last executing test programs:

8.929022403s ago: executing program 0 (id=2967):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xf4, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0xa0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x84, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000005, 0x5, 0x80000001, 0x2, {0x1, 0x0, 0x1, 0x6c6, 0x3a, 0xb7}, {0x6, 0x1, 0x7, 0xfff9, 0x5, 0xaae5}, 0x4, 0x8001, 0x2}}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000), 0x4)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', <r4=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={<r5=>0x0, @local, @private}, &(0x7f0000000200)=0xc)
sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_getnetconf={0x64, 0x52, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_FORWARDING={0x8, 0x2, 0x78ab}, @NETCONFA_FORWARDING={0x5d, 0x2, 0x7fffffff}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffb}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_PROXY_NEIGH={0x0, 0x5, 0xb}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7f}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x98c9, @void, @value}, 0x94)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3}}, {0x4}}]}]}, 0x5c}}, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe)

8.543214358s ago: executing program 0 (id=2973):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="dc0200001000130728bd700000000000ffffffff000000000000000000000000ff02000000000000000000004900000100020201000000000200002032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000000003200000020010000000000000000000000000001000000000000000000000000000000000400000000000000000000000100000000010040000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000080000000000000fcffffffffffffff0c000000000000004000000028bd700000000000020000000000000000000000ea011200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00c000080"], 0x2dc}, 0x1, 0x0, 0x0, 0x40c00c1}, 0x4000010)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x9, 0x8202, 0x3, 0x401, 0x5, 0x1}, &(0x7f0000000100)=0x20)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0})
socket$unix(0x1, 0x2, 0x0)
ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000140)="97b9a419e432eeb8dba9af3a9a31dcff96fa6d5c274b054b381c1b9f8e0be0a42b2b44482f0a74189094e846d04cc51842e226ca99e27378b415139b68683b94f21d696b253c135a06ef70499e7220b345386a6a541c94d5b530e98174810d2c4db18251077abf9f4f18b92ea8b1da11e1f323538a852a132e19bc0024b04228ff3875a67d6619e3825856b73ba4d3ee545790be6220eda9e8f77955badec59a3c43274308280959ff30b876443556ba4f2e79f1faca7224dcf2848b67e7f2a31c163556159dc85389262e901a8e69871f52305c68719665a115c391260e886fc57d7c46d9f58244e0fc505f6c547bc352b3308b64")

7.837186834s ago: executing program 0 (id=2980):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1)

6.872778449s ago: executing program 0 (id=2991):
r0 = socket(0x28, 0x0, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x40800)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c000200070000f1ffffffff0b000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x3}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x7850, 0x2f, 0x1, 0x401, {{0xf, 0x4, 0x1, 0x1, 0x3c, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@generic={0x94, 0x21}, @generic={0x82, 0x0, "b38d671d64d107f638846a902fc27b"}]}}}}})
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000180001000000000000000000020000000000c8050000000008000400", @ANYBLOB="880010000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r10 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000040000000000000000008018110000", @ANYRES32, @ANYBLOB="000000000000007a4506a40083000000bf0900009e5ea9110000000055090100ebffffff950000000d000000001dd0fd8c99ecd977001811000000000000441b8bc6ef634965d62d77a0b74ec97dc865fbcd554cf25091c7499819924b426e2459e25f", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0, @void, @value}, 0x94)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac14142500000000000000000000000004350000010000000000"], 0x23c}}, 0x4004000)
bind$unix(r10, &(0x7f0000003000)=@file={0x1}, 0xc)
listen(r10, 0x0)
ppoll(&(0x7f0000000280)=[{r10, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0)

5.925553151s ago: executing program 0 (id=3003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="6cac4fbeb07ccc3732bf9d3d9b23f629de89bc7b35ab07000000000000007f00", @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0xc8dc}, 0x1)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x100000000000000)

5.723968192s ago: executing program 0 (id=3005):
socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) (fail_nth: 2)

3.260873221s ago: executing program 4 (id=3033):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0xf8, 0x31, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4ac}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x281}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4009}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x4}, 0x10)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2.74103962s ago: executing program 2 (id=3038):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
listen(0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x4}}, 0x10)

2.572573108s ago: executing program 4 (id=3040):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x14, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

2.572405097s ago: executing program 2 (id=3041):
socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x81c, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0)

2.413032567s ago: executing program 2 (id=3043):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
pipe(&(0x7f0000000500)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)=@setlink={0x84, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x20}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_MASTER={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "fda088a7a6dcbe01c0002b1145bfe53e5cc17e4e"}, @IFLA_VF_PORTS={0x18, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x4da44ddb}]}]}]}, 0x84}}, 0x40000)
syz_emit_ethernet(0xd7, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x13, 0x4, 0x1, 0x6, 0xc9, 0x67, 0x0, 0x4, 0x8, 0x0, @local, @loopback, {[@ssrr={0x89, 0x1f, 0x6b, [@local, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010100, @local, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x78, [@local, @private=0xa010102]}, @rr={0x7, 0x7, 0xf2, [@dev={0xac, 0x14, 0x14, 0xa}]}]}}, "b8f0a6c1137f1fea07965cebcacfb8e407951be945b170c107af76bfd86b78ce4c67c88fa9e4245c7cde030a0dce2a4880c7214e4b10ca26d975b54f24d665f04b0b847200de490fbd0cbdbb2861384a111ad6915fd385e0038bc209f5de7571ed27562a2b23be425ef56fb4caf9f3f4d586ab82ff64281302eab3c28a"}}}}, &(0x7f0000000100)={0x0, 0x4, [0xe99, 0x719, 0x3be, 0x52d]})

2.412584861s ago: executing program 4 (id=3044):
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc0000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1}, 0x9}], 0x1, 0x40022001, 0x0)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x800)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={<r4=>r3, 0x4, 0x10001, 0x3})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
r6 = epoll_create1(0x80000)
sendfile(r6, r5, 0x0, 0x1)
sendfile(r6, r3, 0x0, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x67}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
listen(r7, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590)
setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r8, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r10, 0x0)

2.390940546s ago: executing program 3 (id=3045):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b0000000500000002040000ff03000001000000", @ANYRES32=r0, @ANYBLOB="0e000000000000000000000000dfc26e92e48db7a3a50e00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000008000"/28], 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002000010000000000000000000200000000000000000000000c001400", @ANYRES32], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x18, 0x31, 0x901, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmmsg$sock(r4, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) (async)
sendmmsg$sock(r4, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) (async)
ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0)

2.317237031s ago: executing program 1 (id=3046):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054)

2.052959255s ago: executing program 3 (id=3047):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x48, 0x0, 0x1, 0x5, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x48}}, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x3000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], <r4=>0x0, 0x2d, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x11, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x4, 0x30, 0xffffffffffffffff}, @alu={0x4, 0x0, 0xc, 0x2, 0xb, 0x8, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x200}, 0x10, r4, 0xffffffffffffffff, 0x7, &(0x7f00000007c0)=[r1, r6], &(0x7f0000000800)=[{0x2, 0x1, 0x4, 0x6}, {0x3, 0x4, 0x9, 0x2}, {0x0, 0x1, 0xd, 0xc}, {0x4, 0x3, 0xe, 0xa}, {0x1, 0x4, 0x8, 0x9}, {0x5, 0x1, 0x7}, {0x5, 0x5, 0xd, 0xc}], 0x10, 0xffffffff, @void, @value}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r7, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r10, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_int(r9, 0x6, 0x6, 0x0, &(0x7f0000000040))
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c2fa09300000000a61e1fbd2e20eb916e1f261482936ddfb3c9fa6cdd517497305d4b02b62bfd20345636c3d91c1f46908d1f43f316073e354647abde1abdf597dccef5652e4ab1dbca88b08576fee36156b254e1aa0699af0820f5d8ef87a64e8b884897c72ef5e70f615190171fc43e98f96b8ef5d5ebe72a829d451c00", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25020000000500040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000804)
r12 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r12, 0x0, 0x29, 0x0, 0x57)
r13 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r13, 0x2, r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r2, 0x0, 0xcd, 0x1000, &(0x7f0000000c40)="efcb584562ae7f4df362746d0078322e49584c9abd92a1047a7a114f4be11ad8db442c244e9ed2af84284255d54c96944040c91748e7ee56505c602534e9e5c3683ea0772459578c35e846a17e0119545b5d1a0c1c9f1a899e63a9c8fe9a8cbd366d28353c09b707bfd6300bf0942f736b706e88e4e5106adbd8732b488ab6922c4c4851b182324a968e83298e5eba6e259d2aa207b932915784b114a106b6a3044825c78febd97be115814c11e845ffcd6f717ac2d4fe8df16566bbb220923b3023e53c1394c4c9b138b421e5", &(0x7f0000000d40)=""/4096, 0x10001, 0x0, 0xcd, 0x90, &(0x7f0000001d40)="26bd32d8529b65dcfeb49f3f7fad9a88315128b32a4f0266de57186fa0428c69d052e8bea6627d491a53b10f45bde5cbc6b9e09e03f5ed81b8c5c422b423167d51ae77242b765362a08f0f74d9d932919abe046553204f1e22ef0a3ec594698c521ea78650f5f62d5f90cf94eadf1df7e3edecac340f2f7443092928aad05670963ef9f660ab20ed0b663b00f58fa22fecee31109562bab21e7d8986cd20d6ccfe6e2a767f89055f539af1262a0210b1fa8076366e83cc2634febc604d751fed48d2d4501aec3ac75662591316", &(0x7f0000001e40)="77a0939a6f29c1fea2c1cffba52ec472e695015fad62866073f0a9fb6e626304f36b92a48b1e25a5d818d13b8edb1e1aa6cb2e73d5e905ab65e2169b3736cb60df7976700c30a66d9a4ae52bfce3677f69e49e473fc7b5e2fda13553f0661432bd2b8082698d6baa87c57faad3e983d34a8fd4ed9889a68d2abd9c4087710e154b8a9634e66dc62c701bdbd334a1266a", 0x6, 0x0, 0x9}, 0x50)

1.545335695s ago: executing program 2 (id=3048):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @rand_addr, @multicast1}, &(0x7f0000000080)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={<r6=>0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=@updsa={0x1328, 0x1a, 0x2, 0x70bd29, 0x25dfdbfc, {{@in=@loopback, @in=@remote, 0x4e21, 0x100, 0x4e20, 0x5e, 0xa, 0xa0, 0x80, 0x67, r2, r3}, {@in6=@mcast2, 0x4d2, 0x33}, @in=@multicast2, {0x3f, 0xe, 0x4, 0x5, 0x8, 0x4, 0x6, 0x1}, {0x6c, 0x2ec3eaae, 0x2, 0x7}, {0x400, 0x7, 0x7}, 0x70bd26, 0x34ff, 0xa, 0x3, 0x9, 0x66}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_crypt={0x12d, 0x2, {{'chacha20-simd\x00'}, 0x728, "99c5c408abe44b72d3489de083e00800f0a78a30b3687e30a91c4a26151fc9af7b876de2cdad601e165e707d4ecdfeca26c0ca524aabd3ae4f0cb2e81e8460a5870590e7a6e771b83fe01462e36f6b3c2d514f499701c36871988d0c97ceff68d1d615e78b96c5ccb09b1b20dcc0d18633f95203c474b9d72c6b59945d3a6d6aa050e39cc74941f011aba3e99a71f2aab3796f1e3edc17a5e8c34e17b9ad2c9fe51168bbf4de3a488c58f8050d8daa53e55346c19b20d7f9d4383a8bf63e989f227e366c0a14ccee859096b040894ae67ba7d10ca22bbe40c73f95a71f7dcb49009ac60f1d"}}, @proto={0x5, 0x19, 0x3c}, @algo_aead={0x104c, 0x12, {{'aegis128-generic\x00'}, 0x8000, 0x40, "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"}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@mcast2, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x32, 0x0, r7}, {0x7, 0x800, 0xd1, 0x9, 0x3, 0x7, 0x8, 0x2}, {0x9, 0x20000000002, 0x8, 0x4}, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}}]}, 0x1328}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000000ff"], 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

885.745866ms ago: executing program 1 (id=3049):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x2004000)

781.025738ms ago: executing program 2 (id=3050):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0xf8, 0x31, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4ac}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x281}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4009}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x4}, 0x10)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

761.165466ms ago: executing program 4 (id=3051):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1)

748.216293ms ago: executing program 3 (id=3052):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x0)

737.594193ms ago: executing program 1 (id=3053):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="0087", 0x2}], 0x1}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x3a000000, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x20, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

546.652042ms ago: executing program 2 (id=3054):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
close(r0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', <r3=>0x0})
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x20, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x3, 0x2, 0x3, 0x0, 0x7, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcca}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0xfde, 0x4, &(0x7f0000000240)=""/4, 0x40f00, 0x2, '\x00', r3, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x3, 0x5}, 0x10, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', <r5=>r3, 0x7800, 0x10, 0x6, 0x6, {{0x8, 0x4, 0x2, 0x1d, 0x20, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0xc, 0x20, 0x1, 0x9, [{@multicast1, 0x7fffffff}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', r5, 0x4, 0x7f, 0x9, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x1, 0xfffffff7, 0xfffffffc}})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet(r6, &(0x7f0000001b80)={&(0x7f00000005c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="3e503c2c18220cd9e309", 0xa}, {&(0x7f0000000640)="ece04e8856bff19d056a585e32c968ff0de3578d6e4100edc020a54129c27a0897", 0x21}, {&(0x7f0000000680)="05f9bde7d30623384793c79e35042e0018e6477260666ad22983d2b1daf603a0afee0a18348d46febbcc95b644bbb96fe75dc74cea8291d6281ab2a790d5a5c7ac7d4cdc8c13b8df74877e99fc224bc6d3a6787d128ae0acb8f2985ec85821413a138ee676a2b6e5df32d1c045c6d18dc2e09848260e625b6d397c3b2d97b0bd7a270292071937257ccd95804d709aeec1799830d039cafdcae4e6136f030d29b6bb12224ed8bd241fda48b0b7b7c27f260170754a7334b5c2825fc85a", 0xbd}, {&(0x7f0000000740)="be807f143dcfa24ec5579d6382c6deffc051ef1cc8199eb4435df05a1e47d5227153913fa9757438f43498e0a02bb7343fbc0962a12360d2401852095b2ee52968ea25070ffed60e77d2d2337587df30ff98752b0717a3c2d7d13ae6cf1c172cc1f7072dcc4ffa89dbcdba2df73a14e86805da2105e1927ab949f1540f6f1590e33c35f7274a8e8a00bb2c1f6bbf064ee661df168e9a0341c1a8764eb85018060223c7431299120b825c11cf286af4982508da3fe60785168ccef37c8c952d569c77ac8aa19aecf5755e8d8053f35b3713b37474a16eedd260e2d9", 0xdb}, {&(0x7f0000000840)="f8192bfccb1ebb11c170ff92054d6e10212272e8efbc7c0363d0d4524ecbadd2c826fc21ec0beba764405da6846a29021cd5d5f9e95afc76f0e3e99a6916cbebf8c60c7fbc5bbedcce263e19868b81b7a91c430d41fa7e649eab3807690d2081f77bd3c5afa53970bd7c2d80562de2d9e95178daaecdfa5da9e3722b893eeed11e90a4c46c4e84716e8f605b7c3945d95b6869ed102a3aa5320300cdefa70d45c36ba75aa3e08b5e40c4432248fe3867fd83d1e329f617cd8bb74c7bc3c386347c0b48a349b31cb2d24ad58946ac53e65131ed4a95", 0xd5}, {&(0x7f0000000940)="6c3c8f550decc62c0ba3872f200fcc2c0541e321843738450515b463c4960d3370140f27061d56f9bb08b460900188594e615adf7bd6ebe29bccc0a47adda89cbd7a6398f1cda690515c3500cf655e32e94203a51394917e608b07946a121a4e02d179d9e1b202d9c097fdd88bf074349c6db07f1bb78665daba3fa5b0", 0x7d}, {&(0x7f00000009c0)="da990a252df68f8ee160d7562f8fd33b88be8680b720c4e2001d7c443bf9186d257fff8d48b037e4b4a7d2f7eeeb9d9cac6f3b0f8e0c04ccd1dee294e135672326b1ed50b69a801bfccdbcfa2db9a0afde273799ad90d3c57a0227b0bd4404ec3181dc962ca42d1d90666ef7eb38f4eedb03891faf394b65657ba4bdcf50cac074aa1b0f7016c86b131229f4786277a406480949830426db1473a8615126f15fa6bf8ad57694a74dd6e851e95bebe09bbd71d03c4672dc5d47a16994761e9b8b9b100ad12e332604e89eef87e88d77bba840d6746819389a297764103fb56ce3497511f6229f29bfd5fc03b31f0bad07447830065a34a65d11d34a724c2d5e6107fc4f8a48b28d7f7f06b60bc46c9e56f9d92c0f739c06b1b05348c612ab93360c5c10d54c65f38d09fc3e694f27a07cae832583f772b354b98aa0bb51eb628d809509a5265af8fc92de5d9ef09f12364965cb73dc37522a3840dafdf5ac1e3f5b162ea1a6cd11ca404ec7d756f6b5c1695e0133c30e7d166f08401dc5e5969dd24d2f135d9d0a69f60a40110c53c23850d5059848b6f024d37c00391fb207a9a70715f9f1914ae946bbcd4b42dd843223eae1d3d3aefba4d1a8cb7adf73b96c520aec93ffcda758689045b34793d16ed67199517d811a7735d6e884af920ae4f73796e3612f45433db0a7841f0ce172252d97962d5ae42ed48960c7492c3f1e1b549f3723b12d6166c533da73d487acc361dccb603394284b3fab30e96d085cd15c721ddd1a2c580de654182c70de7c790f022469dee454181091a97c6a75a34e275c0736fa4b73ecb6622cabc61ffefb3115255cadc0d2b6d2840d2b8527ecd0548bf86a6cc6348b0f96098dc8e8a6fde197e6c26ab012e8bd9202d06e64db4068eb4ae3fbf232be41ff2f086282420c0d5dbe1f6269dc47d89f21467476e8ea3d26bc33c9d2edf190772ef3bf62e6d0dfa0c389c456c4ec6e6b8a9046cab5b300800d7701cc8c0b3fa0b7b3d4619470dc299ccc4b330cd40d4d140312534518f2800a6746ec2d8a5ecb60e72736102c018119e8870a59b7e612f8aa106b8731af020d2ad5a7bb162672bcb32ac7fc8feb90e6a9000e7502cf5aaaf90f6022bdce320afe87377dc73bc793bd6128b19ca7d1da3716b455cf71f694cd995428f28a0524c3929db9501cc3b0b42971b91b7e2eb73cdc585c473628ae590a2726fa4abc5dd7e92c3fd96ddd487ac9db20c6fc63fe94701d7687d4d6a9b521fef4030eb6e34cb5f8b90f2726e22971eb125e66ece3bc9650acbc5efd511a6af003d716b28318175efcbba5778fc159aabf4db5b102f486f40a2dcb8e6cda11febdfcff8146909b8f9712b445c28146073314b434441cf4183b944b5c659d497234e29ff08739d7b42a16151e5a68c54ba41a1e8ac9c0586ac0aa8a98ea13eed0de1742fb72aa32715015843254d62f428f711382d6bc267a7863e2a1522f6c971a077c7f90b4505977054883a23dca7d3693561faf8c19fe6d53afbf7625c84520e8338b32097d59f20576f615a0ae0b79558a20337ea8c17242b1e30dddf4478d0ebbb552686a3dbe227a119c83e0b7eb88d7151d916c12787e849ec6b58325ac7c39194119c1c92b5ddbec0219949e770405321fc1300910caa0d0a34d9f143a3abb6d23de080a3c631e8ba9173a69eb35ed3c0f30d8ea15ce3fb3a214e8467b13d8ae1b6fbaba801ac4d51c35c2b8fc9e94e643b141ae7754a5b61530e521489b00ff17400e27d67d947b65c8208c7f42405e0fe9a3b4fc03b63765cedfae35e140dbbe9393455b5021b98baa75d4a1bdb805843601f75dbf800fc39aa0e5f690f221fad788b385b803995426900107f730184cdbe75d2e84535d86b491109629146187f5784689cc1e0fa79d5bd972226a4c74b914d710d9176fa1260c363d2957984b082663d898b56d9738a5f1d7799ea15f5377df408e7d250aabe40374b9bbe114a4c9e9d9b445175c27de34c2544e135157ce16999c536fba9b6ebc9002092af5b25fea5a2d8e5185ccbe5930b96972a9ff366551738ccde4b33f616336f14a14f85d17c383ac872d6bef090c7777d7438c8c314255f06e8a3d33b7bc0a557732f9a9fabd9f7b87e0871cf87fae88e3bbae90bbe3357ae695d0b9236495f5c3762748a06fa17a45f8be799ffbeb9243cf44889d7326de8e939ca932d1a13eff9520c6980a1104439109a2d3f9abc4363deeefc447d11569379e98c5e4a7e7b852248f127443a2adc64cff352bb5b3de21df5f39f113640923956e3af0b41ddcf7a72b64ec950b6c45d0699ba851ac2d5472829fc6ba39079c04cfbff853f82e55b0aceee589111f62d5291b97cbd86b6d2da3363d8874bc3d246dfe1cf5e0801dceb1c01c1093691068a7e8111a233da89d74d22d0c119b2f79144c67eb6fbbdb133df487cc852850c56b2be93b4c0edc800ad6964721733db0919c864591b9f00455b88e1d42f3881edbabbbc13c75396302bac55e6f1ed5809c56333a1babc2c4b9cd1e02c023fed039a55851d204f44f115d6eaf551c5ae104f4b3d399aeb389fe08b738fbfbc35655a5d1658782b0d6ce3decb0c81a73762aea6ff9aadc774c16c642dc4c7b31572a17072405f7a1f5d88c152a7b087ba5fa35166c907171b424bb8912ccefb3986a10f8a9b9a213f89e89236da5ce07e6b55f2c9a72a605dd250757ca548e2d2d05d7b7296c45093d0dda7238e698d3f3e6c044ab2c6061e6742c025c981b5a99fde0208742543a31a5c299347f34901c9fe51269b26e45ce004d6be27aa8d4d46aebc5058dce0e52f37e8204f18fd434c9e0e5a51d61b2a569e48adb5f7d9b1be453f1d459e211be1bef54e18dfc8ff6da6caec5ec3228994d5de853b0f4ea93d9cc0f9cadc5abf8290a41aacfa5d73e319ddb4a9ce6fc5167d4e01b3683884aea116b2aabdc3b3fba405ea8a68538f70d11af27ddba7b5ad18cdc6838a9a1906fa999f7dd668b0707f9fbbdc3e24ceb7b8fadfce87c1ee995482e906f73c6f444f520a9b05fb6fa5298e168a1608c5ccb3cb237a84fc2d990a99a28b036d8a9b9af0af1d1b095f5a26dd96d338c2dc6f2ea7e9ee1be699950811e15e6ace4d3291275f7894e3fc11f65406765bcb0c8d3ee943e6439fb65969157a5a0c504f9b84736be9707e1c86dc707a5ea16aca394633fbe34e37fbb40d80894235465fe4f60abbe108b8e56dca76dfe979ca2081a0149d15477b0c27f37ffe84b9e6536dfec87d10294cf9d6c7a6af9efdf6effdf40b87e5888d8e9edb0d7c6d3206b42691bd9285878660728fd1c028e74331ae67157fce49be191f8485ea09b2ea414a2c8d3ec9d171d7e1597ea4c860d293de7a2e4b4a39f2a44d526fcbbe1c1b28690d4e07f00dccb2f4704f783adc955cbe8f7c9b95863e8b4030ad0dc6364b6e1029da13ab9592691177d59634224ad029429a9b5cd48fcabbbe44a25e965e358ddf90e849582b3422565ac991d6152df08407f0669fb03647ca9780d5719541bd9cb974ee077319aeebafffd74a7abba58e5e2a8659de406d0c5915c341844b27b4b8cab033e208c96b311ef2cf7484cbf940cd81e71710282de030619f235a0e83b898b268ea95684196b7e1cdbbb041cf1563a404863d0ead75de4a1c3b4d9eaa546464d67dacc676fb5c856a75534224ec0f6890b1ed0ecb2d87b80298f186ed745b1dff55afc804d2aec9c2b257f80508ebf1ec5b16bdbfdea9b4171a0020af63e917a4e98534f17d0cb61b8ffe4246c1e7c66fd2e3204281f2e0635133fdc5422759693a3a3f561b277629c5cc4f3b1c47ef434b3f81df4e5910ce4b41cab2d20871b595004a5b7a20d0735505fe78bf6f700b46c498a53f51c0de45696d528ea2f6520f556fc5d12196de37620578b02409da251c14389e3af334c51656963d6b359fb928773a933c4e861de379cfaea6e696cd7700eb5c8f79b10ca715e358c96265d339168c24668c2caba088f7d79edc421f440e7dcbe0c4421d4744c52b0ed412111d098f27d47fb4e67493c29637a29cc221ba46f04d91dbca6a595ce0cd1811761fa7759b170182232a91ab7a99a288fb7d9347f35758a0162046c07229153ee621de646f6d97baf708043c375961a5337850426dda3ecccfb69fffd9477f5cc05572f212aada33a50fab03451061077249bec53014ea507b0ff8dc69d619612b2c88f08406b9e35219bbf90e2c327469e262aa17283cebabce033c70af6d3cbe3b34d82d7a3e662b03f8d9ee242934ed4f860cc3a767e24c578bdf9c6bc99c334693e9dec25d3e14fe68e1318a4fc55a64e6cbdcf1c2accbabc31ab7e80f01daffdd6bb4ee658eeefd3b1dd3bf5922ac1af3ae0d09d8117e694d426cb5964f5bce2fae6d933b4f0dc2d592efb158a2627e196294fb15f3f01e295c9d466b84959b9ceb55e30d065086539a1a62a43f31ae4d97a5fcb624dc21ae4a343cf28d2e53cf2a0fe525046067ef5c24262d9b6be4df4432a989c30895b258909c3fef51f9ff5baef344b41001eb8c0f31d82139df10a089daad73253bed2f6e530fb6b74a5e816409e79cb8631501b85bb27477d8ec679a481dc3f382c92fe215d12bf9aed3dfb6dd33bce9ee04c514470f302fee8db6db1ddd9faa28c93af1479d636f2ca5a13449c12dae8b8298278baf04cbb515d232ef90a88fefa14af9a34fe4c5a4c050ecad6527a2ba14727a27e345d663951ccd75ccbaf84c4fc9b0da1168780bd0c4dfa3e81f7373d20d76769fbb6b7ff6cdd960d800556469130e254111dad9b8bc9ee37133e769ddc7f373ed390ba686e97adfa419bd6679ac538cd88768483a71fe322961d5651985d9007f11d12cd18b1ac427325ba52d1a6af8383eb87573f728b25e70479c5848804328f2010c30ff9930cf0f1e796edc4917435e40d154abb79b5cc09dc6e767c900ec0b344a8241d8ccb9fdccff23972acd9a98a6464d4bc531f314dbf7bef08953bb049459e141a9f5aa037379ddde0c8393df8592e09051b541829f453c0e5b625f1fad2de1d5b62e9a4c3d9757fc7e40ecda3154b5a9d8ecd2f2c23bd8bf673c17b9c7285ee789199900e5b5e69511d764a1810b4bc286fbdbe7bee1263dedea0efea80e08a47c378624770f437e693002c301ff59d590369efcfebe459aad4deaab86c19585ae51804cdfaa7485aff285c828e9123bc7e06e8316e8844d5bbcaf74925bf6377bc65397cb22a7863b7f5fdad000db4f2e560334f521380ccbc3aa9aacd1d818e23ea64e8e60e8f59efbd7ce8dadf796e296472f856203893efd46750c9e790aa87dc028f24c111b94bb9e0a6ef37482270dd11a65ac5b57bd4869068d759a7ff55f04fbaa8e505f8cb9330cfe93a58044eea9ca155ef5dd0fe4b4ddbea6436a7b0f2876be8c749a516b29065a0bbf55efadcb52bf4299104830b554b32dcc4fe1f6b0c6858b6bbac5485801589af805c4ccc672fefa8b0adc211794900ec216e0648b7610882c17758b4d7e1b5daf3cee4d5534b009976afa1844de8827d19cb520ef1edcaff94f3ded22b0504722723313893306e41ceebd93485c2bcdf5dfa194ab56df66a245276d1527707320c5db53e5c70bad201e0cdb3acb4ad6ceb4a0065668995e4436221cd57574558e66fc63629db86c38ec698c34d3750487726686b00485ff0e67061774aecd3710673cd1df959e1bc1ea2c13dd6f27408e9f565e302cbf82b6c64fe577217c017cb32243cf4c8802d6e092b", 0x1000}], 0x7, &(0x7f0000001a40)=[@ip_retopts={{0x108, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x22, [@multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty]}, @timestamp={0x44, 0x14, 0x58, 0x0, 0x9, [0xd, 0x1, 0x6, 0x6]}, @timestamp_prespec={0x44, 0x3c, 0xad, 0x3, 0x6, [{@multicast1, 0xf}, {@broadcast}, {@multicast2, 0x10}, {@empty, 0x8}, {@empty}, {@remote, 0x1be}, {@loopback, 0x3}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4f, 0x0, [{0x7, 0xd, "244c96767907cdb7d7c5a3"}, {0x2, 0xc, "d2579279cfd61885cc65"}, {0x0, 0x8, "aa4ac5efb4ef"}, {0x1, 0x8, "cc85c4719eb3"}, {0x1, 0x10, "1e8eeef445dbc87305f52c519c6f"}, {0x7, 0x3, "06"}, {0x0, 0xa, "bfebd6ff28facf55"}, {0x7, 0x3, "9f"}]}, @noop, @rr={0x7, 0xf, 0x5e, [@multicast1, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x3, "84"}, {0x1, 0x10, "0d2024eb188f93947d550d56e749"}, {0x6, 0x3, "06"}]}, @ra={0x94, 0x4}]}}}], 0x108}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x402, 0x0)
ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000001c00)=0x1)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c80), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x5c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000050}, 0x8000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001e40)={{r2, <r10=>0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)='%ps    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002000)={r10, &(0x7f0000001e80)="19f5f70048971cb06c254664ab9d66d61f2114de95d69833cfc951cc97228ae0371b0e99576a48f3acc586b8eedc438edacc6986f15df74b4c2c6105383eb738a7c836865685df892b2bfb368b8e20f36be5985b66b134f8b358e6d6c59c4219e3bbf58fcb28575e0e202aad63b8b6d722558f02bd143e375acbeaf2d1baf3906212fdcd6961d810f98bcc71cedb8bb8eb4f5dfb2297182b062489c2be0320b96c5507ade55775d4aa2c871bec968db96eeb66740844e4a119e53d562405c8375ec942911642646cae9b37bc8855470a97c75a0a5c7c21517ea64c", &(0x7f0000001f80)=""/73}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@base={0xf, 0x3, 0x6672, 0x4, 0x1000, r1, 0x7b7, '\x00', r5, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002200)={r11, &(0x7f00000020c0)="bb972bcea6b450d60d9a157eba132a267c731792493790197a3572e6dd903fefd04c08feea6d2d4ad24fd1466ab7d3e40f13fb8795940bfc3da4626454d0a86ce1c068c61866962d22b81b159c052216fc2f3a313659b2e351e9a0a77ea031fbe493091803f4b6e18eea050ce39c9ab6d9bd7515d387", &(0x7f0000002140)=""/173}, 0x20)
recvmsg(r6, 0x0, 0x40002000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000022c0)={r1, &(0x7f0000002240)="d009952ed3ac80bec5b0b3eaa00d73bc792d951a0d69b8e7933449cad15ae2fa21d7cfc76a5e939b352689b704f10aa92fed55339ace3936b3b739ca69aacd77f9cd42e0f89a9333259ea860a621fd24f20d012ab4b1c184eaa26b0d5183718e53fb"}, 0x20)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000002300)={0x0, 0x3d2}, 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close(r12)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x3c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xac, 0x36, 0x200, 0x70bd2a, 0x25dfdbfd, {0x12}, [@generic="27d53a60bde4c67752d0c644f8e46dc19defd3c81fe4be8d1dc8cd0887013d858fa9950406faeadc9fd20e7c2c358b4bb73d666a98e2b843a9364f8ac2fb59c081d01c5700783068354806be98c8d7a10708c15ba065242f323adf", @nested={0x37, 0x33, 0x0, 0x1, [@generic="0445cb14c4df9acd002d15ae7ff571d4b45af80112961d8ff04742eaaabcd1c0659a265adcfddfc371251b35a9aef1", @nested={0x4, 0xda}]}, @typed={0x4, 0x5f}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0)

546.208265ms ago: executing program 3 (id=3055):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDELRT(r2, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @broadcast}, {0x2, 0x1, @remote}, {0x2, 0x0, @broadcast}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x90}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0)

498.535851ms ago: executing program 1 (id=3056):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
read(r0, &(0x7f0000000180)=""/115, 0x73)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000140019010000000000000000280011"], 0x28}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}}, 0x4800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f500010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00"], 0xc8}}, 0x40000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x6, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x4000)

432.301193ms ago: executing program 4 (id=3057):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1}, 0x0)

280.765565ms ago: executing program 3 (id=3058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054)

264.472381ms ago: executing program 1 (id=3059):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000640)={0x84, @broadcast, 0x4e20, 0x3, 'none\x00', 0xc, 0x200, 0x4}, 0x2c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c0000000924010400000000000000000700000008000a40000000000900020073797a31000000000900010073790730000000000800054000000021300000000c0a61630000000000000000070000000900020073797a31000000000900010073797a300000000004000380140000001000010000000000000000000084000a00"/180], 0xb4}}, 0x20008844)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r2, 0x5460, 0x20000000)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0xffffffff)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0)
sendmsg$alg(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)="df1cd39d9b17", 0x6}], 0x1, 0x0, 0x0, 0x20000053}, 0x2000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x3}, 0x8)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
sendto(r6, &(0x7f0000000500)="c0ea159d14e634b6658ed025cbd0f1bdba72654c436735a0c235192262b0dbad48d09574d449b86f038e729578c6991299c1814f2889d5678c63b1708413e4aac9dfb9b9dc78dd3ef1255d850c89bb54959fc8fc2a596f52ad6d081ae9cd9d7d1fdd65a191800aa714986b3de20ad96d328dc7923788dec2b47038269952e508edaf8ad4f4cad03ff7ac0b869b86f84b894ab1b2af7434413c5f9d7650a4fdfab5fe6856a1535d92e6c5c14ff7a4738330b4e04571a07e365a80dc0c7ff66b3e03c7f086299b355dc8f85af1976b08e0bbf66cfbd496e6bb4961943031509be5a43810d22b30c772d4d8ff0533f4a116fa", 0xf1, 0x20040088, 0x0, 0x0)
close(r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000200000000000000002000009500002000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x4004800)

200.550008ms ago: executing program 4 (id=3060):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = accept4(r4, &(0x7f0000000340)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x1000)
sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0xa4, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x101, 0x27}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7d95de6caa"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e3a6ce32f9"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f22551ed76"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b7473e54e"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "51999ad5b126c156f570193b9d"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "9ae10cc292"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f69937956e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x8004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000003500)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003540)=ANY=[@ANYBLOB="1ca820c3", @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf254a00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x7}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x48, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x814)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x100, r2, 0x4, 0x70bd2e, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "50490c83b3353721ea01044327c9cea871c73c1a16f39205"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9274fa779e3327942d22b74d8120bdba390060c20bf841e1"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "27f556923899b32030cf91b64f5a0936a9a20a9304d07962"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fd715c3d0668f33a0ec0aa5320d71886fb3da7c1124db21b"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x1, 0x1000, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x77f, 0x40, 0x83, 0x9}})
r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00')
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000040)=0x40)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r13, 0x12504000)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000020000004000000000000000000900010073797a30"], 0xd8}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8028010}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x1402, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40444c0)
r15 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a002019b72f636f055b2553fbbe2676b5cba9a18fe76cc53197a0d3648247139c21a1e8c35be569bb31f3b2a7982eb7371cdba518353fe87b463bb3ce439f30085921cd36a185a202daaede37200a3b86489aec6dfab7fd6b1546301e9029b48179cc7dbb9c4c701759e857686629232964b9ca7ab6ed44958574b7d8920e77574d68be37341e7740fda78dc796efcbf8640b5d1ddd6f421340304b484f73e1891b408bcf56739a75a6a8983ff5708000095fe6069afe67a6f71f108e94f84dc185ef5458cd77b658fd32c22bb6b0497e4c082260c0e2ba735a293f6e48c837cdd8ee957cee4", @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="04007a80"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

99.524974ms ago: executing program 3 (id=3061):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x20000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', <r7=>0x0, 0x29, 0x0, 0x43, 0x4, 0x1e, @loopback, @private2, 0x7, 0x1, 0x1, 0xd}})
r8 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4000001)

0s ago: executing program 1 (id=3062):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023bd7000fcdbdf250300001400020073797a5f74756e000000000000000000a1197159dd8587078ac728cb6f352d15382ddb6aa62b243ca5648179aa04b74664a5bd8e7703a5a61adf4cbd819072016b0cec155da2af959f654db67aabc5dd2baff0f9fd212ccf938f31fb722736ae11577f36a84c53181e2f67af9e10b5d555756e9f848f446f8b489e73b9d5ac93965080cf6794e0b8d6ddb385f63a4aea8fa50b2f9382ce70877b03abf9702078ce0b39db5d8e"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004e0000000e0001006e650e00657673696d0000000f0002657673696d3000000800ab000000000008000b000000000006001100"/70], 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

lock_acquire+0xaac/0xd20
[  209.717137][ T9436]  should_fail_ex+0x414/0x560
[  209.717165][ T9436]  should_failslab+0xa8/0x100
[  209.717206][ T9436]  kmem_cache_alloc_noprof+0x73/0x3c0
[  209.717233][ T9436]  ? skb_clone+0x212/0x3a0
[  209.717281][ T9436]  skb_clone+0x212/0x3a0
[  209.717314][ T9436]  __netlink_deliver_tap+0x404/0x850
[  209.717352][ T9436]  ? netlink_deliver_tap+0x2e/0x1b0
[  209.717377][ T9436]  netlink_deliver_tap+0x19c/0x1b0
[  209.717402][ T9436]  netlink_sendskb+0x68/0x140
[  209.717426][ T9436]  netlink_rcv_skb+0x2a0/0x490
[  209.717450][ T9436]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  209.717474][ T9436]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  209.717519][ T9436]  ? netlink_deliver_tap+0x2e/0x1b0
[  209.717539][ T9436]  ? netlink_deliver_tap+0x2e/0x1b0
[  209.717563][ T9436]  xfrm_netlink_rcv+0x79/0x90
[  209.717584][ T9436]  netlink_unicast+0x75b/0x8d0
[  209.717616][ T9436]  netlink_sendmsg+0x805/0xb30
[  209.717649][ T9436]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.717678][ T9436]  ? aa_sock_msg_perm+0x94/0x160
[  209.717702][ T9436]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.717725][ T9436]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.717751][ T9436]  __sock_sendmsg+0x21c/0x270
[  209.717776][ T9436]  ____sys_sendmsg+0x505/0x830
[  209.717810][ T9436]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.717848][ T9436]  ? import_iovec+0x74/0xa0
[  209.717880][ T9436]  ___sys_sendmsg+0x21f/0x2a0
[  209.717911][ T9436]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.717980][ T9436]  ? __fget_files+0x2a/0x420
[  209.718025][ T9436]  ? __fget_files+0x3a0/0x420
[  209.718064][ T9436]  __x64_sys_sendmsg+0x19b/0x260
[  209.718096][ T9436]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.718143][ T9436]  ? do_syscall_64+0xba/0x210
[  209.718175][ T9436]  do_syscall_64+0xf6/0x210
[  209.718209][ T9436]  ? clear_bhb_loop+0x60/0xb0
[  209.718235][ T9436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.718254][ T9436] RIP: 0033:0x7f818b98e969
[  209.718272][ T9436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.718289][ T9436] RSP: 002b:00007f818c84d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.718311][ T9436] RAX: ffffffffffffffda RBX: 00007f818bbb5fa0 RCX: 00007f818b98e969
[  209.718325][ T9436] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  209.718337][ T9436] RBP: 00007f818c84d090 R08: 0000000000000000 R09: 0000000000000000
[  209.718349][ T9436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.718360][ T9436] R13: 0000000000000000 R14: 00007f818bbb5fa0 R15: 00007ffd9c1313f8
[  209.718392][ T9436]  </TASK>
[  210.149756][ T9443] xt_hashlimit: max too large, truncated to 1048576
[  210.292007][ T9411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.322520][ T9411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.407928][ T9411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.484560][ T9411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.665460][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  210.679452][ T9459] sit0: entered promiscuous mode
[  210.709390][ T9459] netlink: 'syz.4.1170': attribute type 1 has an invalid length.
[  210.728388][ T9459] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1170'.
[  210.758477][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'.
[  210.982099][ T9471] netlink: 'syz.1.1174': attribute type 10 has an invalid length.
[  211.021853][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'.
[  211.456605][ T9492] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  211.617286][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1184'.
[  211.627513][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  211.633648][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  211.639877][ T5851] Bluetooth: hci0: command 0x0406 tx timeout
[  211.646069][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  211.705713][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  211.721397][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'.
[  211.883343][ T9452] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  212.477409][ T9530] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  212.524680][ T9530] bond3: entered promiscuous mode
[  212.530223][ T9530] bond3: entered allmulticast mode
[  212.536415][ T9530] 8021q: adding VLAN 0 to HW filter on device bond3
[  212.746337][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  212.827535][ T9547] netlink: 'syz.2.1200': attribute type 10 has an invalid length.
[  212.954302][ T9551] netlink: 'syz.2.1203': attribute type 1 has an invalid length.
[  212.980266][ T9551] __nla_validate_parse: 2 callbacks suppressed
[  212.980285][ T9551] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1203'.
[  213.047078][ T9553] netlink: zone id is out of range
[  213.053014][ T9553] netlink: del zone limit has 4 unknown bytes
[  213.209610][ T9563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1206'.
[  213.246157][ T9565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1206'.
[  213.477763][ T9572] team0: entered promiscuous mode
[  213.494339][ T9572] batadv_slave_1: entered promiscuous mode
[  213.633443][ T9577] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1213'.
[  213.677248][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'.
[  213.785544][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  213.889760][ T9592] netlink: 'syz.4.1217': attribute type 4 has an invalid length.
[  213.905670][ T9595] IPv6: NLM_F_CREATE should be specified when creating new route
[  214.089998][ T9603] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1222'.
[  214.100689][ T9604] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1222'.
[  214.224888][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'.
[  214.825537][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  215.352775][ T9657] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1240'.
[  215.509216][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'.
[  215.865416][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  216.482529][ T9693] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  216.518916][ T9696] veth0: entered promiscuous mode
[  216.576925][ T9694] veth0: left promiscuous mode
[  216.815038][ T9718] netlink: 'syz.2.1261': attribute type 18 has an invalid length.
[  216.869441][ T9718] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  216.878257][ T9718] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  216.886605][ T9718] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  216.894816][ T9718] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  216.894955][ T9717] netlink: 'syz.4.1263': attribute type 1 has an invalid length.
[  216.910963][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  217.013970][ T9717] 8021q: adding VLAN 0 to HW filter on device bond2
[  217.460581][ T9740] netlink: 'syz.2.1272': attribute type 1 has an invalid length.
[  217.520421][ T9740] netlink: 'syz.2.1272': attribute type 4 has an invalid length.
[  217.541471][ T9747] sctp: [Deprecated]: syz.0.1275 (pid 9747) Use of int in max_burst socket option.
[  217.541471][ T9747] Use struct sctp_assoc_value instead
[  217.779113][ T9759] x_tables: duplicate underflow at hook 2
[  217.945560][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.039047][ T9771] __nla_validate_parse: 1 callbacks suppressed
[  218.039068][ T9771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1282'.
[  218.203960][ T9780] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  218.607328][ T9794] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.1292'.
[  218.985439][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  219.478440][ T9827] openvswitch: netlink: Actions may not be safe on all matching packets
[  219.800752][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'.
[  219.833609][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'.
[  219.925720][ T9843] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.937907][ T9840] netlink: 'syz.2.1311': attribute type 39 has an invalid length.
[  219.941679][ T9843] netlink: 'syz.1.1312': attribute type 7 has an invalid length.
[  219.957505][ T9840] veth0_macvtap: left promiscuous mode
[  220.025428][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.088287][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'.
[  220.361535][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'.
[  220.622723][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'.
[  220.823884][ T9882] netlink: 'syz.4.1327': attribute type 1 has an invalid length.
[  220.935773][ T9887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.065418][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  221.079267][ T9892] netlink: 'syz.4.1332': attribute type 58 has an invalid length.
[  221.114433][ T9892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1332'.
[  221.190988][ T9900] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  221.203191][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'.
[  221.229471][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'.
[  221.539774][ T9915] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  221.571542][ T9915] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.698500][ T9915] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  221.742438][ T9915] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.785682][ T5139] Bluetooth: hci4: command 0x0405 tx timeout
[  221.948877][ T9915] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  221.975632][ T9915] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.105524][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  222.146173][ T9915] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  222.178572][ T9915] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.422135][ T9915] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.474178][ T9915] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.576105][ T9915] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.604776][ T9915] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.678115][ T9915] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.708044][ T9915] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.719332][ T9967] netlink: 'syz.3.1359': attribute type 1 has an invalid length.
[  222.733459][ T9967] netlink: 'syz.3.1359': attribute type 3 has an invalid length.
[  222.763869][ T9915] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  222.779525][ T9967] NCSI netlink: No device for ifindex 131080
[  222.821406][ T9915] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.909246][ T9974] netlink: 'syz.1.1361': attribute type 8 has an invalid length.
[  222.973312][ T9981] netlink: 'syz.1.1361': attribute type 11 has an invalid length.
[  223.042164][ T9981] netlink: 'syz.1.1361': attribute type 11 has an invalid length.
[  223.055749][ T9981] __nla_validate_parse: 3 callbacks suppressed
[  223.055768][ T9981] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1361'.
[  223.145520][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  223.334373][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'.
[  223.342665][ T9996] netlink: 'syz.3.1367': attribute type 1 has an invalid length.
[  223.401462][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'.
[  223.505083][T10007] netlink: 'syz.4.1369': attribute type 39 has an invalid length.
[  223.513256][T10008] netlink: 'syz.2.1371': attribute type 10 has an invalid length.
[  223.742167][T10007] veth0_macvtap: left promiscuous mode
[  223.866309][T10025] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1373'.
[  224.081812][T10034] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.095723][T10035] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  224.168681][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'.
[  224.186356][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  224.229273][T10034] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.383774][T10034] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.481673][T10034] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.700685][T10034] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.769366][T10034] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.824846][T10034] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.873087][T10062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.953363][T10034] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.008211][T10076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1386'.
[  225.225420][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.541455][T10096] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  225.700031][T10099] lo speed is unknown, defaulting to 1000
[  225.865641][ T5139] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  225.931130][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'.
[  225.944193][T10117] validate_nla: 1 callbacks suppressed
[  225.944211][T10117] netlink: 'syz.1.1400': attribute type 3 has an invalid length.
[  226.265439][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.981655][T10140] sch_fq: defrate 0 ignored.
[  227.199248][T10149] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1413'.
[  227.218289][T10149] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1413'.
[  227.305450][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  227.342072][T10155] IPVS: set_ctl: invalid protocol: 58 172.30.0.5:20002
[  227.696339][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'.
[  227.729528][T10168] x_tables: unsorted entry at hook 1
[  227.983381][T10171] xt_CT: No such helper "pptp"
[  228.102208][T10183] netlink: 'syz.2.1423': attribute type 21 has an invalid length.
[  228.257521][T10187] netlink: 'syz.1.1425': attribute type 20 has an invalid length.
[  228.345521][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  228.446876][T10195] lo speed is unknown, defaulting to 1000
[  228.473689][T10206] netlink: 'syz.1.1428': attribute type 1 has an invalid length.
[  228.596714][T10209] netlink: 'syz.1.1428': attribute type 2 has an invalid length.
[  228.619713][T10208] gretap0: entered allmulticast mode
[  228.638747][T10208] bond4: (slave gretap0): making interface the new active one
[  228.647368][T10208] bond4: (slave gretap0): Enslaving as an active interface with an up link
[  228.689468][T10211] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  228.711697][T10213] netlink: 'syz.0.1431': attribute type 10 has an invalid length.
[  228.864546][T10215] __nla_validate_parse: 1 callbacks suppressed
[  228.864565][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'.
[  229.212680][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'.
[  229.385685][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  229.643547][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1440'.
[  229.690334][T10236] sit0: entered promiscuous mode
[  229.696033][T10236] sit0: entered allmulticast mode
[  229.830697][T10243] tipc: Withdrawal distribution failure
[  230.112687][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'.
[  230.328858][T10270] vxcan1: tx drop: invalid da for name 0x0000000000000001
[  230.425420][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  230.624805][T10286] openvswitch: netlink: Message has -1 unknown bytes.
[  230.695601][T10286] sctp: [Deprecated]: syz.2.1458 (pid 10286) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.695601][T10286] Use struct sctp_sack_info instead
[  230.725870][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'.
[  230.769143][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'.
[  230.796743][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'.
[  231.278221][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'.
[  231.465440][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  231.622605][T10329] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.640596][T10329] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.672666][T10331] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  231.721834][T10329] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.731838][T10329] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.819781][T10329] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.830242][T10329] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.892709][T10329] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.902966][T10329] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.113865][T10329] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.130414][T10329] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.151126][T10329] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.157415][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'.
[  232.168336][T10329] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.231398][T10329] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.240739][T10329] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.289950][T10329] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  232.300255][T10329] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.472347][T10357] tipc: MTU too low for tipc bearer
[  232.505417][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  232.677501][T10368] tipc: Withdrawal distribution failure
[  232.878555][T10373] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1494'.
[  232.929145][T10380] openvswitch: netlink: Message has 2 unknown bytes.
[  232.942931][T10380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.989934][T10382] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.061421][T10382] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.127360][T10382] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.192468][T10382] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.336627][T10382] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.354761][T10382] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.372910][T10382] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.393596][T10382] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.539890][T10400] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  233.545558][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  233.567206][T10400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.746711][T10405] netlink: 'syz.1.1505': attribute type 4 has an invalid length.
[  233.874970][T10411] sctp: [Deprecated]: syz.2.1508 (pid 10411) Use of int in max_burst socket option.
[  233.874970][T10411] Use struct sctp_assoc_value instead
[  234.193100][T10429] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.307856][T10429] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.343195][T10439] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  234.473870][T10429] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.548739][T10429] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.585515][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.676565][T10429] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.697894][T10429] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.717998][T10429] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.726768][T10451] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  234.743641][T10429] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.800796][T10448] lo speed is unknown, defaulting to 1000
[  234.929241][T10455] __nla_validate_parse: 5 callbacks suppressed
[  234.929261][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'.
[  235.285844][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'.
[  235.626019][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.652892][T10485] SET target dimension over the limit!
[  235.667657][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  235.717134][T10471] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0
[  235.732129][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'.
[  235.744015][T10486] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.879401][T10486] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.008421][T10486] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.132511][T10486] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.293950][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1535'.
[  236.426795][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'.
[  236.613275][T10512] block nbd2: NBD_DISCONNECT
[  236.629740][T10512] block nbd2: Disconnected due to user request.
[  236.649254][T10512] block nbd2: shutting down sockets
[  236.665722][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  236.741100][T10522] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  236.760765][T10520] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1541'.
[  236.774416][T10520] NCSI netlink: No device for ifindex 0
[  236.879660][T10525] netlink: 'syz.3.1544': attribute type 1 has an invalid length.
[  236.908362][T10525] netlink: 'syz.3.1544': attribute type 1 has an invalid length.
[  237.029007][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'.
[  237.121165][T10537] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  237.258628][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1551'.
[  237.482779][T10555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1556'.
[  237.493276][T10554] netlink: 'syz.2.1554': attribute type 12 has an invalid length.
[  237.704598][T10565] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  237.705542][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  237.771824][T10568] netlink: 'syz.4.1561': attribute type 2 has an invalid length.
[  237.787351][T10565] ieee802154 phy0 wpan0: encryption failed: -22
[  238.200233][T10591] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  238.267306][T10593] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  238.566705][T10486] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.627605][T10486] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.704365][T10486] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.733443][T10486] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.745517][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  239.032188][T10628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.366658][T10641] FAULT_INJECTION: forcing a failure.
[  239.366658][T10641] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.417498][T10641] CPU: 0 UID: 0 PID: 10641 Comm: syz.4.1586 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  239.417529][T10641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  239.417543][T10641] Call Trace:
[  239.417551][T10641]  <TASK>
[  239.417560][T10641]  dump_stack_lvl+0x189/0x250
[  239.417596][T10641]  ? __lock_acquire+0xaac/0xd20
[  239.417629][T10641]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.417659][T10641]  ? __pfx__printk+0x10/0x10
[  239.417680][T10641]  ? __might_fault+0xb0/0x130
[  239.417721][T10641]  should_fail_ex+0x414/0x560
[  239.417751][T10641]  _copy_from_iter+0x1db/0x15a0
[  239.417789][T10641]  ? policy_nodemask+0x27c/0x720
[  239.417816][T10641]  ? __pfx__copy_from_iter+0x10/0x10
[  239.417851][T10641]  ? set_page_refcounted+0xa0/0x1e0
[  239.417880][T10641]  ? page_copy_sane+0x4e/0x280
[  239.417909][T10641]  copy_page_from_iter+0x7b/0x100
[  239.417939][T10641]  tun_get_user+0x1b13/0x3c20
[  239.417974][T10641]  ? tun_get_user+0x687/0x3c20
[  239.418020][T10641]  ? __pfx_tun_get_user+0x10/0x10
[  239.418048][T10641]  ? aa_file_perm+0x11f/0xed0
[  239.418074][T10641]  ? aa_file_perm+0x3e7/0xed0
[  239.418112][T10641]  ? ref_tracker_alloc+0x318/0x460
[  239.418139][T10641]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  239.418168][T10641]  ? tun_get+0x1c/0x2f0
[  239.418203][T10641]  ? tun_get+0x1c/0x2f0
[  239.418230][T10641]  ? tun_get+0x1c/0x2f0
[  239.418264][T10641]  tun_chr_write_iter+0x113/0x200
[  239.418296][T10641]  vfs_write+0x548/0xa90
[  239.418326][T10641]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  239.418366][T10641]  ? __pfx_vfs_write+0x10/0x10
[  239.418400][T10641]  ? __fget_files+0x2a/0x420
[  239.418437][T10641]  ksys_write+0x145/0x250
[  239.418464][T10641]  ? __pfx_ksys_write+0x10/0x10
[  239.418492][T10641]  ? do_syscall_64+0xba/0x210
[  239.418524][T10641]  do_syscall_64+0xf6/0x210
[  239.418550][T10641]  ? clear_bhb_loop+0x60/0xb0
[  239.418575][T10641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.418595][T10641] RIP: 0033:0x7f818b98d41f
[  239.418614][T10641] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  239.418631][T10641] RSP: 002b:00007f818c84d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  239.418653][T10641] RAX: ffffffffffffffda RBX: 00007f818bbb5fa0 RCX: 00007f818b98d41f
[  239.418668][T10641] RDX: 000000000000006a RSI: 0000200000000000 RDI: 00000000000000c8
[  239.418682][T10641] RBP: 00007f818c84d090 R08: 0000000000000000 R09: 0000000000000000
[  239.418694][T10641] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000001
[  239.418706][T10641] R13: 0000000000000001 R14: 00007f818bbb5fa0 R15: 00007ffd9c1313f8
[  239.418738][T10641]  </TASK>
[  239.785441][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  240.024980][ T5139] block nbd2: Receive control failed (result -32)
[  240.483686][T10687] __nla_validate_parse: 7 callbacks suppressed
[  240.483707][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1601'.
[  240.773809][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1606'.
[  240.817656][T10700] openvswitch: netlink: Tunnel attr 47 out of range max 16
[  240.825540][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  240.872375][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  240.921639][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  241.043958][T10713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1611'.
[  241.261697][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1616'.
[  241.704927][T10753] netlink: 'syz.4.1624': attribute type 7 has an invalid length.
[  241.865424][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  242.070940][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'.
[  242.116374][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'.
[  242.165295][T10769] veth1_to_team: entered promiscuous mode
[  242.236783][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'.
[  242.283276][T10778] netlink: 'syz.1.1636': attribute type 1 has an invalid length.
[  242.433333][T10784] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  242.476936][T10778] 8021q: adding VLAN 0 to HW filter on device bond5
[  242.487508][ T1154] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  242.553407][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1636'.
[  242.655737][ T1154] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  242.776543][T10803] ipt_ECN: cannot use operation on non-tcp rule
[  242.801871][T10806] netlink: 'syz.0.1643': attribute type 2 has an invalid length.
[  242.828649][T10800] netlink: 'syz.3.1640': attribute type 30 has an invalid length.
[  242.873764][T10800] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  242.883094][T10800] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  242.892624][T10800] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  242.901589][T10800] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  242.905456][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  242.966350][T10800] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.974782][T10800] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.983499][T10800] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.992286][T10800] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  243.713114][T10842] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  243.945641][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  244.289354][T10874] lo speed is unknown, defaulting to 1000
[  244.386096][T10884] netlink: 'syz.4.1666': attribute type 28 has an invalid length.
[  244.396959][T10884] netlink: 'syz.4.1666': attribute type 3 has an invalid length.
[  244.885876][T10904] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  244.985855][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  245.429436][T10925] sch_tbf: burst 2 is lower than device lo mtu (230) !
[  245.510483][T10934] sch_tbf: burst 2 is lower than device lo mtu (230) !
[  245.558590][T10934] sch_tbf: burst 2 is lower than device lo mtu (230) !
[  245.700012][T10945] __nla_validate_parse: 10 callbacks suppressed
[  245.700033][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'.
[  245.822876][T10944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.930936][T10944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1686'.
[  246.025518][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  246.264196][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1691'.
[  246.356748][T10966] netlink: 'syz.0.1690': attribute type 1 has an invalid length.
[  246.671519][T10981] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1694'.
[  246.775109][T10986] netlink: 'syz.1.1696': attribute type 9 has an invalid length.
[  246.881886][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'.
[  247.065674][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  247.161354][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'.
[  247.432577][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'.
[  247.550275][T11017] IPVS: set_ctl: invalid protocol: 33 172.30.1.3:20004
[  247.559364][ T1206] IPVS: starting estimator thread 0...
[  247.670508][T11025] IPVS: using max 25 ests per chain, 60000 per kthread
[  247.818756][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'.
[  248.105559][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  248.115248][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'.
[  248.144342][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'.
[  249.145563][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  249.612895][T11130] netlink: 'syz.2.1737': attribute type 126 has an invalid length.
[  250.017401][T11146] xt_l2tp: invalid flags combination: c
[  250.185551][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  250.858782][T11185] x_tables: duplicate underflow at hook 3
[  250.893865][T11188] netlink: 'syz.3.1757': attribute type 11 has an invalid length.
[  250.925758][T11188] __nla_validate_parse: 10 callbacks suppressed
[  250.925777][T11188] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1757'.
[  251.039125][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'.
[  251.090859][T11201] Can't find ip_set type hah:ip,mark
[  251.225614][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  251.266681][T11209] netlink: 'syz.3.1763': attribute type 3 has an invalid length.
[  251.302763][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1764'.
[  251.305036][T11209] netlink: 'syz.3.1763': attribute type 1 has an invalid length.
[  251.358094][T11209] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1763'.
[  251.398095][T11215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1766'.
[  251.450673][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'.
[  251.482945][T11218] netlink: 'syz.1.1765': attribute type 1 has an invalid length.
[  251.500390][T11218] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1765'.
[  251.587263][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1768'.
[  251.702015][T11233] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1771'.
[  251.719217][T11233] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1771'.
[  251.744440][T11233] bond0: (slave macvlan3): Opening slave failed
[  252.265521][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  252.667454][ T5139] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  252.753957][T11268] openvswitch: netlink: Actions may not be safe on all matching packets
[  252.798510][T11268] netlink: 'syz.3.1781': attribute type 10 has an invalid length.
[  252.832789][T11268] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.893466][T11268] team0: Port device bond0 added
[  253.305402][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  253.545419][ T5139] Bluetooth: hci2: command 0x0406 tx timeout
[  253.751802][T11312] netlink: 'syz.3.1798': attribute type 2 has an invalid length.
[  254.285097][T11336] netlink: 'syz.1.1806': attribute type 13 has an invalid length.
[  254.346284][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  254.510421][T11355] delete_channel: no stack
[  255.069872][T11379] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20004
[  255.155015][T11387] netlink: 'syz.1.1821': attribute type 1 has an invalid length.
[  255.322711][T11388] bond6: (slave gretap1): making interface the new active one
[  255.338434][T11388] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  255.385533][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  255.525836][T11407] IPv6: NLM_F_REPLACE set, but no existing node found!
[  255.632503][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.633032][ T5139] Bluetooth: hci2: command 0x0406 tx timeout
[  255.713930][T11418] netlink: 'syz.1.1833': attribute type 1 has an invalid length.
[  256.129367][T11441] netlink: 'syz.2.1837': attribute type 4 has an invalid length.
[  256.148629][T11441] __nla_validate_parse: 11 callbacks suppressed
[  256.148648][T11441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1837'.
[  256.321817][T11450] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1842'.
[  256.425419][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  256.511336][T11454] xt_CT: No such helper "snmp"
[  257.094373][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'.
[  257.291468][T11499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.310339][T11499] syzkaller0: entered promiscuous mode
[  257.329228][T11499] syzkaller0: entered allmulticast mode
[  257.360420][T11499] tipc: Resetting bearer <eth:syzkaller0>
[  257.399994][T11498] tipc: Resetting bearer <eth:syzkaller0>
[  257.455688][T11498] tipc: Disabling bearer <eth:syzkaller0>
[  257.466112][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  257.837709][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'.
[  257.850218][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1864'.
[  257.879936][T11514] lo speed is unknown, defaulting to 1000
[  257.980260][T11524] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  258.505406][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  258.782165][T11556] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  258.861718][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1881'.
[  259.002214][T11560] veth1_to_team: entered promiscuous mode
[  259.226532][T11569] tipc: Can't bind to reserved service type 2
[  259.268656][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1884'.
[  259.300362][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.384689][T11574] 
@ÿ: renamed from bond_slave_0
[  259.545606][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  259.902093][T11601] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  260.159874][T11612] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  260.173404][T11612] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  260.200152][T11612] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  260.440612][T11625] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.585612][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  260.700711][T11637] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  260.813972][T11646] openvswitch: netlink: Message has -1 unknown bytes.
[  260.848532][T11646] sctp: [Deprecated]: syz.4.1909 (pid 11646) Use of struct sctp_assoc_value in delayed_ack socket option.
[  260.848532][T11646] Use struct sctp_sack_info instead
[  260.896535][T11648] netlink: 'syz.3.1910': attribute type 1 has an invalid length.
[  260.904327][T11648] netlink: 'syz.3.1910': attribute type 11 has an invalid length.
[  260.934237][T11648] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1910'.
[  260.960320][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'.
[  261.002108][ T5139] Bluetooth: hci4: link tx timeout
[  261.007447][ T5139] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  261.082937][T11651] batadv0: mtu less than device minimum
[  261.943124][T11696] batadv1: entered allmulticast mode
[  262.284748][T11710] netlink: 'syz.4.1929': attribute type 21 has an invalid length.
[  262.300986][T11710] IPv6: NLM_F_CREATE should be specified when creating new route
[  262.310372][T11710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  262.317684][T11710] IPv6: NLM_F_CREATE should be set when creating new route
[  262.325026][T11710] IPv6: NLM_F_CREATE should be set when creating new route
[  262.332323][T11710] IPv6: NLM_F_CREATE should be set when creating new route
[  262.439911][T11717] lo: entered promiscuous mode
[  262.465904][T11717] netlink: 'syz.4.1932': attribute type 2 has an invalid length.
[  262.642130][T11724] sctp: [Deprecated]: syz.0.1934 (pid 11724) Use of struct sctp_assoc_value in delayed_ack socket option.
[  262.642130][T11724] Use struct sctp_sack_info instead
[  262.704189][T11730] veth0: entered promiscuous mode
[  262.710045][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'.
[  262.734055][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'.
[  262.798777][ T5839] Bluetooth: hci4: link tx timeout
[  262.804845][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  262.873745][T11742] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  263.066976][ T5839] Bluetooth: hci4: command 0x0405 tx timeout
[  263.407162][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'.
[  263.493864][T11761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1944'.
[  263.705523][    C0] net_ratelimit: 25 callbacks suppressed
[  263.705544][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  263.948638][T11790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1957'.
[  264.191815][T11801] netlink: 'syz.1.1960': attribute type 1 has an invalid length.
[  264.207409][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'.
[  264.258705][T11801] netlink: 'syz.1.1960': attribute type 2 has an invalid length.
[  264.573154][T11826] netlink: 'syz.4.1969': attribute type 4 has an invalid length.
[  264.745554][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  265.071477][T11854] delete_channel: no stack
[  265.176834][T11854] netlink: 'syz.4.1979': attribute type 1 has an invalid length.
[  265.227209][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1980'.
[  265.370489][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.390298][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.405846][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.419952][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.439885][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.450807][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.465133][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.474727][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.485195][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.493829][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  265.512672][T11859] team0 (unregistering): Port device bond0 removed
[  265.585946][T11864] 8021q: adding VLAN 0 to HW filter on device bond4
[  265.594610][T11864] bond3: (slave bond4): making interface the new active one
[  265.602986][T11864] bond3: (slave bond4): Enslaving as an active interface with an up link
[  265.736370][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1986'.
[  265.785742][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  266.605091][T11921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2004'.
[  266.825402][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  267.230151][T11949] lo speed is unknown, defaulting to 1000
[  267.865425][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  267.958068][T11981] netlink: 'syz.2.2021': attribute type 10 has an invalid length.
[  268.411393][T11994] netlink: 'syz.2.2028': attribute type 1 has an invalid length.
[  268.433998][T11994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2028'.
[  268.751434][T12013] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  268.798465][T12014] openvswitch: netlink: Key type 16144 is out of range max 32
[  268.902613][T12016] openvswitch: netlink: Actions may not be safe on all matching packets
[  268.905431][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  268.949256][T12019] ip6gre1: entered allmulticast mode
[  269.518881][T12050] netlink: 'syz.4.2049': attribute type 7 has an invalid length.
[  269.590916][T12050] : entered promiscuous mode
[  269.945547][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  270.408832][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'.
[  270.449702][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'.
[  270.475676][T12090] netlink: 'syz.1.2065': attribute type 5 has an invalid length.
[  270.728822][T12106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2070'.
[  270.985694][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  271.005969][T12116] netlink: 'syz.3.2076': attribute type 39 has an invalid length.
[  271.256074][T12126] xt_l2tp: invalid flags combination: c
[  271.720224][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'.
[  271.759150][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'.
[  271.831076][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'.
[  271.868554][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'.
[  271.928620][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'.
[  271.990461][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'.
[  272.025397][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  272.867930][T12197] netlink: 'syz.3.2104': attribute type 3 has an invalid length.
[  273.050437][T12208] netlink: 'syz.4.2106': attribute type 39 has an invalid length.
[  273.065459][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  273.294279][T12221] netlink: 'syz.2.2111': attribute type 6 has an invalid length.
[  273.303154][T12221] netlink: 'syz.2.2111': attribute type 5 has an invalid length.
[  274.085616][T12252] netlink: 'syz.4.2122': attribute type 10 has an invalid length.
[  274.139530][T12257] netlink: 'syz.1.2123': attribute type 16 has an invalid length.
[  274.163406][T12257] netlink: 'syz.1.2123': attribute type 3 has an invalid length.
[  274.182594][T12257] __nla_validate_parse: 36 callbacks suppressed
[  274.182614][T12257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2123'.
[  274.273225][   T30] audit: type=1800 audit(1748059884.854:2): pid=12262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2124" name="memory.events" dev="tmpfs" ino=2112 res=0 errno=0
[  274.583301][T12277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2129'.
[  274.637588][T12279] FAULT_INJECTION: forcing a failure.
[  274.637588][T12279] name failslab, interval 1, probability 0, space 0, times 0
[  274.688324][T12279] CPU: 1 UID: 0 PID: 12279 Comm: syz.3.2130 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  274.688355][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.688369][T12279] Call Trace:
[  274.688377][T12279]  <TASK>
[  274.688386][T12279]  dump_stack_lvl+0x189/0x250
[  274.688424][T12279]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.688454][T12279]  ? __pfx__printk+0x10/0x10
[  274.688489][T12279]  ? __pfx___might_resched+0x10/0x10
[  274.688515][T12279]  should_fail_ex+0x414/0x560
[  274.688543][T12279]  should_failslab+0xa8/0x100
[  274.688572][T12279]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  274.688599][T12279]  ? __alloc_skb+0x112/0x2d0
[  274.688630][T12279]  __alloc_skb+0x112/0x2d0
[  274.688660][T12279]  netlink_sendmsg+0x5c6/0xb30
[  274.688694][T12279]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.688717][T12279]  ? aa_sock_msg_perm+0x94/0x160
[  274.688738][T12279]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.688757][T12279]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.688778][T12279]  __sock_sendmsg+0x21c/0x270
[  274.688798][T12279]  ____sys_sendmsg+0x505/0x830
[  274.688826][T12279]  ? __pfx_____sys_sendmsg+0x10/0x10
[  274.688857][T12279]  ? import_iovec+0x74/0xa0
[  274.688884][T12279]  ___sys_sendmsg+0x21f/0x2a0
[  274.688909][T12279]  ? __pfx____sys_sendmsg+0x10/0x10
[  274.688963][T12279]  ? __fget_files+0x2a/0x420
[  274.688984][T12279]  ? __fget_files+0x3a0/0x420
[  274.689015][T12279]  __x64_sys_sendmsg+0x19b/0x260
[  274.689041][T12279]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  274.689078][T12279]  ? do_syscall_64+0xba/0x210
[  274.689103][T12279]  do_syscall_64+0xf6/0x210
[  274.689125][T12279]  ? clear_bhb_loop+0x60/0xb0
[  274.689145][T12279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.689161][T12279] RIP: 0033:0x7f319c78e969
[  274.689176][T12279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.689191][T12279] RSP: 002b:00007f319d532038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.689228][T12279] RAX: ffffffffffffffda RBX: 00007f319c9b5fa0 RCX: 00007f319c78e969
[  274.689240][T12279] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003
[  274.689251][T12279] RBP: 00007f319d532090 R08: 0000000000000000 R09: 0000000000000000
[  274.689261][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.689270][T12279] R13: 0000000000000000 R14: 00007f319c9b5fa0 R15: 00007ffe2dab0228
[  274.689296][T12279]  </TASK>
[  275.510642][T12311] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2140'.
[  275.520583][T12313] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2141'.
[  275.554608][T12313] xt_TCPMSS: Only works on TCP SYN packets
[  275.643298][T12317] netlink: 516 bytes leftover after parsing attributes in process `syz.4.2143'.
[  275.773125][T12322] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2145'.
[  275.808452][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'.
[  275.989399][T12332] netlink: 'syz.4.2149': attribute type 10 has an invalid length.
[  276.106935][T12334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.399328][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2157'.
[  276.887825][T12374] 8021q: VLANs not supported on ip6gre0
[  277.369296][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'.
[  277.501420][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2176'.
[  277.972591][T12430] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  278.111087][T12438] FAULT_INJECTION: forcing a failure.
[  278.111087][T12438] name failslab, interval 1, probability 0, space 0, times 0
[  278.160522][T12438] CPU: 0 UID: 0 PID: 12438 Comm: syz.3.2186 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  278.160549][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  278.160559][T12438] Call Trace:
[  278.160566][T12438]  <TASK>
[  278.160574][T12438]  dump_stack_lvl+0x189/0x250
[  278.160606][T12438]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.160631][T12438]  ? __pfx__printk+0x10/0x10
[  278.160653][T12438]  ? __pfx___might_resched+0x10/0x10
[  278.160675][T12438]  should_fail_ex+0x414/0x560
[  278.160698][T12438]  should_failslab+0xa8/0x100
[  278.160724][T12438]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  278.160745][T12438]  ? __alloc_skb+0x112/0x2d0
[  278.160764][T12438]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  278.160794][T12438]  __alloc_skb+0x112/0x2d0
[  278.160819][T12438]  nldev_stat_set_doit+0x3c6/0x8c0
[  278.160867][T12438]  ? is_bpf_text_address+0x26/0x2b0
[  278.160902][T12438]  ? __pfx_nldev_stat_set_doit+0x10/0x10
[  278.161019][T12438]  ? rcu_is_watching+0x15/0xb0
[  278.161038][T12438]  ? apparmor_capable+0x137/0x1b0
[  278.161065][T12438]  ? bpf_lsm_capable+0x9/0x20
[  278.161091][T12438]  ? security_capable+0x7e/0x2e0
[  278.161114][T12438]  ? __pfx_nldev_stat_set_doit+0x10/0x10
[  278.161142][T12438]  rdma_nl_rcv+0x6c2/0x9a0
[  278.161190][T12438]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  278.161250][T12438]  ? netlink_deliver_tap+0x2e/0x1b0
[  278.161274][T12438]  ? netlink_deliver_tap+0x2e/0x1b0
[  278.161304][T12438]  netlink_unicast+0x75b/0x8d0
[  278.161338][T12438]  netlink_sendmsg+0x805/0xb30
[  278.161372][T12438]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.161400][T12438]  ? aa_sock_msg_perm+0x94/0x160
[  278.161424][T12438]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  278.161446][T12438]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.161470][T12438]  __sock_sendmsg+0x21c/0x270
[  278.161496][T12438]  ____sys_sendmsg+0x505/0x830
[  278.161529][T12438]  ? __pfx_____sys_sendmsg+0x10/0x10
[  278.161570][T12438]  ? import_iovec+0x74/0xa0
[  278.161603][T12438]  ___sys_sendmsg+0x21f/0x2a0
[  278.161634][T12438]  ? __pfx____sys_sendmsg+0x10/0x10
[  278.161702][T12438]  ? __fget_files+0x2a/0x420
[  278.161728][T12438]  ? __fget_files+0x3a0/0x420
[  278.161764][T12438]  __x64_sys_sendmsg+0x19b/0x260
[  278.161796][T12438]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  278.161863][T12438]  ? do_syscall_64+0xba/0x210
[  278.161894][T12438]  do_syscall_64+0xf6/0x210
[  278.161922][T12438]  ? clear_bhb_loop+0x60/0xb0
[  278.161948][T12438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.161968][T12438] RIP: 0033:0x7f319c78e969
[  278.161986][T12438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.162004][T12438] RSP: 002b:00007f319d532038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.162026][T12438] RAX: ffffffffffffffda RBX: 00007f319c9b5fa0 RCX: 00007f319c78e969
[  278.162040][T12438] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003
[  278.162054][T12438] RBP: 00007f319d532090 R08: 0000000000000000 R09: 0000000000000000
[  278.162066][T12438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.162078][T12438] R13: 0000000000000000 R14: 00007f319c9b5fa0 R15: 00007ffe2dab0228
[  278.162111][T12438]  </TASK>
[  279.117699][T12474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.203520][T12483] FAULT_INJECTION: forcing a failure.
[  279.203520][T12483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  279.265942][T12483] CPU: 0 UID: 0 PID: 12483 Comm: syz.1.2202 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  279.265980][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  279.265993][T12483] Call Trace:
[  279.266001][T12483]  <TASK>
[  279.266010][T12483]  dump_stack_lvl+0x189/0x250
[  279.266049][T12483]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.266078][T12483]  ? __pfx__printk+0x10/0x10
[  279.266113][T12483]  should_fail_ex+0x414/0x560
[  279.266142][T12483]  _copy_to_user+0x31/0xb0
[  279.266175][T12483]  simple_read_from_buffer+0xe1/0x170
[  279.266207][T12483]  proc_fail_nth_read+0x1df/0x250
[  279.266240][T12483]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  279.266274][T12483]  ? rw_verify_area+0x258/0x650
[  279.266296][T12483]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  279.266327][T12483]  vfs_read+0x1fd/0x980
[  279.266357][T12483]  ? __pfx___mutex_lock+0x10/0x10
[  279.266384][T12483]  ? __pfx_vfs_read+0x10/0x10
[  279.266410][T12483]  ? __fget_files+0x2a/0x420
[  279.266442][T12483]  ? __fget_files+0x3a0/0x420
[  279.266468][T12483]  ? __fget_files+0x2a/0x420
[  279.266506][T12483]  ksys_read+0x145/0x250
[  279.266528][T12483]  ? rcu_is_watching+0x15/0xb0
[  279.266548][T12483]  ? __pfx_ksys_read+0x10/0x10
[  279.266576][T12483]  ? do_syscall_64+0xba/0x210
[  279.266608][T12483]  do_syscall_64+0xf6/0x210
[  279.266647][T12483]  ? clear_bhb_loop+0x60/0xb0
[  279.266672][T12483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.266691][T12483] RIP: 0033:0x7f1f5ed8d37c
[  279.266727][T12483] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  279.266744][T12483] RSP: 002b:00007f1f5fbd6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  279.266766][T12483] RAX: ffffffffffffffda RBX: 00007f1f5efb5fa0 RCX: 00007f1f5ed8d37c
[  279.266781][T12483] RDX: 000000000000000f RSI: 00007f1f5fbd60a0 RDI: 0000000000000004
[  279.266793][T12483] RBP: 00007f1f5fbd6090 R08: 0000000000000000 R09: 0000000000000000
[  279.266805][T12483] R10: 0000000000000066 R11: 0000000000000246 R12: 0000000000000001
[  279.266817][T12483] R13: 0000000000000000 R14: 00007f1f5efb5fa0 R15: 00007ffcae116398
[  279.266860][T12483]  </TASK>
[  279.751968][T12496] __nla_validate_parse: 4 callbacks suppressed
[  279.751988][T12496] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2207'.
[  280.112300][T12515] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  280.366601][T12532] netlink: 'syz.0.2220': attribute type 10 has an invalid length.
[  280.572581][T12540] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2224'.
[  280.723585][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'.
[  280.759948][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'.
[  280.874643][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'.
[  280.999708][T12560] FAULT_INJECTION: forcing a failure.
[  280.999708][T12560] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.048625][T12560] CPU: 1 UID: 0 PID: 12560 Comm: syz.4.2232 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  281.048677][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  281.048689][T12560] Call Trace:
[  281.048717][T12560]  <TASK>
[  281.048726][T12560]  dump_stack_lvl+0x189/0x250
[  281.048765][T12560]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.048794][T12560]  ? __pfx__printk+0x10/0x10
[  281.048829][T12560]  should_fail_ex+0x414/0x560
[  281.048858][T12560]  _copy_to_user+0x31/0xb0
[  281.048890][T12560]  simple_read_from_buffer+0xe1/0x170
[  281.048922][T12560]  proc_fail_nth_read+0x1df/0x250
[  281.048962][T12560]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  281.048995][T12560]  ? rw_verify_area+0x258/0x650
[  281.049017][T12560]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  281.049048][T12560]  vfs_read+0x1fd/0x980
[  281.049077][T12560]  ? __pfx___mutex_lock+0x10/0x10
[  281.049104][T12560]  ? __pfx_vfs_read+0x10/0x10
[  281.049130][T12560]  ? __fget_files+0x2a/0x420
[  281.049162][T12560]  ? __fget_files+0x3a0/0x420
[  281.049188][T12560]  ? __fget_files+0x2a/0x420
[  281.049225][T12560]  ksys_read+0x145/0x250
[  281.049252][T12560]  ? __pfx_ksys_read+0x10/0x10
[  281.049279][T12560]  ? do_syscall_64+0xba/0x210
[  281.049310][T12560]  do_syscall_64+0xf6/0x210
[  281.049338][T12560]  ? clear_bhb_loop+0x60/0xb0
[  281.049363][T12560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.049382][T12560] RIP: 0033:0x7f818b98d37c
[  281.049400][T12560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  281.049417][T12560] RSP: 002b:00007f818c84d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  281.049439][T12560] RAX: ffffffffffffffda RBX: 00007f818bbb5fa0 RCX: 00007f818b98d37c
[  281.049454][T12560] RDX: 000000000000000f RSI: 00007f818c84d0a0 RDI: 0000000000000004
[  281.049466][T12560] RBP: 00007f818c84d090 R08: 0000000000000000 R09: 0000000000000000
[  281.049478][T12560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.049490][T12560] R13: 0000000000000000 R14: 00007f818bbb5fa0 R15: 00007ffd9c1313f8
[  281.049523][T12560]  </TASK>
[  281.072178][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2234'.
[  281.195674][T12563] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  281.312414][T12565] tc_dump_action: action bad kind
[  281.564881][T12583] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2239'.
[  281.594478][T12578] xt_ecn: cannot match TCP bits for non-tcp packets
[  281.967427][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2250'.
[  282.005739][T12607] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  282.113945][T12616] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  282.706799][T12646] netlink: 'syz.0.2261': attribute type 10 has an invalid length.
[  283.117294][T12666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.364315][T12680] netlink: 'syz.1.2275': attribute type 10 has an invalid length.
[  283.392609][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2274'.
[  283.423591][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2274'.
[  283.996460][T12707] openvswitch: netlink: Message has -1 unknown bytes.
[  284.056054][T12707] sctp: [Deprecated]: syz.3.2285 (pid 12707) Use of struct sctp_assoc_value in delayed_ack socket option.
[  284.056054][T12707] Use struct sctp_sack_info instead
[  284.422043][T12690] syz.2.2280 (12690) used greatest stack depth: 18344 bytes left
[  285.192100][T12766] __nla_validate_parse: 4 callbacks suppressed
[  285.192122][T12766] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2309'.
[  285.609248][T12788] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2315'.
[  286.637740][T12830] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  286.725113][T12834] netlink: 'syz.4.2339': attribute type 10 has an invalid length.
[  287.048500][T12846] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2345'.
[  287.079410][T12846] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2345'.
[  287.106511][T12853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  287.147246][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'.
[  287.165716][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2346'.
[  287.362201][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'.
[  287.508441][T12877] netlink: 'syz.1.2355': attribute type 10 has an invalid length.
[  287.723237][T12885] batadv_slave_1: entered promiscuous mode
[  287.767692][T12883] block nbd1: NBD_DISCONNECT
[  287.772711][T12883] block nbd1: Disconnected due to user request.
[  287.785184][T12884] batadv_slave_1: left promiscuous mode
[  287.796232][T12883] block nbd1: shutting down sockets
[  288.128512][T12906] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  288.260927][T12910] openvswitch: netlink: IP tunnel TTL not specified.
[  288.521335][T12919] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  288.641989][T12927] nbd: nbd2 already in use
[  289.102572][T12953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2383'.
[  289.140086][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2383'.
[  289.262430][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'.
[  289.668361][ T5139] block nbd3: Receive control failed (result -32)
[  289.861630][T12983] netlink: 'syz.1.2393': attribute type 4 has an invalid length.
[  290.350103][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2400'.
[  290.616541][T13022] nbd: nbd3 already in use
[  290.653243][T13019] can: request_module (can-proto-3) failed.
[  290.919203][T13042] netlink: 'syz.2.2411': attribute type 64 has an invalid length.
[  290.953949][T13042] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2411'.
[  291.075991][T13046] x_tables: duplicate underflow at hook 1
[  291.123612][T13054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.153809][T13057] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2414'.
[  291.179169][T13057] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2414'.
[  291.235653][T13057] netlink: 'syz.1.2414': attribute type 5 has an invalid length.
[  291.294906][T13057] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2414'.
[  291.498330][T13068] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  291.892362][T13091] netlink: 'syz.0.2425': attribute type 10 has an invalid length.
[  292.336326][T13114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2433'.
[  292.457557][T13110] delete_channel: no stack
[  292.681090][T13137] netlink: 'syz.1.2440': attribute type 10 has an invalid length.
[  292.993559][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'.
[  293.034546][T13149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2444'.
[  293.575032][T13177] netlink: 'syz.2.2455': attribute type 10 has an invalid length.
[  294.062455][T13198] team0: Device vti0 is of different type
[  294.151573][T13208] sctp: [Deprecated]: syz.4.2464 (pid 13208) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.151573][T13208] Use struct sctp_sack_info instead
[  294.206059][T13208] pimreg: entered allmulticast mode
[  294.333328][T13217] netlink: 'syz.1.2470': attribute type 10 has an invalid length.
[  294.735272][T13238] netlink: 'syz.3.2478': attribute type 16 has an invalid length.
[  294.751157][T13238] netlink: 'syz.3.2478': attribute type 3 has an invalid length.
[  294.760170][T13238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2478'.
[  295.074398][T13255] netlink: 'syz.2.2483': attribute type 10 has an invalid length.
[  295.318422][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'.
[  295.472147][ T5839] Bluetooth: hci4: command 0x0405 tx timeout
[  295.640977][T13281] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  295.654161][T13281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2493'.
[  295.760145][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2494'.
[  295.782810][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'.
[  295.793381][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'.
[  295.986791][T13292] netlink: 'syz.2.2500': attribute type 10 has an invalid length.
[  296.190952][T13303] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  296.210872][T13305] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2505'.
[  296.299246][T13312] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 4, id = 0
[  296.546993][T13329] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2509'.
[  296.754255][T13345] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.872255][T13348] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  296.925136][T13345] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.939519][T13348] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2510'.
[  297.069159][T13345] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.093042][T13354] netlink: 'syz.0.2512': attribute type 10 has an invalid length.
[  297.198582][T13345] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.438422][T13345] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.512873][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'.
[  297.545952][ T5839] Bluetooth: hci4: command 0x0405 tx timeout
[  297.580249][T13375] xt_hashlimit: Unknown mode mask 115, kernel too old?
[  297.596789][T13345] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.668783][T13345] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.706964][T13381] sctp: [Deprecated]: syz.2.2523 (pid 13381) Use of struct sctp_assoc_value in delayed_ack socket option.
[  297.706964][T13381] Use struct sctp_sack_info instead
[  297.769344][T13345] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.795593][T13382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2521'.
[  297.843176][T13386] ip6gre2: entered allmulticast mode
[  297.962561][T13390] netlink: 'syz.1.2526': attribute type 10 has an invalid length.
[  298.088747][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2530'.
[  298.460512][T13419] FAULT_INJECTION: forcing a failure.
[  298.460512][T13419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.514593][T13419] CPU: 1 UID: 0 PID: 13419 Comm: syz.4.2539 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  298.514624][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  298.514636][T13419] Call Trace:
[  298.514645][T13419]  <TASK>
[  298.514654][T13419]  dump_stack_lvl+0x189/0x250
[  298.514687][T13419]  ? __lock_acquire+0xaac/0xd20
[  298.514720][T13419]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.514750][T13419]  ? __pfx__printk+0x10/0x10
[  298.514771][T13419]  ? __might_fault+0xb0/0x130
[  298.514811][T13419]  should_fail_ex+0x414/0x560
[  298.514840][T13419]  _copy_from_user+0x2d/0xb0
[  298.514871][T13419]  ___sys_sendmsg+0x158/0x2a0
[  298.514904][T13419]  ? __pfx____sys_sendmsg+0x10/0x10
[  298.514974][T13419]  ? __fget_files+0x2a/0x420
[  298.515002][T13419]  ? __fget_files+0x3a0/0x420
[  298.515040][T13419]  __x64_sys_sendmsg+0x19b/0x260
[  298.515072][T13419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  298.515121][T13419]  ? do_syscall_64+0xba/0x210
[  298.515153][T13419]  do_syscall_64+0xf6/0x210
[  298.515181][T13419]  ? clear_bhb_loop+0x60/0xb0
[  298.515206][T13419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.515226][T13419] RIP: 0033:0x7f818b98e969
[  298.515244][T13419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.515262][T13419] RSP: 002b:00007f818c84d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.515284][T13419] RAX: ffffffffffffffda RBX: 00007f818bbb5fa0 RCX: 00007f818b98e969
[  298.515304][T13419] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003
[  298.515316][T13419] RBP: 00007f818c84d090 R08: 0000000000000000 R09: 0000000000000000
[  298.515327][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.515338][T13419] R13: 0000000000000000 R14: 00007f818bbb5fa0 R15: 00007ffd9c1313f8
[  298.515370][T13419]  </TASK>
[  298.761476][T13426] netlink: 'syz.0.2538': attribute type 1 has an invalid length.
[  298.793247][T13428] openvswitch: netlink: IP tunnel dst address not specified
[  298.952386][T13436] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004
[  298.998611][T13436] sctp: [Deprecated]: syz.4.2543 (pid 13436) Use of int in max_burst socket option.
[  298.998611][T13436] Use struct sctp_assoc_value instead
[  299.544314][T13458] FAULT_INJECTION: forcing a failure.
[  299.544314][T13458] name failslab, interval 1, probability 0, space 0, times 0
[  299.548197][T13460] netlink: 'syz.4.2554': attribute type 10 has an invalid length.
[  299.569841][T13458] CPU: 0 UID: 0 PID: 13458 Comm: syz.2.2553 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  299.569871][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  299.569883][T13458] Call Trace:
[  299.569891][T13458]  <TASK>
[  299.569900][T13458]  dump_stack_lvl+0x189/0x250
[  299.569937][T13458]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.569965][T13458]  ? __pfx__printk+0x10/0x10
[  299.569991][T13458]  ? __pfx___might_resched+0x10/0x10
[  299.570015][T13458]  should_fail_ex+0x414/0x560
[  299.570052][T13458]  should_failslab+0xa8/0x100
[  299.570081][T13458]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  299.570108][T13458]  ? __alloc_skb+0x112/0x2d0
[  299.570138][T13458]  __alloc_skb+0x112/0x2d0
[  299.570167][T13458]  netlink_sendmsg+0x5c6/0xb30
[  299.570200][T13458]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.570228][T13458]  ? aa_sock_msg_perm+0x94/0x160
[  299.570253][T13458]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.570275][T13458]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.570301][T13458]  __sock_sendmsg+0x21c/0x270
[  299.570326][T13458]  ____sys_sendmsg+0x505/0x830
[  299.570360][T13458]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.570396][T13458]  ? import_iovec+0x74/0xa0
[  299.570428][T13458]  ___sys_sendmsg+0x21f/0x2a0
[  299.570459][T13458]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.570526][T13458]  ? __fget_files+0x2a/0x420
[  299.570552][T13458]  ? __fget_files+0x3a0/0x420
[  299.570589][T13458]  __x64_sys_sendmsg+0x19b/0x260
[  299.570621][T13458]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.570667][T13458]  ? do_syscall_64+0xba/0x210
[  299.570698][T13458]  do_syscall_64+0xf6/0x210
[  299.570725][T13458]  ? clear_bhb_loop+0x60/0xb0
[  299.570747][T13458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.570766][T13458] RIP: 0033:0x7f3d3c38e969
[  299.570783][T13458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.570799][T13458] RSP: 002b:00007f3d3d2c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.570819][T13458] RAX: ffffffffffffffda RBX: 00007f3d3c5b5fa0 RCX: 00007f3d3c38e969
[  299.570834][T13458] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003
[  299.570846][T13458] RBP: 00007f3d3d2c4090 R08: 0000000000000000 R09: 0000000000000000
[  299.570857][T13458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.570868][T13458] R13: 0000000000000000 R14: 00007f3d3c5b5fa0 R15: 00007ffce241fd48
[  299.570898][T13458]  </TASK>
[  301.792227][T13496] __nla_validate_parse: 5 callbacks suppressed
[  301.792247][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'.
[  301.886789][T13503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  302.242534][T13520] netlink: 'syz.0.2577': attribute type 1 has an invalid length.
[  302.638312][T13531] 8021q: adding VLAN 0 to HW filter on device bond7
[  302.781142][T13544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2583'.
[  302.893527][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2586'.
[  302.913787][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'.
[  303.011749][T13554] tipc: Started in network mode
[  303.017055][T13554] tipc: Node identity e0000002, cluster identity 4711
[  303.023888][T13554] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  303.400646][T13577] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  303.680418][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'.
[  303.802167][T13599] FAULT_INJECTION: forcing a failure.
[  303.802167][T13599] name failslab, interval 1, probability 0, space 0, times 0
[  303.837684][T13599] CPU: 1 UID: 0 PID: 13599 Comm: syz.0.2602 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  303.837714][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  303.837738][T13599] Call Trace:
[  303.837746][T13599]  <TASK>
[  303.837754][T13599]  dump_stack_lvl+0x189/0x250
[  303.837790][T13599]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.837817][T13599]  ? __pfx__printk+0x10/0x10
[  303.837842][T13599]  ? __pfx___might_resched+0x10/0x10
[  303.837860][T13599]  ? fs_reclaim_acquire+0x7d/0x100
[  303.837893][T13599]  should_fail_ex+0x414/0x560
[  303.837925][T13599]  should_failslab+0xa8/0x100
[  303.837952][T13599]  __kmalloc_cache_noprof+0x70/0x3d0
[  303.837977][T13599]  ? genl_start+0x1c9/0x6c0
[  303.838010][T13599]  genl_start+0x1c9/0x6c0
[  303.838035][T13599]  ? netlink_lookup+0x30/0x200
[  303.838063][T13599]  __netlink_dump_start+0x469/0x7e0
[  303.838094][T13599]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  303.838126][T13599]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  303.838153][T13599]  ? genl_get_cmd+0x67f/0x910
[  303.838182][T13599]  ? __pfx___mutex_lock+0x10/0x10
[  303.838207][T13599]  ? __pfx_genl_start+0x10/0x10
[  303.838232][T13599]  ? __pfx_genl_dumpit+0x10/0x10
[  303.838257][T13599]  ? __pfx_genl_done+0x10/0x10
[  303.838300][T13599]  genl_rcv_msg+0x5da/0x790
[  303.838335][T13599]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.838362][T13599]  ? __pfx_mptcp_pm_nl_get_addr_dumpit+0x10/0x10
[  303.838395][T13599]  ? ref_tracker_free+0x63a/0x7d0
[  303.838414][T13599]  ? __copy_skb_header+0xa7/0x550
[  303.838451][T13599]  netlink_rcv_skb+0x219/0x490
[  303.838474][T13599]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.838503][T13599]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.838570][T13599]  ? down_read+0x1ad/0x2e0
[  303.838600][T13599]  genl_rcv+0x28/0x40
[  303.838626][T13599]  netlink_unicast+0x75b/0x8d0
[  303.838665][T13599]  netlink_sendmsg+0x805/0xb30
[  303.838701][T13599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.838729][T13599]  ? aa_sock_msg_perm+0x94/0x160
[  303.838754][T13599]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  303.838777][T13599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.838804][T13599]  __sock_sendmsg+0x21c/0x270
[  303.838830][T13599]  ____sys_sendmsg+0x505/0x830
[  303.838865][T13599]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.838909][T13599]  ? import_iovec+0x74/0xa0
[  303.838942][T13599]  ___sys_sendmsg+0x21f/0x2a0
[  303.838973][T13599]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.839043][T13599]  ? __fget_files+0x2a/0x420
[  303.839067][T13599]  ? __fget_files+0x3a0/0x420
[  303.839106][T13599]  __x64_sys_sendmsg+0x19b/0x260
[  303.839137][T13599]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.839183][T13599]  ? do_syscall_64+0xba/0x210
[  303.839212][T13599]  do_syscall_64+0xf6/0x210
[  303.839239][T13599]  ? clear_bhb_loop+0x60/0xb0
[  303.839264][T13599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.839283][T13599] RIP: 0033:0x7f542918e969
[  303.839300][T13599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.839318][T13599] RSP: 002b:00007f542a0c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.839338][T13599] RAX: ffffffffffffffda RBX: 00007f54293b5fa0 RCX: 00007f542918e969
[  303.839352][T13599] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003
[  303.839365][T13599] RBP: 00007f542a0c3090 R08: 0000000000000000 R09: 0000000000000000
[  303.839376][T13599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.839387][T13599] R13: 0000000000000000 R14: 00007f54293b5fa0 R15: 00007fff2776d3f8
[  303.839431][T13599]  </TASK>
[  304.236041][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2603'.
[  304.271623][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2605'.
[  304.534275][T13620] netlink: 'syz.1.2608': attribute type 10 has an invalid length.
[  304.811408][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'.
[  304.963546][T13645] xt_hashlimit: max too large, truncated to 1048576
[  305.326236][T13662] openvswitch: netlink: Actions may not be safe on all matching packets
[  305.379657][T13662] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  305.423655][T13666] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  305.451627][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2625'.
[  305.498835][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2625'.
[  305.836256][T13690] netlink: 'syz.3.2631': attribute type 1 has an invalid length.
[  305.885638][T13690] 8021q: adding VLAN 0 to HW filter on device bond2
[  306.047879][T13693] bond2: (slave geneve3): making interface the new active one
[  306.092998][T13693] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  306.140425][T13690] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  306.173998][T13690] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  306.654534][T13723] sctp: [Deprecated]: syz.1.2644 (pid 13723) Use of struct sctp_assoc_value in delayed_ack socket option.
[  306.654534][T13723] Use struct sctp_sack_info instead
[  306.948523][T13743] sit0: entered promiscuous mode
[  307.000457][T13743] __nla_validate_parse: 3 callbacks suppressed
[  307.000477][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'.
[  307.065733][ T5139] Bluetooth: hci2: command 0x0406 tx timeout
[  307.113981][T13747] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2649'.
[  307.383618][T13760] netlink: 'syz.2.2654': attribute type 10 has an invalid length.
[  307.451056][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'.
[  307.578034][T13767] FAULT_INJECTION: forcing a failure.
[  307.578034][T13767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.626077][T13767] CPU: 1 UID: 0 PID: 13767 Comm: syz.2.2657 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  307.626108][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  307.626121][T13767] Call Trace:
[  307.626129][T13767]  <TASK>
[  307.626137][T13767]  dump_stack_lvl+0x189/0x250
[  307.626171][T13767]  ? __lock_acquire+0xaac/0xd20
[  307.626203][T13767]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.626233][T13767]  ? __pfx__printk+0x10/0x10
[  307.626254][T13767]  ? __might_fault+0xb0/0x130
[  307.626293][T13767]  should_fail_ex+0x414/0x560
[  307.626344][T13767]  _copy_from_user+0x2d/0xb0
[  307.626375][T13767]  ___sys_recvmsg+0x12e/0x510
[  307.626412][T13767]  ? __pfx____sys_recvmsg+0x10/0x10
[  307.626469][T13767]  ? __fget_files+0x3a0/0x420
[  307.626509][T13767]  do_recvmmsg+0x307/0x760
[  307.626550][T13767]  ? __pfx_do_recvmmsg+0x10/0x10
[  307.626599][T13767]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  307.626647][T13767]  __x64_sys_recvmmsg+0x190/0x240
[  307.626677][T13767]  ? rcu_is_watching+0x15/0xb0
[  307.626697][T13767]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  307.626732][T13767]  ? do_syscall_64+0xba/0x210
[  307.626764][T13767]  do_syscall_64+0xf6/0x210
[  307.626792][T13767]  ? clear_bhb_loop+0x60/0xb0
[  307.626818][T13767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.626849][T13767] RIP: 0033:0x7f3d3c38e969
[  307.626868][T13767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.626885][T13767] RSP: 002b:00007f3d3d2c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  307.626906][T13767] RAX: ffffffffffffffda RBX: 00007f3d3c5b5fa0 RCX: 00007f3d3c38e969
[  307.626921][T13767] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000003
[  307.626933][T13767] RBP: 00007f3d3d2c4090 R08: 0000000000000000 R09: 0000000000000000
[  307.626945][T13767] R10: 000000000000832b R11: 0000000000000246 R12: 0000000000000001
[  307.626957][T13767] R13: 0000000000000000 R14: 00007f3d3c5b5fa0 R15: 00007ffce241fd48
[  307.626988][T13767]  </TASK>
[  308.044708][T13781] netlink: 'syz.1.2662': attribute type 21 has an invalid length.
[  308.079890][T13781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2662'.
[  308.136571][T13784] xt_CT: You must specify a L4 protocol and not use inversions on it
[  308.267647][T13792] netlink: 'syz.2.2668': attribute type 10 has an invalid length.
[  308.325802][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2669'.
[  308.416543][T13798] FAULT_INJECTION: forcing a failure.
[  308.416543][T13798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.473781][T13798] CPU: 0 UID: 0 PID: 13798 Comm: syz.4.2671 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  308.473812][T13798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  308.473825][T13798] Call Trace:
[  308.473833][T13798]  <TASK>
[  308.473842][T13798]  dump_stack_lvl+0x189/0x250
[  308.473876][T13798]  ? __lock_acquire+0xaac/0xd20
[  308.473909][T13798]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.473939][T13798]  ? __pfx__printk+0x10/0x10
[  308.473960][T13798]  ? __might_fault+0xb0/0x130
[  308.474000][T13798]  should_fail_ex+0x414/0x560
[  308.474028][T13798]  _copy_from_user+0x2d/0xb0
[  308.474060][T13798]  ___sys_recvmsg+0x12e/0x510
[  308.474098][T13798]  ? __pfx____sys_recvmsg+0x10/0x10
[  308.474157][T13798]  ? __fget_files+0x3a0/0x420
[  308.474197][T13798]  do_recvmmsg+0x307/0x760
[  308.474239][T13798]  ? __pfx_do_recvmmsg+0x10/0x10
[  308.474305][T13798]  __x64_sys_recvmmsg+0x190/0x240
[  308.474336][T13798]  ? rcu_is_watching+0x15/0xb0
[  308.474356][T13798]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  308.474392][T13798]  ? do_syscall_64+0xba/0x210
[  308.474423][T13798]  do_syscall_64+0xf6/0x210
[  308.474451][T13798]  ? clear_bhb_loop+0x60/0xb0
[  308.474477][T13798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.474497][T13798] RIP: 0033:0x7f818b98e969
[  308.474515][T13798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.474533][T13798] RSP: 002b:00007f818c84d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  308.474555][T13798] RAX: ffffffffffffffda RBX: 00007f818bbb5fa0 RCX: 00007f818b98e969
[  308.474576][T13798] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000003
[  308.474589][T13798] RBP: 00007f818c84d090 R08: 0000000000000000 R09: 0000000000000000
[  308.474602][T13798] R10: 000000000000832b R11: 0000000000000246 R12: 0000000000000001
[  308.474614][T13798] R13: 0000000000000000 R14: 00007f818bbb5fa0 R15: 00007ffd9c1313f8
[  308.474647][T13798]  </TASK>
[  309.083428][T13817] nbd: must specify at least one socket
[  309.261554][T13830] netlink: 'syz.3.2682': attribute type 10 has an invalid length.
[  309.403401][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2686'.
[  309.829858][T13855] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2693'.
[  309.850923][T13859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2696'.
[  309.859987][T13855] netlink: 'syz.4.2693': attribute type 9 has an invalid length.
[  309.862538][T13855] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2693'.
[  309.945056][T13862] netlink: 'syz.0.2697': attribute type 10 has an invalid length.
[  309.967219][T13865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2698'.
[  310.342978][T13884] x_tables: duplicate underflow at hook 2
[  310.847988][T13907] netlink: 'syz.3.2712': attribute type 10 has an invalid length.
[  311.379970][T13940] 8021q: VLANs not supported on ipvlan0
[  311.525125][T13948] netlink: 'syz.2.2728': attribute type 10 has an invalid length.
[  311.552087][T13949] netlink: 'syz.0.2727': attribute type 3 has an invalid length.
[  311.776339][T13958] netlink: 'syz.2.2731': attribute type 1 has an invalid length.
[  311.961249][T13976] nbd: must specify at least one socket
[  311.990063][T13958] 8021q: adding VLAN 0 to HW filter on device bond1
[  312.089119][T13967] vlan2: entered promiscuous mode
[  312.114507][T13967] bond1: entered promiscuous mode
[  312.124745][T13967] vlan2: entered allmulticast mode
[  312.132503][T13967] bond1: entered allmulticast mode
[  312.610268][T14007] netlink: 'syz.1.2742': attribute type 10 has an invalid length.
[  312.682264][T14012] __nla_validate_parse: 6 callbacks suppressed
[  312.682286][T14012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2744'.
[  312.812737][T14019] nbd: must specify at least one socket
[  312.909136][T14022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2749'.
[  313.139743][T14038] netlink: 'syz.0.2754': attribute type 11 has an invalid length.
[  313.171551][T14038] netlink: 'syz.0.2754': attribute type 11 has an invalid length.
[  313.212956][T14038] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2754'.
[  313.238040][T14039] netlink: 'syz.0.2754': attribute type 11 has an invalid length.
[  313.254455][T14039] netlink: 'syz.0.2754': attribute type 11 has an invalid length.
[  313.264474][T14039] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2754'.
[  313.394498][T14050] netlink: 'syz.2.2757': attribute type 10 has an invalid length.
[  313.657479][T14062] nbd: must specify at least one socket
[  313.715791][T14064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2763'.
[  314.131784][T14085] netlink: 'syz.0.2770': attribute type 10 has an invalid length.
[  314.282842][T14088] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2772'.
[  314.294427][T14094] nbd: nbd3 already in use
[  314.325666][T14097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  314.472496][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.483555][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.728903][T14117] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2781'.
[  314.738520][T14117] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2781'.
[  314.948018][T14126] netlink: 'syz.3.2785': attribute type 10 has an invalid length.
[  315.092726][T14129] nbd: must specify a size in bytes for the device
[  315.174137][T14134] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  315.316933][T14142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.792197][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'.
[  315.994980][T14179] openvswitch: netlink: Message has -1 unknown bytes.
[  316.026476][T14179] sctp: [Deprecated]: syz.3.2802 (pid 14179) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.026476][T14179] Use struct sctp_sack_info instead
[  316.071563][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'.
[  317.403134][T14249] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  317.404528][T14241] IPVS: stopping master sync thread 14249 ...
[  317.638201][T14255] openvswitch: netlink: Message has -1 unknown bytes.
[  317.665132][T14255] sctp: [Deprecated]: syz.2.2823 (pid 14255) Use of struct sctp_assoc_value in delayed_ack socket option.
[  317.665132][T14255] Use struct sctp_sack_info instead
[  317.691263][T14257] __nla_validate_parse: 1 callbacks suppressed
[  317.691282][T14257] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2824'.
[  317.722063][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2823'.
[  317.754923][T14257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2824'.
[  317.781535][T14263] FAULT_INJECTION: forcing a failure.
[  317.781535][T14263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.818525][T14263] CPU: 1 UID: 0 PID: 14263 Comm: syz.3.2826 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  317.818554][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  317.818565][T14263] Call Trace:
[  317.818573][T14263]  <TASK>
[  317.818581][T14263]  dump_stack_lvl+0x189/0x250
[  317.818611][T14263]  ? __lock_acquire+0xaac/0xd20
[  317.818640][T14263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.818666][T14263]  ? __pfx__printk+0x10/0x10
[  317.818685][T14263]  ? __might_fault+0xb0/0x130
[  317.818720][T14263]  should_fail_ex+0x414/0x560
[  317.818746][T14263]  _copy_from_user+0x2d/0xb0
[  317.818774][T14263]  ___sys_sendmsg+0x158/0x2a0
[  317.818802][T14263]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.818862][T14263]  ? __fget_files+0x2a/0x420
[  317.818885][T14263]  ? __fget_files+0x3a0/0x420
[  317.818915][T14263]  __x64_sys_sendmsg+0x19b/0x260
[  317.818944][T14263]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  317.818986][T14263]  ? do_syscall_64+0xba/0x210
[  317.819014][T14263]  do_syscall_64+0xf6/0x210
[  317.819039][T14263]  ? clear_bhb_loop+0x60/0xb0
[  317.819061][T14263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.819079][T14263] RIP: 0033:0x7f319c78e969
[  317.819095][T14263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.819111][T14263] RSP: 002b:00007f319d532038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.819131][T14263] RAX: ffffffffffffffda RBX: 00007f319c9b5fa0 RCX: 00007f319c78e969
[  317.819144][T14263] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  317.819156][T14263] RBP: 00007f319d532090 R08: 0000000000000000 R09: 0000000000000000
[  317.819167][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.819177][T14263] R13: 0000000000000000 R14: 00007f319c9b5fa0 R15: 00007ffe2dab0228
[  317.819206][T14263]  </TASK>
[  317.822902][T14266] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2823'.
[  318.105420][ T5839] Bluetooth: hci4: command 0x0405 tx timeout
[  318.133626][T14280] rdma_op ffff88807bf1e1f0 conn xmit_rdma 0000000000000000
[  318.176328][T14283] rdma_op ffff88805c8421f0 conn xmit_rdma 0000000000000000
[  318.474626][T14295] netlink: 'syz.0.2834': attribute type 1 has an invalid length.
[  318.602671][T14311] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  318.876894][T14326] netlink: 'syz.4.2840': attribute type 1 has an invalid length.
[  318.911160][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'.
[  318.998238][T14326] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2840'.
[  319.041154][T14326] nbd: must specify at least one socket
[  319.628089][T14364] netlink: 'syz.3.2851': attribute type 3 has an invalid length.
[  319.983276][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2854'.
[  320.023813][T14386] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  322.484783][T14440] openvswitch: netlink: Message has -1 unknown bytes.
[  322.519286][T14440] sctp: [Deprecated]: syz.2.2873 (pid 14440) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.519286][T14440] Use struct sctp_sack_info instead
[  322.559716][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'.
[  322.686168][T14442] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2873'.
[  323.639397][T14444] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌ'
[  323.661244][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.4.2874 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  323.661275][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  323.661288][T14444] Call Trace:
[  323.661297][T14444]  <TASK>
[  323.661307][T14444]  dump_stack_lvl+0x189/0x250
[  323.661343][T14444]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.661371][T14444]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.661401][T14444]  ? __pfx__printk+0x10/0x10
[  323.661427][T14444]  ? kernfs_path_from_node+0x2b/0x260
[  323.661459][T14444]  ? kernfs_path_from_node+0x216/0x260
[  323.661493][T14444]  sysfs_warn_dup+0x8e/0xa0
[  323.661521][T14444]  sysfs_do_create_link_sd+0xc0/0x110
[  323.661552][T14444]  device_add_class_symlinks+0x1cf/0x240
[  323.661584][T14444]  device_add+0x475/0xb50
[  323.661615][T14444]  wiphy_register+0x199a/0x26b0
[  323.661666][T14444]  ? __pfx_wiphy_register+0x10/0x10
[  323.661693][T14444]  ? minstrel_ht_alloc+0x893/0x990
[  323.661736][T14444]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  323.661775][T14444]  ieee80211_register_hw+0x33e1/0x4120
[  323.661818][T14444]  ? ieee80211_register_hw+0x14e1/0x4120
[  323.661851][T14444]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  323.661879][T14444]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  323.661913][T14444]  ? __hrtimer_setup+0x187/0x210
[  323.661942][T14444]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  323.661969][T14444]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  323.662039][T14444]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  323.662070][T14444]  ? trace_kmalloc+0x1f/0xd0
[  323.662093][T14444]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  323.662119][T14444]  ? kstrndup+0xbf/0x160
[  323.662158][T14444]  hwsim_new_radio_nl+0xea4/0x1b10
[  323.662183][T14444]  ? __pfx___nla_validate_parse+0x10/0x10
[  323.662237][T14444]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  323.662283][T14444]  ? __nla_parse+0x40/0x60
[  323.662311][T14444]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  323.662351][T14444]  genl_family_rcv_msg_doit+0x212/0x300
[  323.662389][T14444]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  323.662434][T14444]  ? bpf_lsm_capable+0x9/0x20
[  323.662460][T14444]  ? security_capable+0x7e/0x2e0
[  323.662490][T14444]  genl_rcv_msg+0x60e/0x790
[  323.662526][T14444]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.662571][T14444]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  323.662637][T14444]  netlink_rcv_skb+0x219/0x490
[  323.662664][T14444]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.662696][T14444]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  323.662751][T14444]  ? down_read+0x1ad/0x2e0
[  323.662783][T14444]  genl_rcv+0x28/0x40
[  323.662810][T14444]  netlink_unicast+0x75b/0x8d0
[  323.662845][T14444]  netlink_sendmsg+0x805/0xb30
[  323.662882][T14444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.662959][T14444]  ? aa_sock_msg_perm+0x94/0x160
[  323.662997][T14444]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  323.663029][T14444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.663076][T14444]  __sock_sendmsg+0x21c/0x270
[  323.663104][T14444]  ____sys_sendmsg+0x505/0x830
[  323.663142][T14444]  ? __pfx_____sys_sendmsg+0x10/0x10
[  323.663184][T14444]  ? import_iovec+0x74/0xa0
[  323.663220][T14444]  ___sys_sendmsg+0x21f/0x2a0
[  323.663253][T14444]  ? __pfx____sys_sendmsg+0x10/0x10
[  323.663328][T14444]  ? __fget_files+0x2a/0x420
[  323.663356][T14444]  ? __fget_files+0x3a0/0x420
[  323.663398][T14444]  __x64_sys_sendmsg+0x19b/0x260
[  323.663431][T14444]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  323.663480][T14444]  ? do_syscall_64+0xba/0x210
[  323.663513][T14444]  do_syscall_64+0xf6/0x210
[  323.663542][T14444]  ? clear_bhb_loop+0x60/0xb0
[  323.663568][T14444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.663588][T14444] RIP: 0033:0x7f818b98e969
[  323.663608][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.663626][T14444] RSP: 002b:00007f818c84d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.663647][T14444] RAX: ffffffffffffffda RBX: 00007f818bbb5fa0 RCX: 00007f818b98e969
[  323.663663][T14444] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  323.663676][T14444] RBP: 00007f818ba10ab1 R08: 0000000000000000 R09: 0000000000000000
[  323.663688][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.663701][T14444] R13: 0000000000000000 R14: 00007f818bbb5fa0 R15: 00007ffd9c1313f8
[  323.663743][T14444]  </TASK>
[  324.309308][T14454] netlink: 'syz.2.2876': attribute type 3 has an invalid length.
[  324.360844][T14459] FAULT_INJECTION: forcing a failure.
[  324.360844][T14459] name failslab, interval 1, probability 0, space 0, times 0
[  324.438113][T14459] CPU: 1 UID: 0 PID: 14459 Comm: syz.3.2877 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  324.438150][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  324.438162][T14459] Call Trace:
[  324.438170][T14459]  <TASK>
[  324.438179][T14459]  dump_stack_lvl+0x189/0x250
[  324.438215][T14459]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.438245][T14459]  ? __pfx__printk+0x10/0x10
[  324.438268][T14459]  ? __pfx___might_resched+0x10/0x10
[  324.438288][T14459]  ? fs_reclaim_acquire+0x7d/0x100
[  324.438323][T14459]  should_fail_ex+0x414/0x560
[  324.438351][T14459]  should_failslab+0xa8/0x100
[  324.438379][T14459]  __kmalloc_noprof+0xcb/0x4f0
[  324.438403][T14459]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  324.438442][T14459]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  324.438481][T14459]  genl_family_rcv_msg_doit+0xb8/0x300
[  324.438520][T14459]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  324.438555][T14459]  ? __pfx_genl_get_cmd+0x10/0x10
[  324.438581][T14459]  ? __pfx_nbd_genl_connect+0x10/0x10
[  324.438620][T14459]  ? stack_depot_save_flags+0x40/0x910
[  324.438649][T14459]  genl_rcv_msg+0x60e/0x790
[  324.438686][T14459]  ? __pfx_genl_rcv_msg+0x10/0x10
[  324.438715][T14459]  ? __pfx_nbd_genl_connect+0x10/0x10
[  324.438763][T14459]  netlink_rcv_skb+0x219/0x490
[  324.438788][T14459]  ? __pfx_genl_rcv_msg+0x10/0x10
[  324.438819][T14459]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  324.438870][T14459]  ? down_read+0x1ad/0x2e0
[  324.438919][T14459]  genl_rcv+0x28/0x40
[  324.438946][T14459]  netlink_unicast+0x75b/0x8d0
[  324.438979][T14459]  netlink_sendmsg+0x805/0xb30
[  324.439015][T14459]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.439044][T14459]  ? aa_sock_msg_perm+0x94/0x160
[  324.439069][T14459]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  324.439093][T14459]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.439119][T14459]  __sock_sendmsg+0x21c/0x270
[  324.439151][T14459]  ____sys_sendmsg+0x505/0x830
[  324.439188][T14459]  ? __pfx_____sys_sendmsg+0x10/0x10
[  324.439228][T14459]  ? import_iovec+0x74/0xa0
[  324.439261][T14459]  ___sys_sendmsg+0x21f/0x2a0
[  324.439294][T14459]  ? __pfx____sys_sendmsg+0x10/0x10
[  324.439367][T14459]  ? __fget_files+0x2a/0x420
[  324.439393][T14459]  ? __fget_files+0x3a0/0x420
[  324.439433][T14459]  __x64_sys_sendmsg+0x19b/0x260
[  324.439466][T14459]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  324.439517][T14459]  ? do_syscall_64+0xba/0x210
[  324.439548][T14459]  do_syscall_64+0xf6/0x210
[  324.439576][T14459]  ? clear_bhb_loop+0x60/0xb0
[  324.439602][T14459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.439621][T14459] RIP: 0033:0x7f319c78e969
[  324.439639][T14459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.439657][T14459] RSP: 002b:00007f319d532038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.439678][T14459] RAX: ffffffffffffffda RBX: 00007f319c9b5fa0 RCX: 00007f319c78e969
[  324.439693][T14459] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  324.439706][T14459] RBP: 00007f319d532090 R08: 0000000000000000 R09: 0000000000000000
[  324.439718][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.439729][T14459] R13: 0000000000000000 R14: 00007f319c9b5fa0 R15: 00007ffe2dab0228
[  324.439762][T14459]  </TASK>
[  324.888631][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2881'.
[  324.938705][T14468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.037295][T14476] openvswitch: netlink: Message has -1 unknown bytes.
[  325.052997][T14476] sctp: [Deprecated]: syz.2.2886 (pid 14476) Use of struct sctp_assoc_value in delayed_ack socket option.
[  325.052997][T14476] Use struct sctp_sack_info instead
[  325.078221][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'.
[  325.140417][T14483] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2886'.
[  325.151180][T14482] netlink: 'syz.3.2885': attribute type 178 has an invalid length.
[  325.298024][T14486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2888'.
[  325.660749][T14509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'.
[  325.935064][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'.
[  325.960350][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2901'.
[  327.303073][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2906'.
[  327.437479][T14539] netlink: 'syz.3.2908': attribute type 10 has an invalid length.
[  327.725000][T14552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.803907][T14558] netlink: 'syz.2.2911': attribute type 7 has an invalid length.
[  327.822230][T14553] openvswitch: netlink: Message has -1 unknown bytes.
[  327.848131][T14553] sctp: [Deprecated]: syz.3.2912 (pid 14553) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.848131][T14553] Use struct sctp_sack_info instead
[  327.920312][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2912'.
[  327.981228][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'.
[  328.426086][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  328.482009][T14587] netlink: 'syz.4.2922': attribute type 10 has an invalid length.
[  329.018901][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  329.029164][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  329.038205][T14609] netlink: 'syz.2.2929': attribute type 3 has an invalid length.
[  329.049494][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  329.067337][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  329.080086][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  329.215841][T14614] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  329.254970][T14605] lo speed is unknown, defaulting to 1000
[  329.465375][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  329.484618][T14625] netlink: 'syz.2.2934': attribute type 10 has an invalid length.
[  330.220015][T14654] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  330.246633][T14657] netlink: 'syz.3.2943': attribute type 3 has an invalid length.
[  330.505652][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  330.661260][T14666] __nla_validate_parse: 4 callbacks suppressed
[  330.661280][T14666] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2947'.
[  330.707939][T14666] gretap0: entered promiscuous mode
[  330.725991][T14672] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2947'.
[  330.742666][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'.
[  330.780908][T14672] 0ªî{X¹¦: renamed from gretap0
[  330.796608][T14672] 0ªî{X¹¦: left promiscuous mode
[  330.801767][T14672] 0ªî{X¹¦: entered allmulticast mode
[  330.825108][T14672] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  331.090385][T14605] chnl_net:caif_netlink_parms(): no params data found
[  331.145718][ T5139] Bluetooth: hci3: command tx timeout
[  331.367923][T14605] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.383266][T14605] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.397000][T14605] bridge_slave_0: entered allmulticast mode
[  331.409302][T14605] bridge_slave_0: entered promiscuous mode
[  331.419348][T14605] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.427040][T14605] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.434386][T14605] bridge_slave_1: entered allmulticast mode
[  331.444598][T14605] bridge_slave_1: entered promiscuous mode
[  331.542009][T14605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.545536][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  331.565057][T14605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.634429][T14605] team0: Port device team_slave_0 added
[  331.639298][T14716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2965'.
[  331.650273][T14717] netlink: 'syz.0.2964': attribute type 10 has an invalid length.
[  331.662041][T14605] team0: Port device team_slave_1 added
[  331.753967][T14605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.763989][T14605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.802388][T14605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.832538][T14605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.848742][T14605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.875593][T14605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.037908][T14605] hsr_slave_0: entered promiscuous mode
[  332.060520][T14605] hsr_slave_1: entered promiscuous mode
[  332.095531][T14605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  332.122641][T14605] Cannot create hsr debugfs directory
[  332.266793][ T5139] Bluetooth: hci0: command tx timeout
[  332.585514][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  332.607068][T14605] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.630523][T14753] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2975'.
[  332.799083][T14605] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.891273][T14605] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.922538][T14761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2979'.
[  333.026658][T14605] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.225585][ T5139] Bluetooth: hci3: command tx timeout
[  333.237545][T14605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  333.254944][T14605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  333.272265][T14605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  333.286446][T14605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  333.463408][T14605] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.508881][T14605] 8021q: adding VLAN 0 to HW filter on device team0
[  333.530497][T13338] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.537728][T13338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.588210][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.595483][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.625372][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  333.911479][T14792] openvswitch: netlink: Message has -1 unknown bytes.
[  333.989243][T14792] sctp: [Deprecated]: syz.0.2991 (pid 14792) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.989243][T14792] Use struct sctp_sack_info instead
[  334.064078][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'.
[  334.108462][T14605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.152754][T14794] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2991'.
[  334.221985][T14605] veth0_vlan: entered promiscuous mode
[  334.281536][T14605] veth1_vlan: entered promiscuous mode
[  334.358369][T14605] veth0_macvtap: entered promiscuous mode
[  334.385045][T14605] veth1_macvtap: entered promiscuous mode
[  334.432252][T14605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.474755][T14605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.513801][T14605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.523726][T14605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.540733][T14605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.555258][T14605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.665628][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  334.897207][ T4144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.915776][ T4144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.010076][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.032126][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.036468][T14826] FAULT_INJECTION: forcing a failure.
[  335.036468][T14826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  335.064123][T14826] CPU: 1 UID: 0 PID: 14826 Comm: syz.0.3005 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  335.064154][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  335.064167][T14826] Call Trace:
[  335.064175][T14826]  <TASK>
[  335.064184][T14826]  dump_stack_lvl+0x189/0x250
[  335.064215][T14826]  ? __lock_acquire+0xaac/0xd20
[  335.064247][T14826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.064276][T14826]  ? __pfx__printk+0x10/0x10
[  335.064296][T14826]  ? __might_fault+0xb0/0x130
[  335.064337][T14826]  should_fail_ex+0x414/0x560
[  335.064365][T14826]  _copy_from_iter+0x1db/0x15a0
[  335.064421][T14826]  ? policy_nodemask+0x27c/0x720
[  335.064447][T14826]  ? __pfx__copy_from_iter+0x10/0x10
[  335.064476][T14826]  ? set_page_refcounted+0xa0/0x1e0
[  335.064504][T14826]  ? page_copy_sane+0x4e/0x280
[  335.064532][T14826]  copy_page_from_iter+0x7b/0x100
[  335.064563][T14826]  tun_get_user+0x1b13/0x3c20
[  335.064603][T14826]  ? tun_get_user+0x687/0x3c20
[  335.064648][T14826]  ? __pfx_tun_get_user+0x10/0x10
[  335.064676][T14826]  ? aa_file_perm+0x11f/0xed0
[  335.064701][T14826]  ? aa_file_perm+0x3e7/0xed0
[  335.064741][T14826]  ? ref_tracker_alloc+0x318/0x460
[  335.064767][T14826]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  335.064798][T14826]  ? tun_get+0x1c/0x2f0
[  335.064834][T14826]  ? tun_get+0x1c/0x2f0
[  335.064861][T14826]  ? tun_get+0x1c/0x2f0
[  335.064896][T14826]  tun_chr_write_iter+0x113/0x200
[  335.064937][T14826]  vfs_write+0x548/0xa90
[  335.064967][T14826]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  335.064997][T14826]  ? __pfx_vfs_write+0x10/0x10
[  335.065032][T14826]  ? __fget_files+0x2a/0x420
[  335.065068][T14826]  ksys_write+0x145/0x250
[  335.065090][T14826]  ? rcu_is_watching+0x15/0xb0
[  335.065111][T14826]  ? __pfx_ksys_write+0x10/0x10
[  335.065139][T14826]  ? do_syscall_64+0xba/0x210
[  335.065171][T14826]  do_syscall_64+0xf6/0x210
[  335.065198][T14826]  ? clear_bhb_loop+0x60/0xb0
[  335.065223][T14826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.065243][T14826] RIP: 0033:0x7f542918d41f
[  335.065261][T14826] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  335.065277][T14826] RSP: 002b:00007f542a0c3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  335.065298][T14826] RAX: ffffffffffffffda RBX: 00007f54293b5fa0 RCX: 00007f542918d41f
[  335.065312][T14826] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8
[  335.065324][T14826] RBP: 00007f542a0c3090 R08: 0000000000000000 R09: 0000000000000000
[  335.065337][T14826] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001
[  335.065348][T14826] R13: 0000000000000000 R14: 00007f54293b5fa0 R15: 00007fff2776d3f8
[  335.065379][T14826]  </TASK>
[  335.353028][ T5839] Bluetooth: hci3: command tx timeout
[  335.402151][T14828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3006'.
[  335.518378][T14838] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3007'.
[  335.540081][T14838] sctp: [Deprecated]: syz.2.3007 (pid 14838) Use of int in max_burst socket option.
[  335.540081][T14838] Use struct sctp_assoc_value instead
[  335.705571][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  335.967911][T14847] openvswitch: netlink: Message has -1 unknown bytes.
[  335.989306][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  335.998878][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  336.008428][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  336.018919][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  336.018962][T14847] sctp: [Deprecated]: syz.2.3012 (pid 14847) Use of struct sctp_assoc_value in delayed_ack socket option.
[  336.018962][T14847] Use struct sctp_sack_info instead
[  336.057343][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  336.156155][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'.
[  336.177497][T14857] openvswitch: netlink: Duplicate or invalid key (type 0).
[  336.179353][T14848] lo speed is unknown, defaulting to 1000
[  336.184742][T14857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.283385][T14847] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3012'.
[  336.357387][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.389515][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.745409][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  336.861928][T14881] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20003
[  337.002628][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'.
[  337.099607][T13338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.200908][T14848] chnl_net:caif_netlink_parms(): no params data found
[  337.282146][T13338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.396831][ T5839] Bluetooth: hci3: command tx timeout
[  337.508411][T14908] bond0: entered promiscuous mode
[  337.513589][T14908] veth0_to_bond: entered promiscuous mode
[  337.522302][T14908] batadv0: entered promiscuous mode
[  337.529266][T14908] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  337.538075][T14908] Cannot create hsr debugfs directory
[  337.547014][T14908] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  337.558447][T14908] 8021q: adding VLAN 0 to HW filter on device hsr1
[  337.567938][T14908] bond0: left promiscuous mode
[  337.572749][T14908] veth0_to_bond: left promiscuous mode
[  337.579834][T14920] openvswitch: netlink: Message has -1 unknown bytes.
[  337.589487][T14908] batadv0: left promiscuous mode
[  337.608262][T14920] sctp: [Deprecated]: syz.1.3032 (pid 14920) Use of struct sctp_assoc_value in delayed_ack socket option.
[  337.608262][T14920] Use struct sctp_sack_info instead
[  337.627762][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'.
[  337.643279][T13338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.710662][T14848] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.732674][T14918] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3032'.
[  337.751807][T14848] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.764098][T14848] bridge_slave_0: entered allmulticast mode
[  337.783343][T14848] bridge_slave_0: entered promiscuous mode
[  337.789322][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  337.814021][T13338] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.834581][T14848] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.842179][T14848] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.852013][T14848] bridge_slave_1: entered allmulticast mode
[  337.863068][T14848] bridge_slave_1: entered promiscuous mode
[  337.964405][T14848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.005052][T14848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.107878][ T5839] Bluetooth: hci5: command tx timeout
[  338.171734][T14848] team0: Port device team_slave_0 added
[  338.213377][T14848] team0: Port device team_slave_1 added
[  338.373663][T14848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.395393][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.440026][T14848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.474118][T14848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.489145][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.528489][T14848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.547913][T13338] bridge_slave_1: left allmulticast mode
[  338.553884][T13338] bridge_slave_1: left promiscuous mode
[  338.565636][T13338] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.612051][T13338] bridge_slave_0: left allmulticast mode
[  338.623417][T13338] bridge_slave_0: left promiscuous mode
[  338.631448][T13338] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.654421][T14958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.674358][T13338] tipc: Resetting bearer <eth:xfrm0>
[  338.825491][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  338.963389][T13338] tipc: Disabling bearer <eth:xfrm0>
[  339.463533][T13338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.477442][T13338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.490057][T13338] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  339.499599][T13338] bond0 (unregistering): Released all slaves
[  339.518247][T13338] bond1 (unregistering): Released all slaves
[  339.617022][T13338] bond2 (unregistering): (slave vlan2): Releasing active interface
[  339.627196][T13338] veth1: left promiscuous mode
[  339.633828][T13338] bond2 (unregistering): Released all slaves
[  339.651839][T13338] bond3 (unregistering): (slave bond4): Releasing backup interface
[  339.660988][T13338] bond3 (unregistering): Released all slaves
[  339.756221][T13338] bond4 (unregistering): Released all slaves
[  339.869770][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  340.023608][T13338] tipc: Left network mode
[  340.034296][T14971] nbd: nbd3 already in use
[  340.083662][T14848] hsr_slave_0: entered promiscuous mode
[  340.097203][T14848] hsr_slave_1: entered promiscuous mode
[  340.116790][T14848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  340.124394][T14848] Cannot create hsr debugfs directory
[  340.185558][ T5839] Bluetooth: hci5: command tx timeout
[  340.488867][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3059'.
[  340.567938][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3060'.
[  340.580042][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3060'.
[  340.650083][T13338] ------------[ cut here ]------------
[  340.656198][T13338] Have pending ack frames!
[  340.688492][T13338] WARNING: CPU: 0 PID: 13338 at net/mac80211/main.c:1715 ieee80211_free_ack_frame+0x4d/0x60
[  340.698960][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3062'.
[  340.700869][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3062'.
[  340.709253][T13338] Modules linked in:
[  340.723148][T13338] CPU: 0 UID: 0 PID: 13338 Comm: kworker/u8:9 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  340.736132][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  340.746828][T13338] Workqueue: netns cleanup_net
[  340.751658][T13338] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60
[  340.757938][T13338] Code: 00 00 e8 66 ed 73 fe 31 c0 5b c3 cc cc cc cc cc e8 88 de fa f6 c6 05 98 2c a4 04 01 90 48 c7 c7 20 ff 8b 8c e8 04 3b bf f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90
[  340.778172][T13338] RSP: 0018:ffffc9000490f770 EFLAGS: 00010246
[  340.784292][T13338] RAX: 5538a859a56d4500 RBX: ffff888027fe33c0 RCX: ffff88802f469e00
[  340.792545][T13338] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  340.800724][T13338] RBP: ffffc9000490f878 R08: 0000000000000003 R09: 0000000000000004
[  340.808884][T13338] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: ffffc9000490f7e0
[  340.816927][T13338] R13: ffff888079268870 R14: ffff888027f5afa8 R15: 0000000000000001
[  340.825749][T13338] FS:  0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000
[  340.835605][T13338] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  340.842234][T13338] CR2: 000000110c26ec5b CR3: 000000005944e000 CR4: 00000000003526f0
[  340.850378][T13338] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  340.858454][T13338] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  340.866526][T13338] Call Trace:
[  340.869848][T13338]  <TASK>
[  340.872812][T13338]  idr_for_each+0x1b2/0x290
[  340.877486][T13338]  ? __pfx_ieee80211_free_ack_frame+0x10/0x10
[  340.883599][T13338]  ? __pfx_idr_for_each+0x10/0x10
[  340.888716][T13338]  ? kobject_put+0x270/0x480
[  340.893324][T13338]  ? kfree+0x193/0x440
[  340.897559][T13338]  ieee80211_free_hw+0xc6/0x480
[  340.902470][T13338]  mac80211_hwsim_del_radio+0x2de/0x460
[  340.908142][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  340.915244][T13338]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  340.922081][T13338]  hwsim_exit_net+0x584/0x640
[  340.927537][T13338]  ? __pfx_hwsim_exit_net+0x10/0x10
[  340.932803][T13338]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  340.938709][T13338]  cleanup_net+0x717/0xbd0
[  340.943177][T13338]  ? __pfx_cleanup_net+0x10/0x10
[  340.948272][T13338]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.953519][T13338]  ? process_scheduled_works+0x9ec/0x17a0
[  340.959341][T13338]  ? process_scheduled_works+0x9ec/0x17a0
[  340.965101][T13338]  process_scheduled_works+0xadb/0x17a0
[  340.970796][T13338]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.976910][T13338]  worker_thread+0x8a0/0xda0
[  340.981549][T13338]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  340.988157][T13338]  ? __kthread_parkme+0x7b/0x200
[  340.993164][T13338]  kthread+0x70e/0x8a0
[  340.997439][T13338]  ? __pfx_worker_thread+0x10/0x10
[  341.002585][T13338]  ? __pfx_kthread+0x10/0x10
[  341.007291][T13338]  ? __pfx_kthread+0x10/0x10
[  341.011929][T13338]  ? _raw_spin_unlock_irq+0x23/0x50
[  341.017202][T13338]  ? lockdep_hardirqs_on+0x9c/0x150
[  341.022422][T13338]  ? __pfx_kthread+0x10/0x10
[  341.027632][T13338]  ret_from_fork+0x4b/0x80
[  341.032063][T13338]  ? __pfx_kthread+0x10/0x10
[  341.037360][T13338]  ret_from_fork_asm+0x1a/0x30
[  341.042199][T13338]  </TASK>
[  341.045219][T13338] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  341.052505][T13338] CPU: 0 UID: 0 PID: 13338 Comm: kworker/u8:9 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) 
[  341.064746][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  341.074810][T13338] Workqueue: netns cleanup_net
[  341.079589][T13338] Call Trace:
[  341.082874][T13338]  <TASK>
[  341.085806][T13338]  dump_stack_lvl+0x99/0x250
[  341.090425][T13338]  ? __asan_memcpy+0x40/0x70
[  341.095031][T13338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  341.100242][T13338]  ? __pfx__printk+0x10/0x10
[  341.104853][T13338]  panic+0x2db/0x790
[  341.108766][T13338]  ? __pfx_panic+0x10/0x10
[  341.113203][T13338]  ? ret_from_fork_asm+0x1a/0x30
[  341.118150][T13338]  __warn+0x31b/0x4b0
[  341.122146][T13338]  ? ieee80211_free_ack_frame+0x4d/0x60
[  341.127705][T13338]  ? ieee80211_free_ack_frame+0x4d/0x60
[  341.133258][T13338]  report_bug+0x2be/0x4f0
[  341.137603][T13338]  ? ieee80211_free_ack_frame+0x4d/0x60
[  341.143162][T13338]  ? ieee80211_free_ack_frame+0x4d/0x60
[  341.148721][T13338]  ? ieee80211_free_ack_frame+0x4f/0x60
[  341.154278][T13338]  handle_bug+0x84/0x160
[  341.158621][T13338]  exc_invalid_op+0x1a/0x50
[  341.163137][T13338]  asm_exc_invalid_op+0x1a/0x20
[  341.167993][T13338] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60
[  341.174149][T13338] Code: 00 00 e8 66 ed 73 fe 31 c0 5b c3 cc cc cc cc cc e8 88 de fa f6 c6 05 98 2c a4 04 01 90 48 c7 c7 20 ff 8b 8c e8 04 3b bf f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90
[  341.193758][T13338] RSP: 0018:ffffc9000490f770 EFLAGS: 00010246
[  341.199836][T13338] RAX: 5538a859a56d4500 RBX: ffff888027fe33c0 RCX: ffff88802f469e00
[  341.207813][T13338] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  341.215898][T13338] RBP: ffffc9000490f878 R08: 0000000000000003 R09: 0000000000000004
[  341.223873][T13338] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: ffffc9000490f7e0
[  341.231862][T13338] R13: ffff888079268870 R14: ffff888027f5afa8 R15: 0000000000000001
[  341.239862][T13338]  idr_for_each+0x1b2/0x290
[  341.244391][T13338]  ? __pfx_ieee80211_free_ack_frame+0x10/0x10
[  341.250474][T13338]  ? __pfx_idr_for_each+0x10/0x10
[  341.255515][T13338]  ? kobject_put+0x270/0x480
[  341.260115][T13338]  ? kfree+0x193/0x440
[  341.264201][T13338]  ieee80211_free_hw+0xc6/0x480
[  341.269061][T13338]  mac80211_hwsim_del_radio+0x2de/0x460
[  341.274619][T13338]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  341.280703][T13338]  hwsim_exit_net+0x584/0x640
[  341.285398][T13338]  ? __pfx_hwsim_exit_net+0x10/0x10
[  341.290615][T13338]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  341.296437][T13338]  cleanup_net+0x717/0xbd0
[  341.300879][T13338]  ? __pfx_cleanup_net+0x10/0x10
[  341.305831][T13338]  ? _raw_spin_unlock_irq+0x23/0x50
[  341.311037][T13338]  ? process_scheduled_works+0x9ec/0x17a0
[  341.316760][T13338]  ? process_scheduled_works+0x9ec/0x17a0
[  341.322482][T13338]  process_scheduled_works+0xadb/0x17a0
[  341.328059][T13338]  ? __pfx_process_scheduled_works+0x10/0x10
[  341.334075][T13338]  worker_thread+0x8a0/0xda0
[  341.338677][T13338]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  341.345022][T13338]  ? __kthread_parkme+0x7b/0x200
[  341.349977][T13338]  kthread+0x70e/0x8a0
[  341.354056][T13338]  ? __pfx_worker_thread+0x10/0x10
[  341.359171][T13338]  ? __pfx_kthread+0x10/0x10
[  341.363769][T13338]  ? __pfx_kthread+0x10/0x10
[  341.368367][T13338]  ? _raw_spin_unlock_irq+0x23/0x50
[  341.373573][T13338]  ? lockdep_hardirqs_on+0x9c/0x150
[  341.378784][T13338]  ? __pfx_kthread+0x10/0x10
[  341.383387][T13338]  ret_from_fork+0x4b/0x80
[  341.387819][T13338]  ? __pfx_kthread+0x10/0x10
[  341.392418][T13338]  ret_from_fork_asm+0x1a/0x30
[  341.397203][T13338]  </TASK>
[  341.400571][T13338] Kernel Offset: disabled
[  341.404917][T13338] Rebooting in 86400 seconds..