last executing test programs:

53.821562156s ago: executing program 4 (id=1558):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003640)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x58}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4)
clock_gettime(0x0, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
r4 = socket(0x1e, 0x4, 0x0)
connect$llc(r4, &(0x7f0000000440)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @local}, 0x10)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/197, 0xc5}, {&(0x7f0000000100)=""/23, 0x17}], 0x2}, 0x100}, {{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000300)=""/178, 0xb2}, 0x3}, {{&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1}, 0x1}, {{&(0x7f0000000440)=@caif=@rfm, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/43, 0x2b}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000540)=""/3, 0x3}, {&(0x7f0000000880)=""/159, 0x9f}, {&(0x7f0000000940)=""/113, 0x71}], 0x7, &(0x7f0000000a40)=""/4096, 0x1000}}], 0x4, 0x10003, &(0x7f0000001b40)={r2, r3+60000000})
recvmmsg(r1, &(0x7f0000003540)=[{{&(0x7f0000001b80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001c00)=""/105, 0x69}, {&(0x7f0000001c80)=""/74, 0x4a}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000001d00)=""/71, 0x47}, {&(0x7f0000001d80)=""/121, 0x79}, {&(0x7f0000001e00)=""/83, 0x53}, {&(0x7f0000001e80)=""/20, 0x14}, {&(0x7f0000001ec0)=""/236, 0xec}, {&(0x7f0000001fc0)=""/42, 0x2a}], 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000020c0)=""/59, 0x3b}, {&(0x7f0000002100)=""/193, 0xc1}], 0x2, &(0x7f0000002240)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000003240)=@nfc_llcp, 0x80, &(0x7f0000003400)=[{&(0x7f00000032c0)=""/44, 0x2c}, {&(0x7f0000003300)=""/22, 0x16}, {&(0x7f0000003340)=""/150, 0x96}], 0x3, &(0x7f0000003440)=""/249, 0xf9}}], 0x3, 0x2140, &(0x7f0000003600))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r7, 0x6, 0x1, &(0x7f00000036c0), &(0x7f0000003700)=0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00%'], 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r10, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='hsr0\x00', 0x10)
connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)

52.987097448s ago: executing program 4 (id=1564):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @random="94f0c5d4e816", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, 'z?\x00', 0x10, 0x21, 0x0, @private0, @mcast2, {[], {{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "dba20d"}}}}}}}, 0x0)
mmap(&(0x7f0000163000/0x4000)=nil, 0x4000, 0x3000006, 0x810, 0xffffffffffffffff, 0x42099000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x430, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa53}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}]}]}, @TIPC_NLA_LINK={0x18c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5bf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x430}}, 0x805)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r7, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)

52.839135703s ago: executing program 1 (id=1565):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4000844)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0)
ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1)
ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61157800000000006113700000000000bfa000000000000007000000ee0016055e03010000000000640500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000040600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f00000002c0)={0x1}, 0x8)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000040000000500008c6f7f7000000008000b0004000000"], 0x34}}, 0x0)
socket(0x10, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

52.432545724s ago: executing program 1 (id=1568):
socket$tipc(0x1e, 0x2, 0x0) (async)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000980)=[{&(0x7f0000000340)="a4a0ffa0c7ae299cd5cf5cea51a65b7eb970a1f156173e3622974a0560d3b33e83d4c077844647e1039163ad68ed2e224024452b1883c389b9a5e4a365434dd51add67e56b5fabaa40de180f1ffd863b16db74564e5d87d2d81dc736998f3767cc08f2ceb6b7e857377b015ef023bda2fcf8071262c3148d2b08a789795872d107f0", 0x82}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x401c5820, &(0x7f0000000080)) (async)
ioctl$FS_IOC_SETFLAGS(r3, 0x401c5820, &(0x7f0000000080))
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="9f", 0x1}], 0x1)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
unshare(0x28000600)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7, 0x5}, &(0x7f0000000240)=0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7, 0x5}, &(0x7f0000000240)=0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket(0x10, 0x800000000080002, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4)
socket$tipc(0x1e, 0x2, 0x0) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x10000000, 0x3, 0x3}, 0x10)
sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) (async)
sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)

52.240746867s ago: executing program 4 (id=1570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042060006ba12c172256ee6fa95b254f93529007547bbcaaae735cf8ffd305539f999e0164c1e8143c37e13d9754173099a4d81641e016454ad1430791de6a55c4ccf13dde1fb93b7e73b7589f3ab5c1ea7f61100ea8458cf685dd47cd285a61bd4d36914b52834b2c9"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@get={0x1, 0xffffffffffffffff, 0x3})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4084, 0xff4}, {&(0x7f0000000a40)=""/193, 0xc1}], 0x2}}], 0x1, 0x10000, 0x0)

51.568018803s ago: executing program 1 (id=1573):
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) (async)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
r2 = socket(0x1e, 0x800, 0xfffffffd)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x810) (async, rerun: 64)
sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000080) (async)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
recvmmsg$unix(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b00)=""/4096, 0xd24}], 0x4e}}], 0x1, 0x0, 0x0)

51.040189011s ago: executing program 4 (id=1577):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r3=>0x0})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x24}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x8000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0xe8, 0x12, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0xd4, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_OPTS={0x38, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_ERSPAN={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ERSPAN_VERSION={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY_ERSPAN_V1_INDEX={0x8, 0x2, 0x1, 0x0, 0xd061}, @NFTA_TUNNEL_KEY_ERSPAN_V1_INDEX={0x8}, @NFTA_TUNNEL_KEY_ERSPAN_V1_INDEX={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY_ERSPAN_V2_HWID={0x5, 0x3, 0x9}, @NFTA_TUNNEL_KEY_ERSPAN_VERSION={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @NFTA_TUNNEL_KEY_IP6={0x88, 0x3, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x10000}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @mcast2}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @private1}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @private0}]}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x3}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x158}, 0x1, 0x0, 0x0, 0x40008c4}, 0x48800)

50.695900633s ago: executing program 4 (id=1579):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0x2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x40}}, 0x0)

50.48117859s ago: executing program 1 (id=1581):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xf7}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x28, 0x2c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0x5e)

50.247508482s ago: executing program 4 (id=1583):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41)
pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/10, 0xa}, {&(0x7f0000000380)=""/38, 0x26}], 0x2}, 0x200}], 0x1, 0x2102, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0x9, 0x9}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)

49.648353815s ago: executing program 3 (id=1586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x40901}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2040)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800)

38.5655947s ago: executing program 3 (id=1590):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}, "060086dd030020a9"}}}}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x378, 0x378, 0x100, 0x378, 0x0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x6, 0x3, 0x10, 0xe113, 0x401, 0x200}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x6}, {0x4, 0x4, 0x4b7d0b855004f336}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x62, 0x7, 0x3, 0x0, 0x7841, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2, [0xffffffff, 0xffffff00, 0xa61cd9a5c647758b, 0xffffff], [0xff, 0xffffff00, 0xff000000], [0xff000000, 0xff, 0x0, 0xff000000], 0x1040, 0x200}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv6=@empty, 0x15, 0x18, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x40}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r4)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r5)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1ee}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040040}, 0x20004008)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000800)='memory.events.local\x00', 0x0, 0x0)

38.565029446s ago: executing program 1 (id=1591):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001680)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000008a00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002300)="4462658cd3df5eef565385356b7e67931bf9b72bddda93110f6b324aba2b028c553ea76486b53bcef831c12662aae8866aef72193d2e20ef4c18362d6708b34e1d2803c1216ff00de78002afc16fa1dd31be9c52343ce9d0f45194c1", 0x5c}, {&(0x7f0000002380)="7300987c7443cefa4eeaf65fa2acd2cda4eac620b6038aa3444b057fee75eb45722044c8359ad4468b66685fa1fae20e96efce509568f901655eaf91edba6f1e1fd0b6995d46e24bc6ab6537f18345029154c6fbeeff76378685bfc7695f2ce31e0ff898d13b8b5f671aa57059d846ce214a3a2b5dd26f39e90d9cb54759fef88f630d226f766cecafd0fbe2b02e6a28cf1b43e89d48b13846d75b5df265ce52b6f580b2835c61b14ebe755288bf5dc3861988c440a4296ed8bcb9", 0xbb}, {&(0x7f0000002440)="6d3eebc925f056e24dc5d0ab5db85f56e97b5db97a74b2481c0a4f1bff70eb1387fb3c336a28f23f5baa7d1f8bd81fa0fb88726d81ea69c8f216c2d143abaafe4f667fd1dd8ec629530efdb27533f4f69f12012197d3646a423432ff328ed7c9cf0cbf6975019f86b9", 0x69}], 0x3}], 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110580000000000c6000000000000009500000000000d00"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

38.255698566s ago: executing program 3 (id=1592):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
close(r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async)
sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) (async)
recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) (async)
close(r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) (async)

34.572354213s ago: executing program 32 (id=1583):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41)
pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/10, 0xa}, {&(0x7f0000000380)=""/38, 0x26}], 0x2}, 0x200}], 0x1, 0x2102, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0x9, 0x9}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)

30.524286831s ago: executing program 1 (id=1596):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r1, 0x20000005)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {}, {0x0, 0x1}, 0x9, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f0000000640), &(0x7f0000000680)=r7}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080), 0x8)
syz_emit_ethernet(0xd6e, &(0x7f0000002e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xd38, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x17, "122b472e41e24b11f34b608816e522a7f3032efcb5633a3983e172d7dbb1cedeea00156dbf01dbd8e49e39e8fd54a9300113f16b56fd3ece899e2dff0f1443afc40da882e5a3d76d593c09402a0de4f7b9fcbd9c0f4b968122455e34e1afa222c60b04a9f2bfd548605a711678755475861538b9de80bb31e39fd8d5ba7fc1988c850ba77307a7519940fc99f9a55be09c10cf4bce1ecfeb8a12772325a7c3d35e786a6518357d8754da82aac43dba342a23914b38c05e"}, {0x22, 0x18c, "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"}]}}}}}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e12b000060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockname$packet(r9, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8001}, @alu={0x4, 0x2, 0x4, 0x7, 0x3, 0xc, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

30.400018726s ago: executing program 3 (id=1598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x2}, 0x18)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r3=>0x0})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x40044)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

29.567905741s ago: executing program 0 (id=1600):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000038010880540007800800050000000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800060000000000240007800800060000000000080006000000000008000500000000000800050004"], 0x164}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7, 0x40}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@ip={@empty, @local, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}]}, 0x24}}, 0x4004000)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x160, 0x1170, 0x1170, 0x0, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@local, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)

20.509855015s ago: executing program 3 (id=1603):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="017f00000000000000200300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000)
recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/160, 0xa0}, 0xfffffffe}], 0x1, 0x2000, &(0x7f0000000600))
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, 0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
close(r0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={<r9=>0x0, 0x1}, &(0x7f0000000400)=0x8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@setneightbl={0x24, 0x43, 0x1, 0x70bd27, 0x25dfdbfb, {0xa}, [@NDTA_NAME={0xf, 0x1, 'ansi_cprng\x00'}]}, 0x24}}, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000440)={r9, 0x10001}, &(0x7f0000000480)=0x8)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x20000080)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r7)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x14c, r12, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xbe}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xfffffffa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x58}, {0x6, 0x11, 0xfffd}, {0x8, 0x15, 0x7}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
syz_emit_ethernet(0x136, &(0x7f0000000240)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x24, 0x4, 0x1, 0x1e, 0x128, 0x64, 0x0, 0x6, 0x1, 0x0, @rand_addr=0x64010102, @multicast1, {[@ssrr={0x89, 0x13, 0xdb, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x3c}]}, @timestamp={0x44, 0x14, 0xc9, 0x0, 0x6, [0x7, 0x0, 0xc4, 0x9000000]}, @cipso={0x86, 0x3e, 0x1, [{0x7, 0x3, "cc"}, {0x1, 0x8, "df98e44e0a80"}, {0x6, 0xd, "0c94f403ad275d86324bae"}, {0x6, 0x10, "24566fb36d2320adeeb4bba72ac8"}, {0x2, 0x10, "84ca8939badf063cbc58a9ba17ef"}]}, @timestamp_addr={0x44, 0x14, 0xaa, 0x1, 0x6, [{@local, 0x400}, {@local}]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x22, 0x4, 0x2, 0x9, 0xed, 0x64, 0x3, 0x4, 0x8, 0x8000, @rand_addr=0x64010100, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2c, 0x0, [{0x1, 0xb, "dc7deaa52286e4eca1"}, {0x6, 0xc, "59e8be5f82641d405d02"}, {0x7, 0xf, "653a75fff0d48996295afddf43"}]}, @lsrr={0x83, 0x1f, 0x1d, [@empty, @rand_addr=0x64010100, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}, @end, @end, @end, @end, @generic={0x82, 0x5, "ca08c2"}, @rr={0x7, 0x13, 0x5a, [@local, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @local]}]}}, "f476dcf9208a93e3"}}}}}, 0x0)

20.379022265s ago: executing program 0 (id=1604):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000030000002500000006000000be91000000000000b50200000000000085000000adc60000b7000000000000009500000000000000b3fc17ea604ac3d472471a064dd9a9c0f3123a9ecc6723c3cfbfc078db4143afd0cc0ea8071ca327c6afd9a942f145bf3fe35a93e5094a56f121a5e38e8a560c451dca8e80c642b0c06a3ad2043148c2add7d987f1ce0160c0cc50a3b73e54e94089e0e91958ae249ef6529498dd0a577f98d1eb2db255778d83084dddf265a1e52669500eae1d053d17bd6cd0fb49"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="07bb039b0f34d88367c4ff8c05e1f7ac702fd28dc4971d41b8e21b758649e67c9f1113a4aeb13db6a0ac0e22b0343111c20c24246baa499000075646365ceaae69ab9bae7c2b178879eb197ac82d5fbff9e7bed9d5fcf6e56ddcb13e80cafdae26f9c789b9a26b9b44ad1af5f4bedc03abc8d39f015a131e12"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="7dea4413981628fdaa362336478b092469cfd4d6453b3ec302008d007e7f3e81adfc5995f08d54b73215ae4d8c938152f814af87eca77da407f64cc5d905060d82403dc9a143fbe34fff4fd71d6767b11fe77b6ce2a33517f3f1a3a2989d642606347899c1fd82f9d6e078855b4b896b5da48e24ecb2b8ae7a11b01d340f502e4619eadf03a89576806254e3a521870c5e84152671f7bb4af60f661e40fc4f0a3b995d279b619cdbbd34e4606a66d588330d2cc26c", @ANYRES16=r3, @ANYBLOB="050000000000ffffffff2e00000008000300", @ANYRES32=r4, @ANYBLOB="0600340046830000"], 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
ioctl(r1, 0x8b1a, &(0x7f0000000040)) (async)
r6 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000000c00078008000640"], 0x50}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r10 = openat$cgroup_devices(r9, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="612a206d2a7ddda00084"], 0x8)
close(r6) (async, rerun: 32)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 32)
sendmsg$inet_sctp(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r10, @ANYRESOCT=r5], 0x38, 0x40040}, 0x4004000) (async)
write$cgroup_pid(r6, 0x0, 0x0) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000000)={<r12=>r10, 0x5, 0x9, 0x200})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f00000000c0)={0xfffffff8, 0xfffffff7, 0xd31, 0x1fa3, 0x1}, 0x14) (async)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async, rerun: 64)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket$unix(0x1, 0x2, 0x0)

19.575875223s ago: executing program 2 (id=1605):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, @enum={0xffffffff}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000040)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe(&(0x7f0000000100))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r8}, &(0x7f0000000000), &(0x7f0000001340)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000010c0)={r9, &(0x7f00000004c0), &(0x7f0000000500)=""/198}, 0x20)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r11, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x5}, 0xfffffffc}], 0x2, 0x42, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000100"/28], 0x48)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92a, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x10, 0x8, 0xffe0, 0x0}}, 0x10)
socket(0x2d, 0x1, 0x400)

19.405089007s ago: executing program 2 (id=1606):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)=<r4=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"b4043b48f1d2b65c164946c748d6e1d7", r3, r4, {0xd5, 0x80000001}, {}, 0x4, [0x8, 0x1, 0x1d03, 0xbb, 0x8, 0x3, 0xe581, 0x3, 0x8f, 0x800, 0xfa7, 0x0, 0x0, 0x6, 0x3, 0x1]})
r5 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r5, 0x0, 0x0)
recvmsg$unix(r5, 0x0, 0x40000160)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000000)=0x8, 0x4)

19.29426405s ago: executing program 2 (id=1607):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r3, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0)

19.131611785s ago: executing program 2 (id=1608):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x2b, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x2)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2)

16.443027709s ago: executing program 0 (id=1609):
unshare(0x900)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000014000100000001000000000011000d00010035becb4662d39f04370000000000"], 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r1 = socket$kcm(0x10, 0x100000000002, 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='\n'], 0x1)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

16.353066861s ago: executing program 0 (id=1610):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000000c0)) (async)
bind$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)

15.315370073s ago: executing program 33 (id=1596):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r1, 0x20000005)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {}, {0x0, 0x1}, 0x9, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f0000000640), &(0x7f0000000680)=r7}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080), 0x8)
syz_emit_ethernet(0xd6e, &(0x7f0000002e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xd38, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x17, "122b472e41e24b11f34b608816e522a7f3032efcb5633a3983e172d7dbb1cedeea00156dbf01dbd8e49e39e8fd54a9300113f16b56fd3ece899e2dff0f1443afc40da882e5a3d76d593c09402a0de4f7b9fcbd9c0f4b968122455e34e1afa222c60b04a9f2bfd548605a711678755475861538b9de80bb31e39fd8d5ba7fc1988c850ba77307a7519940fc99f9a55be09c10cf4bce1ecfeb8a12772325a7c3d35e786a6518357d8754da82aac43dba342a23914b38c05e"}, {0x22, 0x18c, "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"}]}}}}}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e12b000060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockname$packet(r9, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8001}, @alu={0x4, 0x2, 0x4, 0x7, 0x3, 0xc, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

9.193864648s ago: executing program 2 (id=1612):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24000081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={<r2=>0xffffffffffffffff, 0x8000000000000000, 0x6, 0x7})
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xd830}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000040}, 0x91)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x2a008000)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000002000000008000300", @ANYRES32, @ANYBLOB="14002d800500010005000000060002"], 0x30}}, 0x40c0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24000081) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x8000000000000000, 0x6, 0x7}) (async)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xd830}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000040}, 0x91) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x2a008000) (async)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000002000000008000300", @ANYRES32, @ANYBLOB="14002d800500010005000000060002"], 0x30}}, 0x40c0) (async)

8.993769758s ago: executing program 3 (id=1613):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x9)
unshare(0x480)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r2, 0x400448e7, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)

5.360019983s ago: executing program 0 (id=1614):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
unshare(0x22020400)
r2 = socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000140)={{0xbd4f, 0x4}, 0x8}, 0x10)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40000000000000, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x10000, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xffffffff}}, 0xe8)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600)

5.244079403s ago: executing program 0 (id=1615):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0)
sendmsg$alg(r1, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048010}, 0x4080)
recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/71, 0x47}], 0x1}, 0x40000040)

0s ago: executing program 2 (id=1616):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

  ? aa_sock_msg_perm+0x91/0x160
[  142.594474][ T8286]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.599780][ T8286]  __sock_sendmsg+0x221/0x270
[  142.604487][ T8286]  ____sys_sendmsg+0x52a/0x7e0
[  142.609279][ T8286]  ? __pfx_____sys_sendmsg+0x10/0x10
[  142.614615][ T8286]  ? __fget_files+0x2a/0x410
[  142.619359][ T8286]  ? __fget_files+0x2a/0x410
[  142.623996][ T8286]  __sys_sendmmsg+0x36a/0x720
[  142.628718][ T8286]  ? __pfx___sys_sendmmsg+0x10/0x10
[  142.633949][ T8286]  ? __pfx_lock_release+0x10/0x10
[  142.638999][ T8286]  ? kstrtouint_from_user+0x128/0x190
[  142.644431][ T8286]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  142.650382][ T8286]  ? ksys_write+0x22a/0x2b0
[  142.654935][ T8286]  ? __pfx_lock_release+0x10/0x10
[  142.660041][ T8286]  ? vfs_write+0x730/0xd30
[  142.664517][ T8286]  ? __mutex_unlock_slowpath+0x21e/0x790
[  142.670228][ T8286]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  142.676259][ T8286]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  142.682726][ T8286]  ? do_syscall_64+0x100/0x230
[  142.687533][ T8286]  __x64_sys_sendmmsg+0xa0/0xb0
[  142.692417][ T8286]  do_syscall_64+0xf3/0x230
[  142.696947][ T8286]  ? clear_bhb_loop+0x35/0x90
[  142.701644][ T8286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.707573][ T8286] RIP: 0033:0x7f640eb85d29
[  142.712024][ T8286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.731666][ T8286] RSP: 002b:00007f640f9bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  142.740114][ T8286] RAX: ffffffffffffffda RBX: 00007f640ed75fa0 RCX: 00007f640eb85d29
[  142.750378][ T8286] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  142.758376][ T8286] RBP: 00007f640f9bb090 R08: 0000000000000000 R09: 0000000000000000
[  142.766366][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.774458][ T8286] R13: 0000000000000000 R14: 00007f640ed75fa0 R15: 00007ffe9ba0ee18
[  142.782465][ T8286]  </TASK>
[  142.895611][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  143.023712][ T8306] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  143.103292][ T8306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.142391][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'.
[  143.172796][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'.
[  143.235613][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'.
[  143.466181][ T8323] openvswitch: netlink: IPv4 tunnel dst address is zero
[  143.680054][ T8332] FAULT_INJECTION: forcing a failure.
[  143.680054][ T8332] name failslab, interval 1, probability 0, space 0, times 0
[  143.686723][ T8336] netlink: 'syz.1.702': attribute type 1 has an invalid length.
[  143.693098][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.0.701 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  143.712100][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  143.722230][ T8332] Call Trace:
[  143.725669][ T8332]  <TASK>
[  143.728671][ T8332]  dump_stack_lvl+0x241/0x360
[  143.733501][ T8332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.738744][ T8332]  ? __pfx__printk+0x10/0x10
[  143.743549][ T8332]  should_fail_ex+0x3b0/0x4e0
[  143.748308][ T8332]  should_failslab+0xac/0x100
[  143.753049][ T8332]  ? skb_clone+0x20c/0x390
[  143.757542][ T8332]  kmem_cache_alloc_noprof+0x70/0x380
[  143.762990][ T8332]  skb_clone+0x20c/0x390
[  143.767316][ T8332]  ? dev_queue_xmit_nit+0x3fe/0xca0
[  143.772576][ T8332]  dev_queue_xmit_nit+0x249/0xca0
[  143.778193][ T8332]  ? dev_queue_xmit_nit+0x2b/0xca0
[  143.783500][ T8332]  ? validate_xmit_skb+0x9b8/0xff0
[  143.788685][ T8332]  dev_hard_start_xmit+0x15f/0x7d0
[  143.793860][ T8332]  ? __pfx_validate_xmit_skb+0x10/0x10
[  143.799821][ T8332]  __dev_queue_xmit+0x1b73/0x3f50
[  143.804759][ T8336] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  143.804881][ T8332]  ? kasan_save_track+0x51/0x80
[  143.804925][ T8332]  ? ____sys_sendmsg+0x52a/0x7e0
[  143.804960][ T8332]  ? __dev_queue_xmit+0x2f4/0x3f50
[  143.828574][ T8332]  ? __pfx___dev_queue_xmit+0x10/0x10
[  143.833985][ T8332]  ? __copy_skb_header+0x437/0x5b0
[  143.839402][ T8332]  ? __asan_memcpy+0x40/0x70
[  143.844022][ T8332]  ? skb_clone+0x240/0x390
[  143.848499][ T8332]  __netlink_deliver_tap+0x56b/0x7f0
[  143.853855][ T8332]  ? netlink_deliver_tap+0x2e/0x1b0
[  143.859108][ T8332]  netlink_deliver_tap+0x19d/0x1b0
[  143.864304][ T8332]  netlink_unicast+0x7c4/0x990
[  143.869168][ T8332]  ? __pfx_netlink_unicast+0x10/0x10
[  143.874518][ T8332]  ? __virt_addr_valid+0x45f/0x530
[  143.879689][ T8332]  ? __phys_addr_symbol+0x2f/0x70
[  143.884773][ T8332]  ? __check_object_size+0x47a/0x730
[  143.890134][ T8332]  netlink_sendmsg+0x8e4/0xcb0
[  143.894968][ T8332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  143.900325][ T8332]  ? aa_sock_msg_perm+0x91/0x160
[  143.905508][ T8332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  143.909407][ T8345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.703'.
[  143.910847][ T8332]  __sock_sendmsg+0x221/0x270
[  143.910894][ T8332]  ____sys_sendmsg+0x52a/0x7e0
[  143.929259][ T8332]  ? __pfx_____sys_sendmsg+0x10/0x10
[  143.935053][ T8332]  ? __fget_files+0x2a/0x410
[  143.939720][ T8332]  ? __fget_files+0x2a/0x410
[  143.944381][ T8332]  __sys_sendmmsg+0x36a/0x720
[  143.949122][ T8332]  ? __pfx___sys_sendmmsg+0x10/0x10
[  143.954389][ T8332]  ? __pfx_lock_release+0x10/0x10
[  143.959467][ T8332]  ? kstrtouint_from_user+0x128/0x190
[  143.964932][ T8332]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  143.970904][ T8332]  ? ksys_write+0x22a/0x2b0
[  143.975551][ T8332]  ? __pfx_lock_release+0x10/0x10
[  143.980645][ T8332]  ? vfs_write+0x730/0xd30
[  143.985115][ T8332]  ? __mutex_unlock_slowpath+0x21e/0x790
[  143.990813][ T8332]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  143.996831][ T8332]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  144.003212][ T8332]  ? do_syscall_64+0x100/0x230
[  144.008025][ T8332]  __x64_sys_sendmmsg+0xa0/0xb0
[  144.012895][ T8332]  do_syscall_64+0xf3/0x230
[  144.017415][ T8332]  ? clear_bhb_loop+0x35/0x90
[  144.022102][ T8332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.028116][ T8332] RIP: 0033:0x7f0271585d29
[  144.032571][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.052225][ T8332] RSP: 002b:00007f0272327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  144.060781][ T8332] RAX: ffffffffffffffda RBX: 00007f0271775fa0 RCX: 00007f0271585d29
[  144.068879][ T8332] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  144.070524][ T8348] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  144.076924][ T8332] RBP: 00007f0272327090 R08: 0000000000000000 R09: 0000000000000000
[  144.076948][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.076963][ T8332] R13: 0000000000000000 R14: 00007f0271775fa0 R15: 00007ffc738313a8
[  144.076996][ T8332]  </TASK>
[  144.135182][ T8348] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  144.145894][ T8348] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  144.292039][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.707'.
[  144.335793][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  144.353260][ T8354] syz.4.706[8354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  144.357973][ T8354] syz.4.706[8354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  144.654216][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  144.718149][ T8373] netlink: 'syz.2.712': attribute type 10 has an invalid length.
[  144.760009][ T8373] bridge0: port 3(wlan1) entered blocking state
[  144.789561][ T8373] bridge0: port 3(wlan1) entered disabled state
[  144.817649][ T8373] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  144.836792][ T8373] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  144.900002][ T8377] 8021q: adding VLAN 0 to HW filter on device bond2
[  145.075049][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'.
[  145.154259][ T5932] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  145.458798][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  145.848515][ T8422] FAULT_INJECTION: forcing a failure.
[  145.848515][ T8422] name failslab, interval 1, probability 0, space 0, times 0
[  145.909402][ T8422] CPU: 1 UID: 0 PID: 8422 Comm: syz.2.729 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  145.920073][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  145.930189][ T8422] Call Trace:
[  145.933589][ T8422]  <TASK>
[  145.936559][ T8422]  dump_stack_lvl+0x241/0x360
[  145.941292][ T8422]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.946565][ T8422]  ? __pfx__printk+0x10/0x10
[  145.951213][ T8422]  ? ref_tracker_alloc+0x332/0x490
[  145.956408][ T8422]  should_fail_ex+0x3b0/0x4e0
[  145.961175][ T8422]  should_failslab+0xac/0x100
[  145.965913][ T8422]  ? skb_clone+0x20c/0x390
[  145.970385][ T8422]  kmem_cache_alloc_noprof+0x70/0x380
[  145.975824][ T8422]  skb_clone+0x20c/0x390
[  145.980128][ T8422]  __netlink_deliver_tap+0x3cc/0x7f0
[  145.981184][ T8424] syz.3.728: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[  145.985644][ T8422]  ? netlink_deliver_tap+0x2e/0x1b0
[  145.985684][ T8422]  netlink_deliver_tap+0x19d/0x1b0
[  145.985711][ T8422]  netlink_sendskb+0x68/0x140
[  145.985747][ T8422]  netlink_unicast+0x39d/0x990
[  145.985790][ T8422]  ? __pfx_netlink_unicast+0x10/0x10
[  145.985836][ T8422]  netlink_rcv_skb+0x262/0x430
[  145.985861][ T8422]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  145.985894][ T8422]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.985938][ T8422]  ? netlink_deliver_tap+0x2e/0x1b0
[  146.047180][ T8422]  netlink_unicast+0x7f6/0x990
[  146.051980][ T8422]  ? __pfx_netlink_unicast+0x10/0x10
[  146.057283][ T8422]  ? __virt_addr_valid+0x45f/0x530
[  146.062437][ T8422]  ? __phys_addr_symbol+0x2f/0x70
[  146.067481][ T8422]  ? __check_object_size+0x47a/0x730
[  146.072819][ T8422]  netlink_sendmsg+0x8e4/0xcb0
[  146.077618][ T8422]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.082937][ T8422]  ? aa_sock_msg_perm+0x91/0x160
[  146.087897][ T8422]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.093196][ T8422]  __sock_sendmsg+0x221/0x270
[  146.097904][ T8422]  ____sys_sendmsg+0x52a/0x7e0
[  146.102889][ T8422]  ? __pfx_____sys_sendmsg+0x10/0x10
[  146.108337][ T8422]  ? __fget_files+0x2a/0x410
[  146.112982][ T8422]  ? __fget_files+0x2a/0x410
[  146.117829][ T8422]  __sys_sendmmsg+0x36a/0x720
[  146.122570][ T8422]  ? __pfx___sys_sendmmsg+0x10/0x10
[  146.127810][ T8422]  ? __pfx_lock_release+0x10/0x10
[  146.132975][ T8422]  ? kstrtouint_from_user+0x128/0x190
[  146.138406][ T8422]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  146.144336][ T8422]  ? ksys_write+0x22a/0x2b0
[  146.148868][ T8422]  ? __pfx_lock_release+0x10/0x10
[  146.153921][ T8422]  ? vfs_write+0x730/0xd30
[  146.158357][ T8422]  ? __mutex_unlock_slowpath+0x21e/0x790
[  146.164064][ T8422]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  146.170103][ T8422]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  146.176462][ T8422]  ? do_syscall_64+0x100/0x230
[  146.181256][ T8422]  __x64_sys_sendmmsg+0xa0/0xb0
[  146.186125][ T8422]  do_syscall_64+0xf3/0x230
[  146.190650][ T8422]  ? clear_bhb_loop+0x35/0x90
[  146.195342][ T8422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.201269][ T8422] RIP: 0033:0x7f6f13f85d29
[  146.205707][ T8422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.225372][ T8422] RSP: 002b:00007f6f11df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  146.234013][ T8422] RAX: ffffffffffffffda RBX: 00007f6f14175fa0 RCX: 00007f6f13f85d29
[  146.242031][ T8422] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  146.250022][ T8422] RBP: 00007f6f11df6090 R08: 0000000000000000 R09: 0000000000000000
[  146.258009][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.265992][ T8422] R13: 0000000000000000 R14: 00007f6f14175fa0 R15: 00007ffc3548b128
[  146.274114][ T8422]  </TASK>
[  146.278166][ T5932] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  146.300569][ T8424] ,cpuset=/,mems_allowed=0-1
[  146.342848][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.3.728 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  146.353530][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  146.363636][ T8424] Call Trace:
[  146.366961][ T8424]  <TASK>
[  146.369933][ T8424]  dump_stack_lvl+0x241/0x360
[  146.374668][ T8424]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.379930][ T8424]  ? __pfx__printk+0x10/0x10
[  146.384623][ T8424]  ? __rcu_read_unlock+0xa1/0x110
[  146.389701][ T8424]  warn_alloc+0x278/0x410
[  146.394080][ T8424]  ? __pfx_warn_alloc+0x10/0x10
[  146.398985][ T8424]  ? xskq_create+0xb6/0x170
[  146.403557][ T8424]  ? __get_vm_area_node+0x1c8/0x2d0
[  146.408807][ T8424]  ? __get_vm_area_node+0x25c/0x2d0
[  146.414047][ T8424]  __vmalloc_node_range_noprof+0x62f/0x1380
[  146.420002][ T8424]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  146.426356][ T8424]  ? __kasan_kmalloc+0x98/0xb0
[  146.431158][ T8424]  vmalloc_user_noprof+0x74/0x80
[  146.436152][ T8424]  ? xskq_create+0xb6/0x170
[  146.440671][ T8424]  xskq_create+0xb6/0x170
[  146.445103][ T8424]  xsk_init_queue+0xa1/0x100
[  146.449715][ T8424]  xsk_setsockopt+0x4ea/0x950
[  146.454408][ T8424]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.459707][ T8424]  ? __pfx_aa_sk_perm+0x10/0x10
[  146.464583][ T8424]  ? aa_sock_opt_perm+0x79/0x120
[  146.469537][ T8424]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.474747][ T8424]  do_sock_setsockopt+0x3af/0x720
[  146.479791][ T8424]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  146.485353][ T8424]  ? __fget_files+0x395/0x410
[  146.490068][ T8424]  ? __fget_files+0x2a/0x410
[  146.494686][ T8424]  __x64_sys_setsockopt+0x1ee/0x280
[  146.499930][ T8424]  do_syscall_64+0xf3/0x230
[  146.504455][ T8424]  ? clear_bhb_loop+0x35/0x90
[  146.509146][ T8424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.515086][ T8424] RIP: 0033:0x7f546f385d29
[  146.519520][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.539178][ T8424] RSP: 002b:00007f54700eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  146.547715][ T8424] RAX: ffffffffffffffda RBX: 00007f546f575fa0 RCX: 00007f546f385d29
[  146.555816][ T8424] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  146.563901][ T8424] RBP: 00007f546f401aa8 R08: 0000000000000004 R09: 0000000000000000
[  146.571888][ T8424] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000
[  146.579887][ T8424] R13: 0000000000000000 R14: 00007f546f575fa0 R15: 00007ffebd105738
[  146.587906][ T8424]  </TASK>
[  146.673222][ T8424] Mem-Info:
[  146.680177][ T8424] active_anon:4739 inactive_anon:0 isolated_anon:0
[  146.680177][ T8424]  active_file:1524 inactive_file:38279 isolated_file:0
[  146.680177][ T8424]  unevictable:768 dirty:100 writeback:0
[  146.680177][ T8424]  slab_reclaimable:10100 slab_unreclaimable:100624
[  146.680177][ T8424]  mapped:28805 shmem:1409 pagetables:755
[  146.680177][ T8424]  sec_pagetables:0 bounce:0
[  146.680177][ T8424]  kernel_misc_reclaimable:0
[  146.680177][ T8424]  free:1337001 free_pcp:683 free_cma:0
[  146.692049][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'.
[  146.734834][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'.
[  146.836801][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'.
[  146.846640][ T8441] netlink: 48 bytes leftover after parsing attributes in process `syz.2.735'.
[  146.868918][ T8424] Node 0 active_anon:18956kB inactive_anon:0kB active_file:6096kB inactive_file:153040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115320kB dirty:396kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11184kB pagetables:3020kB sec_pagetables:0kB all_unreclaimable? no
[  146.989884][ T8424] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  147.069936][ T8447] netlink: 'syz.1.737': attribute type 2 has an invalid length.
[  147.128339][ T8424] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  147.180251][ T8424] lowmem_reserve[]: 0 2465 2466 0 0
[  147.202056][ T3024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  147.237231][ T8424] Node 0 DMA32 free:1422500kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18836kB inactive_anon:0kB active_file:6096kB inactive_file:152232kB unevictable:1536kB writepending:400kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:1688kB local_pcp:1120kB free_cma:0kB
[  147.291046][ T8455] FAULT_INJECTION: forcing a failure.
[  147.291046][ T8455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.305757][ T8424] lowmem_reserve[]: 0 0 0 0 0
[  147.310577][ T8424] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  147.349743][ T8424] lowmem_reserve[]: 0 0 0 0 0
[  147.352927][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.1.742 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  147.358406][ T8424] Node 1 
[  147.365172][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  147.365194][ T8455] Call Trace:
[  147.365204][ T8455]  <TASK>
[  147.365214][ T8455]  dump_stack_lvl+0x241/0x360
[  147.365254][ T8455]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.365286][ T8455]  ? __pfx__printk+0x10/0x10
[  147.365317][ T8455]  ? __pfx_lock_release+0x10/0x10
[  147.365352][ T8455]  should_fail_ex+0x3b0/0x4e0
[  147.365394][ T8455]  _copy_from_user+0x2f/0xc0
[  147.365427][ T8455]  copy_msghdr_from_user+0xae/0x680
[  147.365461][ T8455]  ? __pfx___might_resched+0x10/0x10
[  147.365488][ T8455]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  147.383840][ T8424] Normal free:3911716kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  147.385283][ T8455]  ? __fget_files+0x2a/0x410
[  147.385333][ T8455]  ? __sys_sendmmsg+0x392/0x720
[  147.385363][ T8455]  ? __might_fault+0xaa/0x120
[  147.385401][ T8455]  __sys_sendmmsg+0x32b/0x720
[  147.385441][ T8455]  ? __pfx___sys_sendmmsg+0x10/0x10
[  147.385480][ T8455]  ? __pfx_lock_release+0x10/0x10
[  147.385506][ T8455]  ? kstrtouint_from_user+0x128/0x190
[  147.400297][ T8424] lowmem_reserve[]:
[  147.405064][ T8455]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  147.405109][ T8455]  ? ksys_write+0x22a/0x2b0
[  147.405132][ T8455]  ? __pfx_lock_release+0x10/0x10
[  147.405164][ T8455]  ? vfs_write+0x730/0xd30
[  147.405190][ T8455]  ? __mutex_unlock_slowpath+0x21e/0x790
[  147.405248][ T8455]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  147.405278][ T8455]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  147.405314][ T8455]  ? do_syscall_64+0x100/0x230
[  147.419187][ T8424]  0
[  147.419828][ T8455]  __x64_sys_sendmmsg+0xa0/0xb0
[  147.419873][ T8455]  do_syscall_64+0xf3/0x230
[  147.429941][ T8424]  0
[  147.430958][ T8455]  ? clear_bhb_loop+0x35/0x90
[  147.430993][ T8455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.564933][ T8455] RIP: 0033:0x7f4ea8985d29
[  147.569367][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.588985][ T8455] RSP: 002b:00007f4ea9754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  147.597432][ T8455] RAX: ffffffffffffffda RBX: 00007f4ea8b75fa0 RCX: 00007f4ea8985d29
[  147.605413][ T8455] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  147.613426][ T8455] RBP: 00007f4ea9754090 R08: 0000000000000000 R09: 0000000000000000
[  147.621417][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.629407][ T8455] R13: 0000000000000000 R14: 00007f4ea8b75fa0 R15: 00007ffe5f392598
[  147.637433][ T8455]  </TASK>
[  147.649817][ T8424]  0 0 0
[  147.652785][ T8424] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  147.666819][ T8424] Node 0 DMA32: 3*4kB (E) 27*8kB (UME) 165*16kB (UME) 49*32kB (UME) 64*64kB (UME) 46*128kB (UME) 29*256kB (UM) 15*512kB (UM) 13*1024kB (UME) 7*2048kB (UME) 333*4096kB (UM) = 1421140kB
[  147.732418][ T8424] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  147.784771][ T8424] Node 1 Normal: 217*4kB (UME) 66*8kB (UME) 35*16kB (UME) 188*32kB (UME) 88*64kB (UME) 34*128kB (UME) 20*256kB (UME) 11*512kB (UME) 2*1024kB (ME) 3*2048kB (UE) 946*4096kB (M) = 3911716kB
[  147.833760][ T8424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  147.873725][ T8424] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  147.899106][ T8424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  147.918928][ T8424] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  147.935436][ T8424] 41233 total pagecache pages
[  147.950472][ T8424] 0 pages in swap cache
[  147.963834][ T8424] Free swap  = 124996kB
[  147.987798][ T8424] Total swap = 124996kB
[  147.998769][ T8424] 2097051 pages RAM
[  148.012811][ T8424] 0 pages HighMem/MovableOnly
[  148.038386][ T8424] 427005 pages reserved
[  148.042623][ T8424] 0 pages cma reserved
[  148.053692][ T8471] xt_l2tp: v2 doesn't support IP mode
[  148.301620][ T8486] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  148.469629][ T8488] delete_channel: no stack
[  148.490141][ T8493] FAULT_INJECTION: forcing a failure.
[  148.490141][ T8493] name failslab, interval 1, probability 0, space 0, times 0
[  148.534361][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.2.753 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  148.545041][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  148.555146][ T8493] Call Trace:
[  148.558722][ T8493]  <TASK>
[  148.561692][ T8493]  dump_stack_lvl+0x241/0x360
[  148.566428][ T8493]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.571682][ T8493]  ? __pfx__printk+0x10/0x10
[  148.576330][ T8493]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  148.582453][ T8493]  ? __pfx___might_resched+0x10/0x10
[  148.587785][ T8493]  ? aa_label_sk_perm+0x4f3/0x6c0
[  148.592869][ T8493]  should_fail_ex+0x3b0/0x4e0
[  148.597612][ T8493]  should_failslab+0xac/0x100
[  148.604777][ T8493]  kmem_cache_alloc_node_noprof+0x77/0x380
[  148.610733][ T8493]  ? __alloc_skb+0x1c3/0x440
[  148.615394][ T8493]  __alloc_skb+0x1c3/0x440
[  148.619866][ T8493]  ? __pfx___alloc_skb+0x10/0x10
[  148.624859][ T8493]  netlink_sendmsg+0x638/0xcb0
[  148.629680][ T8493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.635028][ T8493]  ? aa_sock_msg_perm+0x91/0x160
[  148.640012][ T8493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.645429][ T8493]  __sock_sendmsg+0x221/0x270
[  148.650165][ T8493]  ____sys_sendmsg+0x52a/0x7e0
[  148.654977][ T8493]  ? __pfx_____sys_sendmsg+0x10/0x10
[  148.660334][ T8493]  ? __fget_files+0x2a/0x410
[  148.665082][ T8493]  ? __sys_sendmmsg+0x392/0x720
[  148.669966][ T8493]  ? __might_fault+0xaa/0x120
[  148.674690][ T8493]  __sys_sendmmsg+0x36a/0x720
[  148.679420][ T8493]  ? __pfx___sys_sendmmsg+0x10/0x10
[  148.684720][ T8493]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.691109][ T8493]  ? __pfx_group_send_sig_info+0x10/0x10
[  148.696779][ T8493]  ? mark_lock+0x9a/0x360
[  148.701150][ T8493]  ? __lock_acquire+0x1397/0x2100
[  148.706322][ T8493]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  148.712323][ T8493]  ? rcu_is_watching+0x15/0xb0
[  148.717245][ T8493]  __x64_sys_sendmmsg+0xa0/0xb0
[  148.722133][ T8493]  do_syscall_64+0xf3/0x230
[  148.726673][ T8493]  ? clear_bhb_loop+0x35/0x90
[  148.731479][ T8493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.737517][ T8493] RIP: 0033:0x7f6f13f85d29
[  148.741991][ T8493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.761814][ T8493] RSP: 002b:00007f6f11df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  148.770272][ T8493] RAX: ffffffffffffffda RBX: 00007f6f14175fa0 RCX: 00007f6f13f85d29
[  148.778520][ T8493] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  148.786630][ T8493] RBP: 00007f6f11df6090 R08: 0000000000000000 R09: 0000000000000000
[  148.794616][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  148.802610][ T8493] R13: 0000000000000000 R14: 00007f6f14175fa0 R15: 00007ffc3548b128
[  148.810607][ T8493]  </TASK>
[  148.825928][ T8497] __nla_validate_parse: 1 callbacks suppressed
[  148.825952][ T8497] netlink: 288 bytes leftover after parsing attributes in process `syz.3.754'.
[  148.936297][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  149.851344][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.767'.
[  150.020198][ T8550] mac80211_hwsim hwsim4 wlan1 (unregistering): left allmulticast mode
[  150.069642][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  150.083310][ T8550] mac80211_hwsim hwsim4 wlan1 (unregistering): left promiscuous mode
[  150.110801][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.772'.
[  150.125048][ T8550] bridge0: port 3(wlan1) entered disabled state
[  150.738190][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'.
[  150.899368][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.784'.
[  150.989570][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'.
[  151.052458][ T8599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.062046][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'.
[  151.114419][ T8605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.123073][ T8605] IPv6: NLM_F_CREATE should be set when creating new route
[  151.238106][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  151.629386][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'.
[  151.710972][ T8640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.795'.
[  151.739690][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'.
[  151.761483][ T8643] set match dimension is over the limit!
[  151.898191][ T8644] sit0: entered promiscuous mode
[  151.927575][ T8644] netlink: 'syz.0.796': attribute type 1 has an invalid length.
[  152.238934][ T8663] netlink: 'syz.2.802': attribute type 1 has an invalid length.
[  152.353816][ T8668] netlink: 'syz.3.800': attribute type 1 has an invalid length.
[  152.398092][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  152.459606][ T8675] FAULT_INJECTION: forcing a failure.
[  152.459606][ T8675] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.514418][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: syz.2.804 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  152.525285][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  152.535476][ T8675] Call Trace:
[  152.538800][ T8675]  <TASK>
[  152.541786][ T8675]  dump_stack_lvl+0x241/0x360
[  152.546537][ T8675]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.551789][ T8675]  ? __pfx__printk+0x10/0x10
[  152.556528][ T8675]  ? snprintf+0xda/0x120
[  152.560829][ T8675]  should_fail_ex+0x3b0/0x4e0
[  152.565575][ T8675]  _copy_to_user+0x31/0xb0
[  152.570111][ T8675]  simple_read_from_buffer+0xca/0x150
[  152.575992][ T8675]  proc_fail_nth_read+0x1e9/0x250
[  152.581166][ T8675]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.586749][ T8675]  ? rw_verify_area+0x55e/0x6f0
[  152.591632][ T8675]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.597198][ T8675]  vfs_read+0x1fc/0xb70
[  152.601396][ T8675]  ? __pfx___mutex_lock+0x10/0x10
[  152.606459][ T8675]  ? __pfx_vfs_read+0x10/0x10
[  152.611175][ T8675]  ? __fget_files+0x2a/0x410
[  152.615805][ T8675]  ? __fget_files+0x395/0x410
[  152.620596][ T8675]  ? __fget_files+0x2a/0x410
[  152.625239][ T8675]  ksys_read+0x18f/0x2b0
[  152.629511][ T8675]  ? __pfx_ksys_read+0x10/0x10
[  152.634393][ T8675]  ? do_syscall_64+0x100/0x230
[  152.640099][ T8675]  ? do_syscall_64+0xb6/0x230
[  152.644817][ T8675]  do_syscall_64+0xf3/0x230
[  152.650234][ T8675]  ? clear_bhb_loop+0x35/0x90
[  152.655221][ T8675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.661182][ T8675] RIP: 0033:0x7f6f13f8473c
[  152.666153][ T8675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  152.685885][ T8675] RSP: 002b:00007f6f11df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  152.694341][ T8675] RAX: ffffffffffffffda RBX: 00007f6f14175fa0 RCX: 00007f6f13f8473c
[  152.702336][ T8675] RDX: 000000000000000f RSI: 00007f6f11df60a0 RDI: 0000000000000004
[  152.710518][ T8675] RBP: 00007f6f11df6090 R08: 0000000000000000 R09: 0000000000000000
[  152.718508][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  152.726503][ T8675] R13: 0000000000000000 R14: 00007f6f14175fa0 R15: 00007ffc3548b128
[  152.734526][ T8675]  </TASK>
[  153.319942][ T8695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.347237][ T8695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.372243][ T8695] bond0 (unregistering): Released all slaves
[  153.798605][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  154.022292][ T8746] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  154.221559][ T8755] xt_CT: You must specify a L4 protocol and not use inversions on it
[  154.240297][ T8755] __nla_validate_parse: 8 callbacks suppressed
[  154.240318][ T8755] netlink: 156 bytes leftover after parsing attributes in process `syz.3.825'.
[  154.286139][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.825'.
[  154.301468][ T8759] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003
[  154.327077][ T8755] netlink: 'syz.3.825': attribute type 10 has an invalid length.
[  154.346543][ T8759] netlink: 'syz.0.823': attribute type 4 has an invalid length.
[  154.389544][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.828'.
[  154.559242][ T8762] FAULT_INJECTION: forcing a failure.
[  154.559242][ T8762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.592166][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.1.827 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  154.602925][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  154.613017][ T8762] Call Trace:
[  154.616337][ T8762]  <TASK>
[  154.619351][ T8762]  dump_stack_lvl+0x241/0x360
[  154.624083][ T8762]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.629311][ T8762]  ? __pfx__printk+0x10/0x10
[  154.633924][ T8762]  ? __pfx_lock_release+0x10/0x10
[  154.639083][ T8762]  should_fail_ex+0x3b0/0x4e0
[  154.643789][ T8762]  _copy_from_user+0x2f/0xc0
[  154.648421][ T8762]  copy_msghdr_from_user+0xae/0x680
[  154.653684][ T8762]  ? __pfx___might_resched+0x10/0x10
[  154.659055][ T8762]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  154.664994][ T8762]  ? __fget_files+0x2a/0x410
[  154.669624][ T8762]  ? __sys_sendmmsg+0x392/0x720
[  154.674501][ T8762]  ? __might_fault+0xaa/0x120
[  154.679213][ T8762]  __sys_sendmmsg+0x32b/0x720
[  154.683923][ T8762]  ? __pfx___sys_sendmmsg+0x10/0x10
[  154.689612][ T8762]  ? __pfx_lock_release+0x10/0x10
[  154.694944][ T8762]  ? kstrtouint_from_user+0x128/0x190
[  154.700380][ T8762]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  154.706309][ T8762]  ? ksys_write+0x22a/0x2b0
[  154.710950][ T8762]  ? __pfx_lock_release+0x10/0x10
[  154.716027][ T8762]  ? vfs_write+0x730/0xd30
[  154.720585][ T8762]  ? __mutex_unlock_slowpath+0x21e/0x790
[  154.726282][ T8762]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  154.732404][ T8762]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  154.738758][ T8762]  ? do_syscall_64+0x100/0x230
[  154.743566][ T8762]  __x64_sys_sendmmsg+0xa0/0xb0
[  154.748447][ T8762]  do_syscall_64+0xf3/0x230
[  154.752978][ T8762]  ? clear_bhb_loop+0x35/0x90
[  154.757668][ T8762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.763587][ T8762] RIP: 0033:0x7f4ea8985d29
[  154.768016][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.787756][ T8762] RSP: 002b:00007f4ea9754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  154.796204][ T8762] RAX: ffffffffffffffda RBX: 00007f4ea8b75fa0 RCX: 00007f4ea8985d29
[  154.804213][ T8762] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  154.812207][ T8762] RBP: 00007f4ea9754090 R08: 0000000000000000 R09: 0000000000000000
[  154.820217][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  154.828209][ T8762] R13: 0000000000000000 R14: 00007f4ea8b75fa0 R15: 00007ffe5f392598
[  154.836237][ T8762]  </TASK>
[  155.127096][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'.
[  155.162362][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.834'.
[  155.178398][ T3024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  155.227234][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'.
[  155.604477][ T8810] netlink: 'syz.0.839': attribute type 12 has an invalid length.
[  155.691766][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'.
[  155.963920][ T8817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.843'.
[  155.983464][ T8819] FAULT_INJECTION: forcing a failure.
[  155.983464][ T8819] name failslab, interval 1, probability 0, space 0, times 0
[  155.996640][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.4.841 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  156.007374][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  156.017559][ T8819] Call Trace:
[  156.020879][ T8819]  <TASK>
[  156.023846][ T8819]  dump_stack_lvl+0x241/0x360
[  156.028596][ T8819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.033879][ T8819]  ? __pfx__printk+0x10/0x10
[  156.038802][ T8819]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  156.045572][ T8819]  ? __pfx___might_resched+0x10/0x10
[  156.051009][ T8819]  ? aa_label_sk_perm+0x4f3/0x6c0
[  156.056103][ T8819]  should_fail_ex+0x3b0/0x4e0
[  156.060852][ T8819]  should_failslab+0xac/0x100
[  156.065595][ T8819]  kmem_cache_alloc_node_noprof+0x77/0x380
[  156.071473][ T8819]  ? __alloc_skb+0x1c3/0x440
[  156.076202][ T8819]  __alloc_skb+0x1c3/0x440
[  156.080666][ T8819]  ? __pfx___alloc_skb+0x10/0x10
[  156.085670][ T8819]  netlink_sendmsg+0x638/0xcb0
[  156.090509][ T8819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.095859][ T8819]  ? aa_sock_msg_perm+0x91/0x160
[  156.101483][ T8819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.106934][ T8819]  __sock_sendmsg+0x221/0x270
[  156.111670][ T8819]  ____sys_sendmsg+0x52a/0x7e0
[  156.117258][ T8819]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.123975][ T8819]  ? __fget_files+0x2a/0x410
[  156.128911][ T8819]  ? __sys_sendmmsg+0x392/0x720
[  156.134474][ T8819]  ? __might_fault+0xaa/0x120
[  156.139280][ T8819]  __sys_sendmmsg+0x36a/0x720
[  156.143988][ T8819]  ? __pfx___sys_sendmmsg+0x10/0x10
[  156.149214][ T8819]  ? __pfx_lock_release+0x10/0x10
[  156.154260][ T8819]  ? kstrtouint_from_user+0x128/0x190
[  156.159771][ T8819]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  156.165775][ T8819]  ? ksys_write+0x22a/0x2b0
[  156.170292][ T8819]  ? __pfx_lock_release+0x10/0x10
[  156.175333][ T8819]  ? vfs_write+0x730/0xd30
[  156.179848][ T8819]  ? __mutex_unlock_slowpath+0x21e/0x790
[  156.185522][ T8819]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  156.191518][ T8819]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  156.197882][ T8819]  ? do_syscall_64+0x100/0x230
[  156.202671][ T8819]  __x64_sys_sendmmsg+0xa0/0xb0
[  156.207580][ T8819]  do_syscall_64+0xf3/0x230
[  156.212107][ T8819]  ? clear_bhb_loop+0x35/0x90
[  156.216800][ T8819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.222734][ T8819] RIP: 0033:0x7f640eb85d29
[  156.227165][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.246871][ T8819] RSP: 002b:00007f640f9bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  156.255484][ T8819] RAX: ffffffffffffffda RBX: 00007f640ed75fa0 RCX: 00007f640eb85d29
[  156.263642][ T8819] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  156.271628][ T8819] RBP: 00007f640f9bb090 R08: 0000000000000000 R09: 0000000000000000
[  156.280303][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  156.288551][ T8819] R13: 0000000000000000 R14: 00007f640ed75fa0 R15: 00007ffe9ba0ee18
[  156.296550][ T8819]  </TASK>
[  156.341083][ T8820] vlan1: entered promiscuous mode
[  156.367910][ T8816] vlan1: left promiscuous mode
[  156.405505][ T8826] xt_ipvs: protocol family 7 not supported
[  156.529353][ T1105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  157.464666][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'.
[  157.482573][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'.
[  157.550454][ T8879] netlink: 'syz.4.861': attribute type 29 has an invalid length.
[  157.612170][ T8884] netlink: 'syz.0.863': attribute type 1 has an invalid length.
[  157.697698][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  157.955267][ T8905] FAULT_INJECTION: forcing a failure.
[  157.955267][ T8905] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.014314][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.4.870 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  158.024994][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  158.035226][ T8905] Call Trace:
[  158.038566][ T8905]  <TASK>
[  158.041565][ T8905]  dump_stack_lvl+0x241/0x360
[  158.046340][ T8905]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.051615][ T8905]  ? __pfx__printk+0x10/0x10
[  158.056264][ T8905]  ? __pfx_lock_release+0x10/0x10
[  158.061361][ T8905]  should_fail_ex+0x3b0/0x4e0
[  158.066124][ T8905]  _copy_from_iter+0x1e9/0x1c20
[  158.071595][ T8905]  ? __virt_addr_valid+0x183/0x530
[  158.076821][ T8905]  ? __alloc_skb+0x28f/0x440
[  158.081489][ T8905]  ? __pfx__copy_from_iter+0x10/0x10
[  158.086844][ T8905]  ? __virt_addr_valid+0x183/0x530
[  158.092026][ T8905]  ? __virt_addr_valid+0x183/0x530
[  158.097199][ T8905]  ? __virt_addr_valid+0x45f/0x530
[  158.102385][ T8905]  ? __phys_addr_symbol+0x2f/0x70
[  158.107468][ T8905]  ? __check_object_size+0x47a/0x730
[  158.112818][ T8905]  netlink_sendmsg+0x73d/0xcb0
[  158.117729][ T8905]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.123128][ T8905]  ? aa_sock_msg_perm+0x91/0x160
[  158.128103][ T8905]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.133514][ T8905]  __sock_sendmsg+0x221/0x270
[  158.138220][ T8905]  ____sys_sendmsg+0x52a/0x7e0
[  158.143010][ T8905]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.148316][ T8905]  ? __fget_files+0x2a/0x410
[  158.152933][ T8905]  ? __sys_sendmmsg+0x392/0x720
[  158.157799][ T8905]  ? __might_fault+0xaa/0x120
[  158.162502][ T8905]  __sys_sendmmsg+0x36a/0x720
[  158.167293][ T8905]  ? __pfx___sys_sendmmsg+0x10/0x10
[  158.172642][ T8905]  ? __pfx_lock_release+0x10/0x10
[  158.177711][ T8905]  ? kstrtouint_from_user+0x128/0x190
[  158.183127][ T8905]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  158.189137][ T8905]  ? ksys_write+0x22a/0x2b0
[  158.193653][ T8905]  ? __pfx_lock_release+0x10/0x10
[  158.198730][ T8905]  ? vfs_write+0x730/0xd30
[  158.203167][ T8905]  ? __mutex_unlock_slowpath+0x21e/0x790
[  158.208865][ T8905]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  158.214980][ T8905]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  158.222039][ T8905]  ? do_syscall_64+0x100/0x230
[  158.226862][ T8905]  __x64_sys_sendmmsg+0xa0/0xb0
[  158.231761][ T8905]  do_syscall_64+0xf3/0x230
[  158.236291][ T8905]  ? clear_bhb_loop+0x35/0x90
[  158.241004][ T8905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.246943][ T8905] RIP: 0033:0x7f640eb85d29
[  158.251468][ T8905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.271727][ T8905] RSP: 002b:00007f640f9bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  158.280912][ T8905] RAX: ffffffffffffffda RBX: 00007f640ed75fa0 RCX: 00007f640eb85d29
[  158.288923][ T8905] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  158.296937][ T8905] RBP: 00007f640f9bb090 R08: 0000000000000000 R09: 0000000000000000
[  158.305016][ T8905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  158.313001][ T8905] R13: 0000000000000000 R14: 00007f640ed75fa0 R15: 00007ffe9ba0ee18
[  158.320999][ T8905]  </TASK>
[  158.970768][ T8954] FAULT_INJECTION: forcing a failure.
[  158.970768][ T8954] name failslab, interval 1, probability 0, space 0, times 0
[  158.986861][ T8954] CPU: 1 UID: 0 PID: 8954 Comm: syz.0.884 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  158.997503][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  159.007595][ T8954] Call Trace:
[  159.010910][ T8954]  <TASK>
[  159.013850][ T8954]  dump_stack_lvl+0x241/0x360
[  159.018576][ T8954]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.023855][ T8954]  ? __pfx__printk+0x10/0x10
[  159.028491][ T8954]  should_fail_ex+0x3b0/0x4e0
[  159.033200][ T8954]  should_failslab+0xac/0x100
[  159.037938][ T8954]  ? skb_clone+0x20c/0x390
[  159.042410][ T8954]  kmem_cache_alloc_noprof+0x70/0x380
[  159.047841][ T8954]  skb_clone+0x20c/0x390
[  159.052122][ T8954]  __netlink_deliver_tap+0x3cc/0x7f0
[  159.057435][ T8954]  ? netlink_deliver_tap+0x2e/0x1b0
[  159.062685][ T8954]  netlink_deliver_tap+0x19d/0x1b0
[  159.067814][ T8954]  netlink_unicast+0x7c4/0x990
[  159.072608][ T8954]  ? __pfx_netlink_unicast+0x10/0x10
[  159.077916][ T8954]  ? __virt_addr_valid+0x45f/0x530
[  159.083076][ T8954]  ? __phys_addr_symbol+0x2f/0x70
[  159.088120][ T8954]  ? __check_object_size+0x47a/0x730
[  159.093428][ T8954]  netlink_sendmsg+0x8e4/0xcb0
[  159.098224][ T8954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.103561][ T8954]  ? aa_sock_msg_perm+0x91/0x160
[  159.108548][ T8954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.113868][ T8954]  __sock_sendmsg+0x221/0x270
[  159.118607][ T8954]  ____sys_sendmsg+0x52a/0x7e0
[  159.123411][ T8954]  ? __pfx_____sys_sendmsg+0x10/0x10
[  159.128741][ T8954]  ? __fget_files+0x2a/0x410
[  159.133401][ T8954]  ? __sys_sendmmsg+0x392/0x720
[  159.138291][ T8954]  ? __might_fault+0xaa/0x120
[  159.143005][ T8954]  __sys_sendmmsg+0x36a/0x720
[  159.147717][ T8954]  ? __pfx___sys_sendmmsg+0x10/0x10
[  159.152942][ T8954]  ? __pfx_lock_release+0x10/0x10
[  159.157981][ T8954]  ? kstrtouint_from_user+0x128/0x190
[  159.163427][ T8954]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  159.169388][ T8954]  ? ksys_write+0x22a/0x2b0
[  159.173957][ T8954]  ? __pfx_lock_release+0x10/0x10
[  159.179028][ T8954]  ? vfs_write+0x730/0xd30
[  159.183482][ T8954]  ? __mutex_unlock_slowpath+0x21e/0x790
[  159.189161][ T8954]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  159.195159][ T8954]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  159.201526][ T8954]  ? do_syscall_64+0x100/0x230
[  159.206425][ T8954]  __x64_sys_sendmmsg+0xa0/0xb0
[  159.211308][ T8954]  do_syscall_64+0xf3/0x230
[  159.215838][ T8954]  ? clear_bhb_loop+0x35/0x90
[  159.220978][ T8954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.227106][ T8954] RIP: 0033:0x7f0271585d29
[  159.231577][ T8954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.251289][ T8954] RSP: 002b:00007f0272327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  159.259738][ T8954] RAX: ffffffffffffffda RBX: 00007f0271775fa0 RCX: 00007f0271585d29
[  159.267721][ T8954] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  159.275711][ T8954] RBP: 00007f0272327090 R08: 0000000000000000 R09: 0000000000000000
[  159.283744][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  159.291736][ T8954] R13: 0000000000000000 R14: 00007f0271775fa0 R15: 00007ffc738313a8
[  159.299733][ T8954]  </TASK>
[  159.309011][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  159.413157][ T8958] xt_hashlimit: size too large, truncated to 1048576
[  159.449908][ T8958] xt_hashlimit: max too large, truncated to 1048576
[  159.476773][ T8958] xt_hashlimit: overflow, try lower: 0/0
[  159.720713][ T8971] __nla_validate_parse: 2 callbacks suppressed
[  159.720737][ T8971] netlink: 76 bytes leftover after parsing attributes in process `syz.3.888'.
[  159.791145][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.889'.
[  159.820690][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.888'.
[  159.841093][ T8982] netlink: 'syz.0.890': attribute type 10 has an invalid length.
[  159.861143][ T8982] team0: Device veth0_macvtap failed to register rx_handler
[  160.013516][ T8991] netlink: 'syz.3.893': attribute type 10 has an invalid length.
[  160.223477][ T9005] FAULT_INJECTION: forcing a failure.
[  160.223477][ T9005] name failslab, interval 1, probability 0, space 0, times 0
[  160.238765][ T9005] CPU: 1 UID: 0 PID: 9005 Comm: syz.3.896 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  160.250751][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  160.261557][ T9005] Call Trace:
[  160.265225][ T9005]  <TASK>
[  160.268250][ T9005]  dump_stack_lvl+0x241/0x360
[  160.274976][ T9005]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.282278][ T9005]  ? __pfx__printk+0x10/0x10
[  160.286980][ T9005]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  160.293033][ T9005]  ? __pfx___might_resched+0x10/0x10
[  160.295319][ T9007] netlink: 596 bytes leftover after parsing attributes in process `syz.1.892'.
[  160.298623][ T9005]  should_fail_ex+0x3b0/0x4e0
[  160.312733][ T9005]  should_failslab+0xac/0x100
[  160.317506][ T9005]  kmem_cache_alloc_node_noprof+0x77/0x380
[  160.323424][ T9005]  ? __alloc_skb+0x1c3/0x440
[  160.328061][ T9005]  __alloc_skb+0x1c3/0x440
[  160.332539][ T9005]  ? __pfx___alloc_skb+0x10/0x10
[  160.337534][ T9005]  ? netlink_ack_tlv_len+0x6e/0x200
[  160.342779][ T9005]  netlink_ack+0x145/0xa50
[  160.347868][ T9005]  netlink_rcv_skb+0x262/0x430
[  160.352681][ T9005]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  160.358200][ T9005]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.363630][ T9005]  ? netlink_deliver_tap+0x2e/0x1b0
[  160.368863][ T9005]  netlink_unicast+0x7f6/0x990
[  160.373700][ T9005]  ? __pfx_netlink_unicast+0x10/0x10
[  160.379038][ T9005]  ? __virt_addr_valid+0x45f/0x530
[  160.384208][ T9005]  ? __phys_addr_symbol+0x2f/0x70
[  160.389341][ T9005]  ? __check_object_size+0x47a/0x730
[  160.394963][ T9005]  netlink_sendmsg+0x8e4/0xcb0
[  160.399799][ T9005]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.405142][ T9005]  ? aa_sock_msg_perm+0x91/0x160
[  160.410180][ T9005]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.415513][ T9005]  __sock_sendmsg+0x221/0x270
[  160.420255][ T9005]  ____sys_sendmsg+0x52a/0x7e0
[  160.425108][ T9005]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.430536][ T9005]  ? __fget_files+0x2a/0x410
[  160.435221][ T9005]  ? __sys_sendmmsg+0x392/0x720
[  160.440120][ T9005]  ? __might_fault+0xaa/0x120
[  160.444733][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  160.444843][ T9005]  __sys_sendmmsg+0x36a/0x720
[  160.457546][ T9005]  ? __pfx___sys_sendmmsg+0x10/0x10
[  160.463086][ T9005]  ? __pfx_lock_release+0x10/0x10
[  160.468354][ T9005]  ? kstrtouint_from_user+0x128/0x190
[  160.475134][ T9005]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  160.481099][ T9005]  ? ksys_write+0x22a/0x2b0
[  160.485741][ T9005]  ? __pfx_lock_release+0x10/0x10
[  160.490830][ T9005]  ? vfs_write+0x730/0xd30
[  160.495300][ T9005]  ? __mutex_unlock_slowpath+0x21e/0x790
[  160.501015][ T9005]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  160.507088][ T9005]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  160.513576][ T9005]  ? do_syscall_64+0x100/0x230
[  160.518415][ T9005]  __x64_sys_sendmmsg+0xa0/0xb0
[  160.523299][ T9005]  do_syscall_64+0xf3/0x230
[  160.527844][ T9005]  ? clear_bhb_loop+0x35/0x90
[  160.532562][ T9005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.538849][ T9005] RIP: 0033:0x7f546f385d29
[  160.543320][ T9005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.563127][ T9005] RSP: 002b:00007f54700eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  160.571771][ T9005] RAX: ffffffffffffffda RBX: 00007f546f575fa0 RCX: 00007f546f385d29
[  160.579792][ T9005] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  160.588092][ T9005] RBP: 00007f54700eb090 R08: 0000000000000000 R09: 0000000000000000
[  160.596371][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  160.604872][ T9005] R13: 0000000000000000 R14: 00007f546f575fa0 R15: 00007ffebd105738
[  160.613010][ T9005]  </TASK>
[  161.014999][ T9028] netlink: 104 bytes leftover after parsing attributes in process `syz.0.907'.
[  161.147178][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.908'.
[  161.201950][ T9042] netlink: 'syz.0.910': attribute type 8 has an invalid length.
[  161.202156][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.909'.
[  161.227167][ T9040] gre1: entered allmulticast mode
[  161.238510][ T9042] netlink: 244 bytes leftover after parsing attributes in process `syz.0.910'.
[  161.495012][ T9055] FAULT_INJECTION: forcing a failure.
[  161.495012][ T9055] name failslab, interval 1, probability 0, space 0, times 0
[  161.528524][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.0.913 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  161.539561][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  161.550199][ T9055] Call Trace:
[  161.553526][ T9055]  <TASK>
[  161.556591][ T9055]  dump_stack_lvl+0x241/0x360
[  161.561785][ T9055]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.567149][ T9055]  ? __pfx__printk+0x10/0x10
[  161.571818][ T9055]  ? __kmalloc_cache_noprof+0x48/0x390
[  161.577345][ T9055]  ? __pfx___might_resched+0x10/0x10
[  161.582696][ T9055]  should_fail_ex+0x3b0/0x4e0
[  161.587455][ T9055]  should_failslab+0xac/0x100
[  161.592206][ T9055]  __kmalloc_cache_noprof+0x70/0x390
[  161.597563][ T9055]  ? cls_cgroup_change+0x21f/0x540
[  161.602738][ T9055]  cls_cgroup_change+0x21f/0x540
[  161.607743][ T9055]  ? __pfx_cls_cgroup_change+0x10/0x10
[  161.613267][ T9055]  ? __pfx_cls_cgroup_change+0x10/0x10
[  161.618783][ T9055]  tc_new_tfilter+0x1155/0x1af0
[  161.623723][ T9055]  ? __pfx_tc_new_tfilter+0x10/0x10
[  161.629007][ T9055]  ? rcu_read_unlock+0x87/0xa0
[  161.633839][ T9055]  ? __dev_queue_xmit+0x1775/0x3f50
[  161.639117][ T9055]  ? __pfx_tc_new_tfilter+0x10/0x10
[  161.644382][ T9055]  rtnetlink_rcv_msg+0x791/0xcf0
[  161.649475][ T9055]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  161.654682][ T9055]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  161.660215][ T9055]  ? ref_tracker_free+0x643/0x7e0
[  161.665324][ T9055]  netlink_rcv_skb+0x1e3/0x430
[  161.670153][ T9055]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  161.675680][ T9055]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.681052][ T9055]  ? netlink_deliver_tap+0x2e/0x1b0
[  161.686333][ T9055]  netlink_unicast+0x7f6/0x990
[  161.691272][ T9055]  ? __pfx_netlink_unicast+0x10/0x10
[  161.696724][ T9055]  ? __virt_addr_valid+0x45f/0x530
[  161.701904][ T9055]  ? __phys_addr_symbol+0x2f/0x70
[  161.706996][ T9055]  ? __check_object_size+0x47a/0x730
[  161.712363][ T9055]  netlink_sendmsg+0x8e4/0xcb0
[  161.717206][ T9055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.722810][ T9055]  ? aa_sock_msg_perm+0x91/0x160
[  161.727932][ T9055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.733298][ T9055]  __sock_sendmsg+0x221/0x270
[  161.738053][ T9055]  ____sys_sendmsg+0x52a/0x7e0
[  161.742877][ T9055]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.748223][ T9055]  ? __fget_files+0x2a/0x410
[  161.752888][ T9055]  ? __sys_sendmmsg+0x392/0x720
[  161.757823][ T9055]  ? __might_fault+0xaa/0x120
[  161.762576][ T9055]  __sys_sendmmsg+0x36a/0x720
[  161.767333][ T9055]  ? __pfx___sys_sendmmsg+0x10/0x10
[  161.772618][ T9055]  ? __pfx_lock_release+0x10/0x10
[  161.777696][ T9055]  ? kstrtouint_from_user+0x128/0x190
[  161.783422][ T9055]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  161.789398][ T9055]  ? ksys_write+0x22a/0x2b0
[  161.793962][ T9055]  ? __pfx_lock_release+0x10/0x10
[  161.799066][ T9055]  ? vfs_write+0x730/0xd30
[  161.803545][ T9055]  ? __mutex_unlock_slowpath+0x21e/0x790
[  161.809271][ T9055]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  161.815418][ T9055]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  161.821827][ T9055]  ? do_syscall_64+0x100/0x230
[  161.826670][ T9055]  __x64_sys_sendmmsg+0xa0/0xb0
[  161.831703][ T9055]  do_syscall_64+0xf3/0x230
[  161.836444][ T9055]  ? clear_bhb_loop+0x35/0x90
[  161.841210][ T9055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.847170][ T9055] RIP: 0033:0x7f0271585d29
[  161.851634][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.871384][ T9055] RSP: 002b:00007f0272327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  161.879857][ T9055] RAX: ffffffffffffffda RBX: 00007f0271775fa0 RCX: 00007f0271585d29
[  161.887888][ T9055] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  161.895914][ T9055] RBP: 00007f0272327090 R08: 0000000000000000 R09: 0000000000000000
[  161.903929][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  161.911947][ T9055] R13: 0000000000000000 R14: 00007f0271775fa0 R15: 00007ffc738313a8
[  161.920860][ T9055]  </TASK>
[  161.926917][ T1105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  162.405016][ T9087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.922'.
[  162.781186][ T9110] FAULT_INJECTION: forcing a failure.
[  162.781186][ T9110] name failslab, interval 1, probability 0, space 0, times 0
[  162.809878][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.1.927 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  162.820652][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  162.830851][ T9110] Call Trace:
[  162.834176][ T9110]  <TASK>
[  162.837145][ T9110]  dump_stack_lvl+0x241/0x360
[  162.842063][ T9110]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.847329][ T9110]  ? __pfx__printk+0x10/0x10
[  162.851986][ T9110]  ? __kmalloc_cache_noprof+0x48/0x390
[  162.857510][ T9110]  ? __pfx___might_resched+0x10/0x10
[  162.862859][ T9110]  should_fail_ex+0x3b0/0x4e0
[  162.867620][ T9110]  should_failslab+0xac/0x100
[  162.872434][ T9110]  __kmalloc_cache_noprof+0x70/0x390
[  162.878307][ T9110]  ? cls_cgroup_change+0x21f/0x540
[  162.883518][ T9110]  cls_cgroup_change+0x21f/0x540
[  162.888521][ T9110]  ? __pfx_cls_cgroup_change+0x10/0x10
[  162.894053][ T9110]  ? __pfx_tcf_chain_tp_insert_unique+0x10/0x10
[  162.900357][ T9110]  ? __raw_spin_lock_init+0x45/0x100
[  162.905717][ T9110]  ? __pfx_cls_cgroup_change+0x10/0x10
[  162.911228][ T9110]  tc_new_tfilter+0x1155/0x1af0
[  162.916182][ T9110]  ? __pfx_tc_new_tfilter+0x10/0x10
[  162.921451][ T9110]  ? rcu_read_unlock+0x87/0xa0
[  162.926339][ T9110]  ? __dev_queue_xmit+0x1775/0x3f50
[  162.931700][ T9110]  ? __pfx_tc_new_tfilter+0x10/0x10
[  162.938696][ T9110]  rtnetlink_rcv_msg+0x791/0xcf0
[  162.943691][ T9110]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  162.948863][ T9110]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  162.954486][ T9110]  ? ref_tracker_free+0x643/0x7e0
[  162.959589][ T9110]  netlink_rcv_skb+0x1e3/0x430
[  162.964409][ T9110]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  162.969947][ T9110]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.975309][ T9110]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.980563][ T9110]  netlink_unicast+0x7f6/0x990
[  162.985482][ T9110]  ? __pfx_netlink_unicast+0x10/0x10
[  162.990899][ T9110]  ? __virt_addr_valid+0x45f/0x530
[  162.996266][ T9110]  ? __phys_addr_symbol+0x2f/0x70
[  163.001347][ T9110]  ? __check_object_size+0x47a/0x730
[  163.006703][ T9110]  netlink_sendmsg+0x8e4/0xcb0
[  163.011554][ T9110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.016984][ T9110]  ? aa_sock_msg_perm+0x91/0x160
[  163.021964][ T9110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.027299][ T9110]  __sock_sendmsg+0x221/0x270
[  163.032044][ T9110]  ____sys_sendmsg+0x52a/0x7e0
[  163.036875][ T9110]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.042222][ T9110]  ? __fget_files+0x2a/0x410
[  163.045089][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'.
[  163.046848][ T9110]  ? __sys_sendmmsg+0x392/0x720
[  163.060514][ T9110]  ? __might_fault+0xaa/0x120
[  163.065348][ T9110]  __sys_sendmmsg+0x36a/0x720
[  163.070090][ T9110]  ? __pfx___sys_sendmmsg+0x10/0x10
[  163.075350][ T9110]  ? __pfx_lock_release+0x10/0x10
[  163.080429][ T9110]  ? kstrtouint_from_user+0x128/0x190
[  163.085878][ T9110]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  163.091829][ T9110]  ? ksys_write+0x22a/0x2b0
[  163.096389][ T9110]  ? __pfx_lock_release+0x10/0x10
[  163.101480][ T9110]  ? vfs_write+0x730/0xd30
[  163.105410][ T9120] Bluetooth: MGMT ver 1.23
[  163.106016][ T9110]  ? __mutex_unlock_slowpath+0x21e/0x790
[  163.116132][ T9110]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  163.122266][ T9110]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  163.128748][ T9110]  ? do_syscall_64+0x100/0x230
[  163.133673][ T9110]  __x64_sys_sendmmsg+0xa0/0xb0
[  163.139373][ T9110]  do_syscall_64+0xf3/0x230
[  163.143949][ T9110]  ? clear_bhb_loop+0x35/0x90
[  163.148686][ T9110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.154650][ T9110] RIP: 0033:0x7f4ea8985d29
[  163.159118][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.178772][ T9110] RSP: 002b:00007f4ea9754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  163.187328][ T9110] RAX: ffffffffffffffda RBX: 00007f4ea8b75fa0 RCX: 00007f4ea8985d29
[  163.195649][ T9110] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  163.203863][ T9110] RBP: 00007f4ea9754090 R08: 0000000000000000 R09: 0000000000000000
[  163.212249][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  163.220592][ T9110] R13: 0000000000000000 R14: 00007f4ea8b75fa0 R15: 00007ffe5f392598
[  163.228739][ T9110]  </TASK>
[  163.484954][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  163.720762][ T9152] xt_l2tp: invalid flags combination: 4
[  163.746136][ T9155] netlink: 'syz.0.943': attribute type 29 has an invalid length.
[  163.754610][ T9156] netlink: 'syz.0.943': attribute type 29 has an invalid length.
[  163.792599][ T9157] netlink: 'syz.2.942': attribute type 7 has an invalid length.
[  163.816768][ T9157] netlink: 'syz.2.942': attribute type 8 has an invalid length.
[  163.880454][ T9162] team_slave_0: entered promiscuous mode
[  163.886339][ T9162] team_slave_1: entered promiscuous mode
[  163.897929][ T9162] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  163.961267][ T9165] netlink: 'syz.0.945': attribute type 1 has an invalid length.
[  164.137400][ T9171] FAULT_INJECTION: forcing a failure.
[  164.137400][ T9171] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.150979][ T9171] CPU: 0 UID: 0 PID: 9171 Comm: syz.3.948 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  164.161626][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  164.171727][ T9171] Call Trace:
[  164.175044][ T9171]  <TASK>
[  164.178012][ T9171]  dump_stack_lvl+0x241/0x360
[  164.182832][ T9171]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.188089][ T9171]  ? __pfx__printk+0x10/0x10
[  164.192725][ T9171]  ? __pfx_lock_release+0x10/0x10
[  164.197799][ T9171]  should_fail_ex+0x3b0/0x4e0
[  164.202534][ T9171]  _copy_from_user+0x2f/0xc0
[  164.207177][ T9171]  copy_msghdr_from_user+0xae/0x680
[  164.212403][ T9171]  ? __pfx___might_resched+0x10/0x10
[  164.217703][ T9171]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  164.223527][ T9171]  ? __fget_files+0x2a/0x410
[  164.228139][ T9171]  ? __sys_sendmmsg+0x392/0x720
[  164.233038][ T9171]  ? __might_fault+0xaa/0x120
[  164.237743][ T9171]  __sys_sendmmsg+0x32b/0x720
[  164.242462][ T9171]  ? __pfx___sys_sendmmsg+0x10/0x10
[  164.247705][ T9171]  ? __pfx_lock_release+0x10/0x10
[  164.252741][ T9171]  ? kstrtouint_from_user+0x128/0x190
[  164.258153][ T9171]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  164.264082][ T9171]  ? ksys_write+0x22a/0x2b0
[  164.268600][ T9171]  ? __pfx_lock_release+0x10/0x10
[  164.274338][ T9171]  ? vfs_write+0x730/0xd30
[  164.278770][ T9171]  ? __mutex_unlock_slowpath+0x21e/0x790
[  164.284441][ T9171]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  164.290435][ T9171]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  164.296774][ T9171]  ? do_syscall_64+0x100/0x230
[  164.301557][ T9171]  __x64_sys_sendmmsg+0xa0/0xb0
[  164.306466][ T9171]  do_syscall_64+0xf3/0x230
[  164.311042][ T9171]  ? clear_bhb_loop+0x35/0x90
[  164.315745][ T9171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.321674][ T9171] RIP: 0033:0x7f546f385d29
[  164.326207][ T9171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.345835][ T9171] RSP: 002b:00007f54700eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  164.354279][ T9171] RAX: ffffffffffffffda RBX: 00007f546f575fa0 RCX: 00007f546f385d29
[  164.362279][ T9171] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  164.370269][ T9171] RBP: 00007f54700eb090 R08: 0000000000000000 R09: 0000000000000000
[  164.378279][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  164.386261][ T9171] R13: 0000000000000000 R14: 00007f546f575fa0 R15: 00007ffebd105738
[  164.394256][ T9171]  </TASK>
[  164.754217][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  164.820369][ T9197] __nla_validate_parse: 8 callbacks suppressed
[  164.820390][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.956'.
[  165.028543][ T9207] FAULT_INJECTION: forcing a failure.
[  165.028543][ T9207] name failslab, interval 1, probability 0, space 0, times 0
[  165.048309][ T9207] CPU: 1 UID: 0 PID: 9207 Comm: syz.4.960 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  165.059080][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  165.069439][ T9207] Call Trace:
[  165.072756][ T9207]  <TASK>
[  165.075810][ T9207]  dump_stack_lvl+0x241/0x360
[  165.080547][ T9207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.085798][ T9207]  ? __pfx__printk+0x10/0x10
[  165.090444][ T9207]  ? ref_tracker_alloc+0x332/0x490
[  165.095599][ T9207]  should_fail_ex+0x3b0/0x4e0
[  165.100336][ T9207]  should_failslab+0xac/0x100
[  165.105062][ T9207]  ? skb_clone+0x20c/0x390
[  165.109536][ T9207]  kmem_cache_alloc_noprof+0x70/0x380
[  165.114973][ T9207]  skb_clone+0x20c/0x390
[  165.119272][ T9207]  __netlink_deliver_tap+0x3cc/0x7f0
[  165.124611][ T9207]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.129870][ T9207]  netlink_deliver_tap+0x19d/0x1b0
[  165.135037][ T9207]  netlink_sendskb+0x68/0x140
[  165.139865][ T9207]  netlink_unicast+0x39d/0x990
[  165.144693][ T9207]  ? __pfx_netlink_unicast+0x10/0x10
[  165.150160][ T9207]  netlink_rcv_skb+0x262/0x430
[  165.154972][ T9207]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  165.160492][ T9207]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.165851][ T9207]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.171114][ T9207]  netlink_unicast+0x7f6/0x990
[  165.175956][ T9207]  ? __pfx_netlink_unicast+0x10/0x10
[  165.181300][ T9207]  ? __virt_addr_valid+0x45f/0x530
[  165.186471][ T9207]  ? __phys_addr_symbol+0x2f/0x70
[  165.191653][ T9207]  ? __check_object_size+0x47a/0x730
[  165.197002][ T9207]  netlink_sendmsg+0x8e4/0xcb0
[  165.201842][ T9207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.207230][ T9207]  ? aa_sock_msg_perm+0x91/0x160
[  165.212320][ T9207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.218450][ T9207]  __sock_sendmsg+0x221/0x270
[  165.223622][ T9207]  ____sys_sendmsg+0x52a/0x7e0
[  165.229018][ T9207]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.234888][ T9207]  ? __fget_files+0x2a/0x410
[  165.240059][ T9207]  ? __sys_sendmmsg+0x392/0x720
[  165.246878][ T9207]  ? __might_fault+0xaa/0x120
[  165.252688][ T9207]  __sys_sendmmsg+0x36a/0x720
[  165.257689][ T9207]  ? __pfx___sys_sendmmsg+0x10/0x10
[  165.266798][ T9207]  ? __pfx_lock_release+0x10/0x10
[  165.272170][ T9207]  ? kstrtouint_from_user+0x128/0x190
[  165.277882][ T9207]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  165.285132][ T9207]  ? ksys_write+0x22a/0x2b0
[  165.290382][ T9207]  ? __pfx_lock_release+0x10/0x10
[  165.296240][ T9207]  ? vfs_write+0x730/0xd30
[  165.300876][ T9207]  ? __mutex_unlock_slowpath+0x21e/0x790
[  165.306863][ T9207]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  165.313767][ T9207]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  165.320194][ T9207]  ? do_syscall_64+0x100/0x230
[  165.325109][ T9207]  __x64_sys_sendmmsg+0xa0/0xb0
[  165.330012][ T9207]  do_syscall_64+0xf3/0x230
[  165.334571][ T9207]  ? clear_bhb_loop+0x35/0x90
[  165.339286][ T9207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.345486][ T9207] RIP: 0033:0x7f640eb85d29
[  165.350658][ T9207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.370739][ T9207] RSP: 002b:00007f640f9bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  165.379260][ T9207] RAX: ffffffffffffffda RBX: 00007f640ed75fa0 RCX: 00007f640eb85d29
[  165.387335][ T9207] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  165.395321][ T9207] RBP: 00007f640f9bb090 R08: 0000000000000000 R09: 0000000000000000
[  165.403320][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  165.411322][ T9207] R13: 0000000000000000 R14: 00007f640ed75fa0 R15: 00007ffe9ba0ee18
[  165.419329][ T9207]  </TASK>
[  165.433146][ T9215] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  165.690975][ T9227] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  166.077118][ T9252] netlink: 56 bytes leftover after parsing attributes in process `syz.3.971'.
[  166.210339][ T3024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  166.240590][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'.
[  166.249903][ T9261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.974'.
[  166.282507][ T9263] FAULT_INJECTION: forcing a failure.
[  166.282507][ T9263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.304808][ T9263] CPU: 0 UID: 0 PID: 9263 Comm: syz.3.976 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  166.315499][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  166.325687][ T9263] Call Trace:
[  166.329091][ T9263]  <TASK>
[  166.332059][ T9263]  dump_stack_lvl+0x241/0x360
[  166.336810][ T9263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.342134][ T9263]  ? __pfx__printk+0x10/0x10
[  166.346786][ T9263]  ? __pfx_lock_release+0x10/0x10
[  166.351877][ T9263]  ? __lock_acquire+0x1397/0x2100
[  166.356971][ T9263]  should_fail_ex+0x3b0/0x4e0
[  166.361708][ T9263]  _copy_from_user+0x2f/0xc0
[  166.366355][ T9263]  kstrtouint_from_user+0xc6/0x190
[  166.371508][ T9263]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  166.377278][ T9263]  ? __pfx_lock_acquire+0x10/0x10
[  166.382357][ T9263]  proc_fail_nth_write+0xaa/0x2d0
[  166.387443][ T9263]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  166.393393][ T9263]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  166.399077][ T9263]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  166.404755][ T9263]  vfs_write+0x2a3/0xd30
[  166.409080][ T9263]  ? __pfx_vfs_write+0x10/0x10
[  166.413892][ T9263]  ? __fget_files+0x2a/0x410
[  166.418540][ T9263]  ? __fget_files+0x395/0x410
[  166.423294][ T9263]  ? __fget_files+0x2a/0x410
[  166.427947][ T9263]  ksys_write+0x18f/0x2b0
[  166.432326][ T9263]  ? __pfx_ksys_write+0x10/0x10
[  166.437234][ T9263]  ? do_syscall_64+0x100/0x230
[  166.442071][ T9263]  ? do_syscall_64+0xb6/0x230
[  166.446807][ T9263]  do_syscall_64+0xf3/0x230
[  166.451363][ T9263]  ? clear_bhb_loop+0x35/0x90
[  166.456091][ T9263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.462146][ T9263] RIP: 0033:0x7f546f3847df
[  166.466606][ T9263] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  166.486684][ T9263] RSP: 002b:00007f54700eb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  166.495121][ T9263] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f546f3847df
[  166.503130][ T9263] RDX: 0000000000000001 RSI: 00007f54700eb0a0 RDI: 0000000000000006
[  166.511211][ T9263] RBP: 00007f54700eb090 R08: 0000000000000000 R09: 0000000000000000
[  166.519207][ T9263] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  166.527216][ T9263] R13: 0000000000000000 R14: 00007f546f575fa0 R15: 00007ffebd105738
[  166.535251][ T9263]  </TASK>
[  166.697459][ T9280] netlink: 'syz.0.980': attribute type 1 has an invalid length.
[  166.722666][ T9281] openvswitch: netlink: Actions may not be safe on all matching packets
[  166.841084][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'.
[  167.053829][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'.
[  167.068761][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'.
[  167.099974][ T9303] smc: net device bond0 applied user defined pnetid SYZ0
[  167.240652][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.259773][ T9322] netlink: 48 bytes leftover after parsing attributes in process `syz.0.988'.
[  167.398043][ T9330] netlink: 'syz.1.989': attribute type 10 has an invalid length.
[  167.442112][ T9330] team0: Port device netdevsim0 removed
[  167.560464][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.993'.
[  167.602763][ T9336] erspan0: entered promiscuous mode
[  167.610350][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  167.626851][ T9336] erspan0: left promiscuous mode
[  167.675442][ T9350] netlink: 52 bytes leftover after parsing attributes in process `syz.2.996'.
[  167.693684][ T9342] batman_adv: batadv0: Adding interface: dummy0
[  167.703434][ T9342] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.733467][ T9342] batman_adv: batadv0: Interface activated: dummy0
[  167.887413][ T9358] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  168.310160][ T9382] netlink: 'syz.3.1006': attribute type 2 has an invalid length.
[  168.511399][ T9398] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  168.519492][ T9398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.707513][ T9405] trusted_key: syz.2.1013 sent an empty control message without MSG_MORE.
[  168.718530][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  168.822504][ T9411] netlink: 'syz.4.1015': attribute type 2 has an invalid length.
[  169.079772][ T9426] netlink: 'syz.4.1021': attribute type 25 has an invalid length.
[  169.088767][ T9426] netlink: 'syz.4.1021': attribute type 7 has an invalid length.
[  169.147279][ T9428] Unsupported ieee802154 address type: 0
[  169.423545][ T9444] xt_TCPMSS: Only works on TCP SYN packets
[  169.825578][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  169.934281][ T5847] Bluetooth: hci0: command tx timeout
[  170.285789][ T9495] __nla_validate_parse: 12 callbacks suppressed
[  170.285814][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'.
[  170.557650][ T9503] bond2: entered promiscuous mode
[  170.562780][ T9503] bond2: entered allmulticast mode
[  170.570113][ T9503] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.805504][ T9518] SET target dimension over the limit!
[  170.876295][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'.
[  170.908894][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'.
[  171.006345][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  171.103316][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'.
[  171.221996][ T9544] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1059'.
[  171.784496][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'.
[  171.826312][    T8] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1
[  171.835747][ T9561] netlink: 'syz.2.1066': attribute type 16 has an invalid length.
[  171.843615][ T9561] netlink: 'syz.2.1066': attribute type 17 has an invalid length.
[  171.854420][    T8] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22
[  172.146069][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  172.177813][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'.
[  172.216923][ T9577] netlink: 'syz.3.1070': attribute type 30 has an invalid length.
[  172.230089][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'.
[  172.510485][ T9592] netlink: 'syz.1.1076': attribute type 1 has an invalid length.
[  172.523361][ T9592] netlink: 'syz.1.1076': attribute type 3 has an invalid length.
[  172.533192][ T9592] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1076'.
[  172.555664][ T9592] NCSI netlink: No device for ifindex 813332851
[  172.757427][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1082'.
[  172.867801][ T9610] netlink: 'syz.4.1081': attribute type 30 has an invalid length.
[  173.146733][ T9625] netlink: 'syz.4.1090': attribute type 2 has an invalid length.
[  173.299546][ T9638] openvswitch: netlink: Key type 30 is not supported
[  173.316406][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  174.019789][ T9682] x_tables: duplicate underflow at hook 1
[  174.218701][ T9691] tc_dump_action: action bad kind
[  174.231328][ T9692] xfrm1: entered allmulticast mode
[  174.418989][ T9709] sctp: [Deprecated]: syz.2.1114 (pid 9709) Use of int in max_burst socket option deprecated.
[  174.418989][ T9709] Use struct sctp_assoc_value instead
[  174.454733][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  174.906317][ T9744] sctp: [Deprecated]: syz.1.1123 (pid 9744) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.906317][ T9744] Use struct sctp_sack_info instead
[  175.337586][ T9768] ieee802154 phy1 wpan1: encryption failed: -22
[  175.386225][ T9768] validate_nla: 1 callbacks suppressed
[  175.386250][ T9768] netlink: 'syz.1.1128': attribute type 1 has an invalid length.
[  175.421945][ T9768] __nla_validate_parse: 7 callbacks suppressed
[  175.421969][ T9768] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1128'.
[  175.512528][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'.
[  175.557402][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  175.760514][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1137'.
[  175.968695][ T9806] team0: Device is already in use.
[  176.167801][ T9812] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  176.201765][ T9812] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  176.705108][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  177.805870][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  178.914814][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  180.024891][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  180.494356][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  181.136886][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  182.245054][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  183.345578][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  184.464866][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  185.565532][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  186.664885][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  187.765030][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  188.174944][ T1152] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  188.864871][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  189.985807][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  191.124938][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  192.234870][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  193.345623][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  194.464947][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  194.578621][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  195.574779][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  196.684793][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  197.805656][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  198.914367][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  199.217860][ T9821] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1145'.
[  199.279795][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'.
[  199.627842][ T9844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1153'.
[  199.668741][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'.
[  199.907389][ T9855] netlink: 'syz.1.1158': attribute type 4 has an invalid length.
[  200.045196][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  200.098090][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'.
[  200.182815][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'.
[  200.201558][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'.
[  200.438338][ T9893] xt_policy: neither incoming nor outgoing policy selected
[  200.682435][ T9909] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  200.740286][ T9908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1174'.
[  200.762223][ T9908] gtp0: entered promiscuous mode
[  200.774222][ T9908] gtp0: entered allmulticast mode
[  200.935152][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'.
[  201.175033][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  201.268164][ T9935] tipc: Started in network mode
[  201.284378][ T9935] tipc: Node identity 7, cluster identity 4711
[  201.302221][ T9935] tipc: Node number set to 7
[  201.369554][ T9939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.779850][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  201.790161][ T5142] Bluetooth: hci2: command 0x0406 tx timeout
[  201.796425][ T5851] Bluetooth: hci3: command 0x0406 tx timeout
[  201.828984][ T9952] ieee802154 phy1 wpan1: encryption failed: -22
[  201.849012][ T9952] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1186'.
[  202.280957][ T9979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.326896][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  202.400886][ T9985] netem: invalid attributes len -24
[  202.407139][ T9985] netem: change failed
[  202.812022][T10008] ieee802154 phy1 wpan1: encryption failed: -90
[  203.146798][T10018] xt_bpf: check failed: parse error
[  203.465117][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  203.673272][T10046] syzkaller0: entered promiscuous mode
[  203.679568][T10046] syzkaller0: entered allmulticast mode
[  203.991284][T10056] netlink: 'syz.0.1219': attribute type 12 has an invalid length.
[  204.617824][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  205.764871][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  206.515197][T10106] netlink: 'syz.3.1224': attribute type 29 has an invalid length.
[  206.633949][T10111] netlink: 'syz.3.1224': attribute type 29 has an invalid length.
[  206.888539][ T3024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  207.217550][T10164] __nla_validate_parse: 18 callbacks suppressed
[  207.217575][T10164] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1241'.
[  207.240889][T10164] 0·: renamed from hsr_slave_1 (while UP)
[  207.260466][T10164] 0·: entered allmulticast mode
[  207.266139][T10164] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  207.293599][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'.
[  207.357899][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'.
[  207.659336][T10190] xt_recent: Unsupported userspace flags (00000042)
[  207.806223][T10197] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  207.831905][T10197] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  207.865983][T10202] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1254'.
[  207.888746][T10202] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP)
[  207.906859][T10202] 0ªÃøÂFNð¡: entered allmulticast mode
[  207.963871][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'.
[  208.064633][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  208.517537][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1258'.
[  209.178217][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  210.307484][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  210.475699][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'.
[  210.540617][T10319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1285'.
[  210.585487][T10319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1285'.
[  210.929213][T10337] netlink: 'syz.1.1288': attribute type 1 has an invalid length.
[  211.051503][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1290'.
[  211.146614][T10351] netlink: 'syz.0.1290': attribute type 1 has an invalid length.
[  211.224918][T10344] batadv_slave_1: entered promiscuous mode
[  211.233081][T10344] batadv_slave_1: entered allmulticast mode
[  211.358099][T10355] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  211.387070][T10355] xt_TCPMSS: Only works on TCP SYN packets
[  211.393455][T10356] xt_TCPMSS: Only works on TCP SYN packets
[  211.422030][T10360] netlink: 'syz.0.1297': attribute type 1 has an invalid length.
[  211.432257][T10360] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  211.437200][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.251773][T10411] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 2928. macoff=96
[  212.369811][T10419] __nla_validate_parse: 2 callbacks suppressed
[  212.369837][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'.
[  212.433004][T10425] netlink: 'syz.3.1316': attribute type 19 has an invalid length.
[  212.435764][T10411] syz.1.1311 (10411) used greatest stack depth: 17872 bytes left
[  212.450967][T10425] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  212.583026][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'.
[  212.635489][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.642948][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'.
[  212.778791][T10443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1324'.
[  213.049897][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1331'.
[  213.186738][T10469] delete_channel: no stack
[  213.317053][T10472] netlink: 'syz.0.1335': attribute type 10 has an invalid length.
[  213.358217][T10477] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  213.756205][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  213.796534][T10496] netlink: 'syz.3.1340': attribute type 2 has an invalid length.
[  213.843370][T10502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1343'.
[  213.968161][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'.
[  214.151794][T10517] IPVS: Unknown mcast interface: vcan0
[  214.175626][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'.
[  214.210883][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1350'.
[  214.716268][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'.
[  214.867441][T10544] nbd: socks must be embedded in a SOCK_ITEM attr
[  214.907533][ T3024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  215.253820][T10569] netlink: 'syz.4.1364': attribute type 1 has an invalid length.
[  215.393886][ T5838] Bluetooth: hci0: command tx timeout
[  215.941841][T10598] openvswitch: netlink: Key type 34 is out of range max 32
[  216.170340][T10618] netlink: 'syz.4.1382': attribute type 1 has an invalid length.
[  216.214754][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  216.368634][T10613] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.442334][T10613] bridge_slave_0 (unregistering): left allmulticast mode
[  216.462432][T10613] bridge_slave_0 (unregistering): left promiscuous mode
[  216.482663][T10613] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.191819][T10671] netlink: 'syz.1.1398': attribute type 7 has an invalid length.
[  217.246515][T10675] netlink: 'syz.1.1398': attribute type 7 has an invalid length.
[  217.372935][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  217.562335][T10695] __nla_validate_parse: 10 callbacks suppressed
[  217.562362][T10695] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1405'.
[  217.598096][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'.
[  217.684805][T10699] IPv6: Can't replace route, no match found
[  217.798240][T10709] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002
[  217.860094][T10709] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1410'.
[  218.119055][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'.
[  218.165984][T10729] vlan0: entered promiscuous mode
[  218.222417][T10729] team0: Port device vlan0 added
[  218.264194][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'.
[  218.280668][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1415'.
[  218.558448][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  218.892503][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'.
[  218.907564][T10780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1428'.
[  218.936660][T10767] nbd: must specify at least one socket
[  218.990251][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'.
[  219.043153][T10766] nbd: must specify at least one socket
[  219.056090][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'.
[  219.143799][T10788] netlink: 'syz.2.1431': attribute type 1 has an invalid length.
[  219.534978][   T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  219.715570][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  219.850673][T10826] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  220.645568][T10865] xt_bpf: check failed: parse error
[  220.734792][T10867] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  220.754189][T10867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.888688][T10878] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  220.945416][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  221.232656][T10894] netlink: 'syz.3.1469': attribute type 2 has an invalid length.
[  221.255836][T10897] x_tables: duplicate underflow at hook 1
[  221.326613][T10897] batadv0: entered promiscuous mode
[  221.360515][T10897] batadv0: left promiscuous mode
[  221.394570][T10900] dvmrp0: entered allmulticast mode
[  221.697783][T10920] netlink: 'syz.2.1479': attribute type 7 has an invalid length.
[  221.717503][T10916] bridge0: port 3(veth0_to_bridge) entered blocking state
[  221.733855][T10916] bridge0: port 3(veth0_to_bridge) entered disabled state
[  221.742209][T10916] veth0_to_bridge: entered allmulticast mode
[  221.759106][T10916] veth0_to_bridge: entered promiscuous mode
[  221.793103][T10916] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  221.855377][T10916] bridge0: port 3(veth0_to_bridge) entered blocking state
[  221.864388][T10916] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  221.911496][T10920] netlink: 'syz.2.1479': attribute type 4 has an invalid length.
[  222.096133][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  222.660166][T10940] __nla_validate_parse: 35 callbacks suppressed
[  222.660192][T10940] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1482'.
[  222.710642][T10936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1482'.
[  222.782957][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1491'.
[  223.342491][ T3024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  223.392876][T11002] batadv_slave_0: entered promiscuous mode
[  223.436489][T11002] batadv_slave_0: left promiscuous mode
[  223.573021][T11010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.765268][T11015] netlink: 'syz.4.1503': attribute type 4 has an invalid length.
[  224.325802][T11059] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1515'.
[  224.484675][ T3024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  224.518372][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'.
[  224.529227][T11070] netlink: 'syz.4.1519': attribute type 10 has an invalid length.
[  224.553974][T11072] netlink: 'syz.1.1520': attribute type 2 has an invalid length.
[  224.736407][T11079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1523'.
[  224.775988][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'.
[  224.832639][T11083] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  224.889897][T11087] netlink: 'syz.4.1527': attribute type 1 has an invalid length.
[  224.925639][T11087] netlink: 'syz.4.1527': attribute type 1 has an invalid length.
[  225.052408][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'.
[  225.296867][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.309697][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.322694][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.335088][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.347529][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.359935][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.372302][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.385173][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  225.666786][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  227.013128][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  227.397208][T11135] netlink: 'syz.2.1540': attribute type 2 has an invalid length.
[  227.430959][T11135] netlink: 'syz.2.1540': attribute type 8 has an invalid length.
[  227.475417][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1541'.
[  227.516700][T11135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1540'.
[  227.652383][T11127] netem: incorrect ge model size
[  227.677794][T11135] netlink: 'syz.2.1540': attribute type 3 has an invalid length.
[  227.957391][T11135] netlink: 'syz.2.1540': attribute type 3 has an invalid length.
[  228.177528][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  228.443988][T11157] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  228.574172][    C0] net_ratelimit: 10484 callbacks suppressed
[  228.574196][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.594887][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.609392][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.624277][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.638368][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.654420][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.667244][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.679825][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.693194][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  228.705787][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  229.334553][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  230.445390][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  231.555904][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  232.656023][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  233.584137][    C0] net_ratelimit: 20455 callbacks suppressed
[  233.584164][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.604436][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.619074][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.633259][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.645982][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.659544][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.675446][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.689543][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.702109][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.714530][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  233.755198][ T3024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  234.854487][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  235.052183][T11151] __nla_validate_parse: 2 callbacks suppressed
[  235.052209][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'.
[  235.105056][T11166] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1548'.
[  235.157621][T11166] netem: invalid attributes len -24
[  235.563976][T11174] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20004
[  235.697915][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1551'.
[  236.056334][T11187] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1554'.
[  236.084848][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  237.207500][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  238.315163][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  238.594230][    C0] net_ratelimit: 21173 callbacks suppressed
[  238.594256][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.612548][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.624905][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.637730][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.650093][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.662413][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.674830][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.687247][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.699589][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  238.711848][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  239.435997][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  240.536726][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  241.645314][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  242.744889][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  242.850141][T11174] tipc: Started in network mode
[  242.859630][T11174] tipc: Node identity ac1414aa, cluster identity 4711
[  242.870732][T11174] tipc: Enabled bearer <udp:s>, priority 10
[  242.893638][T11198] netlink: 'syz.0.1555': attribute type 4 has an invalid length.
[  243.604201][    C0] net_ratelimit: 22507 callbacks suppressed
[  243.604227][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.622641][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.635184][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.648360][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.660779][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.673199][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.685658][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.698024][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.704814][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  243.710440][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  243.810159][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1563'.
[  243.865646][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  243.986677][ T5845] tipc: Node number set to 2886997162
[  244.312890][T11231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1565'.
[  244.432727][T11235] netlink: 'syz.4.1564': attribute type 2 has an invalid length.
[  245.000840][T11249] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  245.014706][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  245.375317][T11247] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  246.164850][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  247.266282][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  247.439614][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1586'.
[  248.414924][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  248.614224][    C0] net_ratelimit: 18989 callbacks suppressed
[  248.614250][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.632588][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.644938][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.657464][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.669704][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.681994][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.694384][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.706727][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.719038][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  248.731285][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  249.514843][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  250.645211][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  250.894250][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  251.535990][   T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  251.765611][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  252.864553][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  253.624032][    C0] net_ratelimit: 23788 callbacks suppressed
[  253.624056][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.642275][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.654593][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.667371][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.679731][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.691944][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.704286][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.716516][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.728810][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.741024][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  253.965024][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  255.065576][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  256.032527][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  256.165282][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  257.264888][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  258.131947][T11305] smc: net device wg0 applied user defined pnetid SYZ0
[  258.396457][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  258.516376][T11325] netlink: 'syz.2.1589': attribute type 13 has an invalid length.
[  258.539310][T11325] digital: digital_start_poll: Unknown protocol
[  258.634255][    C0] net_ratelimit: 23179 callbacks suppressed
[  258.634279][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.652753][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.665152][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.677520][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.689897][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.702240][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.714696][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.727111][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.739473][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.751826][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.850348][T11342] netlink: 'syz.3.1592': attribute type 24 has an invalid length.
[  259.575724][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.696242][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  261.805292][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  262.771358][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  262.786672][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  262.796475][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  262.805830][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  262.816344][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  262.823749][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  262.957644][   T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  263.644250][    C0] net_ratelimit: 22441 callbacks suppressed
[  263.644276][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.662540][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.674825][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.687127][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.699518][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.711865][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.724211][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.736547][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.748986][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  263.761398][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  264.064923][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  264.896802][ T5843] Bluetooth: hci5: command tx timeout
[  265.165261][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  266.280089][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  266.681117][T11357] SET target dimension over the limit!
[  266.853153][T11365] pimreg3: entered allmulticast mode
[  266.985210][ T5843] Bluetooth: hci5: command tx timeout
[  267.219247][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'.
[  267.451419][T11380] netlink: 'syz.2.1601': attribute type 10 has an invalid length.
[  267.722220][ T7053] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  267.912141][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'.
[  268.011899][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'.
[  268.372687][T11400] xt_CT: You must specify a L4 protocol and not use inversions on it
[  268.654051][    C0] net_ratelimit: 21619 callbacks suppressed
[  268.654084][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.680370][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.692694][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.705026][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.717741][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.730124][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.742480][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.754826][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.767219][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.779404][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  268.837215][ T1105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  269.054791][ T5843] Bluetooth: hci5: command tx timeout
[  269.954794][T11391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  271.055874][ T1105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  271.135248][ T5843] Bluetooth: hci5: command tx timeout
[  272.155120][T11391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  273.271079][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  273.664096][    C0] net_ratelimit: 23138 callbacks suppressed
[  273.664121][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.682370][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.694770][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.707139][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.719489][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.731722][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.744095][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.756414][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.768688][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  273.780863][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  274.375882][T11391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  275.474826][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  276.257616][T11394] netlink: 'syz.1.1596': attribute type 21 has an invalid length.
[  276.289851][T11394] netlink: 'syz.1.1596': attribute type 6 has an invalid length.
[  276.585211][ T1105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  276.690543][T11415] netlink: 'syz.3.1603': attribute type 1 has an invalid length.
[  277.696190][ T1105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  278.674029][    C0] net_ratelimit: 22486 callbacks suppressed
[  278.674054][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.692640][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.705179][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.717547][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.729871][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.742745][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.755108][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.767462][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.779823][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.792046][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  278.816287][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  279.925244][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  280.356814][T11351] chnl_net:caif_netlink_parms(): no params data found
[  280.385316][T11415] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  281.024838][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  282.065636][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  282.077751][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  282.087900][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  282.097428][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  282.106468][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  282.116346][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  282.145136][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  283.139259][T11393] wlan1: Trigger new scan to find an IBSS to join
[  283.244892][T11391] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  283.538772][T11391] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  283.684248][    C0] net_ratelimit: 22711 callbacks suppressed
[  283.684274][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.702754][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.715136][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.727502][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.740306][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.752713][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.765259][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.777700][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.790311][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.802978][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  283.969009][T11417] bond0 (unregistering): Released all slaves
[  284.175292][ T5838] Bluetooth: hci0: command tx timeout
[  284.346005][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  285.446347][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  286.179556][T11393] wlan1: Trigger new scan to find an IBSS to join
[  286.255144][ T5838] Bluetooth: hci0: command tx timeout
[  286.555029][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  287.654536][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  287.980286][T11451] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1613'.
[  288.335116][ T5838] Bluetooth: hci0: command tx timeout
[  288.694024][    C0] net_ratelimit: 23097 callbacks suppressed
[  288.694048][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.712317][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.724689][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.737027][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.749318][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.755982][ T1152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  288.761617][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.781349][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.793730][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.806043][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  288.818234][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  289.135129][ T1152] wlan1: Trigger new scan to find an IBSS to join
[  289.875975][ T1105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  290.029597][T11393] wlan1: Creating new IBSS network, BSSID fe:a2:0d:16:bb:38
[  290.415016][ T5838] Bluetooth: hci0: command tx timeout
[  290.995192][ T1105] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  291.740970][T11351] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.753814][T11351] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.772899][T11351] bridge_slave_0: entered allmulticast mode
[  291.797951][T11351] bridge_slave_0: entered promiscuous mode
[  291.812659][T11351] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.822885][T11351] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.838288][T11351] bridge_slave_1: entered allmulticast mode
[  291.849438][T11351] bridge_slave_1: entered promiscuous mode
[  291.951398][T11351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.971895][T11351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.073838][T11351] team0: Port device team_slave_0 added
[  292.091544][T11351] team0: Port device team_slave_1 added
[  292.179620][T11351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.188901][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.217931][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  292.237241][T11351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.259343][T11351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.271128][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.306259][T11351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.420602][T11351] hsr_slave_0: entered promiscuous mode
[  292.437909][T11351] hsr_slave_1: entered promiscuous mode
[  292.469720][T11351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.480986][T11351] Cannot create hsr debugfs directory
[  293.345282][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  293.704142][    C0] net_ratelimit: 22609 callbacks suppressed
[  293.704168][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.722647][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.735002][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.747404][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.759659][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.772025][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.774295][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  293.784449][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.803223][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  293.815540][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  294.445285][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  295.565692][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  296.664912][T11393] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  296.833881][T11451] ------------[ cut here ]------------
[  296.840317][T11451] refcount_t: decrement hit 0; leaking memory.
[  296.955571][T11451] WARNING: CPU: 1 PID: 11451 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0
[  296.965794][T11451] Modules linked in:
[  296.969760][T11451] CPU: 1 UID: 0 PID: 11451 Comm: syz.3.1613 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  296.982101][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  296.992871][T11451] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  296.999695][T11451] Code: b2 00 00 00 e8 b7 3b dd fc 5b 5d c3 cc cc cc cc e8 ab 3b dd fc c6 05 5f 7e 41 0b 01 90 48 c7 c7 a0 6a 5f 8c e8 57 df 9d fc 90 <0f> 0b 90 90 eb d9 e8 8b 3b dd fc c6 05 3c 7e 41 0b 01 90 48 c7 c7
[  297.020534][T11451] RSP: 0018:ffffc9000216f728 EFLAGS: 00010246
[  297.027505][T11451] RAX: 0b7ef7af20414800 RBX: ffff88807a55464c RCX: ffff88803067bc00
[  297.036271][T11451] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  297.045569][T11451] RBP: 0000000000000004 R08: ffffffff81601a42 R09: fffffbfff1cfa210
[  297.053603][T11451] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88807a554608
[  297.062551][T11451] R13: 0000000000000000 R14: ffff88807a55464c R15: dffffc0000000000
[  297.071243][T11451] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  297.081021][T11451] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  297.087761][T11451] CR2: 00007f6f14ca56c0 CR3: 0000000060a0e000 CR4: 00000000003526f0
[  297.096499][T11451] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  297.105497][T11451] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  297.113558][T11451] Call Trace:
[  297.117580][T11451]  <TASK>
[  297.120552][T11451]  ? __warn+0x165/0x4d0
[  297.125432][T11451]  ? refcount_warn_saturate+0xfa/0x1d0
[  297.130960][T11451]  ? report_bug+0x2b3/0x500
[  297.136563][T11451]  ? refcount_warn_saturate+0xfa/0x1d0
[  297.142422][T11451]  ? handle_bug+0x60/0x90
[  297.147613][T11451]  ? exc_invalid_op+0x1a/0x50
[  297.152340][T11451]  ? asm_exc_invalid_op+0x1a/0x20
[  297.158084][T11451]  ? __warn_printk+0x292/0x360
[  297.162911][T11451]  ? refcount_warn_saturate+0xfa/0x1d0
[  297.169373][T11451]  ? refcount_warn_saturate+0xf9/0x1d0
[  297.175650][T11451]  ref_tracker_free+0x6af/0x7e0
[  297.180555][T11451]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  297.187138][T11451]  ? __pfx_ref_tracker_free+0x10/0x10
[  297.192597][T11451]  ? ax25_destroy_socket+0x551/0x5c0
[  297.199002][T11451]  ax25_release+0x368/0x950
[  297.203835][T11451]  sock_close+0xbc/0x240
[  297.208800][T11451]  ? __pfx_sock_close+0x10/0x10
[  297.213709][T11451]  __fput+0x23c/0xa50
[  297.218478][T11451]  task_work_run+0x24f/0x310
[  297.223139][T11451]  ? __pfx_task_work_run+0x10/0x10
[  297.229347][T11451]  ? do_exit+0xa2a/0x28e0
[  297.233734][T11451]  ? do_exit+0xa2a/0x28e0
[  297.238808][T11451]  do_exit+0xa2f/0x28e0
[  297.243030][T11451]  ? __pfx_do_exit+0x10/0x10
[  297.248611][T11451]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  297.255762][T11451]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  297.262155][T11451]  ? cgroup_freezing+0x2a8/0x350
[  297.267801][T11451]  do_group_exit+0x207/0x2c0
[  297.272456][T11451]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.278404][T11451]  ? lockdep_hardirqs_on+0x99/0x150
[  297.283666][T11451]  get_signal+0x16b2/0x1750
[  297.289243][T11451]  ? do_sock_setsockopt+0x3e2/0x720
[  297.295387][T11451]  ? __pfx_get_signal+0x10/0x10
[  297.300345][T11451]  ? __pfx_ax25_setsockopt+0x10/0x10
[  297.306495][T11451]  arch_do_signal_or_restart+0x96/0x860
[  297.312207][T11451]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  297.319049][T11451]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  297.325254][T11451]  ? syscall_exit_to_user_mode+0xa3/0x340
[  297.331043][T11451]  syscall_exit_to_user_mode+0xce/0x340
[  297.337310][T11451]  do_syscall_64+0x100/0x230
[  297.341966][T11451]  ? clear_bhb_loop+0x35/0x90
[  297.348011][T11451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.354847][T11451] RIP: 0033:0x7f546f385d29
[  297.359339][T11451] Code: Unable to access opcode bytes at 0x7f546f385cff.
[  297.367051][T11451] RSP: 002b:00007f54700eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  297.376667][T11451] RAX: 0000000000000000 RBX: 00007f546f575fa0 RCX: 00007f546f385d29
[  297.385390][T11451] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[  297.394798][T11451] RBP: 00007f546f401aa8 R08: 0000000000000010 R09: 0000000000000000
[  297.402844][T11451] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000
[  297.412502][T11451] R13: 0000000000000000 R14: 00007f546f575fa0 R15: 00007ffebd105738
[  297.421446][T11451]  </TASK>
[  297.425185][T11451] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  297.432511][T11451] CPU: 1 UID: 0 PID: 11451 Comm: syz.3.1613 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0
[  297.443321][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  297.453426][T11451] Call Trace:
[  297.456772][T11451]  <TASK>
[  297.459738][T11451]  dump_stack_lvl+0x241/0x360
[  297.464562][T11451]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.469810][T11451]  ? __pfx__printk+0x10/0x10
[  297.474453][T11451]  ? _printk+0xd5/0x120
[  297.478679][T11451]  ? __init_begin+0x41000/0x41000
[  297.483750][T11451]  ? vscnprintf+0x5d/0x90
[  297.488124][T11451]  panic+0x349/0x880
[  297.492079][T11451]  ? __warn+0x174/0x4d0
[  297.496287][T11451]  ? __pfx_panic+0x10/0x10
[  297.500771][T11451]  __warn+0x344/0x4d0
[  297.504795][T11451]  ? refcount_warn_saturate+0xfa/0x1d0
[  297.510321][T11451]  report_bug+0x2b3/0x500
[  297.514699][T11451]  ? refcount_warn_saturate+0xfa/0x1d0
[  297.520213][T11451]  handle_bug+0x60/0x90
[  297.524405][T11451]  exc_invalid_op+0x1a/0x50
[  297.528970][T11451]  asm_exc_invalid_op+0x1a/0x20
[  297.533877][T11451] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  297.540066][T11451] Code: b2 00 00 00 e8 b7 3b dd fc 5b 5d c3 cc cc cc cc e8 ab 3b dd fc c6 05 5f 7e 41 0b 01 90 48 c7 c7 a0 6a 5f 8c e8 57 df 9d fc 90 <0f> 0b 90 90 eb d9 e8 8b 3b dd fc c6 05 3c 7e 41 0b 01 90 48 c7 c7
[  297.559817][T11451] RSP: 0018:ffffc9000216f728 EFLAGS: 00010246
[  297.565938][T11451] RAX: 0b7ef7af20414800 RBX: ffff88807a55464c RCX: ffff88803067bc00
[  297.573956][T11451] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  297.581966][T11451] RBP: 0000000000000004 R08: ffffffff81601a42 R09: fffffbfff1cfa210
[  297.589980][T11451] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88807a554608
[  297.597996][T11451] R13: 0000000000000000 R14: ffff88807a55464c R15: dffffc0000000000
[  297.606057][T11451]  ? __warn_printk+0x292/0x360
[  297.610889][T11451]  ? refcount_warn_saturate+0xf9/0x1d0
[  297.616409][T11451]  ref_tracker_free+0x6af/0x7e0
[  297.621313][T11451]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  297.627263][T11451]  ? __pfx_ref_tracker_free+0x10/0x10
[  297.633043][T11451]  ? ax25_destroy_socket+0x551/0x5c0
[  297.638373][T11451]  ax25_release+0x368/0x950
[  297.642984][T11451]  sock_close+0xbc/0x240
[  297.647279][T11451]  ? __pfx_sock_close+0x10/0x10
[  297.652179][T11451]  __fput+0x23c/0xa50
[  297.656243][T11451]  task_work_run+0x24f/0x310
[  297.660886][T11451]  ? __pfx_task_work_run+0x10/0x10
[  297.666045][T11451]  ? do_exit+0xa2a/0x28e0
[  297.670419][T11451]  ? do_exit+0xa2a/0x28e0
[  297.674802][T11451]  do_exit+0xa2f/0x28e0
[  297.679015][T11451]  ? __pfx_do_exit+0x10/0x10
[  297.683651][T11451]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  297.689678][T11451]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  297.696138][T11451]  ? cgroup_freezing+0x2a8/0x350
[  297.701235][T11451]  do_group_exit+0x207/0x2c0
[  297.705898][T11451]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.711174][T11451]  ? lockdep_hardirqs_on+0x99/0x150
[  297.716429][T11451]  get_signal+0x16b2/0x1750
[  297.720999][T11451]  ? do_sock_setsockopt+0x3e2/0x720
[  297.726242][T11451]  ? __pfx_get_signal+0x10/0x10
[  297.731154][T11451]  ? __pfx_ax25_setsockopt+0x10/0x10
[  297.736632][T11451]  arch_do_signal_or_restart+0x96/0x860
[  297.742251][T11451]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  297.748471][T11451]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  297.754522][T11451]  ? syscall_exit_to_user_mode+0xa3/0x340
[  297.760301][T11451]  syscall_exit_to_user_mode+0xce/0x340
[  297.765916][T11451]  do_syscall_64+0x100/0x230
[  297.770567][T11451]  ? clear_bhb_loop+0x35/0x90
[  297.775316][T11451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.781276][T11451] RIP: 0033:0x7f546f385d29
[  297.785823][T11451] Code: Unable to access opcode bytes at 0x7f546f385cff.
[  297.792891][T11451] RSP: 002b:00007f54700eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  297.801360][T11451] RAX: 0000000000000000 RBX: 00007f546f575fa0 RCX: 00007f546f385d29
[  297.809386][T11451] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[  297.817406][T11451] RBP: 00007f546f401aa8 R08: 0000000000000010 R09: 0000000000000000
[  297.825422][T11451] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000
[  297.833448][T11451] R13: 0000000000000000 R14: 00007f546f575fa0 R15: 00007ffebd105738
[  297.841488][T11451]  </TASK>
[  297.844891][T11451] Kernel Offset: disabled
[  297.849295][T11451] Rebooting in 86400 seconds..