last executing test programs:

4.240298933s ago: executing program 4 (id=2573):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, r2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x3, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000002f00000095000000000008"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095", @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xe, <r11=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7, r0}, 0xffffffffffffff68)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r14, 0x25, 0x14, @val=@perf_event={0xfffffffffffffffe}}, 0x18)

3.882291572s ago: executing program 4 (id=2576):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xfd89, <r0=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', <r5=>0x0, 0x40, 0xf090, 0x0, 0x1ff, {{0x2b, 0x4, 0x3, 0x2b, 0xac, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x8, 0xb, 0x0, 0x0, [0x0]}, @cipso={0x86, 0x4a, 0x3, [{0x1, 0x4, "d613"}, {0x4352f5fb56c6d6b, 0x2}, {0x0, 0x12, "238cf9da6db32a1e90ceb27b0080216c"}, {0x5, 0xa, "6252ab66582abdc5"}, {0x1, 0x10, "7697df481b92de4f464fdcf29f98"}, {0x0, 0x12, "6d3c9ff8f7456b1dce463a4eeb29fcde"}]}, @timestamp_addr={0x44, 0x44, 0x2d, 0x1, 0x8, [{@private=0xa010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010101, 0xfffffffb}, {@empty, 0xffff}, {@multicast1, 0x7}, {@multicast2}, {@remote, 0x7ff}, {@remote, 0xffffa2cd}]}]}}}}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x80087601, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
getpeername(r8, &(0x7f00000005c0)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000640)=0x80)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r13, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x1, 0x20, 0x2, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0xfffd, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, r0}, 0x94)

3.807659496s ago: executing program 0 (id=2579):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r1, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080003000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.526453123s ago: executing program 0 (id=2582):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @broadcast}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101})
vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f49653c33f31e27e4afe9db1ca25c4f48779593728b46224d0fb46f215ba7153da91ff4b4b5f99c6bcdcc2e2ffc27ad1a86687b0a967a033c5f2d589145bc1d41952e2e6f43d0af7768f714e6ddbddcceaf3f5bd7066b903bd659ba802414ccca078b47decf575ce264f32b07a2c028c4cb37d1e22c2310d843f8a4c950bc910d2bb581b571fd216b802f4249bd083438788fcba4340ce9ec0e50122a02efa8982d34b1d6139596785c3eaa085cb6d81f7bc3ac62fbce404bca13803132898c264b9878a89b8f3c1c0896bff53d31f35b3a84e2fe670bf14b2cf7476a223b28804241c79053f59778b013e3f255d5f7f876b058b92502dae18d2de2b7a71acf2c78a31e114c3eafe527244fa31b2c3614f905f6aaf7250949bc2a9b5a744f30f2e3aa12f1417bb26dd3892cbf728f886c1c13cb2f471ebaf75fa1905cf086089b255421567d730e09b698996c51771e3a99068fd9c16f1f772f3e1f885f846db2829b39b8d2465703ea8db3fda4a01ae1e4a40eeedfa5b3312a4285b5f31ac198a5e3848d4d3db2cb6207e552f544dbfee360f735be849a812043343a834c04a6622ac806224f0ece7336a8c7bb9d6c15ca1d93b0d3d804922e35baad1ddf5b1773f9102c18c398f026865ee64ce85a70ee7c3514e5bd13e935956b76d9db1140e514e5cfe228023008ba9f8a6c7951a03b2001e2b16c5bac060eaf1d1b2b49ddd29a280dd3218c4a0456c3754f944d2d185f861786c29a89615f09d4d4aec0e3ce62bdf09cf121caa73c18d4e78762b2c154a007c0ea9df2223dc4b932a75d6e57910684cd6f7a94e4988d10a6854aced312bde517c8eee5f3e0a14675b08668a0d53982f7e953cf600b5ac2e4afcce547160dc4fff59466b75aae0fa4badec300d858c4e87c1181fd587182dca134470020ee1b08517a11f8ba982a0f1286702d11cf3b056dfc0278342a11f85f1ab3e5be02ce71b28ae4272db7ccdc886774a111fc620730bb68855a3c5d6d45a3274f45db3c4f299bdce8cb50afa3def586266f32a6120629941878df287e0e138acfb1b919dbcc1511811ae5a27a14117fd4ecf6147748e4b7ebb0160cd4f44bc4a17ffc24dc146d575e8488f5ffdbba99c5900722a7c2dea32021544706c70afa67b16024fc8d3d4dc2efa63a0f1008a5f388e4f3fd57624d05052f1a8e2aa0d41fb04a2b87a75008c1c64f352b76b1c271f2240924c7ae15094284bc72abc4806d978030a8013310f9fc65cf1215a1af8f5a074f40b16267f0e319219e2d27fbd6cc08a0e3a37370228db56209e43c5a9b21776b8f175a31aa9227eaa22d4d1f76bceb91aa25e52b4198bd8a9566119c4f1e76d414c9b67572da2a5c6df6694c18af00db08", 0x415}], 0x1, 0xf)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d88a8", 0x16, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r10 = socket(0x3, 0xa, 0xf32)
connect$unix(r10, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x3, 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r6, @ANYRES16=r7, @ANYBLOB="0a0004"], 0x34}, 0x1, 0x0, 0x0, 0x24004010}, 0x80)

3.388639253s ago: executing program 4 (id=2584):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100697069700000000014000280080013ffe400400005000900890000001400030074756e6c30"], 0x58}}, 0x1020)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x66, 0x19, "a924c9022d260062d1ec7bd34bf772d84adc1fb9bc50544bd743276154becba9c4dd8cd593871557dee7495ce225330f03d15f8f404f981bd1720b3d3ed2cbfa8f1ca5871b2f1af784606bf61afccc63b4366eed0386f957d60d711db28d8fa481c3"}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x10000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000280)="96fa2c0bff", 0x5)
close(r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ac5e000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], &(0x7f0000000300)='GPL\x00', 0x1, 0x73, &(0x7f0000000400)=""/115, 0x41000, 0x15, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000004c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xc, 0x3ff, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r5, r6, r7, r8], &(0x7f0000000600)=[{0x0, 0x1, 0x9, 0x2}, {0x2, 0x3, 0x0, 0x8}, {0x4, 0x2, 0x2, 0x8}], 0x10, 0x400}, 0x94)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={<r11=>r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r11, 0x8}, &(0x7f00000000c0)=0x8)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'vlan1\x00', {0x4}, 0x8})

3.290532788s ago: executing program 3 (id=2585):
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x100000001)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000000c0), 0x32)
sendmmsg$inet(r2, 0x0, 0x0, 0x4048041)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"})
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x100000001) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bind$inet(r2, 0x0, 0x0) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000000c0), 0x32) (async)
sendmmsg$inet(r2, 0x0, 0x0, 0x4048041) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) (async)

2.963469095s ago: executing program 2 (id=2588):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x3c, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x3f, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000240))
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010828bd7000fcdb94ec87e5e1df2500000000", @ANYRES32=0x0, @ANYBLOB="802400000420040008001b00000000000500100005000000"], 0x30}, 0x1, 0x0, 0x0, 0x20}, 0xc840)

2.061938992s ago: executing program 3 (id=2589):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004804}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

2.018201557s ago: executing program 2 (id=2590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x19c, 0x30, 0x1, 0x70bd2a, 0x25dfdffb, {}, [{0x188, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x9, 0x4, 0x1, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x134, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x27, 0x9, 0x4, 0x7, 0x7}}]}, {0xee, 0x6, "15cc837b708a1ae88d93ce8c8e436e3562545c7a408d69e10a690d625e4efc3ef8739a3d6f5607a7a6167abfefb915ce15eaf705049c7d003608afc7d657be85c839146cea0949a7caa4f1b9d0dd65aefdf09c545d15c5de2c4613d81fd4fb2c5ae9e24fd650ddda245a775b449cf35ba90b83126bbcfaf08d5c3fb93e08dff36dcc324d64ce46e86aa9c133aaa216155de77bd102dea001ea201e6b2a430afc5dc9eef05bf3d2b2d1d47c642a557a113038ba51595854044bf6aed2ff1a7a898ed4042bdbad9e2aaec84a8d88226ce996426c0d57a0c320e6431feadc2d365121e31dc11f797ddbec5c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)

1.641437268s ago: executing program 4 (id=2592):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="279ce743", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf2501000000080001000300000008000200030000000800020003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1800}, 0x2040000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000002d00070100000000ffdbdf25097c0000080001800400060004000280080003802145e34e"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.618869038s ago: executing program 0 (id=2593):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="40880100211a0500140003006c616e3000000000000000000000000800040007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x3c086d186fd35f1d}, 0x488c0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r2, 0x0, 0x0, 0x4000, &(0x7f0000000640)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x1}}, 0x24)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.569391717s ago: executing program 2 (id=2594):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
recvmsg$can_j1939(r1, &(0x7f0000000400)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/50, 0x32}], 0x1, &(0x7f00000003c0)=""/46, 0x2e}, 0x2000) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2e}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r5, 0x0) (async)
recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/154, 0x9a}, {0x0}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/108, 0x6c}], 0x6, &(0x7f0000001e40)=""/133, 0x85}, 0x1000}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/17, 0x11}, {&(0x7f0000001f40)=""/48, 0x30}, {&(0x7f0000001f80)=""/133, 0x85}], 0x3}, 0xff}, {{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/71, 0x47}, 0x1}], 0x3, 0x300, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0x2000000015, 0x80005, 0x0)
sendto$inet6(r8, 0x0, 0xfffffffffffffeb0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x65}, 0x1c) (async)
recvfrom$packet(r8, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}}, 0x0) (async)
getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000000)=0x2c00, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async)
sendmsg(r5, 0x0, 0x8011)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x8000, 0x7, 0x9, 0x2, 0x8000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

1.502482038s ago: executing program 1 (id=2595):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c000000100001002bbd7000fbdbdf250000000033f092db4f231fdb86ef5f24622b5d25be9068fed912d825021958c686b8474633465a62c6caefd93c40f1094d47d8a0f4bb56a163a106967e0fbff5e6946547fb09dfe1ffe4ad8032c1c4a2a2d11d0d42cd933f78f0987c4c22ca2d90425804a0070d045e11a928748bf0319275f05c2de8", @ANYRES32=0x0, @ANYBLOB="8a43010000000000180016801400018010000200ff010000df030000be00000014000300776c616e3000"/52], 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6", 0x3e}, {&(0x7f0000000440)}], 0x2}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)=[0x4, 0x9], &(0x7f0000000480)=[0x3], 0x8, 0x2, 0x1}}, 0x40)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)=0x1, 0x2)
syz_emit_ethernet(0x89, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x0, "50146202375a8c8b273f23983924f20070d18b79708359b65b79828f33b9c8fc82b8e6"}}}}}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5400488a", @ANYRES16, @ANYBLOB="0d032bbd7000fbdbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800150008030605"], 0x54}, 0x1, 0x0, 0x0, 0x50000}, 0x40000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
sendto$phonet(r8, &(0x7f0000000a00)="b3204fe8302630c17844338f8edc9c0198634f5ade66a3e0868b65c53431afbad38470b058e93aab9a182d41061a49e31330631cfcf609a3c3faae993769a7dad82b09bac3f62edbdac75dcf6f8e67b17c4c2771942f8c6e3b163ff6407a5644a5eef31b36a15f04768b72f176d4111f1b3dc7767ffe734457c91efbcfa7b6afd75e66bc72a42b050cf1e92c8cf25fca08d2f1d4e6fb76620b6622f08b37930bd99ca9c4ecf0f87ff0fb75b11939ad8728af45ad921c813bb1e083e70e1aad898a06b90cac66a54f952e89", 0xcb, 0x8010, &(0x7f0000000b00)={0x23, 0x2, 0x9, 0x5}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
mkdirat$cgroup(r9, &(0x7f0000000000)='syz0\x00', 0x1ff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2163, 0x0)

1.429062334s ago: executing program 3 (id=2596):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x97ff, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @mcast1}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff000080000100000000000000", @ANYRES64=r1, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0200000000000000300000000000002ff089a734c08f50b604e7074d98a73e4397df5cbc20c062a04b296c80c80000000000000000000000000000000000400000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={<r8=>0x0, @empty, @multicast1}, &(0x7f00000003c0)=0xc)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r8}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$xdp(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="07ceaed7de796542fca0856c43e6825596fd27d19ed22b789e1f998dd5d7f9914dfc01a07d00bcdf6b8b88aaf5ab31ff1b375b368a508b4ee329231e56f2a9dc7b75370b5e91e7b22dd7ce90f006b605807ad75fb6a1fbb5d945de01a0d135555f082a851e5f7c6c8fe97e86a3d31001d8939fd43cc21de957715123ba56fa285b", 0x81}], 0x2, 0x0, 0x0, 0x10}, 0x4000054)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x10004)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
unshare(0x400)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000e0601030000000000007a3200000000050001000700040005000100070000000900020073797a3200000000b39734defea0bfc60000000000f8856bd8b4684ee6586359887b1d85ce856e6ffe1f8cbff46c9e6094e44b2c7a7119c243beaefead80a74cdf0d4c6b93ca4a"], 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x8040)

1.342181392s ago: executing program 0 (id=2597):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00C'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x18)
epoll_wait(r1, &(0x7f0000000100)=[{}, {}], 0x2, 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d33f1870918db0dad0aa5c36c1173f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa3, &(0x7f0000000280)=""/163, 0x0, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = epoll_create(0x1)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x2000})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r6)

1.213694575s ago: executing program 2 (id=2598):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x6, [@restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x63, 0x6}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @volatile={0xf8c, 0x0, 0x0, 0x9, 0x5}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x71, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x2e, 0x0, 0x0]}}, &(0x7f0000000240)=""/236, 0x7a, 0xec, 0x0, 0x2, 0x10000}, 0x28)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e28760000007f24c32b7b68ade6ed8e925e6901aa4cc34f115c00e12ba8eb5e4c500f570ef9beb5f83e8eba4573d48de07b4f19074f00"/68, @ANYRES32=r0, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYBLOB="4895299e7cd078694bd91e7192bfcbcfd259c4acd3a6ffd91c00e79748d21dd13b5822fb92089d2266a32ebeffa6ff5c51df909501bc9f8a6ae2eeade405000000000000000000", @ANYBLOB="0200000003000000000000000300"/28], 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x17, 0x8, 0xfffffffd, "050000009582"}})
socketpair(0x1, 0x6, 0x5, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'ip6tnl0\x00', 0x0, 0x2, 0xb3, 0x4, 0x7f, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8, 0x3ff, 0x17}})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4, 0x6000000}]}, @enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61]}}, &(0x7f0000000f40)=""/4089, 0x40, 0xff9, 0x1}, 0x28)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000600)={'gre0\x00', r8, 0x10, 0x40, 0x8, 0x4, {{0x3d, 0x4, 0x1, 0x2d, 0xf4, 0x65, 0x0, 0x6, 0x4, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0xb, 0x20, [@multicast2, @dev={0xac, 0x14, 0x14, 0x22}]}, @cipso={0x86, 0x3b, 0x1, [{0x6, 0x9, "4f5e5d3895ac78"}, {0x5, 0x7, "d8c20a2673"}, {0x6, 0xa, "5cf77a9f043e8ba3"}, {0x1, 0x10, "0dddbabd0e9d9f869b486d9ac4fb"}, {0x5, 0xb, "ef136062e912dfd1f3"}]}, @cipso={0x86, 0x20, 0x1, [{0x5, 0x10, "865ed70f4b5c7fb27e997e03633b"}, {0x7, 0xa, "bd725392ab2aaea9"}]}, @timestamp_prespec={0x44, 0x2c, 0xef, 0x3, 0x1, [{@remote, 0x8b}, {@broadcast, 0x6}, {@loopback, 0x2}, {@rand_addr=0xb, 0x400}, {@empty, 0x3}]}, @end, @rr={0x7, 0x7, 0x9d, [@multicast2]}, @cipso={0x86, 0x44, 0x1, [{0x1, 0x11, "6c71ce057ec544a152844389476643"}, {0x5, 0x7, "c10b3f10b0"}, {0x5, 0x12, "f08825fdc2ac9b0a56bc457acb54f308"}, {0x5, 0x9, "bb89a314c33dd6"}, {0x7, 0xb, "fa166887f00a507725"}]}]}}}}})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r11=>0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r12, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="2c800000cf35dce59adce80e10f0c3db5ff4c097c98bb5561a6df2b57b2eb1fd7794b3bd35ce48bb2d73e062ca10e871e84400b20c000000000000", @ANYRES16=r9, @ANYBLOB="010029bd7000beffffff0200000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00&\x00l\t\x00\x00\b\x00\'\x00\x00\x00\x00\f'], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000056)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032bbd7000fbdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900080000005e0000000a000600ffffffffffff00000500c20091000000"], 0x3c}}, 0x80)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000bc0), &(0x7f0000000340)=@tcp=r5, 0x1}, 0x20)
sendmsg$nl_generic(r1, &(0x7f00000021c0)={&(0x7f0000000cc0), 0xc, &(0x7f0000002180)={&(0x7f0000001f40)={0x204, 0x34, 0x4, 0x70bd26, 0x25dfdbfc, {0x18}, [@generic="9ef9271b1674cef12b63eed2b06b6a4a3a7a726b0bc07d70cc11572aa4135385186b19294648bde8ce39715c932d37c6b952fc73e4d8e5a392beb6877327e4560d572ee043847cd5f6375fc38c9bf388ddd29728dfcdcb401469fa7fb89ed5fd3b71102d4add7013cbb94572f58ad234768c3437fc7a46327d7e571bd332275cf6c00bcc5dec2618c7ab6f3175ec75262b84809b2a242e9d9a80fb9e74c226efb6756131c49a437e8b7ec3f2d20e2f00518a1124ac8fd3f002c6539112c20fbb333f1169ec6db32be44e8946090cbad9b0e3e7f2d0e4b699ea27811376f0156da538bc840244df624c810084847d2b8f51fcd88ebb", @typed={0xea, 0xf2, 0x0, 0x0, @binary="a511c80ec75c37c4ff3528c40355d56788a5a507e37d7bd4fdba83f29911fd95a070f7965744fd9cccd59621a8eca1925911cacc6584903e9ed5f41cc1dc3a69ec1b0689bf82378ab37b2af5ad9fb4975556a2d48d8fd04ad8c97f4e123ab4f96bcd1a137926630df2dc06bbb63a8edf1144740b3a3bfc2459a69bfc22c91b9ebca443413d0faa236e19c3aa0c17892560de435cc95067ba895c3fb59f84a247b607e1dc897a1acb13fc9138dfb6e12931d8c181b16dfdbae8a6b201abb02c108654d210c86b2513556a4727192fcf1c1b17e19fc9534e08cc5c993668f3a72bfaa2aacd30d8"}, @typed={0xc, 0xd4, 0x0, 0x0, @u64=0x18f}]}, 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x811)
bind(r0, &(0x7f0000000100)=@caif=@util={0x25, "d09141241da73aa0f95213c485be7c93"}, 0x80)

1.213121412s ago: executing program 1 (id=2599):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000000)="2737015185ccc8c01386eff35e959ba95f36b9aaf7b2197bd6b967d6ee75db66fa46e398aab88134a99b9d4cd0fb16bd0fe5f7f7b3335caa83fd443385f41a66681e470b", &(0x7f0000000080)=""/48, &(0x7f00000000c0)="f2146ec9b081d9ee28a29d50ab19c8eb0344538637e230c3d5528e6618b3f2eec6d2b0319699d9ab8e10c18793cb3129e05b56e10247085f652ef8ef19693051d4e5204369188637928c2ca03214", &(0x7f0000000140)="6ebe56e6600e3ba37cd0c4cbe36a67d84584907d4dfa3c7fbc72ccf44d9331ee64f33ca334098be13aed", 0x8, r1, 0x4}, 0x38) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x328, 0x1c0, 0x290, 0x0, 0xc8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x84, 0x280}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x8, 0xadc, 0x1}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x6e, @rand_addr=0x64010102, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x8, 0x1, 0x3, 0x6, 0x5, 0x6], 0x5, 0x3}, {0xffffffffffffffff, [0x6, 0x1, 0x5, 0x5, 0x1, 0x7], 0x5, 0x4}}}}, {{@ip={@broadcast, @multicast1, 0xff000000, 0x0, 'veth1_to_bond\x00', 'wg1\x00', {}, {0xff}, 0x2e}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x3fc, @remote, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xf5, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0}) (async, rerun: 32)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a0100000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800064000000025090001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r10 = socket$unix(0x1, 0x5, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000e80)={'syztnl1\x00', &(0x7f0000000e00)={'gretap0\x00', <r12=>r8, 0x10, 0x80, 0x40, 0x70144acf, {{0x14, 0x4, 0x1, 0x6, 0x50, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x3b, 0x3, [{0x1, 0xb, "ac40a0b2307b8aca0a"}, {0x1, 0xd, "609da950bad4e171ef3331"}, {0x2, 0x11, "3754703a13b629108f4c234c173ba2"}, {0x5, 0xc, "91b3d8334033c87d12b6"}]}]}}}}}) (async, rerun: 64)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f40)={0x7, <r13=>0x0}, 0x8) (rerun: 64)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x12, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x9, 0xf, 0x2, 0xe, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001040)='GPL\x00', 0x6, 0x4c, &(0x7f0000001080)=""/76, 0x41100, 0x8, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0xb, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001180)=[r1, r2, r1], &(0x7f00000011c0)=[{0x2, 0x4, 0x9}, {0x4, 0x4, 0x3, 0x1}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x3, 0x9, 0xc}], 0x10, 0x3}, 0x94) (async, rerun: 64)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$tun(r15, &(0x7f0000000800)=ANY=[], 0x141) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r15, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xd, 0x15, &(0x7f0000000c00)=ANY=[@ANYBLOB="ed159c9b", @ANYRES32=r2, @ANYBLOB="0000000009000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000185900"/160], &(0x7f0000000cc0)='syzkaller\x00', 0xc, 0xcd, &(0x7f0000000d00)=""/205, 0x41000, 0x46, '\x00', r12, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0xa, 0x43b, 0x5}, 0x10, r13, r14, 0x1, &(0x7f0000001300)=[r1, r2, r1, r1, r15], &(0x7f0000001340)=[{0x2, 0x4, 0xa, 0x5}], 0x10, 0x6}, 0x94)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000f9dbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100656e61626c656400000000000000000000000000000000000000000000000000050003"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x4040094)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x1, 0xffffe0f6, 0xffff5e49}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r1, r1, r1], 0x0, 0x10, 0x4}, 0x94)

897.551786ms ago: executing program 3 (id=2600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000110001002bbd7000fedb5c0cfc61dcb3bb6400000000000000000000000004d402006c000c0015005b07350000000000"], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf25050000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="3b8a2aa1f423ec4b3486ab51b9ecd37d6ba5cbed5680235200a0aeb4923edda204d7a489329ef647bbafa584a832acb55e156e455450c81fb70d4b951752b8ccdd274715b189f2d79f9771e36c889b42319950918b"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0}) (async)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r7, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r6, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005000300000000000000080001"], 0xf8}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x5, 0x0) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r12, 0x0, 0x25, 0x12, @val=@tcx={@void, @value=r12}}, 0x1c) (async)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
write$tun(r13, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c"], 0x4a) (async)
r14 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0)
ppoll(&(0x7f00000000c0)=[{r2}, {r12, 0xc04c}, {r13, 0x134c}, {r3, 0x201}, {r9, 0x20}, {r14, 0x2a5}, {r1, 0x90}, {r0, 0x4}], 0x8, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x9]}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r15, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x28, 0x200, 0x4001, 0xffffbddb, {0x0, 0x0, 0x0, r8, {0x10, 0x6}, {0x6}, {0xfff2, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000080) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

874.008885ms ago: executing program 1 (id=2601):
r0 = socket$inet6(0xa, 0xa, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, 0x0, 0x30, 0x2, @val=@tracing={0x0, 0xffffffffffffff6d}}, 0x20) (async, rerun: 64)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=r5) (rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4044084}, 0x20011)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c00058008000140000060fb08000140000088a808000140000060070800014000000a01080001400000006c08000140000000000800024000000000080001400007003b08000240000000050900010073797a30000000000900020073797a320000000014000000110001000000000000000000f500000a"], 0xa0}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async)
sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000073f01aa8969a99824f5a897a0b4057", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1f, &(0x7f0000000700)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) (async, rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x103}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0xffff, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x1, 0x80000000}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=r7], 0x20}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x98}}, 0x4048010) (rerun: 64)

562.103218ms ago: executing program 2 (id=2602):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) (async)
r0 = socket$kcm(0x23, 0x5, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) (async)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x1, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000580)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390426bd7000eaffffff000003e4", @ANYRES32=r8, @ANYBLOB="83000400000000002800128008000100736974001c00028006000d00ff07000008000300e00000010800010058aa7b"], 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000dc0)={<r9=>0x0, 0x1000, "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"}, &(0x7f0000001e00)=0x1008)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000001e40)={r9, 0x63, "d58e3ff85c1075cdd3fada71b7b73e7990a781f58a53a1a4299c1cf876939b4a13734256cc96ae3133e292ac7de3a5d2d39f5c961942e2f36c7ba25b47c8323dd7c6c7c624598055d966ffc7b54124d689b0b709cacd92d9d719eed0e375f04bcb209e"}, &(0x7f0000001ec0)=0x6b)
listen(r0, 0x800) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x34}], 0x1, 0x0, 0x0, 0x20011}, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x80000) (async)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

560.854952ms ago: executing program 1 (id=2603):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030087797a3200000000080007006e6174000900010073797a310000000014000486080002407c40d6830800014000000000180000000c0a010800000000000000000a00000304000380140000001100490000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r2=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="4000ff8d00"}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000000480)={0xf7c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_PROBE_RESP={0x3bb, 0x91, "14b821138bc2a634971976e7e0d3729a09e4c9301da6486a6deda144eb0c4fa4d5b1307459e93188f77429d1b7c866f25d4b8c431062cd81082419dcf06b05a3c5f0082df406565afcb713bebf79f74e230185fa392e154e8bfe1a2725331c969c2af6018bfab1a0001080c914c536a7c4e9f3135e511665182bbb3d654f82a366978d9930c62c66012f9b70bcc87f6ca865abc144f1b1758de22c8c35a80116dca98394b0d7ba9600c7dda3a0563ddee3c667ab2874edfb01b2b232b92369117232ebc33b9238bbaf47ff424caf29b27e6b995983553ad03892fb9d8311d38133ef15a4628709276791987bb763f71c4485d4a7005ef9afff96f5f334e0f6b81707ab51275bb6e63c95183a1cf4d14af29dc6673929d6471c4e3809875885134336ded3c31136e67b28fcd05e217c437558be99768ca5005ebeb3d40e4d661d1f95ef8fd486d002d16b0703657151089d89a9fdbc7506a6cc9c338b48e4a864a2325d056bcdb87e22676eabe7b7557cb6991cf5d14ce175c727ef3352f369745c18b66f00dbda7fb8d935fb4dedce717466b6cb1dcc8a2a56f19f61bce14ea0ee23e0a9b57d4629f88e24d6c482261cbab73e4cc7e5119301d1b0b007eb13b5be6419d620150ee604c489391716bef7713ed5daeed3ce4bc775a26f96d25be7a422f29b1ae36980195e6fe7ec656dfaeca8223c7cdc6ea5f37a93c027a6f33abcab42ae4ba124918460074269c19eb546efdb5a65434231ca2419b8a98c52b967addb06c3124ae28debc7b7f19c8a9f80eeebb54de5f21c36d27728f4998f982c6a82735f2c86dd77700bf4a36284711462ce5e472cabd88dfda27965c92765c0bf9d34bf63aa9dbf4383135ebb7fb1496b637bacb338266bc4ab59b8365b2b2ee60d75df03d4d9eaf1f8a7fcb9e6c7bfe95bc7d1cd5ce2a3d1b52567529093627c94abd2742787e26ab05fdbb43072a2741e1ad8cbcbd22813b5490ae118c347b1b9c947788511a3829bc5763e93d79eb1777727367b2612c002ee8899ba248effd705a01b3ad07a62e55e37163e034d4fe4368ccc59f66345eaa58fee7b49a46f3cd31436726e6dd11e34166584d70024566b22389c25433692c065d3d311e732b217ec9efff178ca676667d23fd02500065f5bfee3827489884bc8c51dbe8f95924e3c570c59aece4d2e8cecb6d41e001183d259db86736d643fd5991a9c78c0b4f5b9fe13e86ea537bf6d371319038626d65e96aac6ecf74d0b6ce4cfc2e8273f268de29ab44f68940a7b3579d183ec7f8402840332989dc607f462d7055cae78304ea1cf2e4dabd51b97b85a2e1c0b7a5121d91a"}, @NL80211_ATTR_FTM_RESPONDER={0x180, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x95, 0x2, "49ee3996be9d01605dce5c64a78a1628ed4d3993b5eeb9dfb3f0f05521775301b533ff47bc4fdc560b2f8b45cbf5d22b4691c21ac4a24085b62d272df99ab3d3f55285871caf27b60b3601e2bc03b825ca73401d812620291a433b19fa7781311fa1e9cc6fa9d723ca454fbd0ca1ebbbe9c6671a39fe38c2bae3f2179b2142c47ffce1e47075b035c00a66b1d20e2aaafc"}, @NL80211_FTM_RESP_ATTR_LCI={0xd9, 0x2, "8026738061ae5d25f7ea5fe67bafcd00744f618b541a1939fb2fdd0c885ee14cbff17bc6df8ceae9a87837b2b3af3fa7f7834fb0d3dc8c0c7fffd086c69089a40bcda53b0660dfb089617ba3a3926a6978d3ec682a0dc05cf9795c2cef243ae5be1e1beeba4039b4cb77da38a62954b4c335623f087b263d20b7b5b3e5ef76d35d8b8bb56ad9868eea02d83f323ab1a89fa672d94b1cf244afe45904b56d23a16dea6dab1ff09d6af9b228fb727aa05670f859a14547d2657fa51e653bd126903f7953e8baac037c3e366df5dce3f764b301b8f5b3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0xd, 0xa}}]}, @NL80211_ATTR_BEACON_HEAD={0x3cd, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@device_b, {0x0, 0x3}}, 0x9, @default, 0x80, @val={0x0, 0xe, @random="167bcd3ee8e8cc2bedc03aff7804"}, @void, @val={0x3, 0x1, 0x88}, @val={0x4, 0x6, {0xf4, 0x40, 0x2, 0xfff}}, @void, @val={0x5, 0x72, {0x4, 0x20, 0x4, "cf5e9263d285b2963883851d897e2e0908d7d4061d48ef6bab4d2e0e7735eedc0a911d9a7605392e147fa50321517b6b9314dd3104dad104dcfc9c07792671117785edd53ef16bbe236f439d591bcf2f64ae6edfb423d8d286ed0ed6b78f45c22c698c6f01abca9cd717a3f10e162b"}}, @val={0x25, 0x3, {0x0, 0xaf, 0x9}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x20}}, @void, [{0xdd, 0x66, "81ac67c90cd131b0b0aec4cf1cc5b8514cc4e119adee2e49ca9c9bce5f4d54aaae2a23ebf65099d5e3dc53e5a1a1c73659c3ee4dee706145fa5162749e012fff79474896441782c45a8dbcd236f1660b3a8807a85bcdadd1937679f36914d8149e656c0dc03d"}, {0xdd, 0x4e, "a7e86b0d2d2f11d8650d700a212914b6c3fa178ac1b95f25ddee5f257c6845208259d282a5d5410d4f1c6321c4a49aac2f1179c4409016d3ac2e42cba23c5d723b7d8a7d3d2b08709408bd340de7"}, {0xdd, 0x1f, "39bc6df38fae878e8a2ab2c0f98d462aef2446347d00d582a101547b3b850b"}, {0xdd, 0x6e, "4b3af33a237c437d06366b4a7d4ad1ae9246d2b4fc4a59e7c5f2b5fd67a581c55efcb74e9b7c4d0627a13b53869e4f76a2587c3fdb1d684a0bd85b3114dc2d2949bf4a9f97e9dd4beba065d42424f4c266361b2541704651816f8cae76b7618a7ae00cceee92b095f6625e27f986"}, {0xdd, 0xdd, "6c4017e8457335577f16fac91f42cfb879127fef5461b4472fc2ca46ee55659ab79e0b4e2a7442f7c820707326bd34182a4ef6d04747f5736ed0bb86af9b1cb99f52582f846f5132aa2efe7ea308765b01d4de4ae424238169b40f46fa5d20f0f92e6c2165cac9b8d1db6a71f1e181acceb8969c84723ac20edeec1dd9a141359365a1250c7b5f69a32cb7b1b66e8c7d6203ac6484f081b578540d0bf9ff0779db80b6678d08b37eb101072195eec2bca971b6d9617ab161e32e4d4db56755646e194d269e329b851491f44a51433eabcfc97e3bbe0ba8b469530ce884"}, {0xdd, 0x56, "7f6687aba6f938d23fb9fca419c28703f9856927f6d44d4c8693a0e7e3d1367f1bc0639090900558d8d485af67f463a6075ac1c4500e8007882fc7a88eee5f9470cb5f44d06d0ea376788c67e2bcb5b3ef624c357116"}, {0xdd, 0x7e, "9e044cc60c5fd6df60a8b9be953565d4b3cb0ce9233a1ee89ecba0771ab368b56f888c3b763e67c20c0f67518c7ff02f3b4785c0edc735c90ecdd28e728b07c0407d12595deeafdbe090fbaaf57c5beb2394af18f12c03eef38b7f136ca1dcd2e94c3a0a88f13253a410fc80e812455a12003d1d72c3470af2536396cfd3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x3d, 0xf, [@prep={0x83, 0x1f, {{}, 0x0, 0x2, @broadcast, 0x6, @void, 0x61, 0x0, @broadcast, 0xfffffffe}}, @peer_mgmt={0x75, 0x16, {0x0, 0x3, @val=0xff9e, @void, @val="ae82b481de99400184fa4669a82f3237"}}]}, @NL80211_ATTR_PROBE_RESP={0x426, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1d3, 0x80, [@preq={0x82, 0x62, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x7, 0x1, @device_b, 0x6, @value=@broadcast, 0x749c, 0x9, 0x6, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0x200}, {{0x1, 0x0, 0x1}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0x10001}]}}, @cf={0x4, 0x6, {0x45, 0x0, 0x1, 0x1}}, @random={0x4, 0x5f, "b0a480dac17248449187f0d058ca06a222e238a716926d55f8028944673b0de7c91158df96a94873c15f0f79d40ef5c85e2bc06c2988688b740954e434a16f57f59ccd1b0f5d715f1d81346f0c2f0228c58644ef0adac35b1f8ea6f59f2304"}, @fast_bss_trans={0x37, 0x100, {0x2, 0x8, "0b68f738d0cbf2f6fdac216dd4f4284b", "ff3351604cda61a922de9e04cf6179da6db3f864aa8613fdc4597395773ebc92", "519aed03200d4912e6a42f10b0c30181fca22cacabc0b2e60104fe0a55323a9b", [{0x2, 0x27, "76b4fa8585fef33d374ebbe8785143d314d97bfc3f508d87307d22eef2af81ca7af2bb597acab4"}, {0x3, 0x12, "494d3be02878b34f8fc3198637b15cbcb9db"}, {0x1, 0x2, "29b3"}, {0x1, 0x16, "a5d414025d74e6c27b216b79bc0eed0b690211c5525b"}, {0x3, 0x9, "2765f72fd5aefaf65c"}, {0x1, 0x9, "6867aa6056c46ec727"}, {0x4, 0x1c, "532ba8b83c4b211485b4cbfa4f01dcae579274f8c403491d2ac44d90"}, {0x3, 0x1f, "afbd86a3bdf3456baca433df2f43437015706cc374f4febd697748396c0d32"}]}}]}]}, 0xf7c}, 0x1, 0x0, 0x0, 0x51}, 0x4091) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x104, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x448c0}, 0x20000000)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x73, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

439.828932ms ago: executing program 3 (id=2604):
socket(0x2d, 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf25170000004c00308014000400418247c3cd933081e7cdf0e8de9dffa705000200080000002c000180080001000000000020000380220004000202aaaaaaaaaaaa0600010001000000080002000300000008000300", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x800)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="444f13fb5aedb3f1440a68924408ae62", @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf250700000014000200fc02000000000000000000000000000108000400ac1e000114000300fc00"/62], 0x44}, 0x1, 0x0, 0x0, 0x3}, 0x10)
r8 = socket(0x23, 0x5, 0x0)
connect$inet6(r8, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2c048844}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r9, r9, 0x2f, 0x0, @void}, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0x4, 0x4, 0x440, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x5, 0x1, 0x9, 0x0, 0x1}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x26, 0x8, 0x8, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0xff000000], 0x72, 0x1674}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0xce24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0)
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r10, r9, 0x4, r9}, 0x6)
syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000000600)={<r12=>0x0, 0x7, 0x7fcd44f5})
ioctl$BTRFS_IOC_GET_DEV_STATS(r11, 0xc4089434, &(0x7f0000000a00)={r12, 0x6, 0x1, [0x10000, 0x0, 0x57b, 0x5], [0x2, 0x9, 0xffffffffffff1b77, 0x0, 0x4, 0x7fffffffffffffff, 0x7, 0x28, 0x6, 0xc3, 0x2000000080, 0x2, 0x5, 0x1, 0x1, 0x7ff, 0x400, 0x5, 0x5, 0x5, 0x95, 0x4, 0xffffffffffffffff, 0x100000000, 0x2501b192, 0x6491, 0x7, 0x9, 0x900f, 0x400, 0x2, 0xf2, 0x4c, 0x80e3, 0xf, 0x1, 0x202, 0x3, 0x4, 0xfffffffffffffc00, 0x3, 0x8, 0x4, 0x9, 0x7, 0x6, 0x8, 0x5, 0x0, 0x2, 0x101, 0x8000000000000000, 0x10, 0x1, 0xcd, 0x8, 0x8, 0x7, 0x2, 0xd462, 0x2, 0x0, 0x3ff9, 0x9, 0x5, 0x6, 0x1d7, 0xf, 0x2, 0x3, 0x5, 0x4, 0x400, 0x6, 0x9ad0, 0x6, 0x2, 0x1109824d, 0xc2, 0xfffffffffffffff7, 0x7, 0x1, 0x84b, 0x20d4, 0x100000000, 0xf6, 0x3, 0x0, 0x4, 0x9, 0x6, 0x0, 0x9, 0xc, 0x100, 0x4, 0x4, 0xc48c, 0x0, 0x5, 0x0, 0x80000001, 0x3, 0x1, 0x8001, 0x400, 0x0, 0x7, 0xa68, 0x9659, 0x1d4, 0xb, 0xfffffffffffffffd, 0x8, 0x6, 0xf, 0xfffffffffffffe00, 0x100000000, 0x5, 0x4, 0x1]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

387.472493ms ago: executing program 1 (id=2605):
syz_emit_ethernet(0xffc7, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6823dcf3040f2c01fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020168000000ff1004081608fffffc01000000000000000000000000000000000000000000000000000000000001fc000000000000000000000000000000fe800000000000000000000000000012ff010000000000000000000000000001fe8000000000000000000000000000bb0000000000000000000000000000000100000000000000000000ffffe00000021101000000000000010800000000000000000000000000003b0200000000000001010005020002010a000000000000000000000000000000871a00000000000007af85136e54b4e4b99d9abf8b831d538987d9954953e3918d200da4956b295cd125a85e4edb0dd29764e5ca9ec136e5163d92a683decf6e8dd2d35d475e7246951b28345212a1f8263d7824e532456f6ceb16ba0aca2883a484b841bb02b8613311d32727e0cfde403f8f29b4d336cfb88e664ce0aa95388b8b83d5f755e89d4d185037bb5efc8324016847691eb735fce764a5711bdf99f0d861f1f949dd2010d2e203c127344b67c27a300421719f3305020200c910fe8800000000000000000000000000010708000000030001080000000000000000002600000000000004010807100000000102050700040000000000000000010002df5487e69ca774c56bd3a48d628477f11618624460743c329d6667e40b588fc606defe99fe209658cdbf20f905fa1a86c02631bd3df1438c190c6ae690c40b44b14e336fb241514243e98b9e2f0d5aea4dea2a84207a41dcc78704423916e9967b18380ae5ce596727a7536cb659e1564009b5c0afdb9edd12db1dc05e11f1ea3a35b1fafaccc0d41ffa5da2cbc844930b4f8456ed1d52d13e8f6dee324ccc06505ee0620076c6feb7b01559be2ae867f306973868d12ddc6afe3cab164a932d1605d87d9037824686849836a303866d49cd2df1ea8a020f035c57b0a819e69389622a9b44bb7dca653adbb9073800c800030c020c0000000000000000800300000000000000080000000000000000100000000000000800000000000000070000000000000000000000005c03000000000000000100040106c9102001000000000000000000000000000105021000000100002105000000000000c910fc0000000000000000000000000000000502000ec910fe800000000000000000000000000028c2040000000900001612010800000000ff010000000000000000000000000001fe800000000000000000000000000035ff02000000000000000000000000000100000000000000000000000000000001fc010000000000000000000000000000fe88000000000000000000000000000100000000000000000000ffffac1414bbfc020000000000000000000000000005fe8800000000000000000000000000019d9ca2db90be139c6c8715b51318bf24f5293a3ef07058d3de1c514233f9b180efb77e"], 0x0)

387.045035ms ago: executing program 4 (id=2606):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000440)={0x9, {{0xa, 0x4e21, 0x4, @empty, 0x7}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xe}}}, 0x108)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x40840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r4, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x9)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0xa, 0x5, 0x102, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000600000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa148b68e624600000000000007010000f8ffffffb702000005000000b70300000000000084000000720000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)

273.795964ms ago: executing program 0 (id=2607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000208000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
clock_gettime(0x0, &(0x7f0000005980)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000005800)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002780)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/182, 0xb6}, {&(0x7f0000001580)=""/124, 0x7c}, {&(0x7f0000001600)=""/88, 0x58}, {&(0x7f0000001680)=""/61, 0x3d}, {&(0x7f00000016c0)=""/117, 0x75}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/53, 0x35}], 0x8, &(0x7f0000002800)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000003800)=""/70, 0x46}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/88, 0x58}, {&(0x7f0000005b00)=""/224, 0xe0}, {&(0x7f0000004a00)=""/151, 0x97}, {&(0x7f0000004ac0)=""/188, 0xbc}, {&(0x7f0000004b80)=""/183, 0xb7}], 0x7, &(0x7f0000004cc0)=""/135, 0x87}, 0xca5262b}, {{&(0x7f0000004d80)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004e00)=""/171, 0xab}], 0x1, &(0x7f0000004f00)=""/138, 0x8a}, 0x3}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004fc0)=""/9, 0x9}, {&(0x7f0000005000)=""/201, 0xc9}], 0x2, &(0x7f0000005140)=""/144, 0x90}, 0x401}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000005200)=""/54, 0x36}, {&(0x7f0000005240)=""/55, 0x37}, {&(0x7f0000005280)=""/158, 0x9e}], 0x3, &(0x7f0000005380)=""/33, 0x21}, 0x8001}, {{&(0x7f00000053c0)=@phonet, 0x80, &(0x7f0000005780)=[{&(0x7f0000005440)=""/126, 0x7e}, {&(0x7f00000054c0)=""/238, 0xee}, {&(0x7f00000055c0)=""/196, 0xc4}, {&(0x7f00000056c0)=""/142, 0x8e}], 0x4, &(0x7f00000057c0)=""/24, 0x18}, 0x2}], 0x6, 0x10101, &(0x7f00000059c0)={r2, r3+60000000})
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000440), &(0x7f0000005a80)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="707c00000014009c0000aa2fb1"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000005a00)={{r4, &(0x7f0000005ac0)='\xd11\x00', 0x101400, &(0x7f0000000100)={@align=0x7, {0x0, 0x6, 0x7, 0x80}}, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0xffffffff}, 0x2, &(0x7f0000000400)=[{0x2, 0xaa48, &(0x7f0000000200)='\x8e%$\\\x00', &(0x7f0000000240)="46fe373561340f6b3572d73bccc49f2906ed234eda08aab10b7243830e3bcec153ce8dcc3cafbdc574525e70ee47a09d9041746f2264133dfbb8e581bbe0533ea9aca4f9dcd4eb10705756b501d2c91d3e94f88e21704055699d889a8e0114210c836e9b8293975d6e7a8f9cedbdab59eeb6f66eb196c97a39", 0x79, 0x28}, {0x1, 0x7, &(0x7f00000002c0)='%-)\x00', &(0x7f0000000300)="d8ac5d6831ee44b40b5a1107fa99dd6437cebdfbc5c52743a7bce45fc1e70fa9b86795b84a40b73d1c4197e9b749ebaac47598530b21d4b9d6407444d49bf46f111a772fa9970e88733703ada3df345255d2010a98f461eb9da2830c2507a285aa95a71770b3e548524a0df056471543d772bed15054b7dffb8cdce71650fc0a72ff4c274959b7677a9483d77aff2a8a5879b977fae897b241496202d5de0cd33bc3fa1c856452d06130b071cc0418eb37f5516f5566dd9f820f218bd28dec3c800e69a306", 0xc5, 0x30}]})

270.252858ms ago: executing program 2 (id=2608):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000000114000425bd7000acec0722ffdbdf25719ba5"], 0x10}}, 0x0)
recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000180ff851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000026608000000000000180000000000000000000000fa0000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000010000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)

166.262953ms ago: executing program 1 (id=2609):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0)

81.969387ms ago: executing program 3 (id=2610):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

49.351648ms ago: executing program 4 (id=2611):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000900000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f00000014c0)=""/2, 0x3b, 0x2, 0x1}, 0x28)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x10001, r2}, 0x38)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}], 0x1, 0x40800)
syz_emit_ethernet(0x1f, &(0x7f0000001240)={@local, @multicast, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, 'k', '7\vc', 0x88f5, "2de303b71d0c3ce7b6"}}}}}, 0x0)
recvmsg(r1, 0x0, 0x2000)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1)

0s ago: executing program 0 (id=2612):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000100)={@loopback, <r2=>0x0}, &(0x7f0000000140)=0x14)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @empty, 0xb31}, 0x1c)
getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="c13c06001b14bf262000128008000100736974001400028008000100e00000020500050081"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', <r6=>0x0, 0x1, 0x40, 0x0, 0x8, {{0xb, 0x4, 0x0, 0x29, 0x2c, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @local, {[@cipso={0x86, 0xf, 0x1, [{0x7, 0x9, "57934e4a1a3499"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c094)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x1b0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x150, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x30}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcc}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x81}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x400000}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x4c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7f8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xb8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}], {0x14}}, 0x1d8}}, 0x0)

kernel console output (not intermixed with test programs):

ctp_bind_addr_copy+0xb3/0x3c0
[  279.120786][T12123]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  279.120808][T12123]  sctp_connect_new_asoc+0x2ff/0x6b0
[  279.120838][T12123]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  279.120873][T12123]  ? sctp_inet6_send_verify+0x23a/0x300
[  279.120892][T12123]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  279.120922][T12123]  __sctp_connect+0x5cb/0xdc0
[  279.120968][T12123]  ? __pfx___sctp_connect+0x10/0x10
[  279.120991][T12123]  ? sctp_inet_connect+0xa0/0x210
[  279.121014][T12123]  ? __local_bh_enable_ip+0xd0/0x130
[  279.121039][T12123]  sctp_inet_connect+0x12e/0x210
[  279.121066][T12123]  __sys_connect+0x323/0x460
[  279.121090][T12123]  ? __pfx___sys_connect+0x10/0x10
[  279.121123][T12123]  ? __pfx_ksys_write+0x10/0x10
[  279.121146][T12123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.121166][T12123]  __x64_sys_connect+0x7a/0x90
[  279.121186][T12123]  do_syscall_64+0x174/0x580
[  279.121210][T12123]  ? trace_irq_disable+0x3b/0x140
[  279.121234][T12123]  ? clear_bhb_loop+0x40/0x90
[  279.121256][T12123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.121274][T12123] RIP: 0033:0x7f5d5db9e019
[  279.121292][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.121308][T12123] RSP: 002b:00007f5d5ea82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  279.121329][T12123] RAX: ffffffffffffffda RBX: 00007f5d5de26090 RCX: 00007f5d5db9e019
[  279.121343][T12123] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000005
[  279.121354][T12123] RBP: 00007f5d5ea82090 R08: 0000000000000000 R09: 0000000000000000
[  279.121365][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  279.121377][T12123] R13: 00007f5d5de26128 R14: 00007f5d5de26090 R15: 00007ffe1f33de78
[  279.121408][T12123]  </TASK>
[  279.449793][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.481058][T12124] syzkaller0: entered promiscuous mode
[  279.505416][T12124] syzkaller0: entered allmulticast mode
[  280.041376][T12166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'.
[  280.174960][T12158] bond6: option updelay: invalid value (18446744073709518847)
[  280.194579][T12181] FAULT_INJECTION: forcing a failure.
[  280.194579][T12181] name failslab, interval 1, probability 0, space 0, times 0
[  280.236841][T12158] bond6: option updelay: allowed values 0 - 2147483647
[  280.248380][T12181] CPU: 0 UID: 0 PID: 12181 Comm: syz.4.1572 Not tainted syzkaller #0 PREEMPT(full) 
[  280.248404][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.248414][T12181] Call Trace:
[  280.248420][T12181]  <TASK>
[  280.248428][T12181]  dump_stack_lvl+0xe8/0x150
[  280.248461][T12181]  should_fail_ex+0x40c/0x560
[  280.248503][T12181]  should_failslab+0xa8/0x100
[  280.248532][T12181]  __kmalloc_cache_noprof+0xa8/0x660
[  280.248553][T12181]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  280.248576][T12181]  ? __kmalloc_cache_noprof+0x150/0x660
[  280.248600][T12181]  ? sctp_add_bind_addr+0x8c/0x370
[  280.248620][T12181]  ? sctp_add_bind_addr+0x8c/0x370
[  280.248648][T12181]  sctp_add_bind_addr+0x8c/0x370
[  280.248676][T12181]  sctp_copy_local_addr_list+0x31a/0x4e0
[  280.248700][T12181]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  280.248722][T12181]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  280.248745][T12181]  ? sctp_v6_is_any+0x64/0x80
[  280.248769][T12181]  ? sctp_copy_one_addr+0x93/0x360
[  280.248790][T12181]  sctp_bind_addr_copy+0xb3/0x3c0
[  280.248811][T12181]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  280.248834][T12181]  sctp_connect_new_asoc+0x2ff/0x6b0
[  280.248863][T12181]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  280.248899][T12181]  ? sctp_inet6_send_verify+0x23a/0x300
[  280.248918][T12181]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  280.248945][T12181]  __sctp_connect+0x5cb/0xdc0
[  280.248980][T12181]  ? __pfx___sctp_connect+0x10/0x10
[  280.249004][T12181]  ? sctp_inet_connect+0xa0/0x210
[  280.249030][T12181]  ? __local_bh_enable_ip+0xd0/0x130
[  280.249058][T12181]  sctp_inet_connect+0x12e/0x210
[  280.249085][T12181]  __sys_connect+0x323/0x460
[  280.249108][T12181]  ? __pfx___sys_connect+0x10/0x10
[  280.249140][T12181]  ? __pfx_ksys_write+0x10/0x10
[  280.249163][T12181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.249183][T12181]  __x64_sys_connect+0x7a/0x90
[  280.249205][T12181]  do_syscall_64+0x174/0x580
[  280.249232][T12181]  ? trace_irq_disable+0x3b/0x140
[  280.249256][T12181]  ? clear_bhb_loop+0x40/0x90
[  280.249278][T12181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.249296][T12181] RIP: 0033:0x7ffa5579e019
[  280.249320][T12181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.249334][T12181] RSP: 002b:00007ffa56729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  280.249354][T12181] RAX: ffffffffffffffda RBX: 00007ffa55a26090 RCX: 00007ffa5579e019
[  280.249367][T12181] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000005
[  280.249379][T12181] RBP: 00007ffa56729090 R08: 0000000000000000 R09: 0000000000000000
[  280.249390][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  280.249400][T12181] R13: 00007ffa55a26128 R14: 00007ffa55a26090 R15: 00007ffd8287faa8
[  280.249430][T12181]  </TASK>
[  280.594920][T12158] bond6 (unregistering): Released all slaves
[  280.874124][T12194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.913688][T12194] syzkaller0: entered promiscuous mode
[  280.922022][T12194] syzkaller0: entered allmulticast mode
[  280.949399][T12204] syzkaller0: entered promiscuous mode
[  280.960847][T12204] syzkaller0: entered allmulticast mode
[  280.976977][T12205] syzkaller0: entered promiscuous mode
[  280.984173][T12205] syzkaller0: entered allmulticast mode
[  281.020258][T12191] tipc: Resetting bearer <eth:syzkaller0>
[  281.027516][T12209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1581'.
[  281.087466][T12191] tipc: Disabling bearer <eth:syzkaller0>
[  281.357153][T12212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.550045][T12249] ieee802154 phy1 wpan1: encryption failed: -22
[  281.587279][T12252] ieee802154 phy1 wpan1: encryption failed: -22
[  281.788035][T12211] tipc: Disabling bearer <eth:syzkaller0>
[  281.796260][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.804529][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.905554][  T802] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.920065][  T802] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.933752][T12262] syzkaller0: entered promiscuous mode
[  281.942551][T12262] syzkaller0: entered allmulticast mode
[  281.955401][  T802] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.977059][  T802] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  282.117980][T12277] x_tables: duplicate underflow at hook 3
[  282.273842][T12285] netlink: 'syz.3.1595': attribute type 3 has an invalid length.
[  282.384812][T12290] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  282.398118][T12290] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  282.412929][T12292] bridge0: port 1(vlan1) entered blocking state
[  282.431333][T12292] bridge0: port 1(vlan1) entered disabled state
[  282.449999][T12292] vlan1: entered allmulticast mode
[  282.472202][T12292] geneve0: entered allmulticast mode
[  282.822002][T12320] __nla_validate_parse: 4 callbacks suppressed
[  282.822020][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'.
[  283.141511][T12330] syzkaller0: entered promiscuous mode
[  283.150297][T12330] syzkaller0: entered allmulticast mode
[  283.221095][T12339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1611'.
[  283.244062][T12336] openvswitch: netlink: Unknown key attributes 2
[  283.466931][T12361] netlink: 'syz.1.1616': attribute type 10 has an invalid length.
[  283.617109][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1619'.
[  283.620796][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'.
[  283.631219][T12371] netlink: 'syz.0.1619': attribute type 1 has an invalid length.
[  283.653493][T12361] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1616'.
[  283.669601][T12371] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1619'.
[  283.692472][T12365] wg2 speed is unknown, defaulting to 1000
[  283.698391][T12367] netlink: 'syz.2.1617': attribute type 4 has an invalid length.
[  283.702381][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'.
[  284.128453][T12393] syzkaller0: entered promiscuous mode
[  284.143120][T12395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1624'.
[  284.153967][T12393] syzkaller0: entered allmulticast mode
[  284.426318][T12405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1625'.
[  284.642767][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'.
[  284.663378][T12415] x_tables: ip_tables: icmp match: only valid for protocol 1
[  284.714095][T12415] x_tables: ip_tables: icmp match: only valid for protocol 1
[  284.786289][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.797392][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.805629][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.821650][   T50] block nbd0: Receive control failed (result -1)
[  284.835725][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.845642][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.853849][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.864283][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.873914][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.208806][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.317626][T12445] syzkaller0: entered promiscuous mode
[  285.333397][T12445] syzkaller0: entered allmulticast mode
[  285.506512][T12453] netlink: 'syz.2.1637': attribute type 1 has an invalid length.
[  285.625573][T12453] bond9: entered promiscuous mode
[  285.657522][T12453] 8021q: adding VLAN 0 to HW filter on device bond9
[  286.184458][T12491] tipc: Resetting bearer <eth:team0>
[  286.649034][T12523] netlink: 'syz.3.1653': attribute type 1 has an invalid length.
[  286.914415][T12534] netlink: 'syz.4.1658': attribute type 13 has an invalid length.
[  286.955252][T12534] netlink: 'syz.4.1658': attribute type 17 has an invalid length.
[  287.053460][T12546] FAULT_INJECTION: forcing a failure.
[  287.053460][T12546] name failslab, interval 1, probability 0, space 0, times 0
[  287.071810][T12546] CPU: 1 UID: 0 PID: 12546 Comm: syz.2.1660 Not tainted syzkaller #0 PREEMPT(full) 
[  287.071839][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  287.071850][T12546] Call Trace:
[  287.071857][T12546]  <TASK>
[  287.071865][T12546]  dump_stack_lvl+0xe8/0x150
[  287.071896][T12546]  should_fail_ex+0x40c/0x560
[  287.071925][T12546]  should_failslab+0xa8/0x100
[  287.071955][T12546]  __kmalloc_cache_noprof+0xa8/0x660
[  287.071978][T12546]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  287.072000][T12546]  ? __kmalloc_cache_noprof+0x150/0x660
[  287.072023][T12546]  ? sctp_add_bind_addr+0x8c/0x370
[  287.072044][T12546]  ? sctp_add_bind_addr+0x8c/0x370
[  287.072070][T12546]  sctp_add_bind_addr+0x8c/0x370
[  287.072098][T12546]  sctp_copy_local_addr_list+0x31a/0x4e0
[  287.072123][T12546]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  287.072155][T12546]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  287.072179][T12546]  ? sctp_v6_is_any+0x64/0x80
[  287.072204][T12546]  ? sctp_copy_one_addr+0x93/0x360
[  287.072230][T12546]  sctp_bind_addr_copy+0xb3/0x3c0
[  287.072255][T12546]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  287.072277][T12546]  sctp_connect_new_asoc+0x2ff/0x6b0
[  287.072308][T12546]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  287.072342][T12546]  ? sctp_inet6_send_verify+0x23a/0x300
[  287.072362][T12546]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  287.072392][T12546]  __sctp_connect+0x5cb/0xdc0
[  287.072430][T12546]  ? __pfx___sctp_connect+0x10/0x10
[  287.072460][T12546]  ? sctp_inet_connect+0xa0/0x210
[  287.072487][T12546]  ? __local_bh_enable_ip+0xd0/0x130
[  287.072515][T12546]  sctp_inet_connect+0x12e/0x210
[  287.072540][T12546]  __sys_connect+0x323/0x460
[  287.072563][T12546]  ? __pfx___sys_connect+0x10/0x10
[  287.072598][T12546]  ? __pfx_ksys_write+0x10/0x10
[  287.072622][T12546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.072642][T12546]  __x64_sys_connect+0x7a/0x90
[  287.072665][T12546]  do_syscall_64+0x174/0x580
[  287.072689][T12546]  ? trace_irq_disable+0x3b/0x140
[  287.072713][T12546]  ? clear_bhb_loop+0x40/0x90
[  287.072736][T12546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.072756][T12546] RIP: 0033:0x7fa25c19e019
[  287.072774][T12546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.072791][T12546] RSP: 002b:00007fa25d114028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  287.072810][T12546] RAX: ffffffffffffffda RBX: 00007fa25c426090 RCX: 00007fa25c19e019
[  287.072824][T12546] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000005
[  287.072836][T12546] RBP: 00007fa25d114090 R08: 0000000000000000 R09: 0000000000000000
[  287.072848][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  287.072860][T12546] R13: 00007fa25c426128 R14: 00007fa25c426090 R15: 00007fff8d31a698
[  287.072892][T12546]  </TASK>
[  287.421299][T12553] netlink: 'syz.3.1661': attribute type 21 has an invalid length.
[  287.432935][T12553] IPv6: NLM_F_CREATE should be specified when creating new route
[  287.443651][T12553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  287.452566][T12553] IPv6: NLM_F_CREATE should be set when creating new route
[  287.460358][T12553] IPv6: NLM_F_CREATE should be set when creating new route
[  287.468942][T12553] IPv6: NLM_F_CREATE should be set when creating new route
[  287.499394][T12553] netlink: 'syz.3.1661': attribute type 21 has an invalid length.
[  287.512674][T12553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  287.521747][T12534] 8021q: adding VLAN 0 to HW filter on device team0
[  287.536074][T12534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.594427][T12534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.605613][T12534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.631608][T12534] veth1_vlan: left promiscuous mode
[  287.640095][T12534] veth0_vlan: left promiscuous mode
[  287.647932][T12534] veth0_vlan: entered promiscuous mode
[  287.657683][T12534] veth1_vlan: entered promiscuous mode
[  287.668378][T12534] tipc: Resetting bearer <eth:macvlan1>
[  287.677135][T12534] tipc: Resetting bearer <eth:macvlan1>
[  287.704020][T12534] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  287.711667][T12534] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  287.738216][T12534] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  287.761194][T12534] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  287.783272][T12534] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  287.807791][T12534] 8021q: adding VLAN 0 to HW filter on device bond1
[  287.827869][T12534] 8021q: adding VLAN 0 to HW filter on device bond2
[  287.840169][T12534] 8021q: adding VLAN 0 to HW filter on device bond3
[  287.877643][T12534] bridge3: left promiscuous mode
[  287.890877][T12534] 8021q: adding VLAN 0 to HW filter on device bond4
[  287.899039][T12534] bond4: entered allmulticast mode
[  287.904193][T12534] bridge4: entered allmulticast mode
[  287.910809][T12534] macvtap0: left allmulticast mode
[  287.916536][T12534] bond4: left allmulticast mode
[  287.921444][T12534] bridge4: left allmulticast mode
[  287.927239][T12534] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  287.939291][T12534] bond4: entered allmulticast mode
[  287.944453][T12534] bridge4: entered allmulticast mode
[  287.950230][T12534] macvtap1: left allmulticast mode
[  287.955625][T12534] bond4: left allmulticast mode
[  287.960519][T12534] bridge4: left allmulticast mode
[  287.966193][T12534] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  287.987482][T12567] netlink: 'syz.2.1665': attribute type 61 has an invalid length.
[  287.996193][T12534] bridge4: entered promiscuous mode
[  288.001874][T12534] 8021q: adding VLAN 0 to HW filter on device bond5
[  288.011351][T12534] 8021q: adding VLAN 0 to HW filter on device bond6
[  288.035879][T12534] ipip0: left promiscuous mode
[  288.060240][T12553] netlink: 'syz.3.1661': attribute type 2 has an invalid length.
[  288.248662][T12573] pimreg: entered allmulticast mode
[  288.271113][T12570] IPVS: Error connecting to the multicast addr
[  288.290315][T12578] tc_dump_action: action bad kind
[  288.322677][T12580] __nla_validate_parse: 6 callbacks suppressed
[  288.322694][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'.
[  288.343318][T12569] pimreg: left allmulticast mode
[  288.343918][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'.
[  288.466293][ T1175] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  288.485534][ T1175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.554890][ T8246] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  288.599797][T12592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1671'.
[  288.618217][ T8246] bond0: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  288.649039][ T8246] bond0: (slave veth0_to_bond): making interface the new active one
[  288.675952][    C1] net_ratelimit: 6 callbacks suppressed
[  288.675968][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.688293][ T8246] bond0: active interface up!
[  288.690529][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.734313][T12595] wg2 speed is unknown, defaulting to 1000
[  288.742404][ T8246] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  288.789670][ T8246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.838588][ T7052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.086452][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  289.106833][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.215405][ T8246] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.227315][ T8246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.272298][T12626] tipc: Resetting bearer <eth:macvlan1>
[  289.360961][T12626] tipc: Disabling bearer <eth:macvlan1>
[  289.566169][   T36] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  289.590451][   T36] bond1: (slave veth3): making interface the new active one
[  289.604733][   T36] bond1: active interface up!
[  289.730247][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1685'.
[  289.952128][T12652] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1688'.
[  290.679135][T12659] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  290.694505][T12663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'.
[  290.926947][T12677] netlink: 'syz.3.1696': attribute type 1 has an invalid length.
[  291.053739][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'.
[  291.174387][T12683] syzkaller0: entered promiscuous mode
[  291.188686][T12683] syzkaller0: entered allmulticast mode
[  291.353701][T12696] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  291.895508][T12726] xt_hashlimit: size too large, truncated to 1048576
[  292.097351][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'.
[  292.127495][T12737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1711'.
[  292.244037][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1715'.
[  292.320962][T12728] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  292.367146][T12728] bond6 (unregistering): Released all slaves
[  292.394430][T12751] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002
[  292.435845][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  292.481620][T12753] bridge0: port 4(vlan3) entered blocking state
[  292.489772][T12753] bridge0: port 4(vlan3) entered disabled state
[  292.496946][T12753] vlan3: entered allmulticast mode
[  292.504252][T12753] geneve0: entered allmulticast mode
[  292.512566][T12753] vlan3: entered promiscuous mode
[  292.517950][T12753] geneve0: entered promiscuous mode
[  292.611701][T12745] bridge0: port 3(veth0) entered disabled state
[  292.618608][T12745] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.626332][T12745] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.638030][T12745] bridge0: entered allmulticast mode
[  292.658878][T12752] veth0: left allmulticast mode
[  292.672672][T12752] veth0: left promiscuous mode
[  292.681418][T12768] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  292.695136][T12752] bridge0: port 3(veth0) entered disabled state
[  292.716197][T12752] bridge_slave_1: left allmulticast mode
[  292.722341][T12752] bridge_slave_1: left promiscuous mode
[  292.728433][T12752] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.740927][T12752] bridge_slave_0: left allmulticast mode
[  292.747551][T12752] bridge_slave_0: left promiscuous mode
[  292.753495][T12752] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.335037][T12790] __nla_validate_parse: 3 callbacks suppressed
[  293.335056][T12790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1729'.
[  293.367872][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'.
[  293.434114][T12797] netlink: 'syz.3.1727': attribute type 28 has an invalid length.
[  293.583738][T12801] ieee802154 phy1 wpan1: encryption failed: -22
[  293.652402][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1734'.
[  293.843413][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1736'.
[  293.904329][T12816] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  294.011189][T12828] netlink: 'syz.4.1738': attribute type 30 has an invalid length.
[  294.294977][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'.
[  294.501850][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'.
[  294.752183][T12867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1749'.
[  294.968003][T12885] xt_TPROXY: Can be used only with -p tcp or -p udp
[  294.981097][T12887] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1751'.
[  295.151528][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1751'.
[  295.383459][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.393401][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.403681][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.421473][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.434052][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.445083][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.447517][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'.
[  295.453867][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.472636][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.483773][T12908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.614013][T12891] bond10: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  295.626829][T12891] bond10 (unregistering): Released all slaves
[  295.696624][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.111897][T12935] syzkaller0: entered promiscuous mode
[  296.123785][T12935] syzkaller0: entered allmulticast mode
[  296.300460][T12940] lo speed is unknown, defaulting to 1000
[  296.315863][T12940] lo speed is unknown, defaulting to 1000
[  296.337514][T12940] lo speed is unknown, defaulting to 1000
[  296.361554][T12940] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  296.377178][T12940] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  296.408620][T12940] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  296.475086][T12940] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  296.547748][T12940] lo speed is unknown, defaulting to 1000
[  296.556440][T12940] lo speed is unknown, defaulting to 1000
[  296.564207][T12940] lo speed is unknown, defaulting to 1000
[  296.573973][T12940] lo speed is unknown, defaulting to 1000
[  296.583347][T12940] lo speed is unknown, defaulting to 1000
[  297.130127][T12974] sctp: [Deprecated]: syz.3.1773 (pid 12974) Use of int in max_burst socket option deprecated.
[  297.130127][T12974] Use struct sctp_assoc_value instead
[  297.743583][T12994] syzkaller0: entered promiscuous mode
[  297.753824][T12997] netlink: 'syz.2.1782': attribute type 3 has an invalid length.
[  297.763730][T12994] syzkaller0: entered allmulticast mode
[  298.290948][T13011] syzkaller0: entered promiscuous mode
[  298.314400][T13011] syzkaller0: entered allmulticast mode
[  298.391151][T13000] netlink: 'syz.4.1783': attribute type 1 has an invalid length.
[  298.586150][T13050] __nla_validate_parse: 8 callbacks suppressed
[  298.586169][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  298.910129][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'.
[  298.952232][T13059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1794'.
[  299.104507][T13057] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  299.467973][T13089] netlink: 'syz.4.1806': attribute type 1 has an invalid length.
[  299.519057][T13099] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1807'.
[  299.569930][T13099] netlink: 'syz.0.1807': attribute type 1 has an invalid length.
[  299.633381][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'.
[  299.662219][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1809'.
[  299.692202][T13103] bond0: entered promiscuous mode
[  299.708528][T13103] bond_slave_0: entered promiscuous mode
[  299.729159][T13107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1809'.
[  299.732866][T13103] bond0: left promiscuous mode
[  299.791732][T13103] bond_slave_0: left promiscuous mode
[  299.890156][T13107] bond0: entered promiscuous mode
[  299.908201][T13107] bond_slave_0: entered promiscuous mode
[  299.916787][T13107] bond0: left promiscuous mode
[  299.937457][T13107] bond_slave_0: left promiscuous mode
[  300.028028][T13110] syzkaller0: entered promiscuous mode
[  300.050485][T13110] syzkaller0: entered allmulticast mode
[  300.259364][T13133] syzkaller0: entered promiscuous mode
[  300.284956][T13133] syzkaller0: entered allmulticast mode
[  300.331204][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'.
[  300.351200][T13151] netlink: 'syz.4.1817': attribute type 21 has an invalid length.
[  300.356580][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  300.359987][T13151] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1817'.
[  300.490368][T13155] FAULT_INJECTION: forcing a failure.
[  300.490368][T13155] name failslab, interval 1, probability 0, space 0, times 0
[  300.510265][T13155] CPU: 1 UID: 0 PID: 13155 Comm: syz.3.1818 Not tainted syzkaller #0 PREEMPT(full) 
[  300.510289][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  300.510300][T13155] Call Trace:
[  300.510307][T13155]  <TASK>
[  300.510315][T13155]  dump_stack_lvl+0xe8/0x150
[  300.510346][T13155]  should_fail_ex+0x40c/0x560
[  300.510375][T13155]  should_failslab+0xa8/0x100
[  300.510404][T13155]  __kmalloc_cache_noprof+0xa8/0x660
[  300.510429][T13155]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  300.510451][T13155]  ? __kmalloc_cache_noprof+0x150/0x660
[  300.510475][T13155]  ? sctp_add_bind_addr+0x8c/0x370
[  300.510496][T13155]  ? sctp_add_bind_addr+0x8c/0x370
[  300.510525][T13155]  sctp_add_bind_addr+0x8c/0x370
[  300.510555][T13155]  sctp_copy_local_addr_list+0x31a/0x4e0
[  300.510581][T13155]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  300.510604][T13155]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  300.510628][T13155]  ? sctp_v6_is_any+0x64/0x80
[  300.510652][T13155]  ? sctp_copy_one_addr+0x93/0x360
[  300.510678][T13155]  sctp_bind_addr_copy+0xb3/0x3c0
[  300.510701][T13155]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  300.510724][T13155]  sctp_connect_new_asoc+0x2ff/0x6b0
[  300.510754][T13155]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  300.510786][T13155]  ? sctp_inet6_send_verify+0x23a/0x300
[  300.510806][T13155]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  300.510837][T13155]  __sctp_connect+0x5cb/0xdc0
[  300.510869][T13155]  ? __pfx___sctp_connect+0x10/0x10
[  300.510886][T13155]  ? sctp_inet_connect+0xa0/0x210
[  300.510910][T13155]  ? __local_bh_enable_ip+0xd0/0x130
[  300.510938][T13155]  sctp_inet_connect+0x12e/0x210
[  300.510960][T13155]  __sys_connect+0x323/0x460
[  300.510984][T13155]  ? __pfx___sys_connect+0x10/0x10
[  300.511017][T13155]  ? __pfx_ksys_write+0x10/0x10
[  300.511040][T13155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.511059][T13155]  __x64_sys_connect+0x7a/0x90
[  300.511079][T13155]  do_syscall_64+0x174/0x580
[  300.511102][T13155]  ? trace_irq_disable+0x3b/0x140
[  300.511124][T13155]  ? clear_bhb_loop+0x40/0x90
[  300.511144][T13155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.511162][T13155] RIP: 0033:0x7fb13a39e019
[  300.511180][T13155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.511195][T13155] RSP: 002b:00007fb13b2c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  300.511216][T13155] RAX: ffffffffffffffda RBX: 00007fb13a625fa0 RCX: 00007fb13a39e019
[  300.511229][T13155] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000004
[  300.511240][T13155] RBP: 00007fb13b2c7090 R08: 0000000000000000 R09: 0000000000000000
[  300.511251][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  300.511262][T13155] R13: 00007fb13a626038 R14: 00007fb13a625fa0 R15: 00007ffc593d07a8
[  300.511292][T13155]  </TASK>
[  300.979104][T13151] netlink: 'syz.4.1817': attribute type 4 has an invalid length.
[  300.986961][T13151] netlink: 'syz.4.1817': attribute type 5 has an invalid length.
[  300.994694][T13151] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1817'.
[  301.003325][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  301.293493][T13175] batman_adv: batadv0: Adding interface: ip6gretap1
[  301.300834][T13175] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  301.386436][T13178] netlink: 'syz.0.1823': attribute type 2 has an invalid length.
[  302.738816][ T5623] cgroup: fork rejected by pids controller in /syz4
[  302.859791][T13117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  302.997699][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.049617][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.240499][T13217] net_ratelimit: 201 callbacks suppressed
[  303.240518][T13217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.260558][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.277919][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.288951][T13217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.310299][T13217] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  303.341693][ T8246] IPVS: starting estimator thread 0...
[  303.447644][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.463646][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.465544][T13224] IPVS: using max 39 ests per chain, 93600 per kthread
[  303.484842][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.500215][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  303.509310][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.593204][T13226] syzkaller0: entered promiscuous mode
[  303.602430][T13226] syzkaller0: entered allmulticast mode
[  303.732683][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.775184][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.557588][ T5636] Bluetooth: hci4: command tx timeout
[  306.309439][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.330656][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.493385][T13289] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  306.546786][T13289] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  306.614399][T13300] __nla_validate_parse: 3 callbacks suppressed
[  306.614418][T13300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1847'.
[  306.728644][T13303] netlink: 'syz.0.1846': attribute type 2 has an invalid length.
[  306.752500][T13303] netlink: 'syz.0.1846': attribute type 1 has an invalid length.
[  306.761297][T13303] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1846'.
[  306.786618][T13291] syzkaller0: entered promiscuous mode
[  306.795918][T13291] syzkaller0: entered allmulticast mode
[  307.642576][ T5636] Bluetooth: hci4: command tx timeout
[  308.040388][ T7055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.046614][T13327] netlink: 'syz.2.1851': attribute type 1 has an invalid length.
[  309.054792][T13327] netlink: 'syz.2.1851': attribute type 2 has an invalid length.
[  309.128370][T13225] wg2 speed is unknown, defaulting to 1000
[  309.163913][T13225] lo speed is unknown, defaulting to 1000
[  309.244696][T13278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  309.577715][   T36] batman_adv: batadv0: Removing interface: ip6gretap1
[  309.715703][ T5636] Bluetooth: hci4: command tx timeout
[  309.891906][   T36] bond4 (unregistering): (slave bridge4): Releasing active interface
[  309.934260][   T36] bond1 (unregistering): (slave veth3): Releasing active interface
[  309.944982][   T36] bond1 (unregistering): Released all slaves
[  309.964215][   T36] bond2 (unregistering): Released all slaves
[  309.979865][   T36] bond3 (unregistering): (slave veth5): Releasing backup interface
[  309.990051][   T36] bond3 (unregistering): Released all slaves
[  310.049119][   T36] bond4 (unregistering): Released all slaves
[  310.062932][   T36] bond5 (unregistering): Released all slaves
[  310.076852][   T36] bond6 (unregistering): Released all slaves
[  310.091901][   T36] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface
[  310.101792][   T36] bond0 (unregistering): Released all slaves
[  310.123685][   T36] bond7 (unregistering): Released all slaves
[  310.152745][T13342] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1856'.
[  310.301548][T13354] syzkaller0: entered promiscuous mode
[  310.306017][T13368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.315679][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.317082][T13354] syzkaller0: entered allmulticast mode
[  310.344362][   T36] : left promiscuous mode
[  310.482304][T13373] siw: device registration error -23
[  311.805493][ T5636] Bluetooth: hci4: command tx timeout
[  313.159894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.168124][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.435429][   T36] tipc: Left network mode
[  313.470547][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  313.566539][T13379] wg2 speed is unknown, defaulting to 1000
[  313.586683][T13379] lo speed is unknown, defaulting to 1000
[  313.750824][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'.
[  313.771923][T13416] FAULT_INJECTION: forcing a failure.
[  313.771923][T13416] name failslab, interval 1, probability 0, space 0, times 0
[  313.815243][T13416] CPU: 1 UID: 0 PID: 13416 Comm: syz.2.1869 Not tainted syzkaller #0 PREEMPT(full) 
[  313.815265][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  313.815274][T13416] Call Trace:
[  313.815280][T13416]  <TASK>
[  313.815286][T13416]  dump_stack_lvl+0xe8/0x150
[  313.815312][T13416]  should_fail_ex+0x40c/0x560
[  313.815334][T13416]  should_failslab+0xa8/0x100
[  313.815358][T13416]  __kmalloc_cache_noprof+0xa8/0x660
[  313.815377][T13416]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  313.815400][T13416]  ? __kmalloc_cache_noprof+0x150/0x660
[  313.815416][T13416]  ? sctp_add_bind_addr+0x8c/0x370
[  313.815434][T13416]  ? sctp_add_bind_addr+0x8c/0x370
[  313.815454][T13416]  sctp_add_bind_addr+0x8c/0x370
[  313.815474][T13416]  sctp_copy_local_addr_list+0x31a/0x4e0
[  313.815493][T13416]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  313.815510][T13416]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  313.815528][T13416]  ? sctp_v6_is_any+0x64/0x80
[  313.815547][T13416]  ? sctp_copy_one_addr+0x93/0x360
[  313.815565][T13416]  sctp_bind_addr_copy+0xb3/0x3c0
[  313.815583][T13416]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  313.815600][T13416]  sctp_connect_new_asoc+0x2ff/0x6b0
[  313.815622][T13416]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  313.815648][T13416]  ? sctp_inet6_send_verify+0x23a/0x300
[  313.815664][T13416]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  313.815687][T13416]  __sctp_connect+0x5cb/0xdc0
[  313.815716][T13416]  ? __pfx___sctp_connect+0x10/0x10
[  313.815733][T13416]  ? sctp_inet_connect+0xa0/0x210
[  313.815752][T13416]  ? __local_bh_enable_ip+0xd0/0x130
[  313.815773][T13416]  sctp_inet_connect+0x12e/0x210
[  313.815794][T13416]  __sys_connect+0x323/0x460
[  313.815813][T13416]  ? __pfx___sys_connect+0x10/0x10
[  313.815837][T13416]  ? __pfx_ksys_write+0x10/0x10
[  313.815865][T13416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.815883][T13416]  __x64_sys_connect+0x7a/0x90
[  313.815899][T13416]  do_syscall_64+0x174/0x580
[  313.815919][T13416]  ? trace_irq_disable+0x3b/0x140
[  313.815938][T13416]  ? clear_bhb_loop+0x40/0x90
[  313.815956][T13416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.815972][T13416] RIP: 0033:0x7fa25c19e019
[  313.815988][T13416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.816000][T13416] RSP: 002b:00007fa25d114028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  313.816016][T13416] RAX: ffffffffffffffda RBX: 00007fa25c426090 RCX: 00007fa25c19e019
[  313.816026][T13416] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000005
[  313.816034][T13416] RBP: 00007fa25d114090 R08: 0000000000000000 R09: 0000000000000000
[  313.816043][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  313.816051][T13416] R13: 00007fa25c426128 R14: 00007fa25c426090 R15: 00007fff8d31a698
[  313.816077][T13416]  </TASK>
[  314.364244][T13430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.438467][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.446487][T13431] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  314.447461][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.524498][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'.
[  314.861903][T13439] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  314.992624][   T36] hsr_slave_0: left promiscuous mode
[  315.034141][   T36] hsr_slave_1: left promiscuous mode
[  315.174787][T13473] netlink: 'syz.2.1877': attribute type 1 has an invalid length.
[  315.519457][T13455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'.
[  315.530787][T13463] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  315.551817][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  315.600922][T13469] syzkaller0: entered promiscuous mode
[  315.606467][T13469] syzkaller0: entered allmulticast mode
[  316.048647][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'.
[  317.006269][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  317.635587][ T7035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.527129][ T8246] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  318.578196][ T8246] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  318.790668][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'.
[  318.884562][   T65] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  318.959734][   T36] IPVS: stop unused estimator thread 0...
[  319.155614][   T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  319.170535][T13225] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.178933][T13225] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.179389][T13541] netlink: 'syz.2.1890': attribute type 58 has an invalid length.
[  319.186991][T13225] bridge_slave_0: entered allmulticast mode
[  319.218525][T13225] bridge_slave_0: entered promiscuous mode
[  319.225363][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1890'.
[  319.239343][T13225] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.247321][T13225] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.254586][T13225] bridge_slave_1: entered allmulticast mode
[  319.263068][T13225] bridge_slave_1: entered promiscuous mode
[  319.390558][T13225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.410197][T13225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.551545][T13225] team0: Port device team_slave_0 added
[  319.583021][T13225] team0: Port device team_slave_1 added
[  319.599147][T13556] netdevsim netdevsim2 
€Â: renamed from netdevsim0
[  319.681280][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  319.702691][T13225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.716713][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  319.749387][T13225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.782755][T13225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.796400][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  319.822664][T13225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.121773][T13225] hsr_slave_0: entered promiscuous mode
[  320.154080][T13225] hsr_slave_1: entered promiscuous mode
[  320.168806][T13225] debugfs: 'hsr0' already exists in 'hsr'
[  320.179149][T13225] Cannot create hsr debugfs directory
[  320.251619][T13572] netlink: 4220 bytes leftover after parsing attributes in process `syz.0.1897'.
[  320.271102][T13568] netlink: 'syz.3.1896': attribute type 11 has an invalid length.
[  320.311093][T13568] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1896'.
[  320.365978][T13567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.570236][T13585] netlink: 'syz.0.1899': attribute type 1 has an invalid length.
[  320.691866][T13593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1899'.
[  320.921301][T13590] bond7: (slave geneve2): making interface the new active one
[  320.961099][T13590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.971304][T13590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.066064][T13590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.074315][T13590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.108457][T13590] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  321.180619][T13593] 8021q: adding VLAN 0 to HW filter on device bond7
[  321.407394][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.415928][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.424121][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.487125][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.497463][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.508684][ T7038] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  321.549215][   T24] wg2 speed is unknown, defaulting to 1000
[  321.587601][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  321.736806][T13645] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1906'.
[  321.959746][   T48] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  321.966474][T13652] ieee802154 phy1 wpan1: encryption failed: -22
[  322.011287][   T48] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  322.043245][   T48] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  322.159188][T13658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1912'.
[  322.185882][T13663] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1910'.
[  322.242531][T13671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.259170][T13672] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1910'.
[  322.277789][T13663] ip6gre1: entered promiscuous mode
[  322.295485][T13663] ip6gre1: entered allmulticast mode
[  322.313675][T13665] bond0: (slave ip6tnl0): refused to change device type
[  322.346379][T13668] ip6erspan1: entered allmulticast mode
[  322.607426][  T143] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  322.778424][T13701] netlink: 'syz.3.1916': attribute type 1 has an invalid length.
[  322.796786][T13704] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1915'.
[  322.953792][T13701] 8021q: adding VLAN 0 to HW filter on device bond8
[  322.993096][T13702] bond8: (slave dummy0): making interface the new active one
[  323.007631][T13702] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  323.132295][  T143] bond8: (slave dummy0): link status definitely down, disabling slave
[  323.204348][  T143] bond8: now running without any active interface!
[  323.238362][   T13] net_ratelimit: 19 callbacks suppressed
[  323.238379][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.253163][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.261353][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.296095][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.306227][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.317600][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.327739][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.555359][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.565928][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.778458][T13741] bond8: option ad_select: invalid value (34)
[  323.788720][T13741] bond8 (unregistering): Released all slaves
[  323.852365][T13225] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  323.893741][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  323.909411][T13225] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  323.932996][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  323.955771][T13225] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  323.980616][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  324.000178][T13225] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  324.028864][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  324.038352][ T7035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.135658][T13768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1923'.
[  324.236624][T13765] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1927'.
[  324.320963][T13225] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.416672][T13225] 8021q: adding VLAN 0 to HW filter on device team0
[  324.460013][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.467423][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.533951][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.541172][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.660100][T13783] netlink: 'syz.0.1930': attribute type 1 has an invalid length.
[  324.704597][T13780] netlink: 'syz.3.1929': attribute type 1 has an invalid length.
[  324.783385][T13783] 8021q: adding VLAN 0 to HW filter on device bond8
[  325.228592][T13809] syzkaller0: entered promiscuous mode
[  325.257457][T13809] syzkaller0: entered allmulticast mode
[  325.341334][T13819] netlink: 'syz.2.1937': attribute type 1 has an invalid length.
[  325.355833][T13819] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1937'.
[  325.736574][T13843] netlink: 'syz.0.1938': attribute type 6 has an invalid length.
[  325.849387][T13838] wg2 speed is unknown, defaulting to 1000
[  325.929483][T13838] lo speed is unknown, defaulting to 1000
[  326.011826][T13848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1940'.
[  326.652063][T13225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.677760][T13225] veth0_vlan: entered promiscuous mode
[  327.761424][T13225] veth1_vlan: entered promiscuous mode
[  327.854814][T13225] veth0_macvtap: entered promiscuous mode
[  327.902705][T13225] veth1_macvtap: entered promiscuous mode
[  327.995346][T13225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.058748][T13225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.126689][  T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.156812][  T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.271689][  T143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.336776][  T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.440179][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.491399][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.619113][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'.
[  328.647474][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.689339][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.714401][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'.
[  328.727049][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'.
[  328.774771][T13975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.807500][T13975] tipc: Resetting bearer <eth:syzkaller0>
[  328.835801][    C0] net_ratelimit: 16 callbacks suppressed
[  328.835822][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.849797][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.871990][T13983] xt_hashlimit: max too large, truncated to 1048576
[  328.901998][T13983] xt_hashlimit: size too large, truncated to 1048576
[  328.922896][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.927125][T13983] xt_hashlimit: invalid rate
[  328.932628][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.228722][T13968] tipc: Disabling bearer <eth:syzkaller0>
[  329.408661][T14004] syzkaller0: entered promiscuous mode
[  329.433007][T14004] syzkaller0: entered allmulticast mode
[  329.471912][T14004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.511893][T14004] tipc: Resetting bearer <eth:syzkaller0>
[  329.816889][T14020] netlink: 'syz.4.1969': attribute type 1 has an invalid length.
[  329.893945][T14002] tipc: Resetting bearer <eth:syzkaller0>
[  330.040492][T14002] tipc: Disabling bearer <eth:syzkaller0>
[  330.076013][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.084417][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.382206][T14039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.394107][T14054] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1980'.
[  330.396015][T14039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.403883][T14054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1980'.
[  330.414497][T14039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  330.445463][T14054] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  330.445463][T14054] Please contact the netfilter-devel mailing list or update your nftables rules.
[  330.723893][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'.
[  330.740042][T14039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.777156][T14039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.778929][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'.
[  330.798613][T14039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  330.834265][T14072] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1986'.
[  331.021169][T14039] bond0: (slave netdevsim1): Releasing backup interface
[  331.058835][T14039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.089784][T14039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.124668][T14039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  331.213237][T14081] syzkaller0: entered promiscuous mode
[  331.225308][T14081] syzkaller0: entered allmulticast mode
[  331.240501][T14081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.255665][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.263929][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.358015][T14039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.373230][T14039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.407539][T14039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  331.468923][T14088] tipc: Resetting bearer <eth:syzkaller0>
[  331.482561][T14080] tipc: Resetting bearer <eth:syzkaller0>
[  331.523548][T14080] tipc: Disabling bearer <eth:syzkaller0>
[  331.760126][   T30] audit: type=1804 audit(1785632469.120:9): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1997" name="/newroot/7/memory.events" dev="tmpfs" ino=55 res=1 errno=0
[  331.815051][   T30] audit: type=1800 audit(1785632469.150:10): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1997" name="memory.events" dev="tmpfs" ino=55 res=0 errno=0
[  331.836659][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.836795][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.863467][T14120] netlink: 'syz.1.1998': attribute type 1 has an invalid length.
[  331.871634][T14120] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1998'.
[  331.885756][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.904263][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  331.906816][   T30] audit: type=1804 audit(1785632469.150:11): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1997" name="/newroot/7/memory.events" dev="tmpfs" ino=55 res=1 errno=0
[  331.923686][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  332.055300][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.068228][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  332.089696][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  332.114562][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.140509][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  332.158124][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  332.175888][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.199446][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'.
[  332.212293][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  332.233193][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  332.248411][T14127] bond0: Unable to set down delay as MII monitoring is disabled
[  332.337743][T14135] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004
[  333.121900][T14165] netlink: 'syz.4.2011': attribute type 3 has an invalid length.
[  333.141735][T14165] netlink: 'syz.4.2011': attribute type 3 has an invalid length.
[  333.206901][T14160] netlink: 'syz.1.2010': attribute type 4 has an invalid length.
[  333.253833][T14160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2010'.
[  333.283376][T14160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2010'.
[  333.306445][T14160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2010'.
[  333.686730][T14180] syzkaller0: entered promiscuous mode
[  333.699824][T14180] syzkaller0: entered allmulticast mode
[  333.955336][    C0] net_ratelimit: 7 callbacks suppressed
[  333.955356][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.969228][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.641237][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.649539][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.915734][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.927489][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.453719][T14251] ip6gretap0: entered promiscuous mode
[  335.477709][T14253] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.761340][T14262] sctp: [Deprecated]: syz.3.2035 (pid 14262) Use of struct sctp_assoc_value in delayed_ack socket option.
[  335.761340][T14262] Use struct sctp_sack_info instead
[  335.836922][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.845228][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.506654][T14297] __nla_validate_parse: 15 callbacks suppressed
[  336.506674][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'.
[  336.724391][T14305] nft_compat: unsupported protocol 0
[  336.857163][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.982966][T14313] syzkaller0: entered promiscuous mode
[  337.009754][T14313] syzkaller0: entered allmulticast mode
[  337.248588][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2050'.
[  337.381441][T14338] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2051'.
[  337.428701][T14335] syzkaller0: entered promiscuous mode
[  337.439433][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'.
[  337.441066][T14335] syzkaller0: entered allmulticast mode
[  337.449250][T14340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2053'.
[  337.464728][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'.
[  337.498033][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'.
[  337.516972][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'.
[  337.560650][T14340] netlink: 'syz.0.2053': attribute type 13 has an invalid length.
[  337.587765][T14340] netlink: 'syz.0.2053': attribute type 17 has an invalid length.
[  337.813568][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'.
[  339.245476][  T143] net_ratelimit: 9 callbacks suppressed
[  339.245497][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.259298][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.914350][T14313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.101815][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'.
[  340.432388][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.440640][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.833157][T14340] 8021q: adding VLAN 0 to HW filter on device bond3
[  340.853044][T14340] bond5: left promiscuous mode
[  340.858766][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  340.944212][T14340] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check.
[  341.059196][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  341.086052][T14353] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  341.182205][T14362] syzkaller0: entered promiscuous mode
[  341.252559][T14362] syzkaller0: entered allmulticast mode
[  341.288380][T14374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.321488][T14362] tipc: Resetting bearer <eth:syzkaller0>
[  341.346026][T14378] xt_l2tp: invalid flags combination: 8
[  341.356123][T14361] tipc: Resetting bearer <eth:syzkaller0>
[  341.394883][T14361] tipc: Disabling bearer <eth:syzkaller0>
[  341.467801][T14387] gre0: entered promiscuous mode
[  341.473197][T14387] gre0: entered allmulticast mode
[  341.575776][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.584073][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.689959][T14397] __nla_validate_parse: 6 callbacks suppressed
[  341.689980][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'.
[  341.895880][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.904531][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.918949][T14407] bond11: (slave macvlan1): Enslaving as an active interface with an up link
[  342.028495][T14397] bond11 (unregistering): (slave macvlan1): Releasing backup interface
[  342.053164][T14397] bond11 (unregistering): Released all slaves
[  342.111396][T14403] wg2 speed is unknown, defaulting to 1000
[  342.181423][T14423] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2075'.
[  342.191084][T14403] lo speed is unknown, defaulting to 1000
[  342.247723][T14425] netlink: 'syz.3.2076': attribute type 1 has an invalid length.
[  342.370632][T14425] 8021q: adding VLAN 0 to HW filter on device bond9
[  342.414786][T14432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2078'.
[  342.426399][T14432] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2078'.
[  342.440714][T14426] bond9: (slave veth7): Enslaving as a backup interface with a down link
[  342.540044][T14436] netlink: 'syz.4.2079': attribute type 1 has an invalid length.
[  342.597328][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  342.609583][T14439] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2080'.
[  342.660521][T14444] netlink: 'syz.4.2079': attribute type 1 has an invalid length.
[  342.747353][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.069646][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'.
[  343.258792][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2089'.
[  343.327707][T14481] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2092'.
[  343.466876][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'.
[  343.752629][T14507] syzkaller0: entered promiscuous mode
[  343.770019][T14507] syzkaller0: entered allmulticast mode
[  343.879588][T14509] syzkaller1: entered promiscuous mode
[  343.913290][T14509] syzkaller1: entered allmulticast mode
[  344.152962][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2102'.
[  344.771707][T14542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.824143][T14545] syzkaller0: entered promiscuous mode
[  344.831118][T14545] syzkaller0: entered allmulticast mode
[  344.893254][T14544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.951967][T14542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.008788][   T12] net_ratelimit: 7 callbacks suppressed
[  345.008809][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.022613][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.235613][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.243900][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.935662][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.943942][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.375479][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.383772][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.955363][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.963834][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.477730][T14568] geneve5: entered promiscuous mode
[  348.803621][T14606] __nla_validate_parse: 2 callbacks suppressed
[  348.803726][T14606] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2123'.
[  349.161433][T14635] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2130'.
[  349.196260][T14635] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2130'.
[  349.238409][T14639] netlink: 'syz.1.2131': attribute type 11 has an invalid length.
[  349.256408][T14640] netlink: 524 bytes leftover after parsing attributes in process `syz.4.2130'.
[  349.464135][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'.
[  349.594936][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2134'.
[  350.615402][T14664] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2137'.
[  350.715455][   T48] net_ratelimit: 8 callbacks suppressed
[  350.715557][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.729564][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.347917][T14688] netlink: 'syz.2.2142': attribute type 1 has an invalid length.
[  351.926638][ T8248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.934917][ T8248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.975496][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.983794][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.995475][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.003713][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.037866][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.046114][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.091117][T14688] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  353.257918][T14690] gre0: left promiscuous mode
[  353.305875][T14690] gre0: left allmulticast mode
[  353.367450][T14690] netdevsim netdevsim2 
€Â: left allmulticast mode
[  353.382796][T14690] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  353.413137][T14690] geneve2: left promiscuous mode
[  353.427498][T14690] vlan2: left promiscuous mode
[  353.438898][T14690] bond3: left promiscuous mode
[  353.454070][T14690] bridge2: left promiscuous mode
[  353.468126][T14690] vlan2: left allmulticast mode
[  353.476851][T14690] bond3: left allmulticast mode
[  353.482128][T14690] bridge2: left allmulticast mode
[  353.489530][T14690] bond4: left promiscuous mode
[  353.494815][T14690] bridge3: left promiscuous mode
[  353.501468][T14690] bridge4: left promiscuous mode
[  353.508407][T14690] bond4: left allmulticast mode
[  353.513553][T14690] bridge3: left allmulticast mode
[  353.519790][T14690] bridge4: left allmulticast mode
[  353.530237][T14690] bond6: left promiscuous mode
[  353.536455][T14690] dummy0: left promiscuous mode
[  353.544100][T14690] geneve3: left promiscuous mode
[  353.549652][T14690] geneve3: left allmulticast mode
[  353.556268][T14690] bond7: left promiscuous mode
[  353.561253][T14690] bridge7: left promiscuous mode
[  353.567493][T14690] bond7: left allmulticast mode
[  353.572555][T14690] bridge7: left allmulticast mode
[  353.584122][T14690] syzkaller0: left promiscuous mode
[  353.590477][T14690] syzkaller0: left allmulticast mode
[  353.601004][T14690] bond9: left promiscuous mode
[  353.779219][T14715] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2147'.
[  354.660078][T14744] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2154'.
[  354.686167][T14746] netlink: 'syz.4.2156': attribute type 9 has an invalid length.
[  354.932345][T14759] netlink: 'syz.1.2157': attribute type 83 has an invalid length.
[  355.269850][T14767] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  355.283463][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2162'.
[  355.289203][T14778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2165'.
[  355.310334][T14767] bond10 (unregistering): Released all slaves
[  355.401091][T14781] tipc: Started in network mode
[  355.414323][T14781] tipc: Node identity 324b3b0db4a, cluster identity 4711
[  355.438794][T14781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.527768][T14781] +
: renamed from syzkaller0
[  355.552334][T14781] tipc: Disabling bearer <eth:syzkaller0>
[  355.825612][   T36] net_ratelimit: 21 callbacks suppressed
[  355.825632][   T36] bond8: (slave dummy0): failed to get link speed/duplex
[  355.884934][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'.
[  355.979400][   T48] bond8: (slave dummy0): failed to get link speed/duplex
[  356.138814][  T143] bond8: (slave dummy0): failed to get link speed/duplex
[  356.240348][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'.
[  356.268947][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'.
[  356.288044][  T143] bond8: (slave dummy0): failed to get link speed/duplex
[  356.405358][  T143] bond8: (slave dummy0): failed to get link speed/duplex
[  356.413100][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.421357][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.430009][T14841] xt_SECMARK: invalid mode: 9
[  356.525790][   T36] bond8: (slave dummy0): failed to get link speed/duplex
[  356.635654][ T8248] bond8: (slave dummy0): failed to get link speed/duplex
[  356.776553][T14858] wg2 speed is unknown, defaulting to 1000
[  356.785930][   T36] bond8: (slave dummy0): failed to get link speed/duplex
[  356.803047][T14858] lo speed is unknown, defaulting to 1000
[  357.123502][T14870] netlink: 'syz.0.2192': attribute type 11 has an invalid length.
[  357.436971][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'.
[  357.447107][T14887] syzkaller0: entered promiscuous mode
[  357.467096][T14887] syzkaller0: entered allmulticast mode
[  357.902490][T14902] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  358.204739][T14925] netlink: 'syz.0.2204': attribute type 1 has an invalid length.
[  358.226225][T14925] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2204'.
[  358.237431][T14921] veth9: entered allmulticast mode
[  358.472799][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2207'.
[  358.507459][T14934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2207'.
[  358.590999][T14939] ip6gre3: entered allmulticast mode
[  358.928330][T14954] Cannot find add_set index 2 as target
[  359.055041][T14959] vlan2: entered promiscuous mode
[  359.072279][T14959] macvlan0: entered promiscuous mode
[  359.088273][ T5282] veth0_macvtap: left promiscuous mode
[  359.747634][T14993] __nla_validate_parse: 1 callbacks suppressed
[  359.747658][T14993] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2223'.
[  359.806178][T14993] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2223'.
[  359.897378][T14993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2223'.
[  360.182025][T15009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2225'.
[  360.556589][T15023] netlink: 'syz.2.2229': attribute type 1 has an invalid length.
[  360.610774][T15023] 8021q: adding VLAN 0 to HW filter on device bond11
[  360.649618][T15021] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  360.742922][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2228'.
[  360.757005][T15026] bond11: (slave gretap2): making interface the new active one
[  360.778783][T15026] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  360.808481][T15037] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2231'.
[  360.827386][T15023] bond11 (unregistering): (slave gretap2): Releasing active interface
[  360.840059][T15023] bond11 (unregistering): Released all slaves
[  360.863596][T15039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2228'.
[  360.873477][ T1175] net_ratelimit: 33 callbacks suppressed
[  360.873495][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.887410][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.932943][T15043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2228'.
[  360.996175][ T1175] bond8: (slave dummy0): failed to get link speed/duplex
[  361.115234][  T143] bond8: (slave dummy0): failed to get link speed/duplex
[  361.245284][  T143] bond8: (slave dummy0): failed to get link speed/duplex
[  361.277619][T15058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.392637][T15061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.426839][   T12] bond8: (slave dummy0): failed to get link speed/duplex
[  361.460129][T15061] tipc: Resetting bearer <eth:syzkaller0>
[  361.518521][T15059] tipc: Disabling bearer <eth:syzkaller0>
[  361.530885][T15068] tun0: tun_chr_ioctl cmd 1074025675
[  361.536619][T15068] tun0: persist enabled
[  361.542288][T15068] tun0: tun_chr_ioctl cmd 1074025675
[  361.555191][T15068] tun0: persist disabled
[  361.607950][   T12] bond8: (slave dummy0): failed to get link speed/duplex
[  361.735606][ T1175] bond8: (slave dummy0): failed to get link speed/duplex
[  361.875251][  T143] bond8: (slave dummy0): failed to get link speed/duplex
[  362.017053][ T1175] bond8: (slave dummy0): failed to get link speed/duplex
[  362.126042][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'.
[  362.254881][T15112] tipc: Can't bind to reserved service type 1
[  362.486700][T15117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.555392][T15130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2256'.
[  362.676098][T15129] tipc: Resetting bearer <eth:syzkaller0>
[  362.684995][T15132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  362.711898][T15136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  362.744687][T15116] tipc: Disabling bearer <eth:syzkaller0>
[  362.771896][T15127] wg2 speed is unknown, defaulting to 1000
[  362.826359][T15127] lo speed is unknown, defaulting to 1000
[  363.687411][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  363.740831][T15179] block nbd2: Unsupported socket: should be TCP or UNIX.
[  363.798076][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  363.845247][T15179] block nbd2: Unsupported socket: should be TCP or UNIX.
[  363.945517][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.006859][T15179] block nbd2: Unsupported socket: should be TCP or UNIX.
[  364.054337][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.091226][T15179] block nbd2: Unsupported socket: should be TCP or UNIX.
[  364.101453][T15204] netlink: 'syz.0.2277': attribute type 1 has an invalid length.
[  364.117801][T15179] block nbd3: Unsupported socket: should be TCP or UNIX.
[  364.157458][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.177717][T15179] block nbd2: Unsupported socket: should be TCP or UNIX.
[  364.195536][T15179] block nbd4: Unsupported socket: should be TCP or UNIX.
[  364.214513][T15179] block nbd5: Unsupported socket: should be TCP or UNIX.
[  364.234280][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.241016][T15204] bond9: entered promiscuous mode
[  364.247669][T15204] 8021q: adding VLAN 0 to HW filter on device bond9
[  364.282726][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.298566][T15213] syzkaller0: entered promiscuous mode
[  364.311571][T15213] syzkaller0: entered allmulticast mode
[  364.317788][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.329497][T15179] block nbd2: Unsupported socket: should be TCP or UNIX.
[  364.395016][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.434460][T15179] block nbd2: Unsupported socket: should be TCP or UNIX.
[  364.461497][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.476419][T15179] block nbd1: Unsupported socket: should be TCP or UNIX.
[  364.497326][T15179] block nbd2: Unsupported socket: should be TCP or UNIX.
[  366.533329][   T13] net_ratelimit: 30 callbacks suppressed
[  366.533351][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.547317][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.101334][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.109537][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.689329][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.697568][  T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.927203][   T12] bond8: (slave dummy0): failed to get link speed/duplex
[  368.045664][   T12] bond8: (slave dummy0): failed to get link speed/duplex
[  368.061991][T15245] IPv6: Can't replace route, no match found
[  368.116402][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.124707][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.146285][T15250] netlink: 'syz.1.2286': attribute type 1 has an invalid length.
[  368.158551][T15248] wg2 speed is unknown, defaulting to 1000
[  368.356763][T15250] bond6: entered promiscuous mode
[  368.373721][T15250] bond6: entered allmulticast mode
[  368.387867][T15250] 8021q: adding VLAN 0 to HW filter on device bond6
[  368.443423][T15257] erspan1: entered allmulticast mode
[  368.479636][T15257] bond6: (slave erspan1): making interface the new active one
[  368.501176][T15257] erspan1: entered promiscuous mode
[  368.530524][T15257] bond6: (slave erspan1): Enslaving as an active interface with an up link
[  368.576275][T15248] lo speed is unknown, defaulting to 1000
[  368.648494][T15261] syzkaller0: entered promiscuous mode
[  368.683884][T15261] syzkaller0: entered allmulticast mode
[  368.808868][T15254] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.827296][T15254] 8021q: adding VLAN 0 to HW filter on device team0
[  368.853045][T15254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.898807][T15254] bond_slave_0: entered promiscuous mode
[  368.914801][T15254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.927884][T15254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.946161][T15254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  368.958326][T15254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  368.976219][T15254] veth1_vlan: left promiscuous mode
[  368.983237][T15254] veth0_vlan: left promiscuous mode
[  368.991432][T15254] veth0_vlan: entered promiscuous mode
[  368.999477][T15254] veth1_vlan: entered promiscuous mode
[  369.013302][T15254] veth1_macvtap: left promiscuous mode
[  369.020114][T15254] veth0_macvtap: entered promiscuous mode
[  369.028540][T15254] veth1_macvtap: entered promiscuous mode
[  369.041458][T15254] 8021q: adding VLAN 0 to HW filter on device 
€Â
[  369.049833][T15254] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  369.060005][T15254] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  369.068512][T15254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  369.079001][T15254] 8021q: adding VLAN 0 to HW filter on device bond1
[  369.090985][T15254] 8021q: adding VLAN 0 to HW filter on device bond2
[  369.101338][T15254] 8021q: adding VLAN 0 to HW filter on device bond3
[  369.116889][T15305] netlink: 'syz.1.2296': attribute type 1 has an invalid length.
[  369.126583][T15254] 8021q: adding VLAN 0 to HW filter on device bond4
[  369.140234][T15254] 8021q: adding VLAN 0 to HW filter on device bond5
[  369.151055][T15254] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  369.170494][T15306] netlink: 'syz.1.2296': attribute type 10 has an invalid length.
[  369.178297][T15254] 8021q: adding VLAN 0 to HW filter on device bond8
[  369.193700][T15254] bridge0: port 4(vlan3) entered blocking state
[  369.200131][T15254] bridge0: port 4(vlan3) entered forwarding state
[  369.213308][T15254] 8021q: adding VLAN 0 to HW filter on device bond10
[  369.230223][   T24] lo speed is unknown, defaulting to 1000
[  369.236472][   T24] syz2: Port: 1 Link ACTIVE
[  369.278409][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.287747][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.300130][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.307332][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.387613][   T12] bridge0: port 3(team0) entered blocking state
[  369.394069][   T12] bridge0: port 3(team0) entered forwarding state
[  369.424875][T15305] 8021q: adding VLAN 0 to HW filter on device bond7
[  369.759684][T15312] __nla_validate_parse: 5 callbacks suppressed
[  369.759703][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'.
[  369.785581][   T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 44688 - 0
[  369.811989][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'.
[  369.850422][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2300'.
[  369.948269][  T143] netdevsim netdevsim2 
€Â: set [1, 1] type 2 family 0 port 44688 - 0
[  370.002764][   T13] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  370.019982][   T13] bond5: (slave veth3): making interface the new active one
[  370.077137][   T13] bond5: active interface up!
[  370.093978][T15328] FAULT_INJECTION: forcing a failure.
[  370.093978][T15328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.133960][T15328] CPU: 0 UID: 0 PID: 15328 Comm: syz.1.2302 Not tainted syzkaller #0 PREEMPT(full) 
[  370.133986][T15328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  370.134005][T15328] Call Trace:
[  370.134084][T15328]  <TASK>
[  370.134157][T15328]  dump_stack_lvl+0xe8/0x150
[  370.134300][T15328]  should_fail_ex+0x40c/0x560
[  370.134402][T15328]  _copy_to_user+0x31/0xb0
[  370.134449][T15328]  simple_read_from_buffer+0xe1/0x170
[  370.134507][T15328]  proc_fail_nth_read+0x1bb/0x230
[  370.134547][T15328]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  370.134606][T15328]  ? rw_verify_area+0x24a/0x4c0
[  370.134640][T15328]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  370.134666][T15328]  vfs_read+0x213/0xa80
[  370.134692][T15328]  ? __pfx___mutex_lock+0x10/0x10
[  370.134811][T15328]  ? __pfx_vfs_read+0x10/0x10
[  370.134830][T15328]  ? __fget_files+0x2a/0x420
[  370.134859][T15328]  ? __fget_files+0x3a2/0x420
[  370.134881][T15328]  ? __fget_files+0x2a/0x420
[  370.134913][T15328]  ksys_read+0x150/0x270
[  370.134933][T15328]  ? __pfx_ksys_read+0x10/0x10
[  370.134960][T15328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.134999][T15328]  do_syscall_64+0x174/0x580
[  370.135052][T15328]  ? trace_irq_disable+0x3b/0x140
[  370.135095][T15328]  ? clear_bhb_loop+0x40/0x90
[  370.135116][T15328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.135135][T15328] RIP: 0033:0x7f5d5db5e84e
[  370.135184][T15328] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  370.135200][T15328] RSP: 002b:00007f5d5eaa2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  370.135253][T15328] RAX: ffffffffffffffda RBX: 00007f5d5eaa36c0 RCX: 00007f5d5db5e84e
[  370.135267][T15328] RDX: 000000000000000f RSI: 00007f5d5eaa30a0 RDI: 0000000000000005
[  370.135278][T15328] RBP: 00007f5d5eaa3090 R08: 0000000000000000 R09: 0000000000000000
[  370.135290][T15328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.135301][T15328] R13: 00007f5d5de26038 R14: 00007f5d5de25fa0 R15: 00007ffe1f33de78
[  370.135332][T15328]  </TASK>
[  370.360590][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 44688 - 0
[  370.370380][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 44688 - 0
[  370.388943][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'.
[  370.416583][T15335] netlink: 'syz.2.2304': attribute type 13 has an invalid length.
[  370.424581][T15335] netlink: 'syz.2.2304': attribute type 17 has an invalid length.
[  370.754602][T15353] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2309'.
[  370.799107][T15357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2310'.
[  370.833182][T15360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2310'.
[  370.853820][T15361] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2311'.
[  371.011604][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'.
[  371.027359][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'.
[  371.060320][T15335] syzkaller0: left promiscuous mode
[  371.067566][T15335] syzkaller0: left allmulticast mode
[  371.267921][T15374] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  371.595600][ T1175] net_ratelimit: 106 callbacks suppressed
[  371.595622][ T1175] bond4: (slave bridge3): failed to get link speed/duplex
[  371.614252][T15396] netlink: 'syz.3.2319': attribute type 1 has an invalid length.
[  371.631852][ T1175] bond8: (slave dummy0): failed to get link speed/duplex
[  371.736412][   T12] bond4: (slave bridge3): failed to get link speed/duplex
[  371.775290][   T12] bond8: (slave dummy0): failed to get link speed/duplex
[  371.879161][ T8248] bond4: (slave bridge3): failed to get link speed/duplex
[  372.042654][T15421] netlink: 'syz.3.2326': attribute type 1 has an invalid length.
[  372.135464][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.143781][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.204100][T15421] 8021q: adding VLAN 0 to HW filter on device bond10
[  372.237195][   T12] bond8: (slave dummy0): failed to get link speed/duplex
[  372.270394][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.278719][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.447717][T15423] bond10: (slave veth9): Enslaving as an active interface with a down link
[  372.540809][T15427] 8021q: adding VLAN 0 to HW filter on device batadv2
[  372.564888][T15427] bond10: (slave batadv2): making interface the new active one
[  372.602260][T15427] batadv2: entered promiscuous mode
[  372.616292][T15427] bond10: (slave batadv2): Enslaving as an active interface with an up link
[  372.689375][T15421] bond10 (unregistering): (slave veth9): Releasing active interface
[  372.704731][T15421] bond10 (unregistering): (slave batadv2): Releasing active interface
[  372.739550][T15421] bond10 (unregistering): Released all slaves
[  372.942730][T15442] syzkaller0: entered promiscuous mode
[  372.951780][T15442] syzkaller0: entered allmulticast mode
[  373.319833][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  376.495401][ T5636] Bluetooth: hci4: link tx timeout
[  376.509888][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  376.561517][T15496] syzkaller0: entered promiscuous mode
[  376.592963][T15496] syzkaller0: entered allmulticast mode
[  376.662176][T15503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.706716][   T36] net_ratelimit: 20 callbacks suppressed
[  376.706743][   T36] bond4: (slave bridge3): failed to get link speed/duplex
[  376.733715][T15505] __nla_validate_parse: 2 callbacks suppressed
[  376.733742][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'.
[  376.750111][  T802] bond8: (slave dummy0): failed to get link speed/duplex
[  376.766318][T15505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'.
[  376.814273][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'.
[  376.828115][T15505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'.
[  376.869029][   T48] bond8: (slave dummy0): failed to get link speed/duplex
[  376.887090][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  376.918132][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.926488][  T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.985228][  T802] bond8: (slave dummy0): failed to get link speed/duplex
[  377.023200][T15522] netlink: 'syz.3.2347': attribute type 21 has an invalid length.
[  377.046430][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  377.145283][  T143] bond8: (slave dummy0): failed to get link speed/duplex
[  377.173115][T15522] netlink: 'syz.3.2347': attribute type 21 has an invalid length.
[  377.175426][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.251087][T15483] tipc: Resetting bearer <eth:syzkaller0>
[  377.278361][T15483] tipc: Disabling bearer <eth:syzkaller0>
[  377.366359][T15533] xt_hashlimit: size too large, truncated to 1048576
[  377.467392][T15535] syzkaller0: entered promiscuous mode
[  377.485283][T15535] syzkaller0: entered allmulticast mode
[  377.520431][T15535] 
@0Ù: renamed from bond_slave_1 (while UP)
[  377.542091][T15540] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  377.556937][T15540] syzkaller0: entered promiscuous mode
[  377.581427][T15540] syzkaller0: entered allmulticast mode
[  377.961091][T15548] bond1: option arp_all_targets: invalid value (3)
[  377.964106][T15561] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2360'.
[  377.989650][T15548] bond1 (unregistering): Released all slaves
[  378.447191][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  378.490549][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2366'.
[  378.595839][ T5636] Bluetooth: hci4: command 0x0406 tx timeout
[  378.621194][T15586] syzkaller0: entered promiscuous mode
[  378.627037][T15586] syzkaller0: entered allmulticast mode
[  378.638810][T15585] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  378.690273][T15585] syzkaller0: entered promiscuous mode
[  378.703856][T15585] syzkaller0: entered allmulticast mode
[  379.030239][T15592] bridge0: port 3(team0) entered disabled state
[  379.053658][T15591] netlink: 'syz.2.2371': attribute type 16 has an invalid length.
[  379.070159][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2373'.
[  379.085976][T15591] netlink: 'syz.2.2371': attribute type 17 has an invalid length.
[  379.094368][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2373'.
[  379.103889][T15592] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.118702][T15592] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.133061][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2373'.
[  379.145503][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2373'.
[  379.271151][T15592] bridge0: port 4(vlan3) entered disabled state
[  379.358022][T15591] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.365301][T15591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.396941][T15591] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.404198][T15591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.527394][T15591] syzkaller0: left promiscuous mode
[  379.533509][T15591] syzkaller0: left allmulticast mode
[  379.549897][T15591] bridge0: port 4(vlan3) entered blocking state
[  379.556422][T15591] bridge0: port 4(vlan3) entered forwarding state
[  379.603434][ T1175] bridge0: port 3(team0) entered blocking state
[  379.609919][ T1175] bridge0: port 3(team0) entered forwarding state
[  379.667428][T15617] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  379.777507][T15607] wg2 speed is unknown, defaulting to 1000
[  379.810721][T15607] lo speed is unknown, defaulting to 1000
[  379.930059][T15626] batadv0: entered promiscuous mode
[  379.952919][T15626] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  380.001981][T15626] 8021q: adding VLAN 0 to HW filter on device hsr1
[  380.031206][T15626] batadv0: left promiscuous mode
[  380.100585][T15647] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  380.244377][T15643] syzkaller0: entered promiscuous mode
[  380.254097][T15643] syzkaller0: entered allmulticast mode
[  380.908376][T15684] pim6reg1: entered promiscuous mode
[  380.913816][T15684] pim6reg1: entered allmulticast mode
[  381.736609][  T802] net_ratelimit: 87 callbacks suppressed
[  381.736630][  T802] bond8: (slave dummy0): failed to get link speed/duplex
[  381.750195][  T802] bond4: (slave bridge3): failed to get link speed/duplex
[  381.855310][   T48] bond8: (slave dummy0): failed to get link speed/duplex
[  381.865341][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  381.965277][   T36] bond8: (slave dummy0): failed to get link speed/duplex
[  381.985627][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  382.075345][   T48] bond8: (slave dummy0): failed to get link speed/duplex
[  382.095556][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  382.185400][   T48] bond8: (slave dummy0): failed to get link speed/duplex
[  382.205333][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  383.406694][T15659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  383.659421][T15718] __nla_validate_parse: 4 callbacks suppressed
[  383.659442][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'.
[  383.680361][T15717] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  383.716172][T15721] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2396'.
[  383.718148][T15716] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[  383.741243][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'.
[  383.747098][T15716] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[  383.773293][T15723] netlink: 'syz.3.2400': attribute type 1 has an invalid length.
[  383.784681][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'.
[  383.829448][T15725] syzkaller0: entered promiscuous mode
[  383.852272][T15725] syzkaller0: entered allmulticast mode
[  383.975999][T15734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2403'.
[  383.982887][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'.
[  384.200720][T15745] Bluetooth: MGMT ver 1.23
[  384.455794][T15763] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[  384.484188][T15763] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[  384.618650][T15771] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2413'.
[  385.338365][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2421'.
[  385.406727][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2422'.
[  385.420943][T15799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2421'.
[  386.322579][T15831] FAULT_INJECTION: forcing a failure.
[  386.322579][T15831] name failslab, interval 1, probability 0, space 0, times 0
[  386.362208][T15831] CPU: 0 UID: 0 PID: 15831 Comm: syz.3.2430 Not tainted syzkaller #0 PREEMPT(full) 
[  386.362235][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  386.362246][T15831] Call Trace:
[  386.362254][T15831]  <TASK>
[  386.362262][T15831]  dump_stack_lvl+0xe8/0x150
[  386.362297][T15831]  should_fail_ex+0x40c/0x560
[  386.362328][T15831]  should_failslab+0xa8/0x100
[  386.362358][T15831]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  386.362422][T15831]  ? dst_alloc+0x105/0x170
[  386.362569][T15831]  ? dst_alloc+0x105/0x170
[  386.362600][T15831]  dst_alloc+0x105/0x170
[  386.362632][T15831]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  386.362708][T15831]  ? ip_route_output_key_hash_rcu+0x1cf1/0x2720
[  386.362734][T15831]  ? ip_route_output_key_hash+0xd8/0x2a0
[  386.362758][T15831]  ip_route_output_key_hash+0x18d/0x2a0
[  386.362782][T15831]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  386.362824][T15831]  ? __asan_memset+0x22/0x50
[  386.362856][T15831]  ip_route_output_flow+0x2a/0x150
[  386.362875][T15831]  ? security_sk_classify_flow+0x6d/0x150
[  386.362987][T15831]  tcp_v4_connect+0x7b4/0x1950
[  386.363076][T15831]  ? __pfx_tcp_v4_connect+0x10/0x10
[  386.363110][T15831]  mptcp_connect+0x4d3/0x7a0
[  386.363226][T15831]  __inet_stream_connect+0x258/0xe00
[  386.363287][T15831]  ? __pfx___inet_stream_connect+0x10/0x10
[  386.363308][T15831]  ? __kasan_kmalloc+0x93/0xb0
[  386.363334][T15831]  ? __kmalloc_cache_noprof+0x32d/0x660
[  386.363359][T15831]  ? __kmalloc_cache_noprof+0x150/0x660
[  386.363382][T15831]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  386.363432][T15831]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  386.363464][T15831]  tcp_sendmsg_fastopen+0x3af/0x5f0
[  386.363495][T15831]  mptcp_sendmsg_fastopen+0x17b/0x540
[  386.363532][T15831]  mptcp_sendmsg+0x1a69/0x1d10
[  386.363595][T15831]  ? aa_sk_perm+0x6d5/0x900
[  386.363661][T15831]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  386.363686][T15831]  ? __pfx_aa_sk_perm+0x10/0x10
[  386.363710][T15831]  ? inet_sendmsg+0x298/0x320
[  386.363734][T15831]  ? __pfx_inet_sendmsg+0x10/0x10
[  386.363754][T15831]  sock_sendmsg_nosec+0x10e/0x180
[  386.363837][T15831]  ____sys_sendmsg+0x54e/0x850
[  386.363867][T15831]  ? __pfx_____sys_sendmsg+0x10/0x10
[  386.363901][T15831]  ? import_iovec+0x73/0xa0
[  386.363956][T15831]  ___sys_sendmsg+0x2a5/0x360
[  386.363978][T15831]  ? __lock_acquire+0x683/0x2cf0
[  386.364028][T15831]  ? __pfx____sys_sendmsg+0x10/0x10
[  386.364057][T15831]  ? kstrtouint+0x6e/0xe0
[  386.364107][T15831]  ? __fget_files+0x2a/0x420
[  386.364131][T15831]  ? __fget_files+0x3a2/0x420
[  386.364167][T15831]  __sys_sendmmsg+0x273/0x4d0
[  386.364207][T15831]  ? __pfx___sys_sendmmsg+0x10/0x10
[  386.364241][T15831]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  386.364286][T15831]  ? ksys_write+0x242/0x270
[  386.364308][T15831]  ? __pfx_ksys_write+0x10/0x10
[  386.364334][T15831]  __x64_sys_sendmmsg+0xa0/0xc0
[  386.364358][T15831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.364379][T15831]  do_syscall_64+0x174/0x580
[  386.364405][T15831]  ? trace_irq_disable+0x3b/0x140
[  386.364430][T15831]  ? clear_bhb_loop+0x40/0x90
[  386.364454][T15831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.364473][T15831] RIP: 0033:0x7fb13a39e019
[  386.364492][T15831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.364509][T15831] RSP: 002b:00007fb13b2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  386.364530][T15831] RAX: ffffffffffffffda RBX: 00007fb13a625fa0 RCX: 00007fb13a39e019
[  386.364544][T15831] RDX: 0000000000000002 RSI: 00002000000024c0 RDI: 0000000000000003
[  386.364556][T15831] RBP: 00007fb13b2c7090 R08: 0000000000000000 R09: 0000000000000000
[  386.364568][T15831] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001
[  386.364579][T15831] R13: 00007fb13a626038 R14: 00007fb13a625fa0 R15: 00007ffc593d07a8
[  386.364612][T15831]  </TASK>
[  386.966741][ T1175] net_ratelimit: 81 callbacks suppressed
[  386.966764][ T1175] bond4: (slave bridge3): failed to get link speed/duplex
[  387.025707][ T1175] bond8: (slave dummy0): failed to get link speed/duplex
[  387.125622][ T1175] bond4: (slave bridge3): failed to get link speed/duplex
[  387.153052][T15852] FAULT_INJECTION: forcing a failure.
[  387.153052][T15852] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.175272][T15852] CPU: 0 UID: 0 PID: 15852 Comm: syz.2.2436 Not tainted syzkaller #0 PREEMPT(full) 
[  387.175300][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  387.175311][T15852] Call Trace:
[  387.175319][T15852]  <TASK>
[  387.175326][T15852]  dump_stack_lvl+0xe8/0x150
[  387.175361][T15852]  should_fail_ex+0x40c/0x560
[  387.175389][T15852]  _copy_from_user+0x2d/0xb0
[  387.175409][T15852]  __sys_bind+0x1c6/0x410
[  387.175432][T15852]  ? __pfx___sys_bind+0x10/0x10
[  387.175464][T15852]  ? __pfx_ksys_write+0x10/0x10
[  387.175488][T15852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.175509][T15852]  __x64_sys_bind+0x7a/0x90
[  387.175530][T15852]  do_syscall_64+0x174/0x580
[  387.175557][T15852]  ? clear_bhb_loop+0x40/0x90
[  387.175580][T15852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.175598][T15852] RIP: 0033:0x7fa25c19e019
[  387.175616][T15852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.175631][T15852] RSP: 002b:00007fa25d135028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  387.175669][T15852] RAX: ffffffffffffffda RBX: 00007fa25c425fa0 RCX: 00007fa25c19e019
[  387.175682][T15852] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003
[  387.175694][T15852] RBP: 00007fa25d135090 R08: 0000000000000000 R09: 0000000000000000
[  387.175705][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.175715][T15852] R13: 00007fa25c426038 R14: 00007fa25c425fa0 R15: 00007fff8d31a698
[  387.175743][T15852]  </TASK>
[  387.346742][T15840] wg2 speed is unknown, defaulting to 1000
[  387.354277][T15840] lo speed is unknown, defaulting to 1000
[  387.405382][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.413657][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.508420][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.516775][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.635265][   T13] bond4: (slave bridge3): failed to get link speed/duplex
[  387.687211][   T12] bond8: (slave dummy0): failed to get link speed/duplex
[  387.775548][   T13] bond4: (slave bridge3): failed to get link speed/duplex
[  387.894290][T15873] Cannot find del_set index 2 as target
[  388.344075][T15883] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  388.421590][T15887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.614480][T15895] syzkaller0: entered promiscuous mode
[  388.632509][T15895] syzkaller0: entered allmulticast mode
[  388.865862][T15908] netlink: 'syz.3.2454': attribute type 11 has an invalid length.
[  388.919513][T15908] netlink: 'syz.3.2454': attribute type 4 has an invalid length.
[  388.958657][T15908] __nla_validate_parse: 7 callbacks suppressed
[  388.958677][T15908] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2454'.
[  389.028603][T15912] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2455'.
[  389.309937][T15928] netlink: 'syz.3.2459': attribute type 2 has an invalid length.
[  389.326318][T15928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2459'.
[  389.468995][T15933] FAULT_INJECTION: forcing a failure.
[  389.468995][T15933] name failslab, interval 1, probability 0, space 0, times 0
[  389.536366][T15933] CPU: 1 UID: 0 PID: 15933 Comm: syz.2.2461 Not tainted syzkaller #0 PREEMPT(full) 
[  389.536393][T15933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  389.536405][T15933] Call Trace:
[  389.536412][T15933]  <TASK>
[  389.536420][T15933]  dump_stack_lvl+0xe8/0x150
[  389.536454][T15933]  should_fail_ex+0x40c/0x560
[  389.536484][T15933]  should_failslab+0xa8/0x100
[  389.536513][T15933]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  389.536541][T15933]  ? __alloc_skb+0x1d7/0x7a0
[  389.536642][T15933]  ? __alloc_skb+0x1d7/0x7a0
[  389.536669][T15933]  __alloc_skb+0x1d7/0x7a0
[  389.536694][T15933]  tcp_stream_alloc_skb+0x3f/0x580
[  389.536719][T15933]  ? __asan_memset+0x22/0x50
[  389.536744][T15933]  tcp_connect+0x1582/0x53e0
[  389.536794][T15933]  ? get_random_u16+0x139/0x910
[  389.536869][T15933]  ? __pfx_tcp_connect+0x10/0x10
[  389.536909][T15933]  ? __asan_memset+0x22/0x50
[  389.536934][T15933]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  389.536984][T15933]  ? secure_tcp_seq_and_ts_off+0xf2/0x1d0
[  389.537038][T15933]  ? sk_setup_caps+0x94f/0xbc0
[  389.537060][T15933]  ? sk_setup_caps+0x29/0xbc0
[  389.537081][T15933]  tcp_v4_connect+0x1051/0x1950
[  389.537120][T15933]  ? __pfx_tcp_v4_connect+0x10/0x10
[  389.537150][T15933]  mptcp_connect+0x4d3/0x7a0
[  389.537181][T15933]  __inet_stream_connect+0x258/0xe00
[  389.537216][T15933]  ? __pfx___inet_stream_connect+0x10/0x10
[  389.537236][T15933]  ? __kasan_kmalloc+0x93/0xb0
[  389.537261][T15933]  ? __kmalloc_cache_noprof+0x32d/0x660
[  389.537286][T15933]  ? __kmalloc_cache_noprof+0x150/0x660
[  389.537308][T15933]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  389.537329][T15933]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  389.537355][T15933]  tcp_sendmsg_fastopen+0x3af/0x5f0
[  389.537382][T15933]  mptcp_sendmsg_fastopen+0x17b/0x540
[  389.537417][T15933]  mptcp_sendmsg+0x1a69/0x1d10
[  389.537460][T15933]  ? aa_sk_perm+0x6d5/0x900
[  389.537487][T15933]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  389.537512][T15933]  ? __pfx_aa_sk_perm+0x10/0x10
[  389.537535][T15933]  ? inet_sendmsg+0x298/0x320
[  389.537557][T15933]  ? __pfx_inet_sendmsg+0x10/0x10
[  389.537576][T15933]  sock_sendmsg_nosec+0x10e/0x180
[  389.537613][T15933]  ____sys_sendmsg+0x54e/0x850
[  389.537640][T15933]  ? __pfx_____sys_sendmsg+0x10/0x10
[  389.537671][T15933]  ? import_iovec+0x73/0xa0
[  389.537692][T15933]  ___sys_sendmsg+0x2a5/0x360
[  389.537711][T15933]  ? __lock_acquire+0x683/0x2cf0
[  389.537742][T15933]  ? __pfx____sys_sendmsg+0x10/0x10
[  389.537766][T15933]  ? kstrtouint+0x6e/0xe0
[  389.537807][T15933]  ? __fget_files+0x2a/0x420
[  389.537828][T15933]  ? __fget_files+0x3a2/0x420
[  389.537860][T15933]  __sys_sendmmsg+0x273/0x4d0
[  389.537895][T15933]  ? __pfx___sys_sendmmsg+0x10/0x10
[  389.537924][T15933]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  389.537961][T15933]  ? ksys_write+0x242/0x270
[  389.537980][T15933]  ? __pfx_ksys_write+0x10/0x10
[  389.538005][T15933]  __x64_sys_sendmmsg+0xa0/0xc0
[  389.538026][T15933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.538045][T15933]  do_syscall_64+0x174/0x580
[  389.538069][T15933]  ? trace_irq_disable+0x3b/0x140
[  389.538092][T15933]  ? clear_bhb_loop+0x40/0x90
[  389.538115][T15933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.538133][T15933] RIP: 0033:0x7fa25c19e019
[  389.538150][T15933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.538166][T15933] RSP: 002b:00007fa25d135028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  389.538186][T15933] RAX: ffffffffffffffda RBX: 00007fa25c425fa0 RCX: 00007fa25c19e019
[  389.538198][T15933] RDX: 0000000000000002 RSI: 00002000000024c0 RDI: 0000000000000003
[  389.538208][T15933] RBP: 00007fa25d135090 R08: 0000000000000000 R09: 0000000000000000
[  389.538218][T15933] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001
[  389.538227][T15933] R13: 00007fa25c426038 R14: 00007fa25c425fa0 R15: 00007fff8d31a698
[  389.538256][T15933]  </TASK>
[  390.029466][T15938] syzkaller0: entered promiscuous mode
[  390.075627][T15938] syzkaller0: entered allmulticast mode
[  390.089578][T15953] vti0: entered promiscuous mode
[  390.103260][T15938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.267991][T15949] tipc: Resetting bearer <eth:syzkaller0>
[  390.318669][T15936] tipc: Resetting bearer <eth:syzkaller0>
[  390.389757][T15936] tipc: Disabling bearer <eth:syzkaller0>
[  390.469196][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'.
[  390.575730][T15976] netlink: 'syz.2.2473': attribute type 1 has an invalid length.
[  390.585735][T15976] netlink: 'syz.2.2473': attribute type 12 has an invalid length.
[  390.594134][T15976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2473'.
[  390.598708][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2475'.
[  390.690361][T15978] vlan2: entered promiscuous mode
[  390.703353][T15978] bridge0: entered promiscuous mode
[  390.717235][T15978] vlan1: entered promiscuous mode
[  390.722582][T15978] geneve0: entered promiscuous mode
[  390.770016][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'.
[  390.966860][   T50] block nbd1: Receive control failed (result -32)
[  390.968611][ T5636] block nbd1: Receive control failed (result -32)
[  391.325835][T15982] netlink: 'syz.2.2476': attribute type 5 has an invalid length.
[  391.970759][T16014] syzkaller0: entered promiscuous mode
[  391.994271][T16014] syzkaller0: entered allmulticast mode
[  392.012446][T16016] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  392.042792][T16018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.058179][T16016] syzkaller0: entered promiscuous mode
[  392.073314][T16016] syzkaller0: entered allmulticast mode
[  392.198178][T16018] tipc: Resetting bearer <eth:syzkaller0>
[  392.299658][T16012] tipc: Resetting bearer <eth:syzkaller0>
[  392.305892][   T12] net_ratelimit: 60 callbacks suppressed
[  392.305911][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.319905][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.378112][T16012] tipc: Disabling bearer <eth:syzkaller0>
[  392.455298][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.463670][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.473350][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'.
[  392.526995][T16039] netlink: 'syz.1.2493': attribute type 14 has an invalid length.
[  392.538069][T16039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2493'.
[  392.575129][T16041] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.621072][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'.
[  392.688040][T16026] syzkaller0: entered promiscuous mode
[  392.708240][T16026] syzkaller0: entered allmulticast mode
[  392.895222][ T1175] bond4: (slave bridge3): failed to get link speed/duplex
[  393.435889][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.444153][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.475285][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.483582][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
Stopping sshd: stopped /usr/sbin/sshd (pid 5371)
OK
Stopping crond: stopped /usr/sbin/crond (pid 5357)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5281)
[  394.515339][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
Stopping network: [  397.495266][   T48] net_ratelimit: 7 callbacks suppressed
[  397.495287][   T48] bond8: (slave dummy0): failed to get link speed/duplex
[  397.495311][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.515462][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  397.516152][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.538892][T16072] 8021q: adding VLAN 0 to HW filter on device batadv1
[  397.613492][T16093] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  397.680254][T16121] __nla_validate_parse: 2 callbacks suppressed
[  397.680273][T16121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2503'.
[  397.706464][   T36] bond4: (slave bridge3): failed to get link speed/duplex
[  397.721130][T16127] IPv6: NLM_F_CREATE should be specified when creating new route
[  397.775252][T16121] ipvlan0: entered promiscuous mode
[  397.810266][   T36] IPVS: starting estimator thread 0...
[  397.826210][T16121] ipvlan0: left promiscuous mode
[  397.864268][T16133] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  397.904156][T16129] syzkaller0: entered promiscuous mode
[  397.915370][T16129] syzkaller0: entered allmulticast mode
[  397.935398][T16130] IPVS: using max 35 ests per chain, 84000 per kthread
[  397.956740][   T48] bond8: (slave dummy0): failed to get link speed/duplex
[  397.982991][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  398.006489][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.014724][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.149588][T16146] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.185295][   T36] bond8: (slave dummy0): failed to get link speed/duplex
[  398.405938][T16145] tc_dump_action: action bad kind
OK
[  398.720361][T16164] pim6reg1: entered promiscuous mode
[  398.744069][T16164] pim6reg1: entered allmulticast mode
Stopping iptables: OK
[  399.176204][T16180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2517'.
Stopping system message bus: [  399.207596][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2517'.
[  399.220470][T16180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2517'.
[  399.443648][T16192] netlink: 'syz.2.2523': attribute type 1 has an invalid length.
[  399.462382][T16196] veth0_to_team: entered allmulticast mode
[  399.526078][T16192] netlink: 'syz.2.2523': attribute type 1 has an invalid length.
[  399.544590][T16194] batman_adv: batadv0: Adding interface: gretap1
[  399.596185][T16194] batman_adv: batadv0: The MTU of interface gretap1 is too small (1414) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.700865][T16194] batman_adv: batadv0: Interface activated: gretap1
[  399.783672][T16208] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  399.841852][T16216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2524'.
[  399.995392][T16223] netlink: 'syz.2.2525': attribute type 12 has an invalid length.
[  400.040489][T16223] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2525'.
[  400.378271][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'.
done
[  400.669217][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'.
[  400.727086][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'.
[  400.887936][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2536'.
[  400.994702][T16262] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  401.019615][T16262] bond1 (unregistering): Released all slaves
[  401.167458][T16272] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  401.424223][T16289] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20004
[  401.756309][T16302] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  401.916549][T16306] syzkaller1: entered promiscuous mode
[  401.935475][T16306] syzkaller1: entered allmulticast mode
[  402.234313][T16319] syzkaller0: entered promiscuous mode
[  402.274664][T16319] syzkaller0: entered allmulticast mode
Stopping klogd: [  402.535525][    C0] net_ratelimit: 67 callbacks suppressed
[  402.535569][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.549514][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.635456][  T143] bond4: (slave bridge3): failed to get link speed/duplex
[  402.669062][  T143] bond8: (slave dummy0): failed to get link speed/duplex
OK
[  402.875216][ T1175] bond4: (slave bridge3): failed to get link speed/duplex
Stopping acpid: [  402.914029][T16346] netlink: 'syz.4.2558': attribute type 2 has an invalid length.
[  402.930637][   T13] bond8: (slave dummy0): failed to get link speed/duplex
[  402.946745][T16346] __nla_validate_parse: 3 callbacks suppressed
[  402.946766][T16346] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2558'.
[  402.963599][T16358] netlink: 'syz.1.2561': attribute type 1 has an invalid length.
[  403.023496][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'.
[  403.067622][T16355] IPVS: Scheduler module ip_vs_sip not found
[  403.174599][T16368] netlink: 'syz.0.2562': attribute type 7 has an invalid length.
[  403.208183][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2564'.
[  403.218615][T16368] netlink: 'syz.0.2562': attribute type 8 has an invalid length.
[  403.265835][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  403.297769][   T48] bond8: (slave dummy0): failed to get link speed/duplex
[  403.346412][T16377] batadv_slave_1: entered promiscuous mode
[  403.401750][  T143] bond4: (slave bridge3): failed to get link speed/duplex
[  403.423580][T16376] batadv_slave_1: left promiscuous mode
[  403.456065][   T13] bond8: (slave dummy0): failed to get link speed/duplex
[  403.507004][T16385] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  403.541375][T16385] syzkaller0: entered promiscuous mode
[  403.551715][T16385] syzkaller0: entered allmulticast mode
[  404.152460][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'.
[  404.170150][T16412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2576'.
OK
[  404.188380][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'.
[  404.277191][T16412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2576'.
[  404.300510][T16415] pim6reg1: entered promiscuous mode
[  404.332011][T16415] pim6reg1: entered allmulticast mode
Stopping syslogd: stopped /sbin/syslogd (pid 4969)
OK
[  404.558761][T16441] tunl0: left promiscuous mode
[  404.690190][T16448] sctp: [Deprecated]: syz.4.2584 (pid 16448) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.690190][T16448] Use struct sctp_sack_info instead
[  404.806900][T16441] tipc: Resetting bearer <eth:team0>
[  404.868901][T16441] dummy0: left promiscuous mode
[  405.070585][T16472] nbd: socks must be embedded in a SOCK_ITEM attr
umount: can't remount debugfs read-only
[  405.116166][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2588'.
[  405.454084][T16441] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  405.490036][T16441] vti0: left promiscuous mode
[  405.505795][T16441] bond1: left promiscuous mode
[  405.510691][T16441] bridge1: left promiscuous mode
[  405.535830][T16441] bond2: left allmulticast mode
[  405.553851][T16441] geneve2: left promiscuous mode
[  405.594129][T16441] gretap1: left allmulticast mode
[  405.616643][T16441] bond3: left promiscuous mode
[  405.621902][T16441] bond3: left allmulticast mode
[  405.643700][T16441] vlan0: left allmulticast mode
[  405.654873][T16441] bridge3: left allmulticast mode
[  405.672411][T16441] ip6gre1: left promiscuous mode
[  405.682932][T16441] ip6gre1: left allmulticast mode
[  405.695505][T16441] geneve5: left promiscuous mode
[  405.719446][T16441] bond6: left promiscuous mode
[  405.729819][T16441] erspan1: left promiscuous mode
[  405.741932][T16441] bond6: left allmulticast mode
[  405.753460][T16441] erspan1: left allmulticast mode
[  405.805097][T16452] ±ÿ: renamed from lo (while UP)
[  405.848637][T16458] syzkaller0: entered promiscuous mode
[  405.854385][T16458] syzkaller0: entered allmulticast mode
[  405.865724][   T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.069860][T16479] netlink: 'syz.1.2591': attribute type 1 has an invalid length.
[  406.092538][T16479] netlink: 'syz.1.2591': attribute type 1 has an invalid length.
[  406.100963][T16481] netlink: 'syz.3.2589': attribute type 1 has an invalid length.
[  406.213592][T16474] veth0_to_bond: entered allmulticast mode
[  406.245289][ T8246] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.315802][   T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.345839][T16483] veth0_to_bond: left allmulticast mode
[  406.385619][   T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.487376][T16486] syzkaller0: entered promiscuous mode
[  406.497254][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'.
[  406.507065][T16486] syzkaller0: entered allmulticast mode
[  406.558915][T16492] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2595'.
[  406.889931][T16501] bridge0: entered allmulticast mode
[  407.575414][    C0] net_ratelimit: 43 callbacks suppressed
[  407.575453][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.589474][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.618520][   T48] bond4: (slave bridge3): failed to get link speed/duplex
[  407.651077][T16544] tls_set_device_offload_rx: netdev not found
[  407.665261][   T48] bond8: (slave dummy0): failed to get link speed/duplex
umount: sysfs busy - remounted read-only
[  407.799296][ T8248] bond8: (slave dummy0): failed to get link speed/duplex
[  407.810172][ T1175] bond4: (slave bridge3): failed to get link speed/duplex
umount: devtmpfs busy - remounted read-only
[  407.928888][T16558] netlink: 'syz.1.2609': attribute type 25 has an invalid length.
[  407.937220][T16558] netlink: 'syz.1.2609': attribute type 3 has an invalid length.
umount: can't remount /dev/root read-only
[  407.958799][ T1175] bond8: (slave dummy0): failed to get link speed/duplex
[  407.960601][T16558] __nla_validate_parse: 8 callbacks suppressed
[  407.960617][T16558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2609'.
The system is going down NOW!
[  408.009804][ T1175] bond4: (slave bridge3): failed to get link speed/duplex
Sent SIGTERM to all processes
[  408.049725][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.057995][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
Connection to 10.128.1.31 closed by remote host.
[  408.965792][T16394] ------------[ cut here ]------------
[  408.972444][T16394] refcount_t: underflow; use-after-free.
[  408.978499][T16394] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#1: kbnepd bnep0/16394
[  408.988862][T16394] Modules linked in:
[  408.993281][T16394] CPU: 1 UID: 0 PID: 16394 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) 
[  409.003034][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  409.013200][T16394] RIP: 0010:refcount_warn_saturate+0xb2/0x110
[  409.022060][T16394] Code: 54 b2 8e 0b 67 48 0f b9 3a eb 4a e8 b8 21 f3 fc 48 8d 3d 51 b2 8e 0b 67 48 0f b9 3a eb 37 e8 a5 21 f3 fc 48 8d 3d 4e b2 8e 0b <67> 48 0f b9 3a eb 24 e8 92 21 f3 fc 48 8d 3d 4b b2 8e 0b 67 48 0f
[  409.042646][T16394] RSP: 0018:ffffc900033bf7e0 EFLAGS: 00010293
[  409.048791][T16394] RAX: ffffffff84d3f25b RBX: 0000000000000003 RCX: ffff88801eba0000
[  409.057258][T16394] RDX: 0000000000000000 RSI: ffffffff8f3652c0 RDI: ffffffff9062a4b0
[  409.065528][T16394] RBP: 0000000000000000 R08: ffff88801eba0000 R09: 0000000000000005
[  409.073513][T16394] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  409.081625][T16394] R13: ffff88807b68b460 R14: ffff88807b68b478 R15: ffffffff8626e180
[  409.089829][T16394] FS:  0000000000000000(0000) GS:ffff88812504f000(0000) knlGS:0000000000000000
[  409.098818][T16394] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  409.105427][T16394] CR2: 00007f7b1e3f14b8 CR3: 000000000e946000 CR4: 00000000003526f0
[  409.113394][T16394] Call Trace:
[  409.116689][T16394]  <TASK>
[  409.119665][T16394]  klist_dec_and_del+0x3c7/0x3d0
[  409.124966][T16394]  ? __pfx_klist_children_put+0x10/0x10
[  409.130842][T16394]  klist_del+0xa6/0x110
[  409.135030][T16394]  device_del+0x27f/0x8f0
[  409.139483][T16394]  ? lockdep_hardirqs_on+0x7a/0x110
[  409.144678][T16394]  ? __pfx_device_del+0x10/0x10
[  409.149547][T16394]  ? pm_runtime_set_memalloc_noio+0x1e7/0x260
[  409.155729][T16394]  ? netdev_unregister_kobject+0x347/0x450
[  409.161604][T16394]  unregister_netdevice_many_notify+0x1be4/0x2150
[  409.168088][T16394]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  409.174842][T16394]  ? rtnl_net_dev_lock+0x36/0x2f0
[  409.179872][T16394]  ? rtnl_net_dev_lock+0x36/0x2f0
[  409.184891][T16394]  unregister_netdev+0x155/0x1f0
[  409.190169][T16394]  ? __pfx_unregister_netdev+0x10/0x10
[  409.195766][T16394]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  409.201638][T16394]  bnep_session+0x2af2/0x2d20
[  409.206468][T16394]  ? __lock_acquire+0x683/0x2cf0
[  409.211402][T16394]  ? kthread_affine_node+0x2b2/0x360
[  409.216735][T16394]  ? __pfx_bnep_session+0x10/0x10
[  409.221749][T16394]  ? do_raw_spin_lock+0x12b/0x2f0
[  409.227101][T16394]  ? __pfx_woken_wake_function+0x10/0x10
[  409.232730][T16394]  ? __kthread_parkme+0x71/0x1f0
[  409.238036][T16394]  ? __kthread_parkme+0x196/0x1f0
[  409.243078][T16394]  kthread+0x388/0x470
[  409.247676][T16394]  ? __pfx_bnep_session+0x10/0x10
[  409.252694][T16394]  ? __pfx_kthread+0x10/0x10
[  409.257331][T16394]  ret_from_fork+0x514/0xb70
[  409.261965][T16394]  ? __pfx_ret_from_fork+0x10/0x10
[  409.267092][T16394]  ? __switch_to+0xc89/0x1420
[  409.271759][T16394]  ? __pfx_kthread+0x10/0x10
[  409.276447][T16394]  ret_from_fork_asm+0x1a/0x30
[  409.281206][T16394]  </TASK>
[  409.284220][T16394] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  409.291523][T16394] CPU: 1 UID: 0 PID: 16394 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) 
[  409.301054][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  409.311095][T16394] Call Trace:
[  409.314361][T16394]  <TASK>
[  409.317280][T16394]  vpanic+0x56c/0xa60
[  409.321310][T16394]  ? __pfx__printk+0x10/0x10
[  409.325885][T16394]  ? __pfx_vpanic+0x10/0x10
[  409.330376][T16394]  ? is_bpf_text_address+0x292/0x2b0
[  409.335650][T16394]  ? is_bpf_text_address+0x26/0x2b0
[  409.340838][T16394]  panic+0xc5/0xd0
[  409.344625][T16394]  ? __pfx_panic+0x10/0x10
[  409.349068][T16394]  ? ret_from_fork_asm+0x1a/0x30
[  409.354003][T16394]  __warn+0x315/0x4c0
[  409.357968][T16394]  ? refcount_warn_saturate+0xb2/0x110
[  409.363411][T16394]  ? refcount_warn_saturate+0xb2/0x110
[  409.368847][T16394]  __report_bug+0x276/0x570
[  409.373398][T16394]  ? trace_irq_disable+0x3b/0x140
[  409.378432][T16394]  ? refcount_warn_saturate+0xb2/0x110
[  409.383936][T16394]  ? __pfx___report_bug+0x10/0x10
[  409.388973][T16394]  ? trace_contention_end+0x3b/0x160
[  409.394271][T16394]  ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0
[  409.400507][T16394]  report_bug_entry+0x19a/0x290
[  409.405348][T16394]  ? refcount_warn_saturate+0xb2/0x110
[  409.410785][T16394]  ? refcount_warn_saturate+0xb7/0x110
[  409.416230][T16394]  handle_bug+0xce/0x200
[  409.420476][T16394]  exc_invalid_op+0x1a/0x50
[  409.424963][T16394]  asm_exc_invalid_op+0x1a/0x20
[  409.429798][T16394] RIP: 0010:refcount_warn_saturate+0xb2/0x110
[  409.435861][T16394] Code: 54 b2 8e 0b 67 48 0f b9 3a eb 4a e8 b8 21 f3 fc 48 8d 3d 51 b2 8e 0b 67 48 0f b9 3a eb 37 e8 a5 21 f3 fc 48 8d 3d 4e b2 8e 0b <67> 48 0f b9 3a eb 24 e8 92 21 f3 fc 48 8d 3d 4b b2 8e 0b 67 48 0f
[  409.455516][T16394] RSP: 0018:ffffc900033bf7e0 EFLAGS: 00010293
[  409.461681][T16394] RAX: ffffffff84d3f25b RBX: 0000000000000003 RCX: ffff88801eba0000
[  409.469844][T16394] RDX: 0000000000000000 RSI: ffffffff8f3652c0 RDI: ffffffff9062a4b0
[  409.477819][T16394] RBP: 0000000000000000 R08: ffff88801eba0000 R09: 0000000000000005
[  409.485798][T16394] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  409.493753][T16394] R13: ffff88807b68b460 R14: ffff88807b68b478 R15: ffffffff8626e180
[  409.501707][T16394]  ? __pfx_klist_children_put+0x10/0x10
[  409.507275][T16394]  ? refcount_warn_saturate+0xab/0x110
[  409.512724][T16394]  klist_dec_and_del+0x3c7/0x3d0
[  409.517647][T16394]  ? __pfx_klist_children_put+0x10/0x10
[  409.523199][T16394]  klist_del+0xa6/0x110
[  409.527428][T16394]  device_del+0x27f/0x8f0
[  409.531765][T16394]  ? lockdep_hardirqs_on+0x7a/0x110
[  409.536976][T16394]  ? __pfx_device_del+0x10/0x10
[  409.541811][T16394]  ? pm_runtime_set_memalloc_noio+0x1e7/0x260
[  409.547864][T16394]  ? netdev_unregister_kobject+0x347/0x450
[  409.553658][T16394]  unregister_netdevice_many_notify+0x1be4/0x2150
[  409.560066][T16394]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  409.566821][T16394]  ? rtnl_net_dev_lock+0x36/0x2f0
[  409.571835][T16394]  ? rtnl_net_dev_lock+0x36/0x2f0
[  409.576864][T16394]  unregister_netdev+0x155/0x1f0
[  409.581791][T16394]  ? __pfx_unregister_netdev+0x10/0x10
[  409.587258][T16394]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  409.593054][T16394]  bnep_session+0x2af2/0x2d20
[  409.597720][T16394]  ? __lock_acquire+0x683/0x2cf0
[  409.602702][T16394]  ? kthread_affine_node+0x2b2/0x360
[  409.608010][T16394]  ? __pfx_bnep_session+0x10/0x10
[  409.613024][T16394]  ? do_raw_spin_lock+0x12b/0x2f0
[  409.618034][T16394]  ? __pfx_woken_wake_function+0x10/0x10
[  409.623650][T16394]  ? __kthread_parkme+0x71/0x1f0
[  409.628583][T16394]  ? __kthread_parkme+0x196/0x1f0
[  409.633607][T16394]  kthread+0x388/0x470
[  409.637663][T16394]  ? __pfx_bnep_session+0x10/0x10
[  409.642671][T16394]  ? __pfx_kthread+0x10/0x10
[  409.647261][T16394]  ret_from_fork+0x514/0xb70
[  409.651840][T16394]  ? __pfx_ret_from_fork+0x10/0x10
[  409.656953][T16394]  ? __switch_to+0xc89/0x1420
[  409.661641][T16394]  ? __pfx_kthread+0x10/0x10
[  409.666231][T16394]  ret_from_fork_asm+0x1a/0x30
[  409.670981][T16394]  </TASK>
[  410.763817][T16394] Shutting down cpus with NMI
[  410.768718][T16394] Kernel Offset: disabled
[  410.773051][T16394] Rebooting in 86400 seconds..