last executing test programs:

1m25.940704805s ago: executing program 2 (id=2400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009ef010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)

1m24.279974327s ago: executing program 2 (id=2410):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000002000000000000004"], 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)

1m23.904682182s ago: executing program 2 (id=2413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0xf5ffffff, 0x0, 0x24040800}, 0x0)

1m23.384775085s ago: executing program 2 (id=2418):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1m23.012811169s ago: executing program 2 (id=2421):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000c00000000000000000850000000c0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008800000b7030000ff7f0000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1m22.848107051s ago: executing program 2 (id=2423):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004041}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="01fc6c170672ef0f00", @ANYRES16=r0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4044001}, 0x4080)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd605f10600020960000000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000e0000200000000000000000000000800655800000000"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', <r3=>0x0, 0x0, 0x0, 0x3, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x4, 0x0, 0x4, 0x0, @rand_addr=0x64010101}}}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="18372bbd7000fdc3df254c0000000c2285a70009000083c08da1"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x11)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00022dbd7000fcdbdf250700000008000800e0000002080002000500000014000600fc020000000000000000000000000001080002000700000006000b002900000006000b0023000000070001002a25000005000100000000007e07c092e994634569ac1c297907651bb103e65759d841a1dee1e22b0e28171912b592230bf2d1ad7a549ea02acae8093fadd751368bb0842afd56bfda230cf9ca30bcc3727b92c26544d66e26d9057f039d6179dc4d4360ea52c8b1a8806387f9edd5f158497a06418e7447e04a9af4b23c7c0bc37141cab58af8"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xe}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
unshare(0x6a040000)

1m7.499024328s ago: executing program 32 (id=2423):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004041}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="01fc6c170672ef0f00", @ANYRES16=r0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4044001}, 0x4080)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd605f10600020960000000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000e0000200000000000000000000000800655800000000"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', <r3=>0x0, 0x0, 0x0, 0x3, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x4, 0x0, 0x4, 0x0, @rand_addr=0x64010101}}}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="18372bbd7000fdc3df254c0000000c2285a70009000083c08da1"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x11)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00022dbd7000fcdbdf250700000008000800e0000002080002000500000014000600fc020000000000000000000000000001080002000700000006000b002900000006000b0023000000070001002a25000005000100000000007e07c092e994634569ac1c297907651bb103e65759d841a1dee1e22b0e28171912b592230bf2d1ad7a549ea02acae8093fadd751368bb0842afd56bfda230cf9ca30bcc3727b92c26544d66e26d9057f039d6179dc4d4360ea52c8b1a8806387f9edd5f158497a06418e7447e04a9af4b23c7c0bc37141cab58af8"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xe}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
unshare(0x6a040000)

6.949553128s ago: executing program 1 (id=2790):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xbdce6000)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r1, 0x0, 0xee, 0xee, &(0x7f0000000240)="67ad0c0ec45125b05a7482e3371c1b07c888ce59fa866eaf7204fbc701eb1abdc5898fbe8efaac45269d628d74017305d1ff36933e3e7f2bf9dc289ecdffae651ab18120509650a1478b1f60b65c0ffd74d35712d37f468318f02b7f6f6210611934a2557495d7189ab8e88d217149f2ac1b67a7cd243b14a3084179b57ba315b86c286613d3b612da5aca3089c942729c47deb420b84576dd4579cca3b2777644ebc1da1066416b59b88fbde1fd7816feac146050c6c16b7869ea08fa91348613d6c17106ba58b22fbc551dc8116194e61cecef371d73caaf62dd1fb56aa0ac079034ad4ad200ddd17fceca86e3", &(0x7f0000000340)=""/238, 0xffff, 0x0, 0x1000, 0x9d, &(0x7f0000000440)="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", &(0x7f0000001440)="0ac3ae0820ab6289722c47e359dd4e99784a5a03696e9880c9c96f092d1ae27c038be9631af11b4550b2edf58cd568238c5d4ff97926625834e7c037098de40d2ebfcb10994ec0d5315026c5b494f2c1ffda28fe3d792b8e08881355cc7e43fb14c970e0dab454369c43e163c50fe2ab06fbd265ba84978881923dab62e396a889fabead28565a8ac7726a7ae32064593c9da64ff7a329abca4625695c"}, 0x50)

6.55960626s ago: executing program 4 (id=2797):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xd, 0xe18, 0x172d, 0x3, 0x7, 0x6, 0x3]}})
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x5}, 0x18)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe18b9c9f5977addf}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000380)="dae268183ec6dfeb52afd4da13734ff8e648b3b0163cdb47faab7b77e234bfd3743309a8ffbc44694e17f7ce19885ce453b666a10d8030e0c9c07556c5ac34af8acfc705", 0x44}, {&(0x7f0000000400)="927c000c061489ebb945695cb7962fc6c2b9bd2c9d11b8c26bf49f8e57ccb380db35f1931660802f6d2d2f7d658dec7868ee9b6c7891df56da4b276c4884db79da01327b667ac554e08821ec61482a14c07225314d747610119e9ad8a68f76849877ea4195d753b36bc79428c3eb4f8325fe09af1bd3c6386546504d1c3dd248cded", 0x82}, {&(0x7f00000004c0)="045a983d78416ed2174d03f3", 0xc}, {&(0x7f0000000540)="46835fb80d1d4232cb5ef37fece24e65fd99310d6a31b1d1b15ef6fa9f57fc3f45be268dd88dd1c2bc33a6fe610edd7a446401f39ed4053fadee2dc6bfc4b7a207a67641a50a717678814934eea3e370f401a0c936757c8e742840841c3173722f6aa49bdcaf33358818e2456e7c54f68696095e093971ce5b99c3734fd931bd2243b681b50abe0000", 0x89}, {&(0x7f0000000600)="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", 0x452}], 0x5}}], 0x1, 0x4001c00)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

5.757436427s ago: executing program 1 (id=2802):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x6}})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xe, [0x10001, 0x3, 0x6201, 0xd8f9, 0x7, 0x7ff, 0x1, 0x8, 0x7ff, 0x10001, 0x6, 0xfffffff8, 0xc, 0x6, 0x6, 0x5, 0x5737, 0x9, 0x5, 0xfffffff8, 0xdea, 0x7e, 0x8000, 0x6a, 0xe0d, 0x7f9d, 0x4, 0x208, 0x6, 0x6, 0x200, 0x5, 0xfee6, 0x7, 0x5, 0x9, 0xa, 0x5, 0x1, 0x8, 0x10001, 0x80000001, 0xa, 0x55, 0x0, 0x2, 0x7, 0x2, 0x7, 0x7, 0x5, 0x5, 0x0, 0x401, 0x7, 0x26, 0x3, 0x8, 0x5, 0x9, 0x97c, 0x9, 0xffffffff, 0x0, 0x7fffffff, 0xffff, 0xfff, 0x4, 0x2, 0x0, 0x6, 0x3, 0xfffffffa, 0x7, 0x35, 0x954d, 0x1, 0x3, 0x8, 0x3ff, 0x4, 0xe44a, 0x8001, 0x8, 0xa, 0x8, 0x2d1c66a5, 0x2, 0x7, 0x0, 0x9af9, 0xff, 0x1, 0x5bfd, 0x800, 0x3, 0x1, 0x8001, 0x9, 0xc, 0xffffffff, 0x101, 0x2, 0x4, 0x100, 0x3, 0x3, 0x5, 0x4, 0x4, 0x5, 0x401, 0x5, 0x9, 0x9, 0x8, 0x10000004, 0x8, 0x1, 0x6, 0xd, 0x401, 0x6, 0x579, 0x4, 0xed60, 0x7, 0x8]}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x18, r6, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}}, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044d9e829738051a563c1ebcf4151af34ac1dfd", 0x40}], 0x1}}], 0x1, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601040000000020000000070000050500"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r9 = getpid()
syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/ipc\x00')
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0)

5.193483662s ago: executing program 4 (id=2806):
r0 = socket$inet6(0xa, 0x3, 0x2c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
openat$cgroup_procs(r1, &(0x7f0000000680)='cgroup.threads\x00', 0x2, 0x0)
read$alg(r1, 0x0, 0x0)
writev(r1, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000000a0605000000000000000000000000000900020073797a30000000000500010007000000040007"], 0x2c}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/sbin/dhclient\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x6c}}, 0x0)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r8, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, 'CT\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r9=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000640)={0xffffffffffffffff, 0x1, 0x88, 0x80000001, @vifc_lcl_ifindex=r9, @loopback}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x0, 0x0, 0x0, 0x1ff}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
getsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
connect$l2tp6(r1, &(0x7f00000006c0)={0xa, 0x0, 0xd, @mcast2, 0x7, 0x2}, 0x20)

4.928116757s ago: executing program 4 (id=2809):
r0 = socket$kcm(0x29, 0x5, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0x11, 0x4, 0x2, 0x2b, 0x44, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xb, 0x7d, [@empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x38, 0x3, 0x8, [{@broadcast, 0x6d}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}})
r4 = socket$inet6(0xa, 0x80003, 0xff)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0)
accept4$ax25(r6, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
sendmmsg$sock(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000011c0)=[{0xfffffffffffffffe}], 0x1}}], 0x2, 0x844)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)

4.040340069s ago: executing program 5 (id=2816):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, r4, 0x10866, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000080)=0x2)

3.800061437s ago: executing program 5 (id=2819):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)

3.543097716s ago: executing program 5 (id=2821):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x4)
connect$caif(r0, &(0x7f0000000040)=@dbg={0x25, 0x3, 0x8}, 0x18)
r1 = socket(0x2a, 0x4, 0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000080)=0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r5 = socket$inet6(0xa, 0x3, 0x7)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x3d22bb42527dd6b)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000640)={0xa, 0x7, 0x6, @loopback, 0x4}, 0x1c)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000780))
ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x409, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000b}, 0x1c)
syz_emit_ethernet(0xfffffffffffffc47, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x3a8}, &(0x7f0000000400)=0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x1, 0x0)
vmsplice(r8, &(0x7f0000000180)=[{&(0x7f00000002c0)="e05b40cf72c08c40641dbc0d4aac6156369dd1f4e51a8e8103f350bcc8a2390345507e83d53edd7a64c6658c18f17b5dcf36b36b174cbd8f71114d43e445d66b538be1ae5725eff1ffb2a35a8d43c329c1d3910b6cbb61cd437a61fd8d6885228c78e288", 0x64}, {&(0x7f0000000480)="6ef224d6894eabebe21da30a88b4019488b850dcd3500c7f3f267404dd5059acece6cbba5136ad2008ab1e6a804de61e053d132da8b6f411167bac897957500c11ebb2259f8c054dff50af96cfa06437db97a4b1d46082be4c4670c999dc82b7343a94f838ca31e076af30b8252c67608d05003ba27d08ead2c0a845e2a85e3d195dece962962daf33a5", 0x8a}, {&(0x7f0000000540)="2d9590751c4aec2c9945e6926724dcc091405a88bb7242197b91fcc9ccbe5ebbb4d559ec790673eef9c611a9428228631d5a9c28d9a23cf22b580112aca79c6836539e6162e0169d5d97e341829bdf1fe1d8d261c70cc31d363870ba4876ff185de616dbd2ba4930a54db035f9be7c0606b219b4de9977e90db7e3304749eef206bb8f6d7aa9e09b5a378e5f4bfc216b91659f77c0ba62c0c351933d65e0e9478158ff9474f380c9a1e07502395af69eb1aca4bbfaa59315c9512fdae29307e39aaee7b7197cb187c465751fe6ab83d5971ea633f5e82ae27bb84540655e66d6", 0xe0}, {&(0x7f00000006c0)="e5280f7a97656f41b2316dd77f99ffd68d5684b8aff40fa81d630962715e6e1e5d6a8add1347b395400826d73e8ebd6598a00e3334324805601a144359bd9322c1934c0734145a7af68ae217217c9877e5e944725f9d7dcb90644f295b1a2f1dcbce831dd6675d9d532a2178b0ba2d55512e3ce7ad8b223af33e4fd04e935a87b3f2", 0x82}], 0x4, 0xc)
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0)
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20080c0}, 0x880)
connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000440))

1.731370599s ago: executing program 3 (id=2824):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000040000000000000711225000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94)

1.722451633s ago: executing program 4 (id=2825):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r2, &(0x7f0000006900)=[{{&(0x7f0000004a80)={0xa, 0x4e20, 0x1, @loopback, 0x6}, 0x1c, &(0x7f0000004d40)=[{&(0x7f0000004ac0)="aff1626d", 0x4}], 0x1}}], 0x1, 0x8084)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000006a00)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x9}}, 0x8, 0x0, 0xfd5, 0x0, 0x81}, &(0x7f0000006ac0)=0x98)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e23, 0x2, @empty, 0x7ff}}, 0x8, 0x2}, 0x90)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={r4, 0x6d, 0x3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0)

1.62171483s ago: executing program 3 (id=2827):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="ae2e"])
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000003540)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0xcc0}, 0xa0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x4008084}, 0x0)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e000100000000000000000400"], 0xa0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f00000000c0)=0x5, 0x4)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r1, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000000), 0x2, 0x0)

1.54958946s ago: executing program 3 (id=2828):
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
recvfrom$packet(r0, &(0x7f0000000040)=""/124, 0x7c, 0x10001, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x5, 0x94, &(0x7f00000001c0)=""/148, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xffff, 0x6, 0xd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x1, 0x5, 0x1, 0x3}], 0x10, 0x7, @void, @value}, 0x94)
ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0)
r2 = epoll_create(0x7f710908)
epoll_wait(r2, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x4)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000004c0)=0x7, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x141}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "3058c0648d12ed"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000800)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r1}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000700)={0x10002009})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0xbdbe2220d73414d9, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x4b, 0xc, "111f86af67620cdf5895cb0c4c17a20287133cd30ce7db6edd5562dedb82549e186146c83c3fff95fb13dccc978f6834e9a3c85829f69a0d2e5b3ad8aec9d22ec55eb998c5027f"}, @NFTA_CHAIN_USERDATA={0x38, 0xc, "4556ed6f534d8b560d9c94cce52f5e5087e259986766bc5dfe01068834b793c75b08d1c1039825542886f588970e8115887b39b8"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7de7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x48084}, 0x4008840)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000009c0)={'veth0_macvtap\x00'})
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000a00)=""/138, &(0x7f0000000ac0)=0x8a)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000b00))
r9 = socket(0x18, 0x4, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000b40))
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b80)={'veth0_to_hsr\x00'})
recvfrom$inet(r9, &(0x7f0000000bc0)=""/7, 0x7, 0x141, &(0x7f0000000c00)={0x2, 0x4e24, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r9)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000001000)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x268, r11, 0x800, 0x7fff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4f}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x234, 0x84, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe5ec}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="0993cf0e709b439a19bc32383aa4f8948044e5b17a8bd7430cd0d8"}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x30}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x78a1ba52}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xdc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="43e6da86dcb6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0fb446aacfc8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xd0}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x789}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_LC={0x8, 0x5, 0x7d}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x81}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4de7680d0e7d"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="c1fc39e0a176d020b877591d"}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x94}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0xffff}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffa}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6904ef43ab93"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb210}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="74d6aa318dbb"}]}, 0x268}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r12, &(0x7f0000001080)='devices.list\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000015c0)=@filter={'filter\x00', 0xe, 0x4, 0x490, [0x0, 0x200000001100, 0x200000001394, 0x2000000013c4], 0x0, &(0x7f00000010c0), &(0x7f0000001100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x48, 0x9100, 'veth0_macvtap\x00', 'batadv0\x00', 'wg0\x00', '\x00', @multicast, [], @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x12e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x6, {0x8, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xff, 0x4, 0x4000, 0x0, @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x4e23, 0x4e22, 0x6, 0x1, 0x72d, 0xf, 0xfff7, 0x8001, 0x975, 0x5}, 0x8a0, 0x82}}}], [], @common=@log={'log\x00', 0x28, {{0x1, "0bdb64cf0ae51e0d224758302ff84cc7a9fd7f14fbaac712f2759bfa7a49", 0x2}}}}, {0x5, 0x4, 0x1, 'ip6tnl0\x00', 'pimreg0\x00', 'vlan0\x00', 'batadv_slave_1\x00', @local, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xe6, 0x136, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x9, 0xfffe, 0x0, 0x0, "908c4fd827dfe29d209b7f1985bf13852d8f83e4eae375baaba7895e2b18587de48b3525abed0c8d9da5616ccf89110f609be7d7f3125cbe1f78c42534d62a45"}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0xfffffffffffffff9}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x11, 0x56, 0x8809, 'veth0_to_batadv\x00', 'pimreg\x00', 'batadv_slave_0\x00', 'pimreg0\x00', @local, [0x0, 0x0, 0xff, 0x0, 0xff], @random="fd651aae8acc", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffc}}}}, {0x3, 0x4, 0x809b, 'gretap0\x00', 'ip6_vti0\x00', 'netdevsim0\x00', 'macvlan1\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [], 0xa6, 0xa6, 0xf6, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x0, 0x10, 0x9}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9d3, 'syz1\x00', {0x7ff}}}}}]}]}, 0x508)

1.429644139s ago: executing program 0 (id=2829):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, r4, 0x10866, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000080)=0x2)

1.313713058s ago: executing program 3 (id=2830):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
listen(r2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)

814.606132ms ago: executing program 0 (id=2831):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8)
shutdown(r0, 0x1)

787.435225ms ago: executing program 3 (id=2832):
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f00000005c0), &(0x7f0000000600)=0x4)

673.685211ms ago: executing program 4 (id=2833):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x55cc, 0x4)

673.318195ms ago: executing program 3 (id=2834):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xd, 0xe18, 0x172d, 0x3, 0x7, 0x6, 0x3]}})
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x5}, 0x18)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe18b9c9f5977addf}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000380)="dae268183ec6dfeb52afd4da13734ff8e648b3b0163cdb47faab7b77e234bfd3743309a8ffbc44694e17f7ce19885ce453b666a10d8030e0c9c07556c5ac34af8acfc705", 0x44}, {&(0x7f0000000400)="927c000c061489ebb945695cb7962fc6c2b9bd2c9d11b8c26bf49f8e57ccb380db35f1931660802f6d2d2f7d658dec7868ee9b6c7891df56da4b276c4884db79da01327b667ac554e08821ec61482a14c07225314d747610119e9ad8a68f76849877ea4195d753b36bc79428c3eb4f8325fe09af1bd3c6386546504d1c3dd248cded", 0x82}, {&(0x7f00000004c0)="045a983d78416ed2174d03f3", 0xc}, {&(0x7f0000000540)="46835fb80d1d4232cb5ef37fece24e65fd99310d6a31b1d1b15ef6fa9f57fc3f45be268dd88dd1c2bc33a6fe610edd7a446401f39ed4053fadee2dc6bfc4b7a207a67641a50a717678814934eea3e370f401a0c936757c8e742840841c3173722f6aa49bdcaf33358818e2456e7c54f68696095e093971ce5b99c3734fd931bd2243b681b50abe0000", 0x89}, {&(0x7f0000000600)="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", 0x452}], 0x5}}], 0x1, 0x4001c00)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0xbdce6000)

645.438955ms ago: executing program 4 (id=2835):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=<r1=>r0, @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0)
r2 = socket(0x11, 0xa, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000c0601040000000000000000020001000080020073797a310000000009000200737d7a32000000000900020073797a320000000005000100070000000900020073797a3200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004800)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$inet(0x2, 0x80001, 0x84)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x800, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3a, &(0x7f0000000080)=0xb, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r1], &(0x7f00000004c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='cachefiles_vfs_error\x00', r6, 0x0, 0xfffffffffffdffff}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000440)={0x1f, @none, 0x2}, 0xa)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r7, 0x1)
unshare(0x62040200)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002b000b00000000000000000008000000040003000c000180060000008848000008000200", @ANYRES32, @ANYBLOB="0c00b7000400000000000000140009007263755f7574696c697a6174696f6cf78c7ad1910ab1fff36e00"], 0x4c}, 0x1, 0x0, 0x0, 0x20008005}, 0x40)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e24, 0x9, @remote, 0x3ff}, 0x1c)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0xbdce6000)

613.207003ms ago: executing program 1 (id=2836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x5}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c001800", @ANYRES16, @ANYBLOB="010029bd7000000000008900000008000300", @ANYRES32, @ANYBLOB="20001d801c000080060005"], 0x3c}}, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}, 0x1, 0xba01}, 0x810)

553.500755ms ago: executing program 0 (id=2837):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000008000000fe0000001001140003006970766c616e310000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

453.587238ms ago: executing program 0 (id=2838):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="ae2e"])
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000003540)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0xcc0}, 0xa0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x4008084}, 0x0)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e000100000000000000000400"], 0xa0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f00000000c0)=0x5, 0x4)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r1, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000000), 0x2, 0x0)

453.197818ms ago: executing program 1 (id=2839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30f500000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)

375.951693ms ago: executing program 0 (id=2840):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000ffffff907b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xb, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

370.14696ms ago: executing program 5 (id=2841):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) (async)

153.61785ms ago: executing program 0 (id=2842):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, r5, 0x10866, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000080)=0x2)

153.310433ms ago: executing program 1 (id=2843):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002001a00b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x2, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20)

153.142725ms ago: executing program 5 (id=2844):
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f00000005c0), &(0x7f0000000600)=0x4)

37.661473ms ago: executing program 5 (id=2845):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000301020000000000000000008500000008000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

0s ago: executing program 1 (id=2846):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x6}})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xe, [0x10001, 0x3, 0x6201, 0xd8f9, 0x7, 0x7ff, 0x1, 0x8, 0x7ff, 0x10001, 0x6, 0xfffffff8, 0xc, 0x6, 0x6, 0x5, 0x5737, 0x9, 0x5, 0xfffffff8, 0xdea, 0x7e, 0x8000, 0x6a, 0xe0d, 0x7f9d, 0x4, 0x208, 0x6, 0x6, 0x200, 0x5, 0xfee6, 0x7, 0x5, 0x9, 0xa, 0x5, 0x1, 0x8, 0x10001, 0x80000001, 0xa, 0x55, 0x0, 0x2, 0x7, 0x2, 0x7, 0x7, 0x5, 0x5, 0x0, 0x401, 0x7, 0x26, 0x3, 0x8, 0x5, 0x9, 0x97c, 0x9, 0xffffffff, 0x0, 0x7fffffff, 0xffff, 0xfff, 0x4, 0x2, 0x0, 0x6, 0x3, 0xfffffffa, 0x7, 0x35, 0x954d, 0x1, 0x3, 0x8, 0x3ff, 0x4, 0xe44a, 0x8001, 0x8, 0xa, 0x8, 0x2d1c66a5, 0x2, 0x7, 0x0, 0x9af9, 0xff, 0x1, 0x5bfd, 0x800, 0x3, 0x1, 0x8001, 0x9, 0xc, 0xffffffff, 0x101, 0x2, 0x4, 0x100, 0x3, 0x3, 0x5, 0x4, 0x4, 0x5, 0x401, 0x5, 0x9, 0x9, 0x8, 0x10000004, 0x8, 0x1, 0x6, 0xd, 0x401, 0x6, 0x579, 0x4, 0xed60, 0x7, 0x8]}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x18, r6, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}}, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044d9e829738051a563c1ebcf4151af34ac1dfd", 0x40}], 0x1}}], 0x1, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601040000000020000000070000050500"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r9 = getpid()
syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/ipc\x00')
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

z.4.1391': attribute type 21 has an invalid length.
[  203.776550][ T9870] bridge0: port 2(team0) entered disabled state
[  203.788608][ T9870] bridge_slave_0: left allmulticast mode
[  203.794740][ T9870] bridge_slave_0: left promiscuous mode
[  203.803267][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.974782][ T9873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1391'.
[  204.124928][ T9876] lo speed is unknown, defaulting to 1000
[  204.377747][ T9898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1400'.
[  204.492539][ T9902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  204.500194][ T9902] IPv6: NLM_F_CREATE should be set when creating new route
[  204.507563][ T9902] IPv6: NLM_F_CREATE should be set when creating new route
[  204.515071][ T9902] IPv6: NLM_F_CREATE should be set when creating new route
[  204.541731][ T9902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  204.643841][ T9906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1402'.
[  204.969696][ T9914] batadv0: entered promiscuous mode
[  204.977259][ T9914] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  205.000689][ T9914] batadv0: left promiscuous mode
[  205.289112][ T9918] lo speed is unknown, defaulting to 1000
[  205.610172][ T9943] FAULT_INJECTION: forcing a failure.
[  205.610172][ T9943] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.664261][ T9944] block nbd0: NBD_DISCONNECT
[  205.669345][ T9944] block nbd0: Disconnected due to user request.
[  205.675863][ T9944] block nbd0: shutting down sockets
[  205.714268][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.4.1416 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  205.714314][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  205.714327][ T9943] Call Trace:
[  205.714336][ T9943]  <TASK>
[  205.714344][ T9943]  dump_stack_lvl+0x189/0x250
[  205.714370][ T9943]  ? __lock_acquire+0xaac/0xd20
[  205.714393][ T9943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.714415][ T9943]  ? __pfx__printk+0x10/0x10
[  205.714429][ T9943]  ? __might_fault+0xb0/0x130
[  205.714465][ T9943]  should_fail_ex+0x414/0x560
[  205.714492][ T9943]  _copy_from_user+0x2d/0xb0
[  205.714523][ T9943]  __ia32_sys_rt_sigreturn+0x228/0x7b0
[  205.714552][ T9943]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  205.714603][ T9943]  ? do_syscall_64+0xba/0x210
[  205.714624][ T9943]  do_syscall_64+0xf6/0x210
[  205.714642][ T9943]  ? clear_bhb_loop+0x60/0xb0
[  205.714660][ T9943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.714674][ T9943] RIP: 0033:0x7fb46d32ab39
[  205.714688][ T9943] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  205.714700][ T9943] RSP: 002b:00007fb46e151a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  205.714716][ T9943] RAX: ffffffffffffffda RBX: 00007fb46d5b5fa0 RCX: 00007fb46d32ab39
[  205.714727][ T9943] RDX: 00007fb46e151a80 RSI: 00007fb46e151bb0 RDI: 0000000000000021
[  205.714737][ T9943] RBP: 00007fb46e152090 R08: 0000200000000040 R09: 0000000000000000
[  205.714746][ T9943] R10: 0000200000000580 R11: 0000000000000202 R12: 0000000000000002
[  205.714755][ T9943] R13: 0000000000000000 R14: 00007fb46d5b5fa0 R15: 00007ffc9fe9b588
[  205.714777][ T9943]  </TASK>
[  206.071799][ T9949] lo speed is unknown, defaulting to 1000
[  206.461907][ T7052] lo speed is unknown, defaulting to 1000
[  207.308680][ T9988] netlink: 'syz.4.1432': attribute type 1 has an invalid length.
[  207.326888][ T9988] __nla_validate_parse: 1 callbacks suppressed
[  207.326920][ T9988] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1432'.
[  207.422783][ T9992] block nbd0: NBD_DISCONNECT
[  207.431930][ T9992] block nbd0: Disconnected due to user request.
[  207.469836][ T9992] block nbd0: shutting down sockets
[  207.491804][ T9994] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1434'.
[  208.099965][T10012] lo speed is unknown, defaulting to 1000
[  208.156153][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'.
[  208.385908][T10022] netlink: 'syz.0.1442': attribute type 21 has an invalid length.
[  208.502167][T10026] netlink: 'syz.2.1444': attribute type 13 has an invalid length.
[  208.556372][T10022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1442'.
[  208.686497][T10026] 8021q: adding VLAN 0 to HW filter on device team0
[  208.718696][T10026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.973316][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1450'.
[  208.998025][T10039] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  209.303544][T10046] lo speed is unknown, defaulting to 1000
[  209.846264][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'.
[  209.881796][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'.
[  209.900920][T10069] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  211.436193][T10114] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  211.603819][T10110] lo speed is unknown, defaulting to 1000
[  212.290274][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1486'.
[  212.630720][T10155] netlink: 'syz.0.1493': attribute type 21 has an invalid length.
[  212.655330][T10155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1493'.
[  213.431691][T10176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1502'.
[  213.569999][T10181] FAULT_INJECTION: forcing a failure.
[  213.569999][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.587238][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.4.1504 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  213.587269][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  213.587293][T10181] Call Trace:
[  213.587301][T10181]  <TASK>
[  213.587311][T10181]  dump_stack_lvl+0x189/0x250
[  213.587344][T10181]  ? __lock_acquire+0xaac/0xd20
[  213.587376][T10181]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.587405][T10181]  ? __pfx__printk+0x10/0x10
[  213.587425][T10181]  ? __might_fault+0xb0/0x130
[  213.587465][T10181]  should_fail_ex+0x414/0x560
[  213.587493][T10181]  _copy_from_user+0x2d/0xb0
[  213.587525][T10181]  csum_and_copy_from_iter_full+0x1d8/0x1d20
[  213.587553][T10181]  ? trace_mm_page_alloc+0x3e/0x150
[  213.587575][T10181]  ? __alloc_frozen_pages_noprof+0x1d6/0x370
[  213.587606][T10181]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  213.587637][T10181]  ? ip6_pol_route+0x162/0x1180
[  213.587666][T10181]  ? policy_nodemask+0x27c/0x720
[  213.587706][T10181]  ip_generic_getfrag+0x12f/0x2b0
[  213.587732][T10181]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  213.587754][T10181]  ? skb_page_frag_refill+0x199/0x320
[  213.587785][T10181]  __ip6_append_data+0x2135/0x3dd0
[  213.587841][T10181]  ? __pfx_raw6_getfrag+0x10/0x10
[  213.587887][T10181]  ? __pfx___ip6_append_data+0x10/0x10
[  213.587923][T10181]  ? __local_bh_enable_ip+0x12d/0x1c0
[  213.587949][T10181]  ip6_append_data+0x1c4/0x380
[  213.587986][T10181]  ? __pfx_raw6_getfrag+0x10/0x10
[  213.588011][T10181]  rawv6_sendmsg+0x124b/0x17f0
[  213.588050][T10181]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  213.588098][T10181]  ? __lock_acquire+0xaac/0xd20
[  213.588126][T10181]  ? __pfx_aa_sk_perm+0x10/0x10
[  213.588152][T10181]  ? sock_rps_record_flow+0x19/0x410
[  213.588180][T10181]  ? inet_sendmsg+0x2f4/0x370
[  213.588202][T10181]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.588230][T10181]  __sock_sendmsg+0x19c/0x270
[  213.588257][T10181]  sock_write_iter+0x258/0x330
[  213.588288][T10181]  ? __pfx_sock_write_iter+0x10/0x10
[  213.588323][T10181]  ? __pfx_aa_file_perm+0x10/0x10
[  213.588358][T10181]  do_iter_readv_writev+0x56e/0x7f0
[  213.588389][T10181]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  213.588421][T10181]  ? bpf_lsm_file_permission+0x9/0x20
[  213.588447][T10181]  ? security_file_permission+0x75/0x290
[  213.588470][T10181]  ? rw_verify_area+0x258/0x650
[  213.588497][T10181]  vfs_writev+0x31a/0x960
[  213.588525][T10181]  ? vfs_write+0x8d8/0xa90
[  213.588557][T10181]  ? __pfx_vfs_writev+0x10/0x10
[  213.588603][T10181]  ? __fget_files+0x2a/0x420
[  213.588636][T10181]  ? __fget_files+0x3a0/0x420
[  213.588661][T10181]  ? __fget_files+0x2a/0x420
[  213.588698][T10181]  do_writev+0x14d/0x2d0
[  213.588731][T10181]  ? __pfx_do_writev+0x10/0x10
[  213.588765][T10181]  ? do_syscall_64+0xba/0x210
[  213.588792][T10181]  do_syscall_64+0xf6/0x210
[  213.588816][T10181]  ? clear_bhb_loop+0x60/0xb0
[  213.588842][T10181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.588861][T10181] RIP: 0033:0x7fb46d38e969
[  213.588879][T10181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.588897][T10181] RSP: 002b:00007fb46e152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  213.588919][T10181] RAX: ffffffffffffffda RBX: 00007fb46d5b5fa0 RCX: 00007fb46d38e969
[  213.588934][T10181] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003
[  213.588947][T10181] RBP: 00007fb46e152090 R08: 0000000000000000 R09: 0000000000000000
[  213.588959][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.588971][T10181] R13: 0000000000000000 R14: 00007fb46d5b5fa0 R15: 00007ffc9fe9b588
[  213.589004][T10181]  </TASK>
[  213.993434][T10184] openvswitch: netlink: IP tunnel dst address not specified
[  214.099982][   T30] audit: type=1107 audit(1748352238.943:2): pid=10188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¤å¦»l
[  214.099982][   T30] ÔËÛiÝ…r�Øßsîú\Îzã1S<xoÎz\"íùQE#1§’Ùúu<ÝŒ=/Ìmé#ÌOgJ?D4	Ló‰Æo¾ød"Z2>‰j](2¼Þ¤£~P7q±dµJÚÿ)ÑÒoþƒåbUîU&>‹¥”œs׫½8/ÀRC‚œd;ì››c“ÆÄ»¯çcn‚­Z°ô ›�sxù¨'
[  214.140727][T10193] netlink: 'syz.0.1508': attribute type 9 has an invalid length.
[  214.149060][T10193] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1508'.
[  214.189637][T10187] netlink: 'syz.3.1506': attribute type 2 has an invalid length.
[  214.247133][T10195] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  214.302377][T10199] netlink: 'syz.1.1510': attribute type 1 has an invalid length.
[  214.350098][T10199] bond2: entered promiscuous mode
[  214.356705][T10199] bond2: entered allmulticast mode
[  214.407303][T10201] bond2: (slave ip6gretap1): making interface the new active one
[  214.492597][T10201] ip6gretap1: entered promiscuous mode
[  214.524899][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  214.539903][T10201] ip6gretap1: entered allmulticast mode
[  214.560378][T10201] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  214.656073][T10214] TCP: TCP_TX_DELAY enabled
[  214.744449][T10215] lo speed is unknown, defaulting to 1000
[  215.260582][T10236] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  215.293890][T10236] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  215.523087][T10246] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  215.678752][T10241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  215.761124][T10248] lo speed is unknown, defaulting to 1000
[  215.958904][T10263] block nbd0: NBD_DISCONNECT
[  215.964181][T10263] block nbd0: Disconnected due to user request.
[  215.967494][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1528'.
[  215.973773][T10263] block nbd0: shutting down sockets
[  216.381731][T10266] lo speed is unknown, defaulting to 1000
[  216.915998][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  216.924129][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  216.931861][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  216.939372][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  217.048851][T10269] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1528'.
[  217.645261][T10308] block nbd0: NBD_DISCONNECT
[  217.650424][T10308] block nbd0: Disconnected due to user request.
[  217.674984][T10308] block nbd0: shutting down sockets
[  217.844532][T10312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1546'.
[  218.060644][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'.
[  218.344952][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1548'.
[  218.406081][T10319] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1548'.
[  218.547564][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1548'.
[  219.001745][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1558'.
[  219.096259][T10353] block nbd0: NBD_DISCONNECT
[  219.105579][T10353] block nbd0: Disconnected due to user request.
[  219.127544][T10353] block nbd0: shutting down sockets
[  219.147967][T10351] lo speed is unknown, defaulting to 1000
[  219.990930][T10379] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  220.243529][T10385] lo speed is unknown, defaulting to 1000
[  220.751934][T10398] lo speed is unknown, defaulting to 1000
[  221.516785][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'.
[  221.545545][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'.
[  221.629634][T10420] block nbd0: NBD_DISCONNECT
[  221.645728][T10420] block nbd0: Disconnected due to user request.
[  221.665923][T10420] block nbd0: shutting down sockets
[  222.424726][T10443] lo speed is unknown, defaulting to 1000
[  222.860401][T10463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  223.010050][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1601'.
[  223.479974][T10478] lo speed is unknown, defaulting to 1000
[  223.516193][T10492] block nbd0: NBD_DISCONNECT
[  223.523921][T10492] block nbd0: Disconnected due to user request.
[  223.573333][T10492] block nbd0: shutting down sockets
[  223.792308][T10500] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  224.312348][T10514] openvswitch: netlink: Actions may not be safe on all matching packets
[  224.662298][T10525] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  224.695677][T10525] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  225.069246][T10542] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  225.087176][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  225.233571][T10549] bridge3: the hash_elasticity option has been deprecated and is always 16
[  225.249163][T10552] block nbd0: NBD_DISCONNECT
[  225.254091][T10552] block nbd0: Disconnected due to user request.
[  225.268693][T10552] block nbd0: shutting down sockets
[  225.408609][T10559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1629'.
[  225.426953][T10559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1629'.
[  226.215030][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1637'.
[  226.769222][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'.
[  227.242778][T10620] netlink: 'syz.3.1652': attribute type 2 has an invalid length.
[  227.267768][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'.
[  227.336922][T10625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'.
[  227.548005][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  227.941469][T10659] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  227.966406][T10660] netlink: 'syz.0.1663': attribute type 21 has an invalid length.
[  227.982269][T10660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1663'.
[  228.257833][T10670] block nbd0: NBD_DISCONNECT
[  228.262865][T10670] block nbd0: Disconnected due to user request.
[  228.273007][T10670] block nbd0: shutting down sockets
[  228.543903][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1671'.
[  228.712948][T10692] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  229.092965][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'.
[  229.107774][T10714] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  229.124055][T10712] netlink: 'syz.1.1683': attribute type 29 has an invalid length.
[  229.136557][T10712] netlink: 'syz.1.1683': attribute type 29 has an invalid length.
[  229.205738][T10712] netlink: 492 bytes leftover after parsing attributes in process `syz.1.1683'.
[  229.364784][T10723] netlink: 'syz.4.1688': attribute type 21 has an invalid length.
[  229.430448][T10727] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  229.483444][T10723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1688'.
[  229.612634][T10739] block nbd0: NBD_DISCONNECT
[  229.628258][T10739] block nbd0: Disconnected due to user request.
[  229.634666][T10739] block nbd0: shutting down sockets
[  229.740389][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'.
[  229.761308][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1697'.
[  230.128714][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1704'.
[  230.141360][T10762] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  230.685888][T10788] xt_TCPMSS: Only works on TCP SYN packets
[  230.872479][T10792] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1716'.
[  230.876773][T10796] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  231.126450][T10810] IPv6: addrconf: prefix option has invalid lifetime
[  231.426790][T10829] netlink: 'syz.3.1730': attribute type 21 has an invalid length.
[  231.467163][T10829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1730'.
[  231.644682][T10832] lo speed is unknown, defaulting to 1000
[  232.404728][T10869] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  232.746376][T10833] netlink: 'syz.2.1731': attribute type 4 has an invalid length.
[  232.904751][T10860] lo speed is unknown, defaulting to 1000
[  233.093941][T10889] netlink: 'syz.1.1745': attribute type 5 has an invalid length.
[  233.168577][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'.
[  233.320321][T10897] netlink: 'syz.0.1749': attribute type 21 has an invalid length.
[  233.456277][T10904] vlan3: entered promiscuous mode
[  233.471893][T10904] vlan3: entered allmulticast mode
[  233.486225][T10904] bridge0: entered allmulticast mode
[  234.070841][T10911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  234.078528][T10911] IPv6: NLM_F_CREATE should be set when creating new route
[  234.701668][T10926] __nla_validate_parse: 1 callbacks suppressed
[  234.701691][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1760'.
[  234.924819][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'.
[  235.215898][T10941] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1765'.
[  235.409846][T10955] netlink: 'syz.1.1770': attribute type 9 has an invalid length.
[  235.451294][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'.
[  235.489371][T10955] hsr0: entered promiscuous mode
[  235.498912][T10955] macvlan0: entered promiscuous mode
[  235.504668][T10955] macvlan0: entered allmulticast mode
[  235.513890][T10955] hsr0: entered allmulticast mode
[  235.542379][T10955] hsr_slave_0: entered allmulticast mode
[  235.555627][T10955] hsr_slave_1: entered allmulticast mode
[  235.855700][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1776'.
[  235.906099][T10974] netlink: 'syz.0.1775': attribute type 8 has an invalid length.
[  235.933586][T10975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1777'.
[  236.368288][T10991] ieee802154 phy1 wpan1: encryption failed: -22
[  236.623982][T11004] netlink: 'syz.0.1789': attribute type 9 has an invalid length.
[  236.654057][T11004] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1789'.
[  236.681348][T11008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1792'.
[  236.723567][T11008] xt_bpf: check failed: parse error
[  236.779866][T11008] xt_bpf: check failed: parse error
[  237.291712][T11036] lo speed is unknown, defaulting to 1000
[  237.551219][T11047] netlink: 'syz.2.1808': attribute type 21 has an invalid length.
[  237.605284][T11047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1808'.
[  238.375178][T11073] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  238.452110][T11077] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1821'.
[  238.512380][T11079] netlink: 'syz.3.1821': attribute type 1 has an invalid length.
[  238.819524][T11090] netlink: 'syz.4.1826': attribute type 1 has an invalid length.
[  238.977060][T11096] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  239.040211][T11088] lo speed is unknown, defaulting to 1000
[  239.581281][T11120] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  240.060619][T11133] lo speed is unknown, defaulting to 1000
[  240.084058][T11139] ieee802154 phy1 wpan1: encryption failed: -22
[  240.095876][T11139] ieee802154 phy1 wpan1: encryption failed: -22
[  240.436071][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  240.677620][T11154] : entered promiscuous mode
[  240.720911][T11155] wg1: entered promiscuous mode
[  240.726062][T11155] wg1: entered allmulticast mode
[  240.853338][T11162] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  240.957832][T11169] __nla_validate_parse: 7 callbacks suppressed
[  240.957855][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1854'.
[  241.063003][T11168] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  241.104882][T11177] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003
[  241.136086][T11170] C: renamed from team_slave_0
[  241.144480][T11170] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1853'.
[  241.154583][T11170] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  241.193742][T11164] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  241.570643][T11197] x_tables: duplicate underflow at hook 3
[  241.647643][T11196] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  241.947595][T11208] lo speed is unknown, defaulting to 1000
[  243.214194][T11267] lo speed is unknown, defaulting to 1000
[  243.560103][ T5838] Bluetooth: hci4: command 0x0405 tx timeout
[  244.007297][T11304] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  244.326093][T11315] vlan2: entered promiscuous mode
[  244.403568][T11323] vlan4: entered promiscuous mode
[  244.666738][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'.
[  244.885942][T11341] FAULT_INJECTION: forcing a failure.
[  244.885942][T11341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.904756][T11341] CPU: 1 UID: 0 PID: 11341 Comm: syz.1.1920 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  244.904788][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  244.904813][T11341] Call Trace:
[  244.904821][T11341]  <TASK>
[  244.904830][T11341]  dump_stack_lvl+0x189/0x250
[  244.904870][T11341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.904901][T11341]  ? __pfx__printk+0x10/0x10
[  244.904933][T11341]  should_fail_ex+0x414/0x560
[  244.904962][T11341]  _copy_to_user+0x31/0xb0
[  244.904998][T11341]  simple_read_from_buffer+0xe1/0x170
[  244.905028][T11341]  proc_fail_nth_read+0x1df/0x250
[  244.905060][T11341]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  244.905092][T11341]  ? rw_verify_area+0x258/0x650
[  244.905115][T11341]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  244.905145][T11341]  vfs_read+0x1fd/0x980
[  244.905166][T11341]  ? free_large_kmalloc+0x145/0x200
[  244.905203][T11341]  ? __pfx_vfs_read+0x10/0x10
[  244.905226][T11341]  ? __sys_bpf+0x46b/0x860
[  244.905254][T11341]  ? __pfx___sys_bpf+0x10/0x10
[  244.905294][T11341]  ksys_read+0x145/0x250
[  244.905316][T11341]  ? rcu_is_watching+0x15/0xb0
[  244.905337][T11341]  ? __pfx_ksys_read+0x10/0x10
[  244.905365][T11341]  ? do_syscall_64+0xba/0x210
[  244.905400][T11341]  do_syscall_64+0xf6/0x210
[  244.905424][T11341]  ? clear_bhb_loop+0x60/0xb0
[  244.905450][T11341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.905469][T11341] RIP: 0033:0x7fb7af78d37c
[  244.905488][T11341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  244.905505][T11341] RSP: 002b:00007fb7b057e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  244.905526][T11341] RAX: ffffffffffffffda RBX: 00007fb7af9b5fa0 RCX: 00007fb7af78d37c
[  244.905542][T11341] RDX: 000000000000000f RSI: 00007fb7b057e0a0 RDI: 0000000000000008
[  244.905554][T11341] RBP: 00007fb7b057e090 R08: 0000000000000000 R09: 0000000000000000
[  244.905567][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.905579][T11341] R13: 0000000000000000 R14: 00007fb7af9b5fa0 R15: 00007fff2a41e538
[  244.905611][T11341]  </TASK>
[  245.212562][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'.
[  245.255472][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'.
[  245.284444][T11346] netlink: 'syz.0.1921': attribute type 7 has an invalid length.
[  245.481490][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'.
[  245.937620][T11379] netem: incorrect gi model size
[  245.955758][T11379] netem: change failed
[  246.356570][T11394] lo speed is unknown, defaulting to 1000
[  246.359539][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'.
[  246.474764][T11403] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  246.753160][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'.
[  246.846877][T11417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.110077][T11417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.187615][T11438] 8021q: VLANs not supported on gre0
[  247.300933][T11417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.389472][T11441] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  247.443150][T11447] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  247.460257][T11451] openvswitch: netlink: Port 10289156 exceeds max allowable 65535
[  247.506565][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'.
[  247.619069][T11417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.073709][T11417] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.238356][T11417] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.304527][T11417] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.388078][T11417] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.436231][T11480] lo speed is unknown, defaulting to 1000
[  249.051335][T11514] syzkaller0: entered promiscuous mode
[  249.059934][T11514] syzkaller0: entered allmulticast mode
[  249.072149][T11514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1980'.
[  249.130537][T11521] netlink: 'syz.0.1981': attribute type 1 has an invalid length.
[  249.141564][T11521] netlink: 'syz.0.1981': attribute type 4 has an invalid length.
[  249.150822][T11521] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1981'.
[  249.186310][T11521] netlink: 'syz.0.1981': attribute type 1 has an invalid length.
[  249.194121][T11521] netlink: 'syz.0.1981': attribute type 4 has an invalid length.
[  249.230486][T11521] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1981'.
[  249.428429][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'.
[  249.819064][T11549] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  249.906514][T11552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1995'.
[  249.978274][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1995'.
[  250.052417][T11558] xt_TPROXY: Can be used only with -p tcp or -p udp
[  250.073515][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'.
[  250.328973][T11577] netlink: 'syz.3.2006': attribute type 21 has an invalid length.
[  250.488445][T11582] vlan3: entered promiscuous mode
[  250.578842][T11586] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  250.681942][T11588] lo speed is unknown, defaulting to 1000
[  250.996469][T11607] vlan2: entered promiscuous mode
[  251.071282][T11616] xt_hashlimit: size too large, truncated to 1048576
[  251.088586][T11615] Bluetooth: MGMT ver 1.23
[  251.112350][T11615] netlink: 'syz.2.2019': attribute type 10 has an invalid length.
[  251.182332][T11615] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  251.237425][T11615] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  251.358476][T11622] pim6reg: entered allmulticast mode
[  251.391936][T11622] pim6reg: left allmulticast mode
[  251.622712][T11636] netlink: 'syz.0.2024': attribute type 21 has an invalid length.
[  251.730590][T11636] __nla_validate_parse: 3 callbacks suppressed
[  251.730608][T11636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2024'.
[  251.774179][T11642] vlan2: entered promiscuous mode
[  251.997936][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2026'.
[  252.017651][T11646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2026'.
[  252.090099][T11645] lo speed is unknown, defaulting to 1000
[  252.099799][T11651] netlink: 'syz.2.2028': attribute type 7 has an invalid length.
[  252.125827][T11651] netlink: 'syz.2.2028': attribute type 8 has an invalid length.
[  252.482311][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'.
[  252.516311][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  252.709463][T11672] netlink: 'syz.0.2035': attribute type 2 has an invalid length.
[  253.080733][T11674] netlink: 'syz.3.2036': attribute type 303 has an invalid length.
[  253.190271][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'.
[  253.264487][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'.
[  253.283668][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'.
[  253.559932][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  253.591628][T11699] netlink: 'syz.2.2044': attribute type 32 has an invalid length.
[  253.794624][T11707] lo speed is unknown, defaulting to 1000
[  253.862009][T11711] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  253.953483][   T59] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  254.024416][T11717] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2048'.
[  254.496623][T11734] ipt_ECN: cannot use operation on non-tcp rule
[  254.559818][T11737] syzkaller1: entered promiscuous mode
[  254.574927][T11737] syzkaller1: entered allmulticast mode
[  254.596753][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  254.705734][T11745] syzkaller0: entered allmulticast mode
[  254.926723][T11745] syzkaller0 (unregistering): left allmulticast mode
[  255.194564][T11755] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  255.425713][T11765] netlink: 'syz.0.2067': attribute type 1 has an invalid length.
[  255.485596][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2067'.
[  255.533357][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2067'.
[  255.539999][T11765] 8021q: adding VLAN 0 to HW filter on device bond6
[  255.636249][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  255.665859][T11768] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  255.714332][T11783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.801531][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  256.431422][T11807] lo speed is unknown, defaulting to 1000
[  256.703515][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  256.737703][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  256.921957][T11823] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  257.214083][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'.
[  257.488290][T11850] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2095'.
[  257.802087][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  257.955894][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2105'.
[  258.144656][T11874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2108'.
[  258.685304][T11901] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  258.832875][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'.
[  258.836558][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  258.844089][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2122'.
[  259.099048][T11921] lo speed is unknown, defaulting to 1000
[  259.168119][T11928] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  259.636525][   T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  259.690815][T11948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2135'.
[  259.733959][T11948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2135'.
[  259.878882][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  260.170777][T11972] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  260.384628][T11988] FAULT_INJECTION: forcing a failure.
[  260.384628][T11988] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.425429][T11988] CPU: 1 UID: 0 PID: 11988 Comm: syz.1.2147 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  260.425461][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  260.425475][T11988] Call Trace:
[  260.425482][T11988]  <TASK>
[  260.425491][T11988]  dump_stack_lvl+0x189/0x250
[  260.425524][T11988]  ? __lock_acquire+0xaac/0xd20
[  260.425557][T11988]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.425584][T11988]  ? __pfx__printk+0x10/0x10
[  260.425604][T11988]  ? __might_fault+0xb0/0x130
[  260.425641][T11988]  should_fail_ex+0x414/0x560
[  260.425670][T11988]  _copy_from_user+0x2d/0xb0
[  260.425701][T11988]  __sys_bind+0x199/0x3e0
[  260.425730][T11988]  ? __pfx___sys_bind+0x10/0x10
[  260.425776][T11988]  __x64_sys_bind+0x7a/0x90
[  260.425803][T11988]  do_syscall_64+0xf6/0x210
[  260.425835][T11988]  ? clear_bhb_loop+0x60/0xb0
[  260.425859][T11988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.425879][T11988] RIP: 0033:0x7fb7af78e969
[  260.425897][T11988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.425914][T11988] RSP: 002b:00007fb7b057e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  260.425936][T11988] RAX: ffffffffffffffda RBX: 00007fb7af9b5fa0 RCX: 00007fb7af78e969
[  260.425951][T11988] RDX: 0000000000000018 RSI: 0000200000000480 RDI: 0000000000000003
[  260.425965][T11988] RBP: 00007fb7b057e090 R08: 0000000000000000 R09: 0000000000000000
[  260.425978][T11988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.425990][T11988] R13: 0000000000000000 R14: 00007fb7af9b5fa0 R15: 00007fff2a41e538
[  260.426019][T11988]  </TASK>
[  260.674310][T11990] netlink: 'syz.4.2150': attribute type 1 has an invalid length.
[  260.915580][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  260.924664][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  261.168616][T12015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2158'.
[  261.257897][T12021] ip6t_srh: unknown srh match flags  4000
[  261.754390][T12052] FAULT_INJECTION: forcing a failure.
[  261.754390][T12052] name failslab, interval 1, probability 0, space 0, times 0
[  261.767813][T12052] CPU: 1 UID: 0 PID: 12052 Comm: syz.0.2170 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  261.767840][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  261.767852][T12052] Call Trace:
[  261.767859][T12052]  <TASK>
[  261.767868][T12052]  dump_stack_lvl+0x189/0x250
[  261.767903][T12052]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  261.767926][T12052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.767956][T12052]  ? __pfx__printk+0x10/0x10
[  261.767989][T12052]  should_fail_ex+0x414/0x560
[  261.768018][T12052]  should_failslab+0xa8/0x100
[  261.768049][T12052]  __kmalloc_cache_noprof+0x70/0x3d0
[  261.768075][T12052]  ? j1939_ecu_create_locked+0xcf/0x310
[  261.768109][T12052]  j1939_ecu_create_locked+0xcf/0x310
[  261.768137][T12052]  ? j1939_ecu_get_by_name_locked+0x139/0x230
[  261.768169][T12052]  j1939_local_ecu_get+0xbe/0x3f0
[  261.768205][T12052]  j1939_sk_bind+0x692/0xbf0
[  261.768248][T12052]  __sys_bind+0x2c3/0x3e0
[  261.768276][T12052]  ? __pfx___sys_bind+0x10/0x10
[  261.768325][T12052]  __x64_sys_bind+0x7a/0x90
[  261.768352][T12052]  do_syscall_64+0xf6/0x210
[  261.768378][T12052]  ? clear_bhb_loop+0x60/0xb0
[  261.768404][T12052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.768423][T12052] RIP: 0033:0x7f74a6f8e969
[  261.768441][T12052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.768467][T12052] RSP: 002b:00007f74a7d92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  261.768491][T12052] RAX: ffffffffffffffda RBX: 00007f74a71b5fa0 RCX: 00007f74a6f8e969
[  261.768503][T12052] RDX: 0000000000000018 RSI: 0000200000000480 RDI: 0000000000000003
[  261.768516][T12052] RBP: 00007f74a7d92090 R08: 0000000000000000 R09: 0000000000000000
[  261.768528][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.768539][T12052] R13: 0000000000000000 R14: 00007f74a71b5fa0 R15: 00007ffc510a8b88
[  261.768572][T12052]  </TASK>
[  262.027355][T12048] lo speed is unknown, defaulting to 1000
[  262.047059][   T47] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  262.054883][   T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  262.240147][T12066] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  262.303580][T12066] netlink: 'syz.4.2175': attribute type 2 has an invalid length.
[  262.501156][T12080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.670649][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'.
[  263.082682][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  263.724154][T12135] vlan2: entered promiscuous mode
[  263.859277][T12140] lo speed is unknown, defaulting to 1000
[  264.067409][T12153] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  264.120199][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  264.503115][T12171] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  265.022603][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2227'.
[  265.077173][T12192] lo speed is unknown, defaulting to 1000
[  265.271948][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  265.396231][   T59] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  266.074037][T12232] netlink: 'syz.1.2239': attribute type 9 has an invalid length.
[  266.105152][T12232] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.2239'.
[  266.281875][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  266.359572][T12236] block nbd0: NBD_DISCONNECT
[  266.376660][T12236] block nbd0: Disconnected due to user request.
[  266.403924][T12236] block nbd0: shutting down sockets
[  267.094443][T12264] vlan2: entered promiscuous mode
[  267.133688][T12270] FAULT_INJECTION: forcing a failure.
[  267.133688][T12270] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  267.171472][T12270] CPU: 1 UID: 0 PID: 12270 Comm: syz.2.2253 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  267.171505][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  267.171518][T12270] Call Trace:
[  267.171526][T12270]  <TASK>
[  267.171536][T12270]  dump_stack_lvl+0x189/0x250
[  267.171576][T12270]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.171621][T12270]  ? __pfx__printk+0x10/0x10
[  267.171655][T12270]  should_fail_ex+0x414/0x560
[  267.171684][T12270]  _copy_to_user+0x31/0xb0
[  267.171718][T12270]  simple_read_from_buffer+0xe1/0x170
[  267.171762][T12270]  proc_fail_nth_read+0x1df/0x250
[  267.171796][T12270]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  267.171829][T12270]  ? rw_verify_area+0x258/0x650
[  267.171852][T12270]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  267.171884][T12270]  vfs_read+0x1fd/0x980
[  267.171914][T12270]  ? __pfx___mutex_lock+0x10/0x10
[  267.171938][T12270]  ? __pfx_vfs_read+0x10/0x10
[  267.171964][T12270]  ? __fget_files+0x2a/0x420
[  267.171995][T12270]  ? __fget_files+0x3a0/0x420
[  267.172021][T12270]  ? __fget_files+0x2a/0x420
[  267.172057][T12270]  ksys_read+0x145/0x250
[  267.172078][T12270]  ? rcu_is_watching+0x15/0xb0
[  267.172098][T12270]  ? __pfx_ksys_read+0x10/0x10
[  267.172127][T12270]  ? do_syscall_64+0xba/0x210
[  267.172154][T12270]  do_syscall_64+0xf6/0x210
[  267.172179][T12270]  ? clear_bhb_loop+0x60/0xb0
[  267.172213][T12270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.172232][T12270] RIP: 0033:0x7f29ab58d37c
[  267.172251][T12270] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  267.172269][T12270] RSP: 002b:00007f29ac3fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  267.172291][T12270] RAX: ffffffffffffffda RBX: 00007f29ab7b5fa0 RCX: 00007f29ab58d37c
[  267.172305][T12270] RDX: 000000000000000f RSI: 00007f29ac3fe0a0 RDI: 0000000000000005
[  267.172318][T12270] RBP: 00007f29ac3fe090 R08: 0000000000000000 R09: 0000000000000000
[  267.172330][T12270] R10: 000000004001058a R11: 0000000000000246 R12: 0000000000000001
[  267.172343][T12270] R13: 0000000000000000 R14: 00007f29ab7b5fa0 R15: 00007ffcde2a3a58
[  267.172377][T12270]  </TASK>
[  267.398467][   T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  267.535623][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  267.578628][T12273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2254'.
[  267.625903][T12277] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  267.742564][T12279] ip6erspan0: entered promiscuous mode
[  267.779087][T12279] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2254'.
[  267.931788][T12285] lo speed is unknown, defaulting to 1000
[  267.993231][T12294] netlink: 'syz.3.2261': attribute type 3 has an invalid length.
[  268.025894][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2261'.
[  268.046597][T12298] block nbd0: NBD_DISCONNECT
[  268.051619][T12298] block nbd0: Disconnected due to user request.
[  268.064424][T12298] block nbd0: shutting down sockets
[  268.093858][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2261'.
[  268.603140][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  268.764072][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'.
[  268.790331][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'.
[  268.808478][T12323] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2271'.
[  268.873742][T12323] nbd: socks must be embedded in a SOCK_ITEM attr
[  268.932100][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2272'.
[  269.042452][T12334] FAULT_INJECTION: forcing a failure.
[  269.042452][T12334] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  269.106500][T12334] CPU: 1 UID: 0 PID: 12334 Comm: syz.0.2276 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  269.106532][T12334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  269.106545][T12334] Call Trace:
[  269.106554][T12334]  <TASK>
[  269.106562][T12334]  dump_stack_lvl+0x189/0x250
[  269.106596][T12334]  ? __lock_acquire+0xaac/0xd20
[  269.106629][T12334]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.106678][T12334]  ? __pfx__printk+0x10/0x10
[  269.106713][T12334]  ? __might_fault+0xb0/0x130
[  269.106754][T12334]  should_fail_ex+0x414/0x560
[  269.106783][T12334]  _copy_from_user+0x2d/0xb0
[  269.106814][T12334]  ___sys_sendmsg+0x158/0x2a0
[  269.106848][T12334]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.106918][T12334]  ? __fget_files+0x2a/0x420
[  269.106945][T12334]  ? __fget_files+0x3a0/0x420
[  269.106984][T12334]  __x64_sys_sendmsg+0x19b/0x260
[  269.107018][T12334]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  269.107067][T12334]  ? do_syscall_64+0xba/0x210
[  269.107096][T12334]  do_syscall_64+0xf6/0x210
[  269.107120][T12334]  ? clear_bhb_loop+0x60/0xb0
[  269.107145][T12334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.107165][T12334] RIP: 0033:0x7f74a6f8e969
[  269.107182][T12334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.107201][T12334] RSP: 002b:00007f74a7d92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.107223][T12334] RAX: ffffffffffffffda RBX: 00007f74a71b5fa0 RCX: 00007f74a6f8e969
[  269.107238][T12334] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005
[  269.107251][T12334] RBP: 00007f74a7d92090 R08: 0000000000000000 R09: 0000000000000000
[  269.107263][T12334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  269.107275][T12334] R13: 0000000000000000 R14: 00007f74a71b5fa0 R15: 00007ffc510a8b88
[  269.107307][T12334]  </TASK>
[  269.109799][T12336] netlink: 'syz.3.2277': attribute type 1 has an invalid length.
[  269.332562][T12336] netlink: 'syz.3.2277': attribute type 3 has an invalid length.
[  269.370394][T12336] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2277'.
[  269.455243][T12336] NCSI netlink: No device for ifindex 246
[  269.641695][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  269.777375][T12362] block nbd0: NBD_DISCONNECT
[  269.782350][T12362] block nbd0: Disconnected due to user request.
[  269.790399][T12362] block nbd0: shutting down sockets
[  269.965387][T12355] lo speed is unknown, defaulting to 1000
[  269.993689][T12369] netlink: 'syz.4.2288': attribute type 1 has an invalid length.
[  270.102809][T12369] 8021q: adding VLAN 0 to HW filter on device bond5
[  270.160997][T12378] raw_sendmsg: syz.2.2291 forgot to set AF_INET. Fix it!
[  270.180567][T12375] bond5: (slave veth0_to_bond): making interface the new active one
[  270.208407][T12375] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  270.249857][T12369] vlan2: entered allmulticast mode
[  270.255714][T12369] veth1: entered allmulticast mode
[  270.263007][T12369] veth1: entered promiscuous mode
[  270.270751][T12369] veth1: left promiscuous mode
[  270.279598][T12369] bond5: (slave vlan2): Enslaving as an active interface with an up link
[  270.409192][T12386] netlink: 'syz.4.2294': attribute type 21 has an invalid length.
[  270.417857][T12386] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2294'.
[  270.502490][T12388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2295'.
[  270.676335][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  270.917305][T12406] vlan3: entered promiscuous mode
[  271.156250][  T967] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  271.519466][T12430] block nbd0: NBD_DISCONNECT
[  271.575121][T12430] block nbd0: Disconnected due to user request.
[  271.672125][T12430] block nbd0: shutting down sockets
[  271.763661][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  272.477453][T12443] lo speed is unknown, defaulting to 1000
[  272.516122][   T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  272.871383][T12461] __nla_validate_parse: 2 callbacks suppressed
[  272.871408][T12461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2318'.
[  272.977734][T12464] FAULT_INJECTION: forcing a failure.
[  272.977734][T12464] name failslab, interval 1, probability 0, space 0, times 0
[  273.066799][T12464] CPU: 1 UID: 0 PID: 12464 Comm: syz.2.2319 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  273.066829][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  273.066841][T12464] Call Trace:
[  273.066849][T12464]  <TASK>
[  273.066858][T12464]  dump_stack_lvl+0x189/0x250
[  273.066894][T12464]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.066921][T12464]  ? __pfx__printk+0x10/0x10
[  273.066946][T12464]  ? __pfx___might_resched+0x10/0x10
[  273.066972][T12464]  should_fail_ex+0x414/0x560
[  273.067000][T12464]  should_failslab+0xa8/0x100
[  273.067030][T12464]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  273.067059][T12464]  ? __alloc_skb+0x112/0x2d0
[  273.067091][T12464]  __alloc_skb+0x112/0x2d0
[  273.067124][T12464]  netlink_sendmsg+0x5c6/0xb30
[  273.067164][T12464]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.067196][T12464]  ? aa_sock_msg_perm+0x94/0x160
[  273.067223][T12464]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  273.067247][T12464]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.067276][T12464]  __sock_sendmsg+0x21c/0x270
[  273.067303][T12464]  ____sys_sendmsg+0x505/0x830
[  273.067340][T12464]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.067381][T12464]  ? import_iovec+0x74/0xa0
[  273.067416][T12464]  ___sys_sendmsg+0x21f/0x2a0
[  273.067449][T12464]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.067518][T12464]  ? __fget_files+0x2a/0x420
[  273.067554][T12464]  ? __fget_files+0x3a0/0x420
[  273.067593][T12464]  __x64_sys_sendmsg+0x19b/0x260
[  273.067627][T12464]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  273.067676][T12464]  ? do_syscall_64+0xba/0x210
[  273.067705][T12464]  do_syscall_64+0xf6/0x210
[  273.067733][T12464]  ? clear_bhb_loop+0x60/0xb0
[  273.067759][T12464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.067779][T12464] RIP: 0033:0x7f29ab58e969
[  273.067797][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.067815][T12464] RSP: 002b:00007f29ac3fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.067836][T12464] RAX: ffffffffffffffda RBX: 00007f29ab7b5fa0 RCX: 00007f29ab58e969
[  273.067852][T12464] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005
[  273.067865][T12464] RBP: 00007f29ac3fe090 R08: 0000000000000000 R09: 0000000000000000
[  273.067878][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.067890][T12464] R13: 0000000000000000 R14: 00007f29ab7b5fa0 R15: 00007ffcde2a3a58
[  273.067921][T12464]  </TASK>
[  273.563083][   T47] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  273.607915][T12467] netlink: 'syz.3.2320': attribute type 9 has an invalid length.
[  273.647542][T12467] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.2320'.
[  274.250706][T12477] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  274.480213][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'.
[  274.543332][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'.
[  274.617053][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  274.634819][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'.
[  274.673472][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'.
[  274.724682][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'.
[  274.774556][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'.
[  274.808353][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'.
[  274.851638][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'.
[  274.936188][T12487] block nbd0: NBD_DISCONNECT
[  274.943158][T12477] lo speed is unknown, defaulting to 1000
[  274.951924][T12487] block nbd0: Disconnected due to user request.
[  274.981080][T12487] block nbd0: shutting down sockets
[  275.388665][T12495] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  276.168897][T12511] netlink: 'syz.1.2333': attribute type 9 has an invalid length.
[  276.922753][ T4105] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  277.104094][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  277.952495][T12537] block nbd0: NBD_DISCONNECT
[  277.992844][T12537] block nbd0: Disconnected due to user request.
[  278.048796][T12537] block nbd0: shutting down sockets
[  278.202544][ T4105] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  278.318654][T12545] netlink: 'syz.0.2344': attribute type 9 has an invalid length.
[  278.378889][T12545] __nla_validate_parse: 48 callbacks suppressed
[  278.378911][T12545] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2344'.
[  279.048977][T12557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2350'.
[  279.235438][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  279.244450][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  282.676168][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  283.956464][   T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  286.011048][T12574] lo speed is unknown, defaulting to 1000
[  286.404615][T12587] netlink: 'syz.2.2357': attribute type 9 has an invalid length.
[  286.470413][T12587] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.2357'.
[  286.693951][T12592] netlink: 79 bytes leftover after parsing attributes in process `syz.4.2359'.
[  287.274486][T12605] IPv6: sit1: Disabled Multicast RS
[  287.774306][T12619] netlink: 'syz.4.2369': attribute type 1 has an invalid length.
[  287.860061][T12619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2369'.
[  287.907720][T12623] FAULT_INJECTION: forcing a failure.
[  287.907720][T12623] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.990356][T12623] CPU: 1 UID: 0 PID: 12623 Comm: syz.1.2371 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  287.990387][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  287.990400][T12623] Call Trace:
[  287.990409][T12623]  <TASK>
[  287.990418][T12623]  dump_stack_lvl+0x189/0x250
[  287.990452][T12623]  ? __lock_acquire+0xaac/0xd20
[  287.990485][T12623]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.990514][T12623]  ? __pfx__printk+0x10/0x10
[  287.990535][T12623]  ? __might_fault+0xb0/0x130
[  287.990575][T12623]  should_fail_ex+0x414/0x560
[  287.990603][T12623]  _copy_from_iter+0x1db/0x15a0
[  287.990634][T12623]  ? sock_alloc_send_pskb+0x875/0x990
[  287.990663][T12623]  ? __pfx__copy_from_iter+0x10/0x10
[  287.990699][T12623]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  287.990724][T12623]  skb_copy_datagram_from_iter+0xf5/0x720
[  287.990748][T12623]  ? dev_get_by_index+0x22/0x2e0
[  287.990770][T12623]  ? skb_put+0x11b/0x210
[  287.990811][T12623]  packet_sendmsg+0x3a0c/0x5330
[  287.990878][T12623]  ? __pfx___might_resched+0x10/0x10
[  287.990900][T12623]  ? __lock_acquire+0xaac/0xd20
[  287.990935][T12623]  ? __lock_acquire+0xaac/0xd20
[  287.990967][T12623]  ? __pfx_packet_sendmsg+0x10/0x10
[  287.990996][T12623]  ? aa_sk_perm+0x81e/0x950
[  287.991025][T12623]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  287.991061][T12623]  ? aa_sock_msg_perm+0x94/0x160
[  287.991087][T12623]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.991112][T12623]  ? __pfx_packet_sendmsg+0x10/0x10
[  287.991144][T12623]  __sock_sendmsg+0x21c/0x270
[  287.991171][T12623]  ____sys_sendmsg+0x52d/0x830
[  287.991207][T12623]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.991248][T12623]  ? import_iovec+0x74/0xa0
[  287.991282][T12623]  ___sys_sendmsg+0x21f/0x2a0
[  287.991315][T12623]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.991389][T12623]  ? __fget_files+0x2a/0x420
[  287.991416][T12623]  ? __fget_files+0x3a0/0x420
[  287.991455][T12623]  __sys_sendmmsg+0x227/0x430
[  287.991492][T12623]  ? __pfx___sys_sendmmsg+0x10/0x10
[  287.991533][T12623]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  287.991577][T12623]  ? ksys_write+0x1f0/0x250
[  287.991599][T12623]  ? rcu_is_watching+0x15/0xb0
[  287.991629][T12623]  __x64_sys_sendmmsg+0xa0/0xc0
[  287.991663][T12623]  do_syscall_64+0xf6/0x210
[  287.991688][T12623]  ? clear_bhb_loop+0x60/0xb0
[  287.991713][T12623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.991733][T12623] RIP: 0033:0x7fb7af78e969
[  287.991751][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.991769][T12623] RSP: 002b:00007fb7b057e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  287.991798][T12623] RAX: ffffffffffffffda RBX: 00007fb7af9b5fa0 RCX: 00007fb7af78e969
[  287.991813][T12623] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000c
[  287.991826][T12623] RBP: 00007fb7b057e090 R08: 0000000000000000 R09: 0000000000000000
[  287.991838][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.991850][T12623] R13: 0000000000000000 R14: 00007fb7af9b5fa0 R15: 00007fff2a41e538
[  287.991882][T12623]  </TASK>
[  288.317250][T12627] netlink: 'syz.2.2372': attribute type 9 has an invalid length.
[  288.325615][T12627] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.2372'.
[  288.466285][T12629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.481426][   T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  288.694108][T12633] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  288.725010][    C0] sched: DL replenish lagged too much
[  289.716644][   T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  289.769010][T12655] hsr0: entered promiscuous mode
[  289.848443][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2380'.
[  289.912701][T12655] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  290.111347][T12659] netlink: 'syz.1.2384': attribute type 9 has an invalid length.
[  290.169377][T12659] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.2384'.
[  290.305876][T12661] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  291.706655][T12703] netlink: 'syz.0.2399': attribute type 9 has an invalid length.
[  291.763924][T12703] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2399'.
[  291.777046][T12706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2400'.
[  292.068999][T12717] FAULT_INJECTION: forcing a failure.
[  292.068999][T12717] name failslab, interval 1, probability 0, space 0, times 0
[  292.100590][T12717] CPU: 1 UID: 0 PID: 12717 Comm: syz.4.2405 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  292.100623][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  292.100635][T12717] Call Trace:
[  292.100644][T12717]  <TASK>
[  292.100653][T12717]  dump_stack_lvl+0x189/0x250
[  292.100692][T12717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.100722][T12717]  ? __pfx__printk+0x10/0x10
[  292.100750][T12717]  ? __pfx___might_resched+0x10/0x10
[  292.100770][T12717]  ? fs_reclaim_acquire+0x7d/0x100
[  292.100807][T12717]  should_fail_ex+0x414/0x560
[  292.100836][T12717]  ? alloc_netdev_mqs+0x8e5/0x11e0
[  292.100855][T12717]  should_failslab+0xa8/0x100
[  292.100886][T12717]  __kvmalloc_node_noprof+0x168/0x5e0
[  292.100915][T12717]  ? alloc_netdev_mqs+0x8e5/0x11e0
[  292.100943][T12717]  alloc_netdev_mqs+0x8e5/0x11e0
[  292.100973][T12717]  rtnl_create_link+0x31f/0xd10
[  292.101003][T12717]  rtnl_newlink_create+0x25c/0xb00
[  292.101039][T12717]  ? __pfx_aa_get_newest_label+0x10/0x10
[  292.101069][T12717]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  292.101095][T12717]  ? rtnl_newlink+0x8db/0x1c70
[  292.101124][T12717]  ? __pfx___mutex_lock+0x10/0x10
[  292.101160][T12717]  ? ns_capable+0x8a/0xf0
[  292.101185][T12717]  rtnl_newlink+0x16d6/0x1c70
[  292.101214][T12717]  ? netlink_sendmsg+0x805/0xb30
[  292.101257][T12717]  ? __pfx_rtnl_newlink+0x10/0x10
[  292.101311][T12717]  ? kasan_quarantine_put+0xdd/0x220
[  292.101335][T12717]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.101364][T12717]  ? nlmon_xmit+0xb0/0x100
[  292.101399][T12717]  ? kmem_cache_free+0x192/0x3f0
[  292.101435][T12717]  ? __local_bh_enable_ip+0x12d/0x1c0
[  292.101455][T12717]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.101478][T12717]  ? __local_bh_enable_ip+0x12d/0x1c0
[  292.101497][T12717]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  292.101522][T12717]  ? __dev_queue_xmit+0x27e/0x3a70
[  292.101552][T12717]  ? aa_get_newest_label+0xf7/0x5d0
[  292.101585][T12717]  ? __lock_acquire+0xaac/0xd20
[  292.101642][T12717]  ? __pfx_rtnl_newlink+0x10/0x10
[  292.101669][T12717]  rtnetlink_rcv_msg+0x7cc/0xb70
[  292.101700][T12717]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  292.101726][T12717]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  292.101749][T12717]  ? ref_tracker_free+0x63a/0x7d0
[  292.101771][T12717]  ? __copy_skb_header+0xa7/0x550
[  292.101806][T12717]  ? __pfx_ref_tracker_free+0x10/0x10
[  292.101829][T12717]  ? __skb_clone+0x63/0x7a0
[  292.101857][T12717]  netlink_rcv_skb+0x208/0x470
[  292.101886][T12717]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  292.101914][T12717]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.101957][T12717]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.101986][T12717]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.102021][T12717]  netlink_unicast+0x75b/0x8d0
[  292.102060][T12717]  netlink_sendmsg+0x805/0xb30
[  292.102100][T12717]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.102133][T12717]  ? aa_sock_msg_perm+0x94/0x160
[  292.102159][T12717]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.102184][T12717]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.102214][T12717]  __sock_sendmsg+0x21c/0x270
[  292.102242][T12717]  ____sys_sendmsg+0x505/0x830
[  292.102280][T12717]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.102322][T12717]  ? import_iovec+0x74/0xa0
[  292.102357][T12717]  ___sys_sendmsg+0x21f/0x2a0
[  292.102398][T12717]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.102472][T12717]  ? __fget_files+0x2a/0x420
[  292.102500][T12717]  ? __fget_files+0x3a0/0x420
[  292.102539][T12717]  __x64_sys_sendmsg+0x19b/0x260
[  292.102574][T12717]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.102624][T12717]  ? do_syscall_64+0xba/0x210
[  292.102654][T12717]  do_syscall_64+0xf6/0x210
[  292.102679][T12717]  ? clear_bhb_loop+0x60/0xb0
[  292.102705][T12717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.102725][T12717] RIP: 0033:0x7fb46d38e969
[  292.102744][T12717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.102762][T12717] RSP: 002b:00007fb46e152038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.102783][T12717] RAX: ffffffffffffffda RBX: 00007fb46d5b5fa0 RCX: 00007fb46d38e969
[  292.102798][T12717] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005
[  292.102812][T12717] RBP: 00007fb46e152090 R08: 0000000000000000 R09: 0000000000000000
[  292.102824][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.102836][T12717] R13: 0000000000000000 R14: 00007fb46d5b5fa0 R15: 00007ffc9fe9b588
[  292.102870][T12717]  </TASK>
[  292.553777][T12720] netlink: 'syz.0.2404': attribute type 2 has an invalid length.
[  292.783035][T12727] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2407'.
[  292.793194][T12728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2407'.
[  292.983046][T12732] netlink: 'syz.0.2408': attribute type 21 has an invalid length.
[  293.221684][T12732] netlink: 'syz.0.2408': attribute type 6 has an invalid length.
[  293.285643][T12732] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2408'.
[  293.331635][T12733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2408'.
[  293.556913][T12364] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  293.867705][T12749] netlink: 'syz.4.2414': attribute type 9 has an invalid length.
[  293.915612][T12749] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.2414'.
[  294.143380][T12752] syzkaller0: entered promiscuous mode
[  294.180792][T12752] syzkaller0: entered allmulticast mode
[  294.729708][T12764] 8021q: VLANs not supported on lo
[  295.023533][T12782] netlink: ct family unspecified
[  295.052465][T12782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.476596][   T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  299.320945][ T4105] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  300.523921][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  301.400261][T12776] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2422'.
[  301.537998][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'.
[  302.011296][T12783] lo speed is unknown, defaulting to 1000
[  302.162824][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'.
[  302.237745][T12811] syz_tun: tun_net_xmit 42
[  302.442561][T12815] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  303.046597][T12829] netlink: 'syz.4.2437': attribute type 7 has an invalid length.
[  303.310084][T12833] xt_bpf: check failed: parse error
[  303.315618][    C1] syz_tun: tun_net_xmit 42
[  303.451461][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2439'.
[  303.468412][T12829] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.163728][T12829] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.250628][T12848] block nbd0: NBD_DISCONNECT
[  304.269364][T12848] block nbd0: Disconnected due to user request.
[  304.297308][T12850] netlink: 'syz.0.2443': attribute type 6 has an invalid length.
[  304.307059][T12848] block nbd0: shutting down sockets
[  304.321424][T12850] netlink: 'syz.0.2443': attribute type 7 has an invalid length.
[  304.334733][T12850] netlink: 'syz.0.2443': attribute type 8 has an invalid length.
[  304.355141][    C1] syz_tun: tun_net_xmit 42
[  305.080826][T12364] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  305.636916][ T4105] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  308.804849][T12829] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.021442][T12829] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.732255][T12829] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.846034][  T967] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  311.209649][T12829] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.381443][T12829] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.486106][T12364] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  311.574358][T12829] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.801950][T12888] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2456'.
[  312.034016][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2457'.
[  312.122871][T12892] netlink: 'syz.4.2458': attribute type 21 has an invalid length.
[  312.179270][T12892] netlink: 'syz.4.2458': attribute type 6 has an invalid length.
[  312.219122][T12892] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2458'.
[  312.283435][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  312.296395][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  312.305909][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  312.315820][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  312.327339][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  312.611150][T12896] lo speed is unknown, defaulting to 1000
[  314.424854][T12922] vlan4: entered allmulticast mode
[  314.442553][ T5838] Bluetooth: hci5: command tx timeout
[  314.477678][T12922] bridge0: port 3(vlan4) entered blocking state
[  314.498094][T12927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2471'.
[  314.536244][T12922] bridge0: port 3(vlan4) entered disabled state
[  314.557748][T12922] vlan4: entered promiscuous mode
[  314.577504][T12922] bridge0: port 3(vlan4) entered blocking state
[  314.584060][T12922] bridge0: port 3(vlan4) entered forwarding state
[  315.716620][T12938] lo speed is unknown, defaulting to 1000
[  316.080743][T12951] IPv6: syztnl1: Disabled Multicast RS
[  316.138081][T12951] netlink: 'syz.0.2478': attribute type 11 has an invalid length.
[  316.516182][ T5838] Bluetooth: hci5: command tx timeout
[  316.606401][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  317.214751][T12966] syz_tun: tun_net_xmit 86
[  317.237659][T12364] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  317.256830][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.524753][T12896] chnl_net:caif_netlink_parms(): no params data found
[  317.707912][   T36] bond2: left allmulticast mode
[  317.732422][   T36] bond2: left promiscuous mode
[  317.757871][   T36] bridge0: port 4(bond2) entered disabled state
[  317.813770][   T36] team0: left allmulticast mode
[  317.838726][   T36] team_slave_0: left allmulticast mode
[  317.844674][   T36] team_slave_1: left allmulticast mode
[  317.897082][   T36] team0: left promiscuous mode
[  317.901949][   T36] team_slave_0: left promiscuous mode
[  317.956287][   T36] team_slave_1: left promiscuous mode
[  317.982407][T12978] Bluetooth: MGMT ver 1.23
[  317.997094][   T36] bridge0: port 3(team0) entered disabled state
[  318.068222][   T36] bridge_slave_1: left allmulticast mode
[  318.108213][   T36] bridge_slave_1: left promiscuous mode
[  318.139237][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.194138][   T36] bridge_slave_0: left allmulticast mode
[  318.227277][   T36] bridge_slave_0: left promiscuous mode
[  318.242043][T12980] FAULT_INJECTION: forcing a failure.
[  318.242043][T12980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  318.273115][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.280642][    C1] syz_tun: tun_net_xmit 86
[  318.321927][T12980] CPU: 1 UID: 0 PID: 12980 Comm: syz.0.2486 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  318.321960][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  318.321974][T12980] Call Trace:
[  318.321983][T12980]  <TASK>
[  318.321992][T12980]  dump_stack_lvl+0x189/0x250
[  318.322032][T12980]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.322062][T12980]  ? __pfx__printk+0x10/0x10
[  318.322096][T12980]  should_fail_ex+0x414/0x560
[  318.322125][T12980]  _copy_from_user+0x2d/0xb0
[  318.322156][T12980]  copy_safe_from_sockptr+0x6c/0xd0
[  318.322181][T12980]  l2cap_sock_setsockopt+0x4d9/0x1d20
[  318.322220][T12980]  ? aa_sk_perm+0x81e/0x950
[  318.322245][T12980]  ? __pfx_l2cap_sock_setsockopt+0x10/0x10
[  318.322278][T12980]  ? __pfx_aa_sk_perm+0x10/0x10
[  318.322306][T12980]  ? aa_sock_opt_perm+0x30/0x110
[  318.322332][T12980]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  318.322357][T12980]  ? __pfx_l2cap_sock_setsockopt+0x10/0x10
[  318.322388][T12980]  do_sock_setsockopt+0x257/0x3e0
[  318.322418][T12980]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  318.322444][T12980]  ? __fget_files+0x2a/0x420
[  318.322477][T12980]  ? __fget_files+0x3a0/0x420
[  318.322503][T12980]  ? __fget_files+0x2a/0x420
[  318.322540][T12980]  __x64_sys_setsockopt+0x18b/0x220
[  318.322576][T12980]  do_syscall_64+0xf6/0x210
[  318.322602][T12980]  ? clear_bhb_loop+0x60/0xb0
[  318.322627][T12980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.322647][T12980] RIP: 0033:0x7f74a6f8e969
[  318.322666][T12980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.322685][T12980] RSP: 002b:00007f74a7d92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  318.322707][T12980] RAX: ffffffffffffffda RBX: 00007f74a71b5fa0 RCX: 00007f74a6f8e969
[  318.322722][T12980] RDX: 000000000000000f RSI: 0000000000000112 RDI: 0000000000000004
[  318.322734][T12980] RBP: 00007f74a7d92090 R08: 0000000000000004 R09: 0000000000000000
[  318.322756][T12980] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  318.322769][T12980] R13: 0000000000000000 R14: 00007f74a71b5fa0 R15: 00007ffc510a8b88
[  318.322801][T12980]  </TASK>
[  318.715780][ T5838] Bluetooth: hci5: command tx timeout
[  319.315542][    C1] syz_tun: tun_net_xmit 86
[  319.753343][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'.
[  319.768653][   T36] bond1 (unregistering): (slave gretap1): Releasing active interface
[  319.778235][   T36] gretap1 (unregistering): left allmulticast mode
[  320.123137][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.143304][   T36] bond_slave_0: left promiscuous mode
[  320.161069][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.181657][   T36] bond_slave_1: left promiscuous mode
[  320.192178][   T36] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  320.216873][   T36] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  320.262473][   T36] bond0 (unregistering): Released all slaves
[  320.299173][   T36] bond1 (unregistering): Released all slaves
[  320.644932][   T36] bond2 (unregistering): Released all slaves
[  320.693210][T12992] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  320.756315][ T5140] Bluetooth: hci5: command tx timeout
[  321.170913][T13006] FAULT_INJECTION: forcing a failure.
[  321.170913][T13006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.227245][T13008] trusted_key: syz.0.2495 sent an empty control message without MSG_MORE.
[  321.245720][T13006] CPU: 1 UID: 0 PID: 13006 Comm: syz.4.2494 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  321.245763][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.245776][T13006] Call Trace:
[  321.245785][T13006]  <TASK>
[  321.245794][T13006]  dump_stack_lvl+0x189/0x250
[  321.245829][T13006]  ? __lock_acquire+0xaac/0xd20
[  321.245861][T13006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.245891][T13006]  ? __pfx__printk+0x10/0x10
[  321.245912][T13006]  ? __might_fault+0xb0/0x130
[  321.245951][T13006]  should_fail_ex+0x414/0x560
[  321.245980][T13006]  _copy_from_iter+0x1db/0x15a0
[  321.246018][T13006]  ? policy_nodemask+0x27c/0x720
[  321.246044][T13006]  ? __pfx__copy_from_iter+0x10/0x10
[  321.246076][T13006]  ? set_page_refcounted+0xa0/0x1e0
[  321.246105][T13006]  ? page_copy_sane+0x4e/0x280
[  321.246133][T13006]  copy_page_from_iter+0x7b/0x100
[  321.246164][T13006]  tun_get_user+0x1b13/0x3c20
[  321.246199][T13006]  ? tun_get_user+0x687/0x3c20
[  321.246246][T13006]  ? __pfx_tun_get_user+0x10/0x10
[  321.246274][T13006]  ? aa_file_perm+0x11f/0xed0
[  321.246300][T13006]  ? aa_file_perm+0x3e7/0xed0
[  321.246339][T13006]  ? ref_tracker_alloc+0x318/0x460
[  321.246366][T13006]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  321.246396][T13006]  ? tun_get+0x1c/0x2f0
[  321.246433][T13006]  ? tun_get+0x1c/0x2f0
[  321.246470][T13006]  ? tun_get+0x1c/0x2f0
[  321.246505][T13006]  tun_chr_write_iter+0x113/0x200
[  321.246539][T13006]  vfs_write+0x54b/0xa90
[  321.246570][T13006]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  321.246601][T13006]  ? __pfx_vfs_write+0x10/0x10
[  321.246636][T13006]  ? __fget_files+0x2a/0x420
[  321.246673][T13006]  ksys_write+0x145/0x250
[  321.246697][T13006]  ? rcu_is_watching+0x15/0xb0
[  321.246724][T13006]  ? __pfx_ksys_write+0x10/0x10
[  321.246752][T13006]  ? do_syscall_64+0xba/0x210
[  321.246781][T13006]  do_syscall_64+0xf6/0x210
[  321.246805][T13006]  ? clear_bhb_loop+0x60/0xb0
[  321.246830][T13006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.246850][T13006] RIP: 0033:0x7fb46d38d41f
[  321.246868][T13006] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  321.246885][T13006] RSP: 002b:00007fb46e152000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  321.246907][T13006] RAX: ffffffffffffffda RBX: 00007fb46d5b5fa0 RCX: 00007fb46d38d41f
[  321.246922][T13006] RDX: 0000000000000032 RSI: 0000200000000080 RDI: 00000000000000c8
[  321.246935][T13006] RBP: 00007fb46e152090 R08: 0000000000000000 R09: 0000000000000000
[  321.246948][T13006] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001
[  321.246960][T13006] R13: 0000000000000000 R14: 00007fb46d5b5fa0 R15: 00007ffc9fe9b588
[  321.246991][T13006]  </TASK>
[  321.743064][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'.
[  321.962708][   T36] tipc: Disabling bearer <udp:syz2>
[  321.977923][   T36] tipc: Left network mode
[  322.283360][   T36] IPVS: stopping backup sync thread 12633 ...
[  322.356637][   T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  322.593609][T13027] netlink: 'syz.4.2500': attribute type 7 has an invalid length.
[  322.997310][   T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  323.066667][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'.
[  323.118996][T12896] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.138268][T12896] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.146959][T12896] bridge_slave_0: entered allmulticast mode
[  323.156350][T12896] bridge_slave_0: entered promiscuous mode
[  323.346040][T12896] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.385872][T12896] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.434072][T12896] bridge_slave_1: entered allmulticast mode
[  323.463282][T12896] bridge_slave_1: entered promiscuous mode
[  323.821323][T12896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.024878][T12896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.327889][T13059] block nbd0: NBD_DISCONNECT
[  324.364113][T13059] block nbd0: Disconnected due to user request.
[  324.411385][T13059] block nbd0: shutting down sockets
[  324.739384][T12896] team0: Port device team_slave_0 added
[  324.798616][T13043] lo speed is unknown, defaulting to 1000
[  324.820860][T12896] team0: Port device team_slave_1 added
[  325.071286][T12896] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.134117][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.256546][T12896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.334231][T12896] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.394044][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.466947][T12896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.078940][T12896] hsr_slave_0: entered promiscuous mode
[  326.111170][T12896] hsr_slave_1: entered promiscuous mode
[  326.192015][T12896] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.201944][T12896] Cannot create hsr debugfs directory
[  326.981388][T13094] lo speed is unknown, defaulting to 1000
[  327.207343][T13109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2522'.
[  327.860722][   T36] hsr_slave_0: left promiscuous mode
[  327.913983][   T36] hsr_slave_1: left promiscuous mode
[  327.958580][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.995610][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.119808][   T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  328.771961][   T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  329.100572][   T36] team0 (unregistering): Port device team_slave_1 removed
[  329.202270][   T36] team0 (unregistering): Port device team_slave_0 removed
[  330.301867][T13120] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  331.163173][T13134] netlink: 'syz.3.2530': attribute type 1 has an invalid length.
[  331.361114][T13134] 8021q: adding VLAN 0 to HW filter on device bond6
[  331.394220][T13132] bond6: (slave gretap1): making interface the new active one
[  331.407371][T13132] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  331.432037][   T36] IPVS: stop unused estimator thread 0...
[  331.653558][T13132] syz.3.2530 (13132) used greatest stack depth: 16296 bytes left
[  331.727580][T12896] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  331.845411][T12896] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  331.907015][T12896] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  332.017147][T12896] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  332.118032][T13142] syzkaller1: entered promiscuous mode
[  332.132693][T13142] syzkaller1: entered allmulticast mode
[  332.425507][T12896] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.460960][T12896] 8021q: adding VLAN 0 to HW filter on device team0
[  332.507758][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'.
[  332.543179][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'.
[  332.584481][  T967] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.592313][  T967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.605159][T13142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.713042][  T967] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.720370][  T967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.590899][T12896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  333.784463][T13156] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  333.876624][   T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  334.306605][T12896] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.593666][  T967] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  335.356115][T13183] FAULT_INJECTION: forcing a failure.
[  335.356115][T13183] name failslab, interval 1, probability 0, space 0, times 0
[  335.368857][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.1.2544 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  335.368885][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  335.368898][T13183] Call Trace:
[  335.368906][T13183]  <TASK>
[  335.368915][T13183]  dump_stack_lvl+0x189/0x250
[  335.368954][T13183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.368985][T13183]  ? __pfx__printk+0x10/0x10
[  335.369009][T13183]  ? __pfx___might_resched+0x10/0x10
[  335.369030][T13183]  ? fs_reclaim_acquire+0x7d/0x100
[  335.369067][T13183]  should_fail_ex+0x414/0x560
[  335.369095][T13183]  should_failslab+0xa8/0x100
[  335.369126][T13183]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  335.369154][T13183]  ? __alloc_skb+0x112/0x2d0
[  335.369187][T13183]  __alloc_skb+0x112/0x2d0
[  335.369219][T13183]  alloc_skb_with_frags+0xca/0x890
[  335.369252][T13183]  ? do_raw_spin_lock+0x121/0x290
[  335.369288][T13183]  sock_alloc_send_pskb+0x857/0x990
[  335.369330][T13183]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  335.369349][T13183]  ? ref_tracker_alloc+0x2ae/0x460
[  335.369386][T13183]  ? __lock_acquire+0xaac/0xd20
[  335.369427][T13183]  __ip_append_data+0x2cfd/0x4100
[  335.369471][T13183]  ? __lock_acquire+0xaac/0xd20
[  335.369500][T13183]  ? __pfx_ping_getfrag+0x10/0x10
[  335.369548][T13183]  ? __pfx___ip_append_data+0x10/0x10
[  335.369570][T13183]  ? ipv4_mtu+0x4b2/0x5c0
[  335.369587][T13183]  ? ipv4_mtu+0x23/0x5c0
[  335.369606][T13183]  ? __pfx_ipv4_mtu+0x10/0x10
[  335.369624][T13183]  ? ip_setup_cork+0x577/0x9a0
[  335.369641][T13183]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.369667][T13183]  ip_append_data+0x10e/0x190
[  335.369693][T13183]  ? __pfx_ping_getfrag+0x10/0x10
[  335.369721][T13183]  ping_v4_sendmsg+0x1297/0x1740
[  335.369752][T13183]  ? ping_v4_sendmsg+0xa30/0x1740
[  335.369776][T13183]  ? ping_v4_sendmsg+0xb2d/0x1740
[  335.369811][T13183]  ? __pfx_ping_v4_sendmsg+0x10/0x10
[  335.369863][T13183]  ? __local_bh_enable_ip+0x12d/0x1c0
[  335.369883][T13183]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.369907][T13183]  ? __local_bh_enable_ip+0x12d/0x1c0
[  335.369935][T13183]  ? inet_sendmsg+0x14f/0x370
[  335.369961][T13183]  ? inet_sendmsg+0x2f4/0x370
[  335.369989][T13183]  __sock_sendmsg+0x19c/0x270
[  335.370017][T13183]  ____sys_sendmsg+0x505/0x830
[  335.370054][T13183]  ? __pfx_____sys_sendmsg+0x10/0x10
[  335.370095][T13183]  ? import_iovec+0x74/0xa0
[  335.370129][T13183]  ___sys_sendmsg+0x21f/0x2a0
[  335.370163][T13183]  ? __pfx____sys_sendmsg+0x10/0x10
[  335.370233][T13183]  ? __fget_files+0x2a/0x420
[  335.370261][T13183]  ? __fget_files+0x3a0/0x420
[  335.370300][T13183]  __x64_sys_sendmsg+0x19b/0x260
[  335.370334][T13183]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  335.370391][T13183]  ? do_syscall_64+0xba/0x210
[  335.370419][T13183]  do_syscall_64+0xf6/0x210
[  335.370444][T13183]  ? clear_bhb_loop+0x60/0xb0
[  335.370469][T13183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.370489][T13183] RIP: 0033:0x7fb7af78e969
[  335.370508][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.370525][T13183] RSP: 002b:00007fb7b057e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.370547][T13183] RAX: ffffffffffffffda RBX: 00007fb7af9b5fa0 RCX: 00007fb7af78e969
[  335.370562][T13183] RDX: 0000000024008004 RSI: 00002000000005c0 RDI: 0000000000000003
[  335.370575][T13183] RBP: 00007fb7b057e090 R08: 0000000000000000 R09: 0000000000000000
[  335.370588][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.370600][T13183] R13: 0000000000000000 R14: 00007fb7af9b5fa0 R15: 00007fff2a41e538
[  335.370632][T13183]  </TASK>
[  336.027728][T13190] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2545'.
[  336.597283][   T30] audit: type=1800 audit(1748352361.443:3): pid=13200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2546" name="memory.events" dev="tmpfs" ino=2705 res=0 errno=0
[  336.890439][   T30] audit: type=1804 audit(1748352361.663:4): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2546" name="/newroot/521/memory.events" dev="tmpfs" ino=2705 res=1 errno=0
[  336.965838][T13201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2547'.
[  338.923004][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  340.280835][  T967] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  341.303441][T13205] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  341.441086][T13197] lo speed is unknown, defaulting to 1000
[  341.554516][T12896] veth0_vlan: entered promiscuous mode
[  341.598000][T13214] netlink: 'syz.1.2550': attribute type 1 has an invalid length.
[  341.614409][T12896] veth1_vlan: entered promiscuous mode
[  341.636102][T13214] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2550'.
[  341.807965][T12896] veth0_macvtap: entered promiscuous mode
[  341.858637][T12896] veth1_macvtap: entered promiscuous mode
[  341.996314][T12896] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.050495][T12896] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.098563][T13221] block nbd0: NBD_DISCONNECT
[  342.175849][T13221] block nbd0: Disconnected due to user request.
[  342.192558][T13221] block nbd0: shutting down sockets
[  342.225864][T12896] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.266924][T12896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.297383][T12896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.316912][T12896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.532598][T13208] lo speed is unknown, defaulting to 1000
[  342.620323][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2553'.
[  342.629612][T13225] tc_dump_action: action bad kind
[  342.640808][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'.
[  342.675761][T12364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.683644][T12364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.024399][T13229] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2554'.
[  343.078158][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.103473][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'.
[  343.157734][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.392232][   T10] IPVS: starting estimator thread 0...
[  343.505756][T13235] IPVS: using max 28 ests per chain, 67200 per kthread
[  344.989133][T13236] !
: renamed from dummy0 (while UP)
[  345.536548][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2558'.
[  345.785817][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2558'.
[  346.041441][T13266] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  346.169559][T13279] wireguard0: entered promiscuous mode
[  346.482398][T13292] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  346.734216][T13245] lo speed is unknown, defaulting to 1000
[  347.163422][T13302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9
[  347.960799][   T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  348.898302][T13293] lo speed is unknown, defaulting to 1000
[  349.704732][T13292] lo speed is unknown, defaulting to 1000
[  350.521810][T13323] lo speed is unknown, defaulting to 1000
[  350.754199][T13342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2571'.
[  351.156554][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  351.270939][T13350] block nbd0: NBD_DISCONNECT
[  351.291728][T13350] block nbd0: Disconnected due to user request.
[  351.322037][T13350] block nbd0: shutting down sockets
[  352.253044][T13360] netlink: 'syz.0.2576': attribute type 58 has an invalid length.
[  352.295451][T13360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2576'.
[  352.370886][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2576'.
[  352.488732][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2576'.
[  352.555752][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2576'.
[  352.581478][T13361] nbd: device at index 64 is going down
[  353.077794][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.088248][T13264] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  353.273124][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'.
[  353.447856][T13380] team0: left allmulticast mode
[  353.465232][T13380] team_slave_0: left allmulticast mode
[  353.476838][T13380] team_slave_1: left allmulticast mode
[  353.531191][T13380] wg1: left promiscuous mode
[  353.536731][T13380] wg1: left allmulticast mode
[  353.572340][T13380] bridge1: left allmulticast mode
[  353.584224][T13380] ip6erspan0: left promiscuous mode
[  353.634718][T13373] lo speed is unknown, defaulting to 1000
[  353.761186][T13392] tipc: Started in network mode
[  353.795839][T13392] tipc: Node identity ac14140f, cluster identity 4711
[  353.802938][T13392] tipc: New replicast peer: 255.255.255.255
[  353.875658][T13392] tipc: Enabled bearer <udp:syz2>, priority 10
[  354.433940][T13391] vxcan1: entered allmulticast mode
[  354.513787][T13405] pim6reg1: entered promiscuous mode
[  354.519816][T13405] pim6reg1: entered allmulticast mode
[  354.809303][T13412] lo speed is unknown, defaulting to 1000
[  354.832411][   T30] audit: type=1800 audit(1748352379.673:5): pid=13407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2587" name="memory.events" dev="tmpfs" ino=53 res=0 errno=0
[  354.856848][ T5942] tipc: Node number set to 2886997007
[  354.921117][T13412] lo speed is unknown, defaulting to 1000
[  355.011898][T13412] lo speed is unknown, defaulting to 1000
[  355.058916][T13412] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  355.143117][T13412] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  355.462494][T13435] netlink: 'syz.5.2593': attribute type 21 has an invalid length.
[  355.815720][T13430] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2592'.
[  355.838471][T13412] lo speed is unknown, defaulting to 1000
[  355.894275][T13439] bridge0: entered promiscuous mode
[  355.916221][T13439] vlan2: entered promiscuous mode
[  355.980960][T13412] lo speed is unknown, defaulting to 1000
[  356.017514][T13412] lo speed is unknown, defaulting to 1000
[  356.029222][T13412] lo speed is unknown, defaulting to 1000
[  356.037647][T13412] lo speed is unknown, defaulting to 1000
[  356.049381][T13412] lo speed is unknown, defaulting to 1000
[  356.165134][T13445] FAULT_INJECTION: forcing a failure.
[  356.165134][T13445] name failslab, interval 1, probability 0, space 0, times 0
[  356.178816][T13445] CPU: 1 UID: 0 PID: 13445 Comm: syz.5.2597 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  356.178845][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  356.178858][T13445] Call Trace:
[  356.178867][T13445]  <TASK>
[  356.178876][T13445]  dump_stack_lvl+0x189/0x250
[  356.178915][T13445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.178944][T13445]  ? __pfx__printk+0x10/0x10
[  356.178965][T13445]  ? stack_trace_save+0x9c/0xe0
[  356.178992][T13445]  ? stack_depot_save_flags+0x40/0x910
[  356.179021][T13445]  should_fail_ex+0x414/0x560
[  356.179049][T13445]  should_failslab+0xa8/0x100
[  356.179080][T13445]  kmem_cache_alloc_noprof+0x73/0x3c0
[  356.179107][T13445]  ? radix_tree_node_alloc+0x7e/0x3a0
[  356.179135][T13445]  radix_tree_node_alloc+0x7e/0x3a0
[  356.179164][T13445]  idr_get_free+0x2b3/0xa70
[  356.179206][T13445]  idr_alloc_u32+0x159/0x2d0
[  356.179236][T13445]  ? __pfx_idr_alloc_u32+0x10/0x10
[  356.179262][T13445]  ? do_raw_spin_lock+0x121/0x290
[  356.179296][T13445]  idr_alloc_cyclic+0x9b/0x1b0
[  356.179326][T13445]  bpf_map_alloc_id+0x40/0xe0
[  356.179356][T13445]  map_create+0xd59/0x1150
[  356.179388][T13445]  ? security_bpf+0x7e/0x300
[  356.179413][T13445]  __sys_bpf+0x67e/0x860
[  356.179442][T13445]  ? __pfx___sys_bpf+0x10/0x10
[  356.179483][T13445]  ? ksys_write+0x1f0/0x250
[  356.179522][T13445]  __x64_sys_bpf+0x7c/0x90
[  356.179547][T13445]  do_syscall_64+0xf6/0x210
[  356.179572][T13445]  ? clear_bhb_loop+0x60/0xb0
[  356.179597][T13445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.179616][T13445] RIP: 0033:0x7f3fdeb8e969
[  356.179635][T13445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.179652][T13445] RSP: 002b:00007f3fdfaa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  356.179674][T13445] RAX: ffffffffffffffda RBX: 00007f3fdedb5fa0 RCX: 00007f3fdeb8e969
[  356.179689][T13445] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000
[  356.179702][T13445] RBP: 00007f3fdfaa5090 R08: 0000000000000000 R09: 0000000000000000
[  356.179714][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.179726][T13445] R13: 0000000000000001 R14: 00007f3fdedb5fa0 R15: 00007ffe1a5fdbe8
[  356.179759][T13445]  </TASK>
[  356.916417][   T53] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  357.011988][T13459] wireguard0: entered promiscuous mode
[  357.409598][T13487] sctp: [Deprecated]: syz.0.2609 (pid 13487) Use of struct sctp_assoc_value in delayed_ack socket option.
[  357.409598][T13487] Use struct sctp_sack_info instead
[  357.462831][T13487] netlink: 'syz.0.2609': attribute type 1 has an invalid length.
[  357.491727][T13490] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20003
[  357.532594][T13487] 8021q: adding VLAN 0 to HW filter on device bond7
[  357.647488][T13482] bond7: (slave gretap1): making interface the new active one
[  357.658467][T13482] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  357.771744][T13497] vlan5: entered promiscuous mode
[  357.914434][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2620'.
[  358.132434][T13518] lo speed is unknown, defaulting to 1000
[  358.404871][T13537] FAULT_INJECTION: forcing a failure.
[  358.404871][T13537] name failslab, interval 1, probability 0, space 0, times 0
[  358.443004][T13537] CPU: 1 UID: 0 PID: 13537 Comm: syz.1.2628 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  358.443036][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  358.443048][T13537] Call Trace:
[  358.443056][T13537]  <TASK>
[  358.443072][T13537]  dump_stack_lvl+0x189/0x250
[  358.443111][T13537]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.443140][T13537]  ? __pfx__printk+0x10/0x10
[  358.443167][T13537]  ? __pfx___might_resched+0x10/0x10
[  358.443187][T13537]  ? fs_reclaim_acquire+0x7d/0x100
[  358.443224][T13537]  should_fail_ex+0x414/0x560
[  358.443251][T13537]  should_failslab+0xa8/0x100
[  358.443281][T13537]  __kmalloc_noprof+0xcb/0x4f0
[  358.443304][T13537]  ? kfree+0x4d/0x440
[  358.443324][T13537]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  358.443356][T13537]  tomoyo_realpath_from_path+0xe3/0x5d0
[  358.443385][T13537]  ? tomoyo_domain+0xd9/0x130
[  358.443419][T13537]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  358.443442][T13537]  tomoyo_path_number_perm+0x1e8/0x5a0
[  358.443467][T13537]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  358.443508][T13537]  ? __lock_acquire+0xaac/0xd20
[  358.443558][T13537]  ? __fget_files+0x2a/0x420
[  358.443591][T13537]  ? __fget_files+0x3a0/0x420
[  358.443616][T13537]  ? __fget_files+0x2a/0x420
[  358.443647][T13537]  security_file_ioctl+0xcb/0x2d0
[  358.443669][T13537]  __se_sys_ioctl+0x47/0x170
[  358.443695][T13537]  do_syscall_64+0xf6/0x210
[  358.443727][T13537]  ? clear_bhb_loop+0x60/0xb0
[  358.443753][T13537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.443771][T13537] RIP: 0033:0x7fb7af78e969
[  358.443789][T13537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.443806][T13537] RSP: 002b:00007fb7b057e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  358.443828][T13537] RAX: ffffffffffffffda RBX: 00007fb7af9b5fa0 RCX: 00007fb7af78e969
[  358.443842][T13537] RDX: 0000200000000440 RSI: 000000000000541b RDI: 0000000000000003
[  358.443854][T13537] RBP: 00007fb7b057e090 R08: 0000000000000000 R09: 0000000000000000
[  358.443866][T13537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  358.443878][T13537] R13: 0000000000000000 R14: 00007fb7af9b5fa0 R15: 00007fff2a41e538
[  358.443909][T13537]  </TASK>
[  358.443918][T13537] ERROR: Out of memory at tomoyo_realpath_from_path.
[  358.838017][T12364] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  358.888453][T13548] syz_tun: tun_net_xmit 86
[  358.892400][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2631'.
[  358.962173][T13541] batadv0: entered promiscuous mode
[  359.000662][T13541] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  359.036644][T13541] batadv0: left promiscuous mode
[  359.060288][T13550] veth0_to_bond: entered allmulticast mode
[  359.069803][T13518] lo speed is unknown, defaulting to 1000
[  359.429424][T13566] wireguard0: entered promiscuous mode
[  359.509521][T13570] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.553195][T13574] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2642'.
[  359.589153][T13574] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2642'.
[  359.662468][T13570] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.721230][T13577] FAULT_INJECTION: forcing a failure.
[  359.721230][T13577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.768237][T13577] CPU: 0 UID: 0 PID: 13577 Comm: syz.0.2643 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  359.768270][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  359.768284][T13577] Call Trace:
[  359.768292][T13577]  <TASK>
[  359.768301][T13577]  dump_stack_lvl+0x189/0x250
[  359.768336][T13577]  ? __lock_acquire+0xaac/0xd20
[  359.768369][T13577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.768398][T13577]  ? __pfx__printk+0x10/0x10
[  359.768419][T13577]  ? __might_fault+0xb0/0x130
[  359.768473][T13577]  should_fail_ex+0x414/0x560
[  359.768502][T13577]  _copy_from_iter+0x1db/0x15a0
[  359.768541][T13577]  ? policy_nodemask+0x27c/0x720
[  359.768568][T13577]  ? __pfx__copy_from_iter+0x10/0x10
[  359.768602][T13577]  ? set_page_refcounted+0xa0/0x1e0
[  359.768631][T13577]  ? page_copy_sane+0x4e/0x280
[  359.768660][T13577]  copy_page_from_iter+0x7b/0x100
[  359.768690][T13577]  tun_get_user+0x1b13/0x3c20
[  359.768726][T13577]  ? tun_get_user+0x687/0x3c20
[  359.768772][T13577]  ? __pfx_tun_get_user+0x10/0x10
[  359.768800][T13577]  ? aa_file_perm+0x11f/0xed0
[  359.768825][T13577]  ? aa_file_perm+0x3e7/0xed0
[  359.768872][T13577]  ? ref_tracker_alloc+0x318/0x460
[  359.768900][T13577]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  359.768930][T13577]  ? tun_get+0x1c/0x2f0
[  359.768966][T13577]  ? tun_get+0x1c/0x2f0
[  359.768995][T13577]  ? tun_get+0x1c/0x2f0
[  359.769030][T13577]  tun_chr_write_iter+0x113/0x200
[  359.769064][T13577]  vfs_write+0x54b/0xa90
[  359.769095][T13577]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  359.769126][T13577]  ? __pfx_vfs_write+0x10/0x10
[  359.769162][T13577]  ? __fget_files+0x2a/0x420
[  359.769200][T13577]  ksys_write+0x145/0x250
[  359.769223][T13577]  ? rcu_is_watching+0x15/0xb0
[  359.769244][T13577]  ? __pfx_ksys_write+0x10/0x10
[  359.769273][T13577]  ? do_syscall_64+0xba/0x210
[  359.769301][T13577]  do_syscall_64+0xf6/0x210
[  359.769325][T13577]  ? clear_bhb_loop+0x60/0xb0
[  359.769351][T13577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.769370][T13577] RIP: 0033:0x7f74a6f8d41f
[  359.769389][T13577] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  359.769406][T13577] RSP: 002b:00007f74a7d92000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  359.769429][T13577] RAX: ffffffffffffffda RBX: 00007f74a71b5fa0 RCX: 00007f74a6f8d41f
[  359.769443][T13577] RDX: 0000000000000056 RSI: 0000200000000200 RDI: 00000000000000c8
[  359.769456][T13577] RBP: 00007f74a7d92090 R08: 0000000000000000 R09: 0000000000000000
[  359.769469][T13577] R10: 0000000000000056 R11: 0000000000000293 R12: 0000000000000001
[  359.769482][T13577] R13: 0000000000000000 R14: 00007f74a71b5fa0 R15: 00007ffc510a8b88
[  359.769514][T13577]  </TASK>
[  360.046481][    C0] syz_tun: tun_net_xmit 86
[  360.108640][T13570] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.180538][T13581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2645'.
[  360.182121][T13570] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.447282][T13570] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.510992][T13570] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.577773][T13570] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.615945][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2650'.
[  360.638904][T13570] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.835915][T13609] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2653'.
[  361.003707][T13612] wireguard1: entered promiscuous mode
[  361.075227][    C0] syz_tun: tun_net_xmit 86
[  361.316515][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2659'.
[  361.364252][T13626] batadv0: entered promiscuous mode
[  361.376715][T13626] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  361.428791][T13626] batadv0: left promiscuous mode
[  361.677528][T13665] block nbd0: NBD_DISCONNECT
[  361.706120][T13665] block nbd0: Disconnected due to user request.
[  361.712615][T13665] block nbd0: shutting down sockets
[  361.866900][T13670] wireguard0: entered promiscuous mode
[  362.136490][T13687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2677'.
[  362.341334][T13697] lo speed is unknown, defaulting to 1000
[  362.376915][T13704] FAULT_INJECTION: forcing a failure.
[  362.376915][T13704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.395755][T13705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'.
[  362.445122][T13704] CPU: 0 UID: 0 PID: 13704 Comm: syz.5.2682 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  362.445154][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  362.445168][T13704] Call Trace:
[  362.445176][T13704]  <TASK>
[  362.445186][T13704]  dump_stack_lvl+0x189/0x250
[  362.445218][T13704]  ? __lock_acquire+0xaac/0xd20
[  362.445252][T13704]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.445281][T13704]  ? __pfx__printk+0x10/0x10
[  362.445302][T13704]  ? __might_fault+0xb0/0x130
[  362.445341][T13704]  should_fail_ex+0x414/0x560
[  362.445368][T13704]  _copy_from_user+0x2d/0xb0
[  362.445399][T13704]  ___sys_sendmsg+0x158/0x2a0
[  362.445433][T13704]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.445502][T13704]  ? __fget_files+0x2a/0x420
[  362.445527][T13704]  ? __fget_files+0x3a0/0x420
[  362.445571][T13704]  __x64_sys_sendmsg+0x19b/0x260
[  362.445606][T13704]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  362.445652][T13704]  ? do_syscall_64+0xba/0x210
[  362.445679][T13704]  do_syscall_64+0xf6/0x210
[  362.445702][T13704]  ? clear_bhb_loop+0x60/0xb0
[  362.445726][T13704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.445746][T13704] RIP: 0033:0x7f3fdeb8e969
[  362.445764][T13704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.445781][T13704] RSP: 002b:00007f3fdfa63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.445802][T13704] RAX: ffffffffffffffda RBX: 00007f3fdedb6160 RCX: 00007f3fdeb8e969
[  362.445816][T13704] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000009
[  362.445829][T13704] RBP: 00007f3fdfa63090 R08: 0000000000000000 R09: 0000000000000000
[  362.445841][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.445853][T13704] R13: 0000000000000001 R14: 00007f3fdedb6160 R15: 00007ffe1a5fdbe8
[  362.445884][T13704]  </TASK>
[  362.686241][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  362.745613][ T5140] block nbd0: Receive control failed (result -104)
[  362.891765][T13721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2683'.
[  363.124166][T13697] lo speed is unknown, defaulting to 1000
[  363.216703][T13726] FAULT_INJECTION: forcing a failure.
[  363.216703][T13726] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.253805][T13726] CPU: 0 UID: 0 PID: 13726 Comm: syz.5.2690 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  363.253838][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  363.253850][T13726] Call Trace:
[  363.253859][T13726]  <TASK>
[  363.253868][T13726]  dump_stack_lvl+0x189/0x250
[  363.253908][T13726]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.253938][T13726]  ? __pfx__printk+0x10/0x10
[  363.253973][T13726]  should_fail_ex+0x414/0x560
[  363.254002][T13726]  _copy_to_user+0x31/0xb0
[  363.254035][T13726]  simple_read_from_buffer+0xe1/0x170
[  363.254066][T13726]  proc_fail_nth_read+0x1df/0x250
[  363.254100][T13726]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  363.254132][T13726]  ? rw_verify_area+0x258/0x650
[  363.254155][T13726]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  363.254185][T13726]  vfs_read+0x1fd/0x980
[  363.254213][T13726]  ? __pfx___mutex_lock+0x10/0x10
[  363.254236][T13726]  ? __pfx_vfs_read+0x10/0x10
[  363.254261][T13726]  ? __fget_files+0x2a/0x420
[  363.254303][T13726]  ? __fget_files+0x3a0/0x420
[  363.254329][T13726]  ? __fget_files+0x2a/0x420
[  363.254367][T13726]  ksys_read+0x145/0x250
[  363.254389][T13726]  ? __fget_files+0x2a/0x420
[  363.254417][T13726]  ? __pfx_ksys_read+0x10/0x10
[  363.254445][T13726]  ? do_syscall_64+0xba/0x210
[  363.254474][T13726]  do_syscall_64+0xf6/0x210
[  363.254498][T13726]  ? clear_bhb_loop+0x60/0xb0
[  363.254534][T13726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.254554][T13726] RIP: 0033:0x7f3fdeb8d37c
[  363.254572][T13726] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  363.254590][T13726] RSP: 002b:00007f3fdfa84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  363.254618][T13726] RAX: ffffffffffffffda RBX: 00007f3fdedb6080 RCX: 00007f3fdeb8d37c
[  363.254633][T13726] RDX: 000000000000000f RSI: 00007f3fdfa840a0 RDI: 0000000000000004
[  363.254646][T13726] RBP: 00007f3fdfa84090 R08: 0000000000000000 R09: 0000000000000000
[  363.254658][T13726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.254670][T13726] R13: 0000000000000001 R14: 00007f3fdedb6080 R15: 00007ffe1a5fdbe8
[  363.254704][T13726]  </TASK>
[  363.794397][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'.
[  363.834903][T13741] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2694'.
[  363.861467][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2693'.
[  363.976001][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  364.011851][T13742] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  364.083962][T13747] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2696'.
[  364.369366][T13756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.437610][T13758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2699'.
[  364.479499][T13758] Cannot find del_set index 4 as target
[  364.488029][T13758] delete_channel: no stack
[  365.055433][T13777] wireguard1: entered promiscuous mode
[  365.343914][T13789] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  365.462566][T13790] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  365.724525][T13812] netlink: 'syz.4.2719': attribute type 11 has an invalid length.
[  365.745842][T13813] netlink: 'syz.0.2718': attribute type 1 has an invalid length.
[  365.749039][T13815] netlink: 'syz.1.2721': attribute type 1 has an invalid length.
[  365.766864][T13812] syz_tun: tun_net_xmit 86
[  365.816445][T13813] batadv1: entered promiscuous mode
[  365.832888][T13813] batadv1: entered allmulticast mode
[  365.883365][T13818] __nla_validate_parse: 7 callbacks suppressed
[  365.883387][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2722'.
[  365.905676][T13822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2723'.
[  365.946186][T13818] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  365.951741][T13824] ieee802154 phy1 wpan1: encryption failed: -90
[  365.956425][T13818] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  365.971101][T13818] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  365.980446][T13818] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.986457][T13825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2718'.
[  366.013982][T13818] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.023844][T13818] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.033852][T13818] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.043732][T13818] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.070229][T13813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2718'.
[  366.731812][T13844] wireguard2: entered promiscuous mode
[  366.814832][T13837] lo speed is unknown, defaulting to 1000
[  366.835234][    C0] syz_tun: tun_net_xmit 86
[  366.901994][T13852] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  367.002654][T13855] x_tables: duplicate underflow at hook 3
[  367.216086][T13837] lo speed is unknown, defaulting to 1000
[  367.251425][T13861] block nbd0: NBD_DISCONNECT
[  367.268913][T13861] block nbd0: Send disconnect failed -32
[  367.285751][T13861] block nbd0: shutting down sockets
[  367.369374][ T7052] IPVS: starting estimator thread 0...
[  367.492170][T13878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2741'.
[  367.502652][T13874] IPVS: using max 29 ests per chain, 69600 per kthread
[  367.863844][ T5140] block nbd1: Receive control failed (result -104)
[  367.875529][    C0] syz_tun: tun_net_xmit 86
[  367.933798][T13894] syz_tun: tun_net_xmit 62
[  368.361443][T13388] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  368.403638][T13388] syz_tun: tun_net_xmit 110
[  368.441530][T12364] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  368.534513][T13914] netlink: 'syz.3.2753': attribute type 10 has an invalid length.
[  368.558231][T13914] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  368.576041][T13914] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  368.610971][T13916] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  368.899758][T13929] wireguard2: entered promiscuous mode
[  369.156009][T13388] syz_tun: tun_net_xmit 110
[  369.180984][T13946] netlink: 'syz.5.2766': attribute type 1 has an invalid length.
[  369.243588][T13946] netlink: 'syz.5.2766': attribute type 2 has an invalid length.
[  369.251842][T13388] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  369.525241][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'.
[  369.543923][T13968] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  369.659532][T13967] lo speed is unknown, defaulting to 1000
[  369.721060][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  369.780756][T13982] veth1_macvtap: left promiscuous mode
[  369.786905][T13982] macsec0: entered allmulticast mode
[  369.845887][T13982] veth1_macvtap: entered promiscuous mode
[  369.859934][T13982] veth1_macvtap: entered allmulticast mode
[  369.880215][T13982] macsec0: left allmulticast mode
[  369.905658][T13982] veth1_macvtap: left allmulticast mode
[  369.988143][T13991] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  370.095461][T13993] wireguard0: entered promiscuous mode
[  370.142369][T13993] hsr0: left allmulticast mode
[  370.162194][T13993] hsr_slave_0: left allmulticast mode
[  370.167880][T13993] hsr_slave_1: left allmulticast mode
[  370.219167][T13967] lo speed is unknown, defaulting to 1000
[  370.317457][T13996] wireguard1: entered promiscuous mode
[  370.351506][T14000] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2786'.
[  370.379596][T14000] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2786'.
[  370.397750][T14000] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2786'.
[  370.765609][T14019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2792'.
[  370.948558][T14028] x_tables: duplicate underflow at hook 2
[  370.954631][T14028] x_tables: duplicate underflow at hook 2
[  370.961354][T14028] x_tables: duplicate underflow at hook 2
[  370.969100][T14028] x_tables: duplicate underflow at hook 2
[  370.983060][T14028] x_tables: duplicate underflow at hook 2
[  370.997335][ T3518] wlan1: Trigger new scan to find an IBSS to join
[  370.998106][T14028] x_tables: duplicate underflow at hook 2
[  371.032507][T14028] x_tables: duplicate underflow at hook 2
[  371.049293][T14028] x_tables: duplicate underflow at hook 2
[  371.070482][T14028] x_tables: duplicate underflow at hook 2
[  371.821774][T14039] team0 (unregistering): Port device team_slave_0 removed
[  371.837455][T14039] team0 (unregistering): Port device team_slave_1 removed
[  371.898414][T14054] FAULT_INJECTION: forcing a failure.
[  371.898414][T14054] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.951280][T14054] CPU: 0 UID: 0 PID: 14054 Comm: syz.0.2803 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  371.951312][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  371.951329][T14054] Call Trace:
[  371.951342][T14054]  <TASK>
[  371.951350][T14054]  dump_stack_lvl+0x189/0x250
[  371.951384][T14054]  ? __lock_acquire+0xaac/0xd20
[  371.951417][T14054]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.951445][T14054]  ? __pfx__printk+0x10/0x10
[  371.951466][T14054]  ? __might_fault+0xb0/0x130
[  371.951506][T14054]  should_fail_ex+0x414/0x560
[  371.951535][T14054]  _copy_from_iter+0x1db/0x15a0
[  371.951570][T14054]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  371.951594][T14054]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  371.951631][T14054]  ? __pfx__copy_from_iter+0x10/0x10
[  371.951659][T14054]  ? __build_skb_around+0x257/0x3e0
[  371.951692][T14054]  ? netlink_sendmsg+0x642/0xb30
[  371.951719][T14054]  ? skb_put+0x11b/0x210
[  371.951752][T14054]  netlink_sendmsg+0x6b2/0xb30
[  371.951792][T14054]  ? __pfx_netlink_sendmsg+0x10/0x10
[  371.951825][T14054]  ? aa_sock_msg_perm+0x94/0x160
[  371.951852][T14054]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  371.951877][T14054]  ? __pfx_netlink_sendmsg+0x10/0x10
[  371.951907][T14054]  __sock_sendmsg+0x21c/0x270
[  371.951934][T14054]  ____sys_sendmsg+0x505/0x830
[  371.951971][T14054]  ? __pfx_____sys_sendmsg+0x10/0x10
[  371.952013][T14054]  ? import_iovec+0x74/0xa0
[  371.952047][T14054]  ___sys_sendmsg+0x21f/0x2a0
[  371.952081][T14054]  ? __pfx____sys_sendmsg+0x10/0x10
[  371.952151][T14054]  ? __fget_files+0x2a/0x420
[  371.952179][T14054]  ? __fget_files+0x3a0/0x420
[  371.952218][T14054]  __x64_sys_sendmsg+0x19b/0x260
[  371.952253][T14054]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  371.952307][T14054]  ? do_syscall_64+0xba/0x210
[  371.952335][T14054]  do_syscall_64+0xf6/0x210
[  371.952360][T14054]  ? clear_bhb_loop+0x60/0xb0
[  371.952386][T14054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.952406][T14054] RIP: 0033:0x7f74a6f8e969
[  371.952424][T14054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.952442][T14054] RSP: 002b:00007f74a7d92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  371.952463][T14054] RAX: ffffffffffffffda RBX: 00007f74a71b5fa0 RCX: 00007f74a6f8e969
[  371.952479][T14054] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  371.952492][T14054] RBP: 00007f74a7d92090 R08: 0000000000000000 R09: 0000000000000000
[  371.952504][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.952517][T14054] R13: 0000000000000000 R14: 00007f74a71b5fa0 R15: 00007ffc510a8b88
[  371.952549][T14054]  </TASK>
[  372.422246][T14051] lo speed is unknown, defaulting to 1000
[  372.466733][T14063] netlink: 'syz.5.2805': attribute type 2 has an invalid length.
[  372.474529][T14063] netlink: 'syz.5.2805': attribute type 1 has an invalid length.
[  372.505364][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2805'.
[  372.529629][T14065] bridge0: entered promiscuous mode
[  372.535308][T14065] bridge0: entered allmulticast mode
[  372.557737][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2804'.
[  372.604544][T14068] bridge_slave_1: left allmulticast mode
[  372.635550][T14068] bridge_slave_1: left promiscuous mode
[  372.641580][T14068] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.198940][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2812'.
[  373.247791][T14051] lo speed is unknown, defaulting to 1000
[  373.309788][T14085] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  373.421993][T14080] lo speed is unknown, defaulting to 1000
[  373.620277][T14089] syzkaller0: entered promiscuous mode
[  373.628095][T14089] syzkaller0: entered allmulticast mode
[  373.789960][T14102] netlink: 'syz.5.2819': attribute type 1 has an invalid length.
[  373.828376][T14102] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2819'.
[  374.207131][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  374.837320][   T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  374.916590][   T13] wlan1: Trigger new scan to find an IBSS to join
[  375.579019][T14080] lo speed is unknown, defaulting to 1000
[  375.878694][   T53] wlan1: Creating new IBSS network, BSSID 06:ee:8e:9c:29:4b
[  376.007976][T14127] netlink: 'syz.4.2825': attribute type 13 has an invalid length.
[  376.066857][T14127] macvtap0: entered promiscuous mode
[  376.103807][T14127] macvtap0: refused to change device tx_queue_len
[  376.530299][T14131] team0 (unregistering): Port device team_slave_0 removed
[  376.564106][T14131] team0 (unregistering): Port device team_slave_1 removed
[  376.609928][T14134] batadv_slave_1: entered promiscuous mode
[  376.619317][T14135] batadv_slave_1: left promiscuous mode
[  376.649996][T14139] macsec1: entered allmulticast mode
[  376.660681][T14139] batadv0: entered allmulticast mode
[  376.968291][T14150] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2835'.
[  376.977887][T14153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2837'.
[  377.121462][T14158] lo speed is unknown, defaulting to 1000
[  377.420505][T14170] wireguard2: entered promiscuous mode
[  377.480246][T14158] lo speed is unknown, defaulting to 1000
[  377.770509][T14178] lo speed is unknown, defaulting to 1000
[  378.675258][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  378.686249][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.775364][T14178] lo speed is unknown, defaulting to 1000
[  379.075370][ T5838] Bluetooth: hci5: command 0x0405 tx timeout
[  379.200828][   T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.288664][T14178] ------------[ cut here ]------------
[  379.294402][T14178] refcount_t: underflow; use-after-free.
[  379.301073][T14178] WARNING: CPU: 1 PID: 14178 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[  379.311309][T14178] Modules linked in:
[  379.317173][T14178] CPU: 1 UID: 0 PID: 14178 Comm: syz.1.2846 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  379.325596][ T1150] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  379.330118][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.347544][T14178] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  379.353724][T14178] Code: c0 aa c1 8b e8 a7 5e cb fc 90 0f 0b 90 90 eb d7 e8 1b 02 07 fd c6 05 b5 ba b0 0a 01 90 48 c7 c7 20 ab c1 8b e8 87 5e cb fc 90 <0f> 0b 90 90 eb b7 e8 fb 01 07 fd c6 05 92 ba b0 0a 01 90 48 c7 c7
[  379.374105][T14178] RSP: 0018:ffffc9000b4bf5b8 EFLAGS: 00010246
[  379.380861][T14178] RAX: 7d60a1932ce8b200 RBX: 0000000000000003 RCX: ffff88807e443c00
[  379.389297][T14178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  379.397797][T14178] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  379.406405][T14178] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: ffff8880338b9000
[  379.414428][T14178] R13: ffff88804f1d3c60 R14: ffff88804f1d3c78 R15: dffffc0000000000
[  379.423086][T14178] FS:  0000000000000000(0000) GS:ffff8881261b0000(0000) knlGS:0000000000000000
[  379.432553][T14178] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  379.439774][T14178] CR2: 0000555d560cefb0 CR3: 000000002fe84000 CR4: 00000000003526f0
[  379.448296][T14178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  379.456551][T14178] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  379.464556][T14178] Call Trace:
[  379.467939][T14178]  <TASK>
[  379.470897][T14178]  klist_dec_and_del+0x3c7/0x3d0
[  379.476163][T14178]  klist_remove+0x1bd/0x340
[  379.480716][T14178]  ? __pfx_klist_children_put+0x10/0x10
[  379.486950][T14178]  ? __pfx_klist_remove+0x10/0x10
[  379.492028][T14178]  ? __pfx_kobject_move+0x10/0x10
[  379.497564][T14178]  ? get_device_parent+0x366/0x3a0
[  379.502703][T14178]  device_move+0x193/0x700
[  379.507689][T14178]  hci_conn_del_sysfs+0xb8/0x170
[  379.512757][T14178]  hci_conn_del+0x8ff/0xcb0
[  379.517914][T14178]  hci_conn_hash_flush+0x191/0x230
[  379.523212][T14178]  hci_dev_close_sync+0xaef/0x1330
[  379.528972][T14178]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  379.534557][T14178]  ? up_write+0x1c4/0x420
[  379.539458][T14178]  hci_unregister_dev+0x206/0x500
[  379.544512][T14178]  vhci_release+0x80/0xd0
[  379.549389][T14178]  ? __pfx_vhci_release+0x10/0x10
[  379.554438][T14178]  __fput+0x449/0xa70
[  379.559424][T14178]  task_work_run+0x1d1/0x260
[  379.564104][T14178]  ? __pfx_task_work_run+0x10/0x10
[  379.569832][T14178]  ? kmem_cache_free+0x192/0x3f0
[  379.574839][T14178]  do_exit+0x8d6/0x2550
[  379.579577][T14178]  ? do_raw_spin_lock+0x121/0x290
[  379.584642][T14178]  ? __pfx_do_exit+0x10/0x10
[  379.589795][T14178]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  379.595786][T14178]  ? cgroup_freezing+0x20/0x360
[  379.600688][T14178]  do_group_exit+0x21c/0x2d0
[  379.605882][T14178]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.611127][T14178]  get_signal+0x1286/0x1340
[  379.616228][T14178]  arch_do_signal_or_restart+0x95/0x780
[  379.621790][T14178]  ? ksys_unshare+0x7b7/0x8c0
[  379.627275][T14178]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  379.633480][T14178]  ? local_irq_enable_exit_to_user+0x5/0x10
[  379.640080][T14178]  syscall_exit_to_user_mode+0x8b/0x120
[  379.646206][T14178]  do_syscall_64+0x103/0x210
[  379.650852][T14178]  ? clear_bhb_loop+0x60/0xb0
[  379.656155][T14178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.662076][T14178] RIP: 0033:0x7fb7af78e969
[  379.666989][T14178] Code: Unable to access opcode bytes at 0x7fb7af78e93f.
[  379.674014][T14178] RSP: 002b:00007fb7b057e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  379.682978][T14178] RAX: 0000000000000000 RBX: 00007fb7af9b5fa0 RCX: 00007fb7af78e969
[  379.691555][T14178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  379.700039][T14178] RBP: 00007fb7af810ab1 R08: 0000000000000000 R09: 0000000000000000
[  379.708672][T14178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.717619][T14178] R13: 0000000000000000 R14: 00007fb7af9b5fa0 R15: 00007fff2a41e538
[  379.726499][T14178]  </TASK>
[  379.729563][T14178] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  379.736893][T14178] CPU: 1 UID: 0 PID: 14178 Comm: syz.1.2846 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) 
[  379.748987][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.759135][T14178] Call Trace:
[  379.762420][T14178]  <TASK>
[  379.765374][T14178]  dump_stack_lvl+0x99/0x250
[  379.769987][T14178]  ? __asan_memcpy+0x40/0x70
[  379.774591][T14178]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.779831][T14178]  ? __pfx__printk+0x10/0x10
[  379.784435][T14178]  panic+0x2db/0x790
[  379.788371][T14178]  ? __pfx_panic+0x10/0x10
[  379.792842][T14178]  __warn+0x31b/0x4b0
[  379.796849][T14178]  ? refcount_warn_saturate+0x11a/0x1d0
[  379.802453][T14178]  ? refcount_warn_saturate+0x11a/0x1d0
[  379.808012][T14178]  report_bug+0x2be/0x4f0
[  379.812353][T14178]  ? refcount_warn_saturate+0x11a/0x1d0
[  379.817924][T14178]  ? refcount_warn_saturate+0x11a/0x1d0
[  379.823486][T14178]  ? refcount_warn_saturate+0x11c/0x1d0
[  379.829052][T14178]  handle_bug+0x84/0x160
[  379.833513][T14178]  exc_invalid_op+0x1a/0x50
[  379.838061][T14178]  asm_exc_invalid_op+0x1a/0x20
[  379.843020][T14178] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  379.849193][T14178] Code: c0 aa c1 8b e8 a7 5e cb fc 90 0f 0b 90 90 eb d7 e8 1b 02 07 fd c6 05 b5 ba b0 0a 01 90 48 c7 c7 20 ab c1 8b e8 87 5e cb fc 90 <0f> 0b 90 90 eb b7 e8 fb 01 07 fd c6 05 92 ba b0 0a 01 90 48 c7 c7
[  379.868826][T14178] RSP: 0018:ffffc9000b4bf5b8 EFLAGS: 00010246
[  379.874941][T14178] RAX: 7d60a1932ce8b200 RBX: 0000000000000003 RCX: ffff88807e443c00
[  379.882942][T14178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  379.890953][T14178] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  379.899040][T14178] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: ffff8880338b9000
[  379.907043][T14178] R13: ffff88804f1d3c60 R14: ffff88804f1d3c78 R15: dffffc0000000000
[  379.915066][T14178]  ? refcount_warn_saturate+0x119/0x1d0
[  379.920635][T14178]  klist_dec_and_del+0x3c7/0x3d0
[  379.925594][T14178]  klist_remove+0x1bd/0x340
[  379.930111][T14178]  ? __pfx_klist_children_put+0x10/0x10
[  379.935681][T14178]  ? __pfx_klist_remove+0x10/0x10
[  379.940844][T14178]  ? __pfx_kobject_move+0x10/0x10
[  379.945921][T14178]  ? get_device_parent+0x366/0x3a0
[  379.951050][T14178]  device_move+0x193/0x700
[  379.955664][T14178]  hci_conn_del_sysfs+0xb8/0x170
[  379.960633][T14178]  hci_conn_del+0x8ff/0xcb0
[  379.965162][T14178]  hci_conn_hash_flush+0x191/0x230
[  379.970310][T14178]  hci_dev_close_sync+0xaef/0x1330
[  379.975463][T14178]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  379.981120][T14178]  ? up_write+0x1c4/0x420
[  379.985508][T14178]  hci_unregister_dev+0x206/0x500
[  379.990748][T14178]  vhci_release+0x80/0xd0
[  379.995094][T14178]  ? __pfx_vhci_release+0x10/0x10
[  380.000127][T14178]  __fput+0x449/0xa70
[  380.004130][T14178]  task_work_run+0x1d1/0x260
[  380.008738][T14178]  ? __pfx_task_work_run+0x10/0x10
[  380.013865][T14178]  ? kmem_cache_free+0x192/0x3f0
[  380.018824][T14178]  do_exit+0x8d6/0x2550
[  380.023004][T14178]  ? do_raw_spin_lock+0x121/0x290
[  380.028041][T14178]  ? __pfx_do_exit+0x10/0x10
[  380.032645][T14178]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  380.038030][T14178]  ? cgroup_freezing+0x20/0x360
[  380.042906][T14178]  do_group_exit+0x21c/0x2d0
[  380.047511][T14178]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.052734][T14178]  get_signal+0x1286/0x1340
[  380.057262][T14178]  arch_do_signal_or_restart+0x95/0x780
[  380.062824][T14178]  ? ksys_unshare+0x7b7/0x8c0
[  380.067600][T14178]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  380.073774][T14178]  ? local_irq_enable_exit_to_user+0x5/0x10
[  380.079701][T14178]  syscall_exit_to_user_mode+0x8b/0x120
[  380.085353][T14178]  do_syscall_64+0x103/0x210
[  380.090225][T14178]  ? clear_bhb_loop+0x60/0xb0
[  380.094921][T14178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.100926][T14178] RIP: 0033:0x7fb7af78e969
[  380.105353][T14178] Code: Unable to access opcode bytes at 0x7fb7af78e93f.
[  380.112397][T14178] RSP: 002b:00007fb7b057e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  380.120852][T14178] RAX: 0000000000000000 RBX: 00007fb7af9b5fa0 RCX: 00007fb7af78e969
[  380.128861][T14178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  380.136843][T14178] RBP: 00007fb7af810ab1 R08: 0000000000000000 R09: 0000000000000000
[  380.144823][T14178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  380.152801][T14178] R13: 0000000000000000 R14: 00007fb7af9b5fa0 R15: 00007fff2a41e538
[  380.160805][T14178]  </TASK>
[  380.164096][T14178] Kernel Offset: disabled
[  380.168431][T14178] Rebooting in 86400 seconds..