[ 1805.853652][T21593]  <TASK>
[ 1805.853661][T21593]  dump_stack_lvl+0xe8/0x150
[ 1805.853687][T21593]  should_fail_ex+0x40c/0x560
[ 1805.853722][T21593]  _copy_to_user+0x31/0xb0
[ 1805.853745][T21593]  simple_read_from_buffer+0xe1/0x170
[ 1805.853773][T21593]  proc_fail_nth_read+0x1bb/0x230
[ 1805.853801][T21593]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1805.853828][T21593]  ? rw_verify_area+0x24a/0x4c0
[ 1805.853856][T21593]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1805.853878][T21593]  vfs_read+0x213/0xa80
[ 1805.853908][T21593]  ? __pfx___mutex_lock+0x10/0x10
[ 1805.853933][T21593]  ? __pfx_vfs_read+0x10/0x10
[ 1805.853959][T21593]  ? __fget_files+0x2a/0x420
[ 1805.853986][T21593]  ? __fget_files+0x3a2/0x420
[ 1805.854006][T21593]  ? __fget_files+0x2a/0x420
[ 1805.854038][T21593]  ksys_read+0x150/0x270
[ 1805.854065][T21593]  ? __pfx_ksys_read+0x10/0x10
[ 1805.854106][T21593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.854127][T21593]  do_syscall_64+0x174/0x580
[ 1805.854147][T21593]  ? trace_irq_disable+0x3b/0x140
[ 1805.854173][T21593]  ? clear_bhb_loop+0x40/0x90
[ 1805.854196][T21593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.854214][T21593] RIP: 0033:0x7f8d6c35d68e
[ 1805.854233][T21593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1805.854248][T21593] RSP: 002b:00007f8d6d183fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1805.854267][T21593] RAX: ffffffffffffffda RBX: 00007f8d6d1846c0 RCX: 00007f8d6c35d68e
[ 1805.854281][T21593] RDX: 000000000000000f RSI: 00007f8d6d1840a0 RDI: 0000000000000004
[ 1805.854293][T21593] RBP: 00007f8d6d184090 R08: 0000000000000000 R09: 0000000000000000
[ 1805.854304][T21593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1805.854316][T21593] R13: 00007f8d6c616038 R14: 00007f8d6c615fa0 R15: 00007fff3fa5b108
[ 1805.854349][T21593]  </TASK>
[ 1806.104657][T14575] net_ratelimit: 22 callbacks suppressed
[ 1806.104674][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1806.193670][T21596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12734'.
[ 1806.239076][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1806.470671][T21606] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12736'.
[ 1806.480210][T21606] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12736'.
[ 1806.507443][T21602] macsec1: entered allmulticast mode
[ 1806.514376][T21602] bond0: entered allmulticast mode
[ 1806.522925][T21602] bond_slave_0: entered allmulticast mode
[ 1806.570343][T21602] bond_slave_1: entered allmulticast mode
[ 1806.594116][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1806.627999][T21609] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1806.655374][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1806.733467][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1806.854586][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1806.896700][T21621] tipc: Disabling bearer <eth:team0>
[ 1806.909163][T21621] team0 (unregistering): Port device xfrm0 removed
[ 1806.957833][T21616] syz_tun: entered allmulticast mode
[ 1806.973554][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1807.009957][T21615] syz_tun: left allmulticast mode
[ 1807.015325][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1807.101763][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1807.253589][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1807.445407][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1807.836499][T21661] netlink: 'syz.5.12755': attribute type 10 has an invalid length.
[ 1808.675806][T14607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1808.698588][T14607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1808.849926][T21698] __nla_validate_parse: 12 callbacks suppressed
[ 1808.849946][T21698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12764'.
[ 1808.986819][T21698] bond4: entered promiscuous mode
[ 1808.992369][T21698] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1809.012522][T21692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12762'.
[ 1809.452646][T21712] batman_adv: batadv0: Adding interface: dummy0
[ 1809.458920][T21712] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1809.493562][T21712] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[ 1809.569599][T21714] bond14: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1809.633047][T21714] bond14 (unregistering): Released all slaves
[ 1809.836278][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12774'.
[ 1810.037238][T21730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12775'.
[ 1810.121133][T21734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12777'.
[ 1810.369992][T21743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12780'.
[ 1810.379076][T21743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12780'.
[ 1810.522163][T21754] netlink: 'syz.5.12783': attribute type 4 has an invalid length.
[ 1810.577371][T21758] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12784'.
[ 1810.595671][T21758] netlink: 'syz.1.12784': attribute type 1 has an invalid length.
[ 1810.603688][T21758] netlink: 244 bytes leftover after parsing attributes in process `syz.1.12784'.
[ 1810.607191][T21754] netlink: 'syz.5.12783': attribute type 4 has an invalid length.
[ 1810.618104][T21760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12786'.
[ 1810.640006][T21758] NCSI netlink: No device for ifindex 0
[ 1810.776545][T14624] wlan1: Trigger new scan to find an IBSS to join
[ 1810.922798][T21776] ±ÿ: renamed from lo
[ 1811.218056][T14576] net_ratelimit: 29 callbacks suppressed
[ 1811.218075][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1811.363134][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1811.453778][T21791] netlink: 'syz.6.12798': attribute type 29 has an invalid length.
[ 1811.492018][T21793] netlink: 'syz.4.12799': attribute type 2 has an invalid length.
[ 1811.532489][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1811.683116][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1811.860461][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1812.079082][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1812.080179][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1812.133239][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1812.209189][T21812] syzkaller0: entered promiscuous mode
[ 1812.277148][T21812] syzkaller0: entered allmulticast mode
[ 1812.323520][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1812.391963][T21823] xt_TCPMSS: Only works on TCP SYN packets
[ 1812.563983][T21834] netlink: 'syz.1.12812': attribute type 46 has an invalid length.
[ 1812.572973][T21823] lo: entered allmulticast mode
[ 1812.579063][T21823] tunl0: entered allmulticast mode
[ 1812.586561][T21823] gre0: entered allmulticast mode
[ 1812.592121][T21823] gretap0: entered allmulticast mode
[ 1812.600944][T21823] erspan0: entered allmulticast mode
[ 1812.607290][T21823] ip_vti0: entered allmulticast mode
[ 1812.614153][T21823] ip6_vti0: entered allmulticast mode
[ 1812.620018][T21823] sit0: entered allmulticast mode
[ 1812.625785][T21823] ip6tnl0: entered allmulticast mode
[ 1812.631312][T21823] ip6gre0: entered allmulticast mode
[ 1812.663326][T21823] syz_tun: entered allmulticast mode
[ 1812.683346][T21823] ip6gretap0: entered allmulticast mode
[ 1812.689275][T21823] bridge0: entered allmulticast mode
[ 1812.695389][T21823] vcan0: entered allmulticast mode
[ 1812.700695][T21823] bond0: entered allmulticast mode
[ 1812.705947][T21823] dummy0: entered allmulticast mode
[ 1812.711639][T21823] nlmon0: entered allmulticast mode
[ 1812.720622][T21823] batadv0: entered allmulticast mode
[ 1812.726020][T21823] vxcan0: entered allmulticast mode
[ 1812.751086][T21823] vxcan1: entered allmulticast mode
[ 1812.758241][T21823] veth0: entered allmulticast mode
[ 1812.763553][T21823] veth1: entered allmulticast mode
[ 1812.768809][T21823] wg0: entered allmulticast mode
[ 1812.773879][T21823] wg2: entered allmulticast mode
[ 1812.778968][T21823] veth1_to_bridge: entered allmulticast mode
[ 1812.785141][T21823] bridge_slave_1: entered allmulticast mode
[ 1812.791180][T21823] veth0_to_bond: entered allmulticast mode
[ 1812.797134][T21823] bond_slave_0: entered allmulticast mode
[ 1812.802947][T21823] veth1_to_bond: entered allmulticast mode
[ 1812.808869][T21823] bond_slave_1: entered allmulticast mode
[ 1812.814716][T21823] veth0_to_team: entered allmulticast mode
[ 1812.820598][T21823] team_slave_0: entered allmulticast mode
[ 1812.826424][T21823] veth1_to_team: entered allmulticast mode
[ 1812.832303][T21823] team_slave_1: left promiscuous mode
[ 1812.837665][T21823] team_slave_1: entered allmulticast mode
[ 1812.843529][T21823] veth0_to_batadv: entered allmulticast mode
[ 1812.849659][T21823] batadv_slave_0: entered allmulticast mode
[ 1812.855739][T21823] veth1_to_batadv: entered allmulticast mode
[ 1812.881642][T21823] batadv_slave_1: entered allmulticast mode
[ 1812.888416][T21823] xfrm0: entered allmulticast mode
[ 1812.894612][T21823] veth0_to_hsr: entered allmulticast mode
[ 1812.901104][T21823] hsr_slave_0: entered allmulticast mode
[ 1812.907553][T21823] veth1_to_hsr: entered allmulticast mode
[ 1812.914473][T21823] hsr_slave_1: entered allmulticast mode
[ 1812.920577][T21823] hsr0: entered allmulticast mode
[ 1812.926026][T21823] veth1_virt_wifi: entered allmulticast mode
[ 1812.932398][T21823] veth0_virt_wifi: entered allmulticast mode
[ 1812.938926][T21823] veth1_vlan: entered allmulticast mode
[ 1812.944906][T21823] veth0_vlan: entered allmulticast mode
[ 1812.951036][T21823] vlan0: entered allmulticast mode
[ 1812.956281][T21823] vlan1: entered allmulticast mode
[ 1812.961822][T21823] macvlan0: entered allmulticast mode
[ 1812.967839][T21823] macvlan1: entered allmulticast mode
[ 1812.973831][T21823] ipvlan0: entered allmulticast mode
[ 1812.979604][T21823] ipvlan1: entered allmulticast mode
[ 1812.985286][T21823] veth1_macvtap: entered allmulticast mode
[ 1812.991560][T21823] veth0_macvtap: entered allmulticast mode
[ 1812.997936][T21823] macvtap0: entered allmulticast mode
[ 1813.003901][T21823] macsec0: entered allmulticast mode
[ 1813.010069][T21823] geneve1: entered allmulticast mode
[ 1813.038764][T21823] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[ 1813.047177][T21823] netdevsim netdevsim6 netdevsim1: entered allmulticast mode
[ 1813.055599][T21823] netdevsim netdevsim6 netdevsim2: entered allmulticast mode
[ 1813.063955][T21823] netdevsim netdevsim6 netdevsim3: entered allmulticast mode
[ 1813.071974][T21823] mac80211_hwsim hwsim146 wlan0: entered allmulticast mode
[ 1813.079696][T21823] mac80211_hwsim hwsim147 wlan1: entered allmulticast mode
[ 1813.087438][T21823] bond1: entered allmulticast mode
[ 1813.093770][T21823] gtp0: entered allmulticast mode
[ 1813.099195][T21823] macsec1: entered allmulticast mode
[ 1813.105102][T21823] syztnl0: entered allmulticast mode
[ 1813.110987][T21823] macvlan2: entered allmulticast mode
[ 1813.117152][T21823] @: entered allmulticast mode
[ 1813.122304][T21823] ipip0: entered allmulticast mode
[ 1813.134011][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1813.141899][T21823] mac80211_hwsim hwsim152 wlan2: entered allmulticast mode
[ 1813.149624][T21823] bridge1: entered allmulticast mode
[ 1813.155312][T21823] bridge2: entered allmulticast mode
[ 1813.161360][T21823] veth0_to_hsr.1: entered allmulticast mode
[ 1813.167404][T21823] team1: entered allmulticast mode
[ 1813.173135][T21823] team2: entered allmulticast mode
[ 1813.179309][T21823] mac80211_hwsim hwsim154 wlan3: entered allmulticast mode
[ 1813.187554][T21823] veth2: entered allmulticast mode
[ 1813.193142][T21823] veth3: entered allmulticast mode
[ 1813.198662][T21823] gtp1: entered allmulticast mode
[ 1813.204185][T21823] macsec2: entered allmulticast mode
[ 1813.209903][T21823] mac80211_hwsim hwsim156 wlan4: entered allmulticast mode
[ 1813.218269][T21823] : entered allmulticast mode
[ 1813.223860][T21823] ip6gre1: entered allmulticast mode
[ 1813.229781][T21823] bond2: left promiscuous mode
[ 1813.244384][T21823] gre1: left promiscuous mode
[ 1813.249139][T21823] bond2: entered allmulticast mode
[ 1813.254238][T21823] gre1: entered allmulticast mode
[ 1813.260912][T21823] bridge3: entered allmulticast mode
[ 1813.266896][T21823] gretap1: entered allmulticast mode
[ 1813.272305][T21823] syztnl2: entered allmulticast mode
[ 1813.277777][T21823] bridge4: entered allmulticast mode
[ 1813.283739][T21823] vlan0002: entered allmulticast mode
[ 1813.289559][T21823] bond3: entered allmulticast mode
[ 1813.295054][T21823] veth4: entered allmulticast mode
[ 1813.300267][T21823] veth5: entered allmulticast mode
[ 1813.305490][T21823] ip6tnl1: entered allmulticast mode
[ 1813.310831][T21823] macvlan3: entered allmulticast mode
[ 1813.316281][T21823] sit1: entered allmulticast mode
[ 1813.321845][T21823] bond4: entered allmulticast mode
[ 1813.327586][T21823] macvlan4: left promiscuous mode
[ 1813.332606][T21823] macvlan4: entered allmulticast mode
[ 1813.338141][T21823] bridge5: entered allmulticast mode
[ 1813.357908][T21823] syztnl1: entered allmulticast mode
[ 1813.364296][T21823] ipvlan2: entered allmulticast mode
[ 1813.371742][T21823] hmó3)ó: entered allmulticast mode
[ 1813.377808][T21823] geneve2: entered allmulticast mode
[ 1813.383253][T21823] bridge6: entered allmulticast mode
[ 1813.388666][T21823] gtp2: entered allmulticast mode
[ 1813.394381][T21823] vti0: entered allmulticast mode
[ 1813.399619][T21823] ipvlan3: entered allmulticast mode
[ 1813.405119][T21823] bond5: left promiscuous mode
[ 1813.409895][T21823] bond5: entered allmulticast mode
[ 1813.417316][T21823] bond6: entered allmulticast mode
[ 1813.423181][T21823] veth6: entered allmulticast mode
[ 1813.428499][T21823] veth7: entered allmulticast mode
[ 1813.434185][T21823] bond7: left promiscuous mode
[ 1813.438974][T21823] bond7: entered allmulticast mode
[ 1813.444458][T21823] ip6tnl2: entered allmulticast mode
[ 1813.449815][T21823] bond8: entered allmulticast mode
[ 1813.473289][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1813.829342][T21862] batadv_slave_1: entered promiscuous mode
[ 1813.874331][T21866] __nla_validate_parse: 9 callbacks suppressed
[ 1813.874350][T21866] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12824'.
[ 1813.948986][T21866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12824'.
[ 1814.388604][T21895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12832'.
[ 1814.448615][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12833'.
[ 1814.502079][T21897] team0: Port device team_slave_1 removed
[ 1814.627635][T21912] nbd: couldn't find a device at index 0
[ 1814.768687][T21920] netlink: 136 bytes leftover after parsing attributes in process `syz.1.12839'.
[ 1814.777883][T21920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12839'.
[ 1815.043751][T21932] netlink: 'syz.4.12842': attribute type 6 has an invalid length.
[ 1815.745582][T21953] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12851'.
[ 1815.755931][T21955] netlink: 'syz.0.12852': attribute type 4 has an invalid length.
[ 1815.768822][T21953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12851'.
[ 1815.780432][T21955] netlink: 'syz.0.12852': attribute type 4 has an invalid length.
[ 1815.814487][T14619] wlan1: Trigger new scan to find an IBSS to join
[ 1815.896694][T21963] netlink: 'syz.4.12855': attribute type 5 has an invalid length.
[ 1815.929871][T21960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12853'.
[ 1816.009686][T21934] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1816.240164][T21985] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12864'.
[ 1816.283185][T14575] net_ratelimit: 20 callbacks suppressed
[ 1816.283203][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1816.342780][T21983] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 1816.368547][T21983] bond6 (unregistering): Released all slaves
[ 1816.441939][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1816.517940][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1816.669387][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1816.723639][T22001] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20001
[ 1816.801160][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1816.853523][T22006] block nbd14: Unsupported socket: should be TCP or UNIX.
[ 1816.966038][T22010] lo speed is unknown, defaulting to 1000
[ 1816.995560][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1817.183888][T22006] team0 (unregistering): left promiscuous mode
[ 1817.190083][T22006] team_slave_0: left promiscuous mode
[ 1817.250069][T22006] team0 (unregistering): Port device team_slave_0 removed
[ 1817.339078][T14634] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1817.365923][T14634] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1817.376596][T14605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1817.402810][T14605] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1817.426831][T14605] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1817.483561][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1817.542512][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1817.613284][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1817.665454][T22010] lo speed is unknown, defaulting to 1000
[ 1817.728231][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1818.133153][T22058] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[ 1818.339546][T22065] netlink: 'syz.4.12890': attribute type 1 has an invalid length.
[ 1818.504599][T22064] siw: device registration error -23
[ 1818.823069][T22077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1818.831140][T22077] syzkaller0: entered promiscuous mode
[ 1818.836719][T22077] syzkaller0: entered allmulticast mode
[ 1818.847929][T22077] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1818.950328][T22077] tipc: Resetting bearer <eth:syzkaller0>
[ 1819.061038][T22090] __nla_validate_parse: 17 callbacks suppressed
[ 1819.061056][T22090] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12901'.
[ 1819.076702][T22076] tipc: Resetting bearer <eth:syzkaller0>
[ 1819.358365][T22076] tipc: Disabling bearer <eth:syzkaller0>
[ 1820.757549][T22128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12911'.
[ 1821.422829][T14624] net_ratelimit: 76 callbacks suppressed
[ 1821.422849][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1821.644180][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1821.837072][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12918'.
[ 1821.861036][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1821.879878][T22147] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1821.967744][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1822.004737][T22148] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1822.199493][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1822.334161][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1822.521469][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1822.745571][T22161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1822.754996][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1822.766213][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1822.810154][T22163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12922'.
[ 1822.849327][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12921'.
[ 1824.218667][T22187] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12929'.
[ 1824.978370][T22219] syzkaller1: entered promiscuous mode
[ 1824.988681][T22219] syzkaller1: entered allmulticast mode
[ 1825.097894][T22227] netlink: 'syz.5.12941': attribute type 12 has an invalid length.
[ 1825.123056][T22227] netlink: 'syz.5.12941': attribute type 46 has an invalid length.
[ 1825.138912][T22231] netlink: 'syz.0.12943': attribute type 1 has an invalid length.
[ 1825.195226][T22231] syzkaller1: entered promiscuous mode
[ 1825.223254][T22231] syzkaller1: entered allmulticast mode
[ 1826.201264][T20028] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1826.219693][T20028] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1826.230175][T20028] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1826.256565][T20028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1826.301545][T20028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1826.481455][T14605] net_ratelimit: 30 callbacks suppressed
[ 1826.481474][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1826.652359][T22269] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12954'.
[ 1826.688075][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1826.813446][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1826.908576][T20028] Bluetooth: hci2: command tx timeout
[ 1826.931746][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1827.084257][T22259] lo speed is unknown, defaulting to 1000
[ 1827.118007][T22284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12959'.
[ 1827.135748][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1827.285624][T22284] bond5: entered promiscuous mode
[ 1827.311508][T22284] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1827.343731][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1827.349614][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1827.487055][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1827.521385][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12960'.
[ 1827.599375][T22289] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12960'.
[ 1827.794625][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1827.810144][T22259] lo speed is unknown, defaulting to 1000
[ 1827.866710][T22295] sctp: [Deprecated]: syz.1.12962 (pid 22295) Use of int in max_burst socket option.
[ 1827.866710][T22295] Use struct sctp_assoc_value instead
[ 1828.012627][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1828.197567][T22298] lo speed is unknown, defaulting to 1000
[ 1828.409459][T22309] netlink: 136 bytes leftover after parsing attributes in process `syz.6.12965'.
[ 1828.451778][T20028] Bluetooth: hci4: command tx timeout
[ 1828.970468][T22319] syzkaller0: entered promiscuous mode
[ 1828.975973][T22319] syzkaller0: entered allmulticast mode
[ 1829.262478][T22298] lo speed is unknown, defaulting to 1000
[ 1829.308657][T22321] netlink: 'syz.0.12967': attribute type 2 has an invalid length.
[ 1829.970674][T22332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12970'.
[ 1830.232433][T22332] bond6: entered promiscuous mode
[ 1830.239385][T22332] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1830.435568][T22259] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1830.444530][T22259] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1830.451873][T22259] bridge_slave_0: entered allmulticast mode
[ 1830.464066][T22259] bridge_slave_0: entered promiscuous mode
[ 1830.477682][T22259] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1830.485224][T22259] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1830.492509][T22259] bridge_slave_1: entered allmulticast mode
[ 1830.501591][T22259] bridge_slave_1: entered promiscuous mode
[ 1830.535062][T20028] Bluetooth: hci4: command tx timeout
[ 1830.603918][T22259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1830.670774][T22259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1830.740296][T22350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12973'.
[ 1830.742499][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12972'.
[ 1830.761268][T22259] team0: Port device team_slave_0 added
[ 1830.770267][T22259] team0: Port device team_slave_1 added
[ 1830.802958][T22259] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1830.809963][T22259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1830.835847][T22259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1830.848523][T22259] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1830.855513][T22259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1830.892640][T22354] nbd: couldn't find a device at index 0
[ 1830.915485][T22259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1830.981367][T22356] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12975'.
[ 1831.165809][T22360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12977'.
[ 1831.214283][T22259] hsr_slave_0: entered promiscuous mode
[ 1831.237948][T22259] hsr_slave_1: entered promiscuous mode
[ 1831.663452][    C0] net_ratelimit: 14 callbacks suppressed
[ 1831.663475][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1831.795193][T22374] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12981'.
[ 1832.342777][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1832.498638][T22259] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1832.538571][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12983'.
[ 1832.616998][T20028] Bluetooth: hci4: command tx timeout
[ 1832.662403][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1832.758187][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1832.830712][T22392] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12985'.
[ 1832.885864][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1832.971282][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12987'.
[ 1833.017971][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1833.145058][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1833.353668][T22259] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1833.376427][T22406] syzkaller1: entered promiscuous mode
[ 1833.381952][T22406] syzkaller1: entered allmulticast mode
[ 1833.419981][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1833.554922][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1833.613016][T22420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12992'.
[ 1833.663572][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1833.925982][T22431] netlink: 'syz.0.12996': attribute type 1 has an invalid length.
[ 1833.990401][T22431] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1834.050522][T22431] macsec2: entered allmulticast mode
[ 1834.090162][T22431] bond0: entered allmulticast mode
[ 1834.095829][T22431] 8021q: adding VLAN 0 to HW filter on device macsec2
[ 1834.105875][T22431] bond0: left allmulticast mode
[ 1834.120382][T22434] bond7: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1834.129607][T22434] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[ 1834.294462][T22259] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1834.488000][T22259] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1834.693114][T26859] Bluetooth: hci4: command tx timeout
[ 1834.722099][T26859] Bluetooth: hci5: command 0x040f tx timeout
[ 1836.197156][T22450] veth7: entered promiscuous mode
[ 1836.211731][T28785] syz0: Port: 1 Link DOWN
[ 1836.219905][T14622] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1836.228780][T14622] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1836.242300][T14622] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1836.273029][T14622] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1836.292123][T22462] __nla_validate_parse: 3 callbacks suppressed
[ 1836.292140][T22462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13002'.
[ 1836.346356][T14622] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1836.359066][T22467] x_tables: duplicate underflow at hook 2
[ 1836.362603][T14622] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1836.437784][T14622] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1836.451418][T14622] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1836.470897][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13002'.
[ 1836.649430][T22483] netlink: 'syz.0.13008': attribute type 1 has an invalid length.
[ 1836.663289][T22483] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13008'.
[ 1836.771652][T22491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13010'.
[ 1836.828976][T14621] net_ratelimit: 11 callbacks suppressed
[ 1836.828993][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1837.003968][T22259] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1837.044865][T22259] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1837.053304][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1837.076914][T22259] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1837.148416][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1837.160280][T22259] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1837.168663][T22259] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1837.198593][T22259] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1837.259606][T22259] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1837.285945][T22259] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1837.305022][T22492] lo speed is unknown, defaulting to 1000
[ 1837.334699][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1837.494731][T22259] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1837.535033][T22259] 8021q: adding VLAN 0 to HW filter on device team0
[ 1837.587427][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1837.632680][T14607] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1837.639876][T14607] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1837.713315][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1837.739109][T14621] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1837.746240][T14621] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1837.762830][T22506] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1837.918491][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1838.063222][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1838.173834][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1838.214122][T22492] lo speed is unknown, defaulting to 1000
[ 1838.387006][T22515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13013'.
[ 1838.964696][T22259] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1839.657749][T22259] veth0_vlan: entered promiscuous mode
[ 1839.698181][T22259] veth1_vlan: entered promiscuous mode
[ 1839.724825][T22259] veth0_macvtap: entered promiscuous mode
[ 1839.734854][T22259] veth1_macvtap: entered promiscuous mode
[ 1839.753735][T22259] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1839.765000][T22259] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1839.870209][T14634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1839.885471][T14634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1839.943293][T14634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1839.952387][T14634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1839.974825][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13017'.
[ 1840.574381][T14634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1840.593666][T14634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1840.832778][T14576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1840.840614][T14576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1841.604316][T22578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13025'.
[ 1842.003929][T14605] net_ratelimit: 23 callbacks suppressed
[ 1842.003949][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1842.008640][T22588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1842.153669][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1842.200856][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13033'.
[ 1842.263142][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1842.295541][T22609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13036'.
[ 1842.357994][T22610] netlink: 'syz.5.13033': attribute type 1 has an invalid length.
[ 1842.470743][T22610] bond1: entered promiscuous mode
[ 1842.476708][T22610] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1842.513898][T22618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1842.521174][T22618] IPv6: NLM_F_CREATE should be set when creating new route
[ 1842.527363][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13033'.
[ 1842.528481][T22618] IPv6: NLM_F_CREATE should be set when creating new route
[ 1842.570443][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1842.592762][T22620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13040'.
[ 1842.666376][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1842.740066][T22625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13042'.
[ 1842.778993][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1842.904816][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1843.025951][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1843.219370][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1843.678854][T22662] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[ 1843.739338][T22660] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1843.945899][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13054'.
[ 1843.985870][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13054'.
[ 1844.258561][T22685] xt_CT: No such helper "snmp_trap"
[ 1844.285141][T22681] xt_CT: No such helper "snmp_trap"
[ 1844.525521][T22698] bond8 (unregistering): Released all slaves
[ 1845.253899][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13063'.
[ 1845.358668][T22711] bridge0: port 3(syz_tun) entered blocking state
[ 1845.365252][T22711] bridge0: port 3(syz_tun) entered disabled state
[ 1845.371958][T22711] syz_tun: entered allmulticast mode
[ 1845.379093][T22711] syz_tun: entered promiscuous mode
[ 1845.839071][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13069'.
[ 1845.882349][T22724] syz_tun (unregistering): left allmulticast mode
[ 1845.888884][T22724] syz_tun (unregistering): left promiscuous mode
[ 1845.912548][T22724] bridge0: port 3(syz_tun) entered disabled state
[ 1845.968095][T22737] xt_connbytes: Forcing CT accounting to be enabled
[ 1846.022532][T22737] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1847.023464][    C0] net_ratelimit: 30 callbacks suppressed
[ 1847.023498][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1847.053507][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1847.183218][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1847.313473][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1847.496463][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1847.711980][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1847.873379][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1848.043547][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1848.152563][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1848.170151][T14619] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1848.771654][T22729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1849.051848][T22768] __nla_validate_parse: 1 callbacks suppressed
[ 1849.051868][T22768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13079'.
[ 1849.068167][T22765] FAULT_INJECTION: forcing a failure.
[ 1849.068167][T22765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1849.081217][T22765] CPU: 0 UID: 0 PID: 22765 Comm: syz.0.13078 Not tainted syzkaller #0 PREEMPT(full) 
[ 1849.081244][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1849.081253][T22765] Call Trace:
[ 1849.081261][T22765]  <TASK>
[ 1849.081269][T22765]  dump_stack_lvl+0xe8/0x150
[ 1849.081297][T22765]  should_fail_ex+0x40c/0x560
[ 1849.081329][T22765]  _copy_from_user+0x2d/0xb0
[ 1849.081349][T22765]  core_sys_select+0x509/0xb40
[ 1849.081369][T22765]  ? get_pid_task+0x20/0x1f0
[ 1849.081404][T22765]  ? __pfx_core_sys_select+0x10/0x10
[ 1849.081443][T22765]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1849.081469][T22765]  __se_sys_pselect6+0x267/0x320
[ 1849.081494][T22765]  ? __pfx___se_sys_pselect6+0x10/0x10
[ 1849.081513][T22765]  ? __pfx_ksys_write+0x10/0x10
[ 1849.081543][T22765]  ? __x64_sys_pselect6+0x21/0xf0
[ 1849.081561][T22765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1849.081581][T22765]  do_syscall_64+0x174/0x580
[ 1849.081601][T22765]  ? trace_irq_disable+0x3b/0x140
[ 1849.081626][T22765]  ? clear_bhb_loop+0x40/0x90
[ 1849.081648][T22765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1849.081665][T22765] RIP: 0033:0x7f8d6c39ce59
[ 1849.081683][T22765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1849.081698][T22765] RSP: 002b:00007f8d6a5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[ 1849.081718][T22765] RAX: ffffffffffffffda RBX: 00007f8d6c616090 RCX: 00007f8d6c39ce59
[ 1849.081731][T22765] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040
[ 1849.081742][T22765] RBP: 00007f8d6a5f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1849.081753][T22765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1849.081763][T22765] R13: 00007f8d6c616128 R14: 00007f8d6c616090 R15: 00007fff3fa5b108
[ 1849.081793][T22765]  </TASK>
[ 1849.448250][T22768] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1849.490243][T22770] bond4: entered promiscuous mode
[ 1849.520069][T22770] bond4: entered allmulticast mode
[ 1849.710212][T22774] bridge0: port 2(syz_tun) entered blocking state
[ 1849.733413][T22774] bridge0: port 2(syz_tun) entered disabled state
[ 1849.751646][T22774] syz_tun: entered promiscuous mode
[ 1849.757031][T22774] vlan2: entered promiscuous mode
[ 1849.762070][T22774] geneve0: entered promiscuous mode
[ 1851.803870][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13085'.
[ 1851.824578][T22791] IPVS: set_ctl: invalid protocol: 92 100.1.1.5:20002
[ 1852.058671][T14634] net_ratelimit: 30 callbacks suppressed
[ 1852.058692][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1852.183663][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1852.303408][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1852.424849][T22772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1852.511998][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1852.613788][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1852.644462][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1852.763220][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1852.873444][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1852.979543][T22798] netlink: 136 bytes leftover after parsing attributes in process `syz.4.13088'.
[ 1853.056707][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1853.183340][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1853.337537][T22804] xt_hashlimit: size too large, truncated to 1048576
[ 1853.503074][T22803] xt_hashlimit: size too large, truncated to 1048576
[ 1853.509805][T22803] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1854.048759][T22815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13090'.
[ 1854.322871][T22819] tap0: tun_chr_ioctl cmd 1074025672
[ 1854.343197][T22819] tap0: ignored: set checksum disabled
[ 1854.442191][T22822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13092'.
[ 1856.432299][T22844] netlink: 'syz.6.13098': attribute type 1 has an invalid length.
[ 1856.675483][T22810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1856.788504][T22848] netlink: 136 bytes leftover after parsing attributes in process `syz.4.13099'.
[ 1857.166075][T14605] net_ratelimit: 34 callbacks suppressed
[ 1857.166094][T14605] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1857.216903][T22862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13103'.
[ 1857.313931][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1857.367204][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13106'.
[ 1857.440109][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1857.463998][T22870] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1857.627944][T14624] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1857.741679][T22855] FAULT_INJECTION: forcing a failure.
[ 1857.741679][T22855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1857.841799][T22855] CPU: 1 UID: 0 PID: 22855 Comm: syz.0.13100 Not tainted syzkaller #0 PREEMPT(full) 
[ 1857.841824][T22855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1857.841835][T22855] Call Trace:
[ 1857.841842][T22855]  <TASK>
[ 1857.841851][T22855]  dump_stack_lvl+0xe8/0x150
[ 1857.841878][T22855]  should_fail_ex+0x40c/0x560
[ 1857.841912][T22855]  core_sys_select+0x8be/0xb40
[ 1857.841931][T22855]  ? get_pid_task+0x20/0x1f0
[ 1857.841967][T22855]  ? __pfx_core_sys_select+0x10/0x10
[ 1857.842010][T22855]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1857.842038][T22855]  __se_sys_pselect6+0x267/0x320
[ 1857.842063][T22855]  ? __pfx___se_sys_pselect6+0x10/0x10
[ 1857.842083][T22855]  ? __pfx_ksys_write+0x10/0x10
[ 1857.842114][T22855]  ? __x64_sys_pselect6+0x21/0xf0
[ 1857.842133][T22855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.842153][T22855]  do_syscall_64+0x174/0x580
[ 1857.842175][T22855]  ? trace_irq_disable+0x3b/0x140
[ 1857.842200][T22855]  ? clear_bhb_loop+0x40/0x90
[ 1857.842222][T22855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.842247][T22855] RIP: 0033:0x7f8d6c39ce59
[ 1857.842265][T22855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1857.842280][T22855] RSP: 002b:00007f8d6a5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[ 1857.842299][T22855] RAX: ffffffffffffffda RBX: 00007f8d6c616090 RCX: 00007f8d6c39ce59
[ 1857.842313][T22855] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040
[ 1857.842324][T22855] RBP: 00007f8d6a5f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1857.842335][T22855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1857.842346][T22855] R13: 00007f8d6c616128 R14: 00007f8d6c616090 R15: 00007fff3fa5b108
[ 1857.842377][T22855]  </TASK>
[ 1857.846277][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1858.065485][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1858.221370][T22885] netlink: 136 bytes leftover after parsing attributes in process `syz.4.13112'.
[ 1858.312524][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1858.543082][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1858.723989][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1858.937530][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13117'.
[ 1859.092607][T22901] gre1: entered allmulticast mode
[ 1859.283903][T22910] netlink: 'syz.1.13119': attribute type 13 has an invalid length.
[ 1859.467942][T22912] tipc: Resetting bearer <eth:syzkaller0>
[ 1860.276513][T22928] syzkaller0: entered promiscuous mode
[ 1860.282023][T22928] syzkaller0: entered allmulticast mode
[ 1862.461534][    C0] net_ratelimit: 8 callbacks suppressed
[ 1862.461555][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1863.570459][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1864.629458][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1865.663288][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1865.754391][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1865.931470][T22979] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13132'.
[ 1865.941329][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1865.960603][T22979] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13132'.
[ 1866.000997][T22956] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1866.002828][T22964] lo speed is unknown, defaulting to 1000
[ 1866.054133][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1866.203581][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1866.235498][T22979] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1866.482369][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1866.582779][T23006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13137'.
[ 1866.634921][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13137'.
[ 1866.725823][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13138'.
[ 1866.753586][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1866.764549][T23013] netlink: 'syz.1.13138': attribute type 1 has an invalid length.
[ 1866.816073][T22964] lo speed is unknown, defaulting to 1000
[ 1867.483566][T14575] net_ratelimit: 3 callbacks suppressed
[ 1867.483586][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1867.662484][T23035] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1867.663516][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1867.804724][T23035] netlink: zone id is out of range
[ 1867.809877][T23035] netlink: zone id is out of range
[ 1867.814988][T23035] netlink: zone id is out of range
[ 1867.820102][T23035] netlink: zone id is out of range
[ 1867.825210][T23035] netlink: zone id is out of range
[ 1867.830324][T23035] netlink: zone id is out of range
[ 1867.835438][T23035] netlink: zone id is out of range
[ 1867.840555][T23035] netlink: zone id is out of range
[ 1870.658222][T20028] Bluetooth: hci1: command 0x0406 tx timeout
[ 1872.534340][T14575] net_ratelimit: 57 callbacks suppressed
[ 1872.534388][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1872.663545][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1872.773315][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1872.884164][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1872.994171][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1873.103489][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1873.213337][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1873.263576][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1873.323996][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1873.434139][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1877.553490][T14607] net_ratelimit: 40 callbacks suppressed
[ 1877.553512][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1877.673393][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1877.803622][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1877.923751][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1878.033231][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1878.143490][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1878.263573][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1878.373789][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1878.463259][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1878.483572][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1882.623291][    C0] net_ratelimit: 38 callbacks suppressed
[ 1882.623341][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1882.623760][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1882.753357][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1882.863524][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1882.973467][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1883.083496][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1883.193225][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1883.303587][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1883.413181][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1883.523736][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1887.673811][T14628] net_ratelimit: 40 callbacks suppressed
[ 1887.673833][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1887.793582][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1887.814025][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1887.903509][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1888.013159][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1888.123583][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1888.233168][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1888.343533][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1888.455459][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1888.573227][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1892.733274][T14628] net_ratelimit: 40 callbacks suppressed
[ 1892.733295][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1892.853834][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1892.986054][T14576] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1893.023280][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1893.104121][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1893.213734][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1893.323407][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1893.433544][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1893.543950][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1893.655393][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1897.814279][T14628] net_ratelimit: 40 callbacks suppressed
[ 1897.814326][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1897.933640][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1898.063515][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1898.173311][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1898.213715][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1898.283395][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1898.393242][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1898.503450][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1898.613340][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1898.723547][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1902.873210][T14607] net_ratelimit: 40 callbacks suppressed
[ 1902.873247][T14607] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1902.993372][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1903.103473][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1903.213243][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1903.323513][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1903.423303][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1903.433268][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1903.545402][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1903.668366][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1903.783382][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1907.943569][T14622] net_ratelimit: 40 callbacks suppressed
[ 1907.943617][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1908.063487][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1908.183687][T14621] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1908.295332][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1908.413205][T14634] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1908.524233][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1908.623583][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1908.633243][T14622] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1908.743667][T14628] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1908.853449][T14575] bond11: (slave ip6gretap1): failed to get link speed/duplex
[ 1909.826877][T14628] bond11 (unregistering): (slave geneve5): Releasing active interface
[ 1910.096774][T14628] bond6 (unregistering): (slave bridge8): Releasing backup interface
[ 1910.105954][T14628] bridge8 (unregistering): left promiscuous mode
[ 1910.112330][T14628] bridge8 (unregistering): left allmulticast mode
[ 1910.422104][T14628] bond0 (unregistering): Released all slaves
[ 1910.436634][T14628] bond1 (unregistering): Released all slaves
[ 1910.452123][T14628] bond2 (unregistering): Released all slaves
[ 1910.467590][T14628] bond3 (unregistering): Released all slaves
[ 1910.482826][T14628] bond4 (unregistering): Released all slaves
[ 1910.517528][T14628] bond5 (unregistering): Released all slaves
[ 1910.539297][T14628] bond6 (unregistering): Released all slaves
[ 1910.554954][T14628] bond7 (unregistering): Released all slaves
[ 1910.576660][T14628] bond8 (unregistering): Released all slaves
[ 1910.592499][T14628] bond9 (unregistering): Released all slaves
[ 1910.620824][T14628] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1910.649430][T14628] veth0_to_bond: left promiscuous mode
[ 1910.655107][T14628] veth0_to_bond: left allmulticast mode
[ 1910.663620][T14628] bond10 (unregistering): Released all slaves
[ 1910.677604][T14628] bond11 (unregistering): Released all slaves
[ 1910.691038][T14628] bond12 (unregistering): Released all slaves
[ 1910.993244][T14628] tipc: Disabling bearer <udp:syz2>
[ 1910.998642][T14628] tipc: Left network mode
[ 1911.152079][T14628] ==================================================================
[ 1911.160190][T14628] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0
[ 1911.168084][T14628] Read of size 8 at addr ffff88806a24e980 by task kworker/u8:48/14628
[ 1911.176215][T14628] 
[ 1911.178528][T14628] CPU: 1 UID: 0 PID: 14628 Comm: kworker/u8:48 Not tainted syzkaller #0 PREEMPT(full) 
[ 1911.178542][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1911.178549][T14628] Workqueue: netns cleanup_net
[ 1911.178570][T14628] Call Trace:
[ 1911.178576][T14628]  <TASK>
[ 1911.178583][T14628]  dump_stack_lvl+0xe8/0x150
[ 1911.178597][T14628]  print_address_description+0x55/0x1e0
[ 1911.178609][T14628]  ? fib_rules_lookup+0x15e/0xeb0
[ 1911.178619][T14628]  print_report+0x58/0x70
[ 1911.178628][T14628]  kasan_report+0x117/0x150
[ 1911.178645][T14628]  ? fib_rules_lookup+0x15e/0xeb0
[ 1911.178656][T14628]  ? fib_rules_lookup+0x99/0xeb0
[ 1911.178665][T14628]  fib_rules_lookup+0x15e/0xeb0
[ 1911.178676][T14628]  ? fib_rules_lookup+0x99/0xeb0
[ 1911.178688][T14628]  ? __pfx_fib_rules_lookup+0x10/0x10
[ 1911.178698][T14628]  ? l3mdev_update_flow+0x26/0x610
[ 1911.178760][T14628]  ? l3mdev_update_flow+0x4ad/0x610
[ 1911.178772][T14628]  __fib_lookup+0x106/0x210
[ 1911.178835][T14628]  ? unwind_next_frame+0x8f/0x2550
[ 1911.178849][T14628]  ? __pfx___fib_lookup+0x10/0x10
[ 1911.178859][T14628]  ? unwind_next_frame+0x8f/0x2550
[ 1911.178871][T14628]  ? fib_lookup+0x49/0x440
[ 1911.178904][T14628]  ? ip_route_output_key_hash_rcu+0x274/0x2720
[ 1911.178919][T14628]  ip_route_output_key_hash_rcu+0x294/0x2720
[ 1911.178935][T14628]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1911.178947][T14628]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1911.178961][T14628]  ip_route_output_key_hash+0x18d/0x2a0
[ 1911.178975][T14628]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[ 1911.178989][T14628]  ? lock_acquire+0x106/0x350
[ 1911.179002][T14628]  ip_route_output_flow+0x2a/0x150
[ 1911.179015][T14628]  ip4_datagram_release_cb+0x89d/0xbe0
[ 1911.179052][T14628]  ? ip4_datagram_release_cb+0xa2/0xbe0
[ 1911.179065][T14628]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[ 1911.179076][T14628]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1911.179091][T14628]  ? release_sock+0x2f/0x260
[ 1911.179105][T14628]  release_sock+0x206/0x260
[ 1911.179119][T14628]  inet_shutdown+0x2b1/0x390
[ 1911.179171][T14628]  udp_tunnel_sock_release+0x6d/0x80
[ 1911.179206][T14628]  fou_exit_net+0x17d/0x1f0
[ 1911.179218][T14628]  ops_undo_list+0x43d/0x8d0
[ 1911.179233][T14628]  ? __pfx_ops_undo_list+0x10/0x10
[ 1911.179247][T14628]  ? cleanup_net+0x543/0x810
[ 1911.179260][T14628]  ? idr_destroy+0x218/0x290
[ 1911.179292][T14628]  cleanup_net+0x572/0x810
[ 1911.179306][T14628]  ? __pfx_cleanup_net+0x10/0x10
[ 1911.179321][T14628]  ? rcu_is_watching+0x15/0xb0
[ 1911.179333][T14628]  ? process_scheduled_works+0xa20/0x14e0
[ 1911.179343][T14628]  process_scheduled_works+0xa8e/0x14e0
[ 1911.179359][T14628]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1911.179371][T14628]  ? assign_work+0x3cf/0x5d0
[ 1911.179381][T14628]  worker_thread+0xa47/0xfb0
[ 1911.179397][T14628]  kthread+0x389/0x470
[ 1911.179409][T14628]  ? __pfx_worker_thread+0x10/0x10
[ 1911.179418][T14628]  ? __pfx_kthread+0x10/0x10
[ 1911.179430][T14628]  ret_from_fork+0x514/0xb70
[ 1911.179452][T14628]  ? __pfx_ret_from_fork+0x10/0x10
[ 1911.179461][T14628]  ? __switch_to+0xc89/0x1420
[ 1911.179475][T14628]  ? __pfx_kthread+0x10/0x10
[ 1911.179487][T14628]  ret_from_fork_asm+0x1a/0x30
[ 1911.179502][T14628]  </TASK>
[ 1911.179506][T14628] 
[ 1911.484070][T14628] Allocated by task 8314:
[ 1911.488430][T14628]  kasan_save_track+0x3e/0x80
[ 1911.493088][T14628]  __kasan_kmalloc+0x93/0xb0
[ 1911.497651][T14628]  __kmalloc_node_track_caller_noprof+0x4d7/0x7b0
[ 1911.504041][T14628]  kmemdup_noprof+0x2b/0x70
[ 1911.508516][T14628]  fib_rules_register+0x2f/0x400
[ 1911.513431][T14628]  fib4_rules_init+0x21/0x160
[ 1911.518112][T14628]  fib_net_init+0x17a/0x3e0
[ 1911.522661][T14628]  ops_init+0x35d/0x5d0
[ 1911.526794][T14628]  setup_net+0x118/0x350
[ 1911.531011][T14628]  copy_net_ns+0x4f9/0x720
[ 1911.535412][T14628]  create_new_namespaces+0x3f0/0x6b0
[ 1911.540668][T14628]  unshare_nsproxy_namespaces+0x149/0x190
[ 1911.546360][T14628]  ksys_unshare+0x57d/0xa00
[ 1911.550835][T14628]  __x64_sys_unshare+0x38/0x50
[ 1911.555576][T14628]  do_syscall_64+0x174/0x580
[ 1911.560141][T14628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1911.566005][T14628] 
[ 1911.568303][T14628] Freed by task 14607:
[ 1911.572342][T14628]  kasan_save_track+0x3e/0x80
[ 1911.576991][T14628]  kasan_save_free_info+0x40/0x50
[ 1911.581988][T14628]  __kasan_slab_free+0x5c/0x80
[ 1911.586731][T14628]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[ 1911.592244][T14628]  rcu_free_sheaf+0x31/0x200
[ 1911.596807][T14628]  rcu_core+0x78b/0x10a0
[ 1911.601019][T14628]  handle_softirqs+0x225/0x840
[ 1911.605752][T14628]  __irq_exit_rcu+0xca/0x220
[ 1911.610321][T14628]  irq_exit_rcu+0x9/0x30
[ 1911.614545][T14628]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1911.620160][T14628]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1911.626137][T14628] 
[ 1911.628452][T14628] The buggy address belongs to the object at ffff88806a24e900
[ 1911.628452][T14628]  which belongs to the cache kmalloc-192 of size 192
[ 1911.642495][T14628] The buggy address is located 128 bytes inside of
[ 1911.642495][T14628]  freed 192-byte region [ffff88806a24e900, ffff88806a24e9c0)
[ 1911.656267][T14628] 
[ 1911.658576][T14628] The buggy address belongs to the physical page:
[ 1911.664960][T14628] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806a24ec00 pfn:0x6a24e
[ 1911.675012][T14628] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 1911.683048][T14628] page_type: f5(slab)
[ 1911.687001][T14628] raw: 00fff00000000200 ffff88813fe163c0 ffffea0000a70690 ffffea00018e5710
[ 1911.695556][T14628] raw: ffff88806a24ec00 000000080010000f 00000000f5000000 0000000000000000
[ 1911.704106][T14628] page dumped because: kasan: bad access detected
[ 1911.710552][T14628] page_owner tracks the page as allocated
[ 1911.716240][T14628] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18490, tgid 18489 (syz.2.3229), ts 501671550426, free_ts 501668759461
[ 1911.737140][T14628]  post_alloc_hook+0x22d/0x280
[ 1911.741908][T14628]  get_page_from_freelist+0x24ae/0x2530
[ 1911.747463][T14628]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1911.753279][T14628]  allocate_slab+0x77/0x660
[ 1911.757774][T14628]  refill_objects+0x336/0x3d0
[ 1911.762429][T14628]  __pcs_replace_empty_main+0x320/0x720
[ 1911.767945][T14628]  __kmalloc_noprof+0x464/0x750
[ 1911.772767][T14628]  hash_ipportnet6_add+0x1631/0x2f10
[ 1911.778073][T14628]  hash_ipportnet6_uadt+0xa54/0xde0
[ 1911.783242][T14628]  call_ad+0x35f/0xb50
[ 1911.787283][T14628]  ip_set_ad+0x824/0x9d0
[ 1911.791495][T14628]  nfnetlink_rcv_msg+0xcc2/0x12b0
[ 1911.796491][T14628]  netlink_rcv_skb+0x226/0x4a0
[ 1911.801230][T14628]  nfnetlink_rcv+0x2b9/0x28c0
[ 1911.805896][T14628]  netlink_unicast+0x7bb/0x940
[ 1911.810635][T14628]  netlink_sendmsg+0x813/0xb40
[ 1911.815372][T14628] page last free pid 23 tgid 23 stack trace:
[ 1911.821319][T14628]  __free_frozen_pages+0xc0d/0xd20
[ 1911.826403][T14628]  tlb_remove_table_rcu+0x85/0x100
[ 1911.831488][T14628]  rcu_core+0x78b/0x10a0
[ 1911.835702][T14628]  handle_softirqs+0x225/0x840
[ 1911.840448][T14628]  run_ksoftirqd+0x36/0x60
[ 1911.844855][T14628]  smpboot_thread_fn+0x57c/0xa80
[ 1911.849781][T14628]  kthread+0x389/0x470
[ 1911.853825][T14628]  ret_from_fork+0x514/0xb70
[ 1911.858384][T14628]  ret_from_fork_asm+0x1a/0x30
[ 1911.863124][T14628] 
[ 1911.865421][T14628] Memory state around the buggy address:
[ 1911.871020][T14628]  ffff88806a24e880: 00 00 00 00 00 00 00 05 fc fc fc fc fc fc fc fc
[ 1911.879052][T14628]  ffff88806a24e900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1911.887137][T14628] >ffff88806a24e980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1911.895171][T14628]                    ^
[ 1911.899209][T14628]  ffff88806a24ea00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1911.907238][T14628]  ffff88806a24ea80: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc
[ 1911.915275][T14628] ==================================================================
[ 1911.923418][T14628] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1911.930616][T14628] CPU: 1 UID: 0 PID: 14628 Comm: kworker/u8:48 Not tainted syzkaller #0 PREEMPT(full) 
[ 1911.940245][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1911.950291][T14628] Workqueue: netns cleanup_net
[ 1911.955070][T14628] Call Trace:
[ 1911.958343][T14628]  <TASK>
[ 1911.961281][T14628]  vpanic+0x56c/0xa60
[ 1911.965270][T14628]  ? rcu_is_watching+0x15/0xb0
[ 1911.970044][T14628]  ? __pfx_vpanic+0x10/0x10
[ 1911.974549][T14628]  panic+0xc5/0xd0
[ 1911.978277][T14628]  ? __pfx_panic+0x10/0x10
[ 1911.982690][T14628]  ? fib_rules_lookup+0x15e/0xeb0
[ 1911.987722][T14628]  ? fib_rules_lookup+0x15e/0xeb0
[ 1911.992744][T14628]  check_panic_on_warn+0x89/0xb0
[ 1911.997662][T14628]  ? fib_rules_lookup+0x15e/0xeb0
[ 1912.002659][T14628]  end_report+0x73/0x170
[ 1912.006880][T14628]  ? fib_rules_lookup+0x15e/0xeb0
[ 1912.011881][T14628]  kasan_report+0x128/0x150
[ 1912.016365][T14628]  ? fib_rules_lookup+0x15e/0xeb0
[ 1912.021366][T14628]  ? fib_rules_lookup+0x99/0xeb0
[ 1912.026281][T14628]  fib_rules_lookup+0x15e/0xeb0
[ 1912.031110][T14628]  ? fib_rules_lookup+0x99/0xeb0
[ 1912.036022][T14628]  ? __pfx_fib_rules_lookup+0x10/0x10
[ 1912.041370][T14628]  ? l3mdev_update_flow+0x26/0x610
[ 1912.046457][T14628]  ? l3mdev_update_flow+0x4ad/0x610
[ 1912.051630][T14628]  __fib_lookup+0x106/0x210
[ 1912.056111][T14628]  ? unwind_next_frame+0x8f/0x2550
[ 1912.061215][T14628]  ? __pfx___fib_lookup+0x10/0x10
[ 1912.066265][T14628]  ? unwind_next_frame+0x8f/0x2550
[ 1912.071383][T14628]  ? fib_lookup+0x49/0x440
[ 1912.075805][T14628]  ? ip_route_output_key_hash_rcu+0x274/0x2720
[ 1912.081945][T14628]  ip_route_output_key_hash_rcu+0x294/0x2720
[ 1912.087912][T14628]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1912.093526][T14628]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1912.099143][T14628]  ip_route_output_key_hash+0x18d/0x2a0
[ 1912.104671][T14628]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[ 1912.110716][T14628]  ? lock_acquire+0x106/0x350
[ 1912.115374][T14628]  ip_route_output_flow+0x2a/0x150
[ 1912.120462][T14628]  ip4_datagram_release_cb+0x89d/0xbe0
[ 1912.125914][T14628]  ? ip4_datagram_release_cb+0xa2/0xbe0
[ 1912.131449][T14628]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[ 1912.137419][T14628]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1912.142436][T14628]  ? release_sock+0x2f/0x260
[ 1912.147006][T14628]  release_sock+0x206/0x260
[ 1912.151488][T14628]  inet_shutdown+0x2b1/0x390
[ 1912.156056][T14628]  udp_tunnel_sock_release+0x6d/0x80
[ 1912.161322][T14628]  fou_exit_net+0x17d/0x1f0
[ 1912.165823][T14628]  ops_undo_list+0x43d/0x8d0
[ 1912.170401][T14628]  ? __pfx_ops_undo_list+0x10/0x10
[ 1912.175518][T14628]  ? cleanup_net+0x543/0x810
[ 1912.180116][T14628]  ? idr_destroy+0x218/0x290
[ 1912.184719][T14628]  cleanup_net+0x572/0x810
[ 1912.189158][T14628]  ? __pfx_cleanup_net+0x10/0x10
[ 1912.194112][T14628]  ? rcu_is_watching+0x15/0xb0
[ 1912.198878][T14628]  ? process_scheduled_works+0xa20/0x14e0
[ 1912.204595][T14628]  process_scheduled_works+0xa8e/0x14e0
[ 1912.210154][T14628]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1912.216131][T14628]  ? assign_work+0x3cf/0x5d0
[ 1912.220709][T14628]  worker_thread+0xa47/0xfb0
[ 1912.225285][T14628]  kthread+0x389/0x470
[ 1912.229330][T14628]  ? __pfx_worker_thread+0x10/0x10
[ 1912.234413][T14628]  ? __pfx_kthread+0x10/0x10
[ 1912.238977][T14628]  ret_from_fork+0x514/0xb70
[ 1912.243543][T14628]  ? __pfx_ret_from_fork+0x10/0x10
[ 1912.248627][T14628]  ? __switch_to+0xc89/0x1420
[ 1912.253286][T14628]  ? __pfx_kthread+0x10/0x10
[ 1912.257855][T14628]  ret_from_fork_asm+0x1a/0x30
[ 1912.262608][T14628]  </TASK>
[ 1912.265902][T14628] Kernel Offset: disabled
[ 1912.270214][T14628] Rebooting in 86400 seconds..