last executing test programs:

4.397805992s ago: executing program 3 (id=5917):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast2, 0x1}, 0x20)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880)
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x20, &(0x7f0000000580)={&(0x7f00000005c0)=""/50, 0x32, 0x0, &(0x7f0000000400)=""/46, 0x2e}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="e356050000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01ee22562c8494bfd02b000172eb2f3a55b0be75eb3c000b689ca0addb018434f063d499be4509b0f27444f5cb944586e41cb52d17be9ca48f4a35c65229207f4da70ad7d03524", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) (async)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2c}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r5)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
sendmsg(r4, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041)
ioctl$SIOCNRDECOBS(r4, 0x89e2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'bridge0\x00'})

4.199935658s ago: executing program 1 (id=5919):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', <r0=>0x0, 0x2f, 0x7, 0x1, 0xff, 0x50, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x40, 0x20, 0x3, 0x96}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000100))
bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r5, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r5, 0xffffffff)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x2, r4, 0x0, r2}, 0x10)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1416, 0xe50814127a83d959}, 0x10}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r9, @ANYBLOB="14001d8010000080060005001200000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x11, r2, 0x100000000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000300012800c0001006d6163766c616e00200002800a000400bbbbbbbbbbbb000008000100010000000800030000000000140035006d6163766c616e300000000000000000dace09c3d44f43d25776450ff05dee52dcebde826c9a5656a21a35bfc0ccd7c39bef9af00ba65a7c70860b08485bbb0de2ebed615a4897d8846be09e3860d97f503db9f11a734229dcaf0d5fccd91bb72f0f6cda5f2060a09716514764f167055196ca2bbd13a6e8237f77c063aa0f882f37c7147b6e7307df70183dab1a8ac0990a352b2c1b99486e5e7b9835ac22c1abccba"], 0x64}}, 0x8000)

4.022591283s ago: executing program 3 (id=5921):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4)
sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f00000003c0)="d682f39c86fed22b0fb1e398412d7958da07dc0f18de72076fdbd11017c1a40f6f56bd41d59dcbabc1440634b9c7d6c12128a25de47cd5f85b9eecdacf10621e9dafb7a304208d2a10a3c99837", 0x4d}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c617665"], 0x2c}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, r8}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r9, 0xc, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r10, r9, 0x6, 0x0, 0x0, @void, @value=r10, @void, @void, r11}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, r6, 0x29, 0x20, 0x0, @void, @void, @void, @value, r11}, 0x20)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3.099657108s ago: executing program 1 (id=5929):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x4010)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x3, @mcast2, 0x3}, {0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x0, {[0x1, 0x7, 0x6, 0x0, 0x81, 0x6, 0xfffff34a, 0x2]}}, 0x5c)
write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r7, 0x97eb4000)
setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4)
getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f)
r8 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$packet(0x11, 0xf32d842c66574503, 0x300)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x1b56, 0x6, 0x42, 0x100000001, 0x4000000000, 0x8]}, &(0x7f0000000140)=0x78)
recvfrom$packet(r2, 0x0, 0x0, 0x40001000, &(0x7f0000000440)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0)
socket(0x10, 0x803, 0x2)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)

2.914963525s ago: executing program 1 (id=5931):
write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000fc0d"], 0x7)
socket$unix(0x1, 0x5, 0x0)
unshare(0x24060400)
socket$netlink(0x10, 0x3, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
preadv(r0, &(0x7f0000001500)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x1, 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000100))
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket(0x40000000015, 0x805, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000005c0), 0x10)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r5, 0x0, 0xffffffff000)
ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000480))
socket(0x28, 0x5, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000003c0)={0x0, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x8bd}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x68, "a3c464980c671e4ebf0829b1924660419b4c5a7d15b4ba197269086b763467e2534f24cdfb6547b31e7d08cd700c84897776eb8904e39b4d52fe0a1fecab18b93998aa093430361f8b08de409e821adc16de1acc44d623f9007c4e124d693ea8adddd6e17979ba6d"}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x15, 0xfff, [0x1, 0x1ff]}}]}, 0xb0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000300)={'tunl0\x00', <r8=>0x0, 0x7, 0x8000, 0x5, 0x7, {{0x1a, 0x4, 0x1, 0x3, 0x68, 0x66, 0x0, 0x6, 0x2f, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x43, 0x3, [{0x2, 0x3, "f3"}, {0x6, 0x4, "e322"}, {0x7, 0x8, "e29db66c585a"}, {0x2, 0x8, "ea01ed0d3260"}, {0x5, 0xa, "4531dd7d7d1158e1"}, {0x1, 0xb, "ed4b1b7d449fbda266"}, {0x0, 0x7, "84f0cba5e9"}, {0x0, 0xa, "5f0fe359304582b8"}]}, @timestamp_addr={0x44, 0xc, 0x21, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000200)={@mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8001, 0x5, 0x6, 0x500, 0x7fffffffffffffff, 0x90001, r8})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb7, 0xb7, 0x2, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x1, 0xfffffff8}, {0x1, 0x7, 0xd}], "d6f18f"}, @struct={0x4, 0x9, 0x0, 0x4, 0x1, 0x6bc, [{0x5, 0x1, 0xffffffff}, {0x1, 0x2, 0xfff}, {0xe, 0x4, 0xfffffffd}, {0x5, 0x4, 0xdecc}, {0x8, 0x0, 0x2}, {0x9, 0x3, 0x2}, {0xe, 0x4, 0x1}, {0x14, 0x2, 0x8000}, {0xffff, 0x2, 0x9}]}]}}, 0x0, 0xd2}, 0x28)

2.815381095s ago: executing program 2 (id=5932):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x5d, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfffffebd, 0x0, @opaque="4705d17acf574749297e5db13f8755dd0877dd72a9a771c79630691f7ecf2f1c98d70c264d26dbc6b103c642ac39a4e6866acd"}}}}}, 0x0)

2.571930154s ago: executing program 3 (id=5933):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}]})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)

2.259134792s ago: executing program 1 (id=5934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003a000701fcfffffffddbdf25017c00000c00368008000200", @ANYRES32=0x0, @ANYBLOB="0c000180067caa4196"], 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc080)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000500)={'sit0\x00', <r5=>r4, 0x1, 0x80a0, 0x4, 0x8, {{0x27, 0x4, 0x1, 0x0, 0x9c, 0x64, 0x0, 0x8f, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp={0x44, 0xc, 0x2a, 0x0, 0x6, [0xdd, 0x10000]}, @generic={0x4f, 0xa, "1768ed350a9f8a41"}, @rr={0x7, 0xf, 0xf5, [@broadcast, @multicast2, @remote]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0x3, [0xffffffff, 0x17e9]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0xf, [0x4, 0x7]}, @timestamp_addr={0x44, 0x44, 0xe6, 0x1, 0x9, [{@multicast2, 0x7163}, {@empty, 0x1}, {@private=0xa010101, 0x4}, {@remote, 0x73c0d8a0}, {@loopback, 0x3}, {@multicast1, 0xea}, {@private=0xa010101, 0x2}, {@loopback, 0x8001}]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x0, 0x2}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000340)={'gre0\x00', <r6=>0x0, 0x20, 0x700, 0x10001, 0x7fffffff, {{0x31, 0x4, 0x3, 0x7, 0xc4, 0x67, 0x0, 0x80, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x34, 0xe4, 0x3, 0x3, [{@loopback, 0xfffffff6}, {@broadcast, 0xa95}, {@multicast2}, {@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x101}, {@private=0xa010101, 0xfffffffa}]}, @end, @timestamp_addr={0x44, 0x44, 0xb8, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010102, 0x9}, {@local, 0x1}, {@loopback, 0xfffffff8}, {@multicast2, 0xb6e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffd32}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x227}]}, @rr={0x7, 0x2b, 0x9c, [@empty, @remote, @broadcast, @broadcast, @multicast2, @local, @rand_addr=0x64010102, @private=0xa010101, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x84, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r6, 0x29, 0xfe, 0x5, 0x6, 0x24, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x700, 0x20, 0x1dc, 0xda}})

2.119995759s ago: executing program 3 (id=5935):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x24}}, 0xc040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmsg$802154_dgram(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x8000, r8}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

1.921195782s ago: executing program 2 (id=5938):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x10, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7c2)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@private, @empty}, &(0x7f00000001c0)=0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(r2, 0x0, 0x8000)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "689c292f0f994d9c52794649ca8b7d49"}]}}}}}}}, 0x0) (fail_nth: 1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.42377855s ago: executing program 2 (id=5939):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000001000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'macvtap0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x2, 0xf0, 0x0, 0x80, 0x5, 0x4, 0xd, 0x5, 0xd, [0xa, 0x7ff, 0x6, 0x3, 0x0, 0x9, 0x57d, 0x400], [0x800]}})
sendmsg$rds(0xffffffffffffffff, &(0x7f00000044c0)={&(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000400)=""/132, 0x84}, {&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x4, &(0x7f0000004340)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000680)=""/227, 0xe3}, &(0x7f0000000780), 0x60}}, @mask_fadd={0x58, 0x114, 0x8, {{0x8000000, 0x9}, &(0x7f0000000800), &(0x7f0000000900)=0xfffffffffffffffb, 0x3, 0x6, 0x3, 0x0, 0x4f, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0x3}, {&(0x7f0000000a00)=""/206, 0xce}, &(0x7f0000000d00)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000940)=""/43, 0x2b}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/21, 0x15}, {&(0x7f00000045c0)=""/139, 0x8b}, {&(0x7f0000000cc0)=""/60, 0x3c}], 0x6, 0x3, 0xffffffffffffffff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x10, 0x6}, &(0x7f0000003e80)=0x60d, &(0x7f0000003ec0), 0x9, 0x9, 0x1, 0xd9, 0x70, 0xf}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x2}, {&(0x7f0000003f00)=""/149, 0x95}, &(0x7f00000042c0)=[{&(0x7f0000003fc0)=""/22, 0x16}, {&(0x7f0000004000)=""/181, 0xb5}, {&(0x7f00000040c0)=""/24, 0x18}, {&(0x7f0000004100)=""/121, 0x79}, {&(0x7f0000004180)=""/47, 0x2f}, {&(0x7f00000041c0)=""/236, 0xec}], 0x6, 0x6c, 0x9}}], 0x170}, 0x0)
sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r3, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000005000f40fe00000e", 0x24)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000004540)=@framed={{}, [@map_fd={0x18, 0x8}, @tail_call, @func]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080), 0x2, 0x0)
r9 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000080)=0xffff3759, 0x4)
sendfile(r8, r8, &(0x7f00000000c0)=0x8, 0xc)

1.321310158s ago: executing program 1 (id=5941):
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32)
sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1008, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000200000008000a0000000000060002000100000008001700", @ANYRES32=r6, @ANYBLOB="0800090003000004"], 0x3c}}, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x18) (async)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) (async, rerun: 32)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff}) (rerun: 32)
tee(r8, r10, 0x100000af5, 0x0) (async)
close(r9)

1.233494604s ago: executing program 0 (id=5942):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3201818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x60}, 0x48)

1.136978343s ago: executing program 0 (id=5944):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x51, 0x8}, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2, 0x0, 0xfffffffffffffffe}, 0x10)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x2, 0x30, 0x3, 0xfffffffffffffffe}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r5)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xfff2}, {0x2}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x20000000)

1.032435167s ago: executing program 1 (id=5945):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}, {}], "44942d"}, @ptr, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "84"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f00000014c0)=""/2, 0x6b, 0x2, 0x1}, 0x28)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
sendto$inet(r1, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r5, 0x0, 0xd}, 0x18)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6})
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x909, @mcast1, 0x1}, 0x1c)
connect$inet6(r7, &(0x7f0000000600)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x41}, 0x1c)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xb}, 0x1c)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ca23804482456bdbae13edaaee78d412ce2b6de541e6c5fb91faba6610e5eb6519b2046797947633cd34c398945721323fe6ce6c9b1ffdd6fddc4ce31fc2852f90bbb6c02882ef76d3093fc2f406df06d2d466245e5dd4eb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172, 0x0, 0x0, 0x0}}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)

806.430523ms ago: executing program 0 (id=5947):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f00000004c0)=0x79, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00'})
r4 = socket$alg(0x26, 0x5, 0x0)
unshare(0x6020400)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5}, 0x48)
syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0x2, r6}, 0x38)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x9, 0x20000005, 0x9, 0x1}, 0x1}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001280)="e2c1d4189784094a27e786a33d8be05886fd7d0c7de802d620458981c876955a04d0be83724f983222ccacf0ba7971c1cd2036773f03dc45dafb99d7e1d2c9f0999f35934a2e340e371d79c355b9ae4d6ad7ac5653dae7fc09708c519edac3f213a80503b50af9a7fbfc6ba1867748e9a0d1e1427968ca8f1d0cd1741ae7a4a85d7bbc9077a44f5dc58debd56d7abc388f7e17b5bc9ac006cfc2f531f512e65c307c38c5a9d267fc409babb690c3101a528f96f36cec4ca16760f977f615995950e355780b7bb7582427fce92f91c84c051194db94784d8d28", 0xd9}, {&(0x7f0000000100)="88a1450f96cf05", 0x7}, {&(0x7f0000001380)="4b781fc68bde5d8f2b9b6508c5d471b229683138238a15c0e9a7c02f01b9b7798149deb3e23e56aa79f0ec1f26d8c4187c08cac86cc3512f68ab5d3d938f0f8a3154a36fa3afad00438a7e6fda39dbf33a0c648517ea696658ef06f755e29e2c9d1b4e76f8e22e0978c2a04ae90a7360924007ca542f838bb5e6fee6f26bd588d9ee1e6497e7e26b8254c4345da36f731749eb563ebc1b496841c91d814d8f5695e1ae0c14", 0xa5}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000002440)="fd51a9a9f429728a6000b1f341c6b82cb254906c8ba3da03643caf47a0d0b7b99d85108f913e9ce57720944314c9a4", 0x2f}], 0x6, 0x0, 0x0, 0x4090}], 0x1, 0x8000)
recvfrom(r4, &(0x7f0000000380)=""/245, 0xf5, 0x2003, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x80)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000deff000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r7, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffb3abbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0xf7dc9000)

680.033074ms ago: executing program 3 (id=5949):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x3, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32)
sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53", 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000e00)="61506eb07117164bdb4ee7ac0a137512738cac7ddf83039c6483d715bcafc5c4f7feff3c5f7c8d0773bb7447d33297aaf2f9e2b9dc15752fdb623d0008f673f7a04836a22be782e61cc35bdea0abd69a4726afa107f95b8922be17921a894c90310251c043c6ffce40aa34acd2ddccc0255708feca96f2563c7318556f4ef40d02bb5cb1f9", 0x85}, {&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374b780581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7bf4", 0x41}, {&(0x7f0000000ec0)="a8186e5cfec4641228a40aab3ba2a51eed6fbde9765fe6098a38dc6c671d34865814d34de5c5bde9e1fab0b2343a4100b8a80fb475ee925b2d0b539b083243652294fa61494ea3dbcff6ee86a24641267027dd88dac0026eb672e1faa4b75c32630a9f0fb76db5eb01e8f7deda19289f97805154d869740ee57414d17b27c10b127b1211464c876f2b0d", 0x8a}, {&(0x7f0000000f80)="da272d98f0f8962c15832ad9fc3fe69499698607da01faf3742d6a27555ae47f444bad1ea77509fed4623598addf131c04811469c810db02e91468121899cb0cfaa6d06d1cd876e6a0bee56f2bec7b61a58d4bc82f91da6fefe815e7be6c6a07ebeca051d4a71823d1cbd9ec146680bce11c0b821f7e2636c6a64c9fe7d7ea05ddc0076527423e279e47351e1093f3e3e75ba10be5", 0x95}], 0x4}}], 0x2, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

679.772917ms ago: executing program 4 (id=5950):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x44)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0x80000}, 0x1c)
sendto$inet6(r0, 0x0, 0xffffffffffffffa8, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffc}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20048010)

592.989837ms ago: executing program 4 (id=5951):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c31800000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)

539.945105ms ago: executing program 3 (id=5952):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x2)
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x20008000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000083"], 0x0, 0x5a}, 0x28)
r3 = socket$kcm(0x2, 0x5, 0x84)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8)
shutdown(r4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x80}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000440)}], 0x1}, 0x263171b11b81c78f)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r7, 0x8)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x0, 0x0, 0x4}, {0x3}}, {0x1, 0x3, {0x1}, {0x2, 0xff, 0x3}, 0xfd, 0x2}, {0x1, 0x0, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x1}, 0x2}], 0x60)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x44020)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xb3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xa3e0}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003a000701fcfffffffddbdf25017c00000c00368008000200", @ANYRES32=0x0, @ANYBLOB="0c000180067caa4196"], 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc080)

538.722388ms ago: executing program 0 (id=5953):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

494.22123ms ago: executing program 2 (id=5954):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0xff, 0xffffff00, 'pimreg\x00', 'dummy0\x00', {0xff}, {}, 0xc, 0x2, 0x25}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x200, 0x3, 0x3, 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r2}, 0x8) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x1c71b998bde76301, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) (async, rerun: 32)
r5 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000004000041) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @broadcast}, &(0x7f0000000a80)=0xc) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="30040000", @ANYRESHEX=r5, @ANYBLOB="00012cbd7000ffdbdf252d00000008000300", @ANYRES32=r7, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r8, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000102}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100aaff000000db9f2f0900000300", @ANYRES32=r7, @ANYBLOB="040028002c006e800400020004000100040001000400020004000200040002000400010004000200040002000400020005000800020000000f000a00af0c2720fe9f84a3b9442e000900070087a1b5a00100000004002800"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async)
recvmmsg(r9, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000001d00)=""/4101, 0x1005}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000680)=""/90, 0x5a}], 0x5}}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40010120, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r11, &(0x7f0000000100)={0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r11, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r11, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

492.489784ms ago: executing program 4 (id=5955):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3201818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6000}, 0x48)

420.159969ms ago: executing program 4 (id=5956):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x1f6, 0x0, 0x0, 0x0, 0x0}, 0x48)

419.96584ms ago: executing program 0 (id=5957):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200002000080000000000000000e12593bf7502bc00000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
connect$x25(r2, &(0x7f0000000a80), 0x12) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000)

287.962371ms ago: executing program 0 (id=5958):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}}})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466", 0x6}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1, &(0x7f0000000100)=""/37, 0x25}, 0x40010000)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=@mpls_getroute={0x60, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x1}, [@RTA_VIA={0x14, 0x12, {0x21, "0a1a623d0ce1d30bdce1522ab861"}}, @RTA_DST={0x8, 0x1, {0x7fff}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11, 0x7}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x5, 0xfd, r8}}, @RTA_DST={0x8, 0x1, {0x0, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r0}]}, 0x60}, 0x1, 0x0, 0x0, 0x84004}, 0x80)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

285.385596ms ago: executing program 2 (id=5959):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x10, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x7c2)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@private, @empty}, &(0x7f00000001c0)=0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(r2, 0x0, 0x8000)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "689c292f0f994d9c52794649ca8b7d49"}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

259.07515ms ago: executing program 4 (id=5960):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
socket$kcm(0x2, 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)={0x64, r7, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}]}, 0x64}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r8, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x16, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xaa, 0xaa, 's', "2a1eea", 0x9}}}}}}, 0x0)
sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x1410, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0)

208.048135ms ago: executing program 2 (id=5961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10001}, 0x10}, 0x94)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
poll(0x0, 0x0, 0x7)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r2}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000001340)=ANY=[], &(0x7f0000000ec0)=""/225, 0x75, 0xe1, 0xfffffffe, 0x1}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x5, 0x550, 0x2, 0x3, 0x1, 0x1, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, [@exit, @call={0x85, 0x0, 0x0, 0x6a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002380)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r6, r3], &(0x7f00000011c0)=[{0x3, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x1}, 0x94)
sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000000000010009000502000418000000000000002900360001001600000000000000400000000000000029000000360000003304000000000000000041c9102001000000000000000000000000000200000000cb5c6095c57dd1aaea2edc4abd4291ba4baa1ee2be97ae8a9e043d6ca77312c677716ccf19cec84e0343f68aec00e5fe6389d87a270c5f38c02ec3d3512afc0bab68fb2a212b1262e765f468c139540b36"], 0x78}}], 0x2, 0x4040005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r9, 0x112, 0x13, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r1, 0x1ad72f7)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001300)={@mcast1, 0x49})
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)

0s ago: executing program 4 (id=5962):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b090000000100000000000000e7ffffff000000", @ANYRES32, @ANYRES64=0x0, @ANYBLOB="2190ba0cecaa4fa82278a7a4c1f095e2c837034e96236eaecf7b6d525c430eda9bfff1ec528d04827c566bbeec27515847804cde8b231ede90bfa9cf873f", @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x50)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, r2}, 0x38)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000040)="8d", 0x1)
setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_compaction_migratepages\x00', r1, 0x0, 0x10000}, 0x18)
ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000880))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
socketpair(0x0, 0x6, 0x1, &(0x7f0000000400)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x4c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000010)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
splice(r1, &(0x7f0000000180)=0x4, r3, &(0x7f0000000340)=0xb4d, 0x7, 0xe)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2007f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

0
[  563.939738][T24620]  ? __pfx_vfs_read+0x10/0x10
[  563.939764][T24620]  ? __fget_files+0x2a/0x420
[  563.939796][T24620]  ? __fget_files+0x3a0/0x420
[  563.939822][T24620]  ? __fget_files+0x2a/0x420
[  563.939859][T24620]  ksys_read+0x145/0x250
[  563.939885][T24620]  ? __pfx_ksys_read+0x10/0x10
[  563.939906][T24620]  ? rcu_is_watching+0x15/0xb0
[  563.939936][T24620]  ? do_syscall_64+0xbe/0x3b0
[  563.939962][T24620]  do_syscall_64+0xfa/0x3b0
[  563.939981][T24620]  ? lockdep_hardirqs_on+0x9c/0x150
[  563.940011][T24620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.940031][T24620]  ? clear_bhb_loop+0x60/0xb0
[  563.940057][T24620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.940076][T24620] RIP: 0033:0x7fdc8858d8dc
[  563.940096][T24620] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  563.940114][T24620] RSP: 002b:00007fdc893b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  563.940135][T24620] RAX: ffffffffffffffda RBX: 00007fdc887e5fa0 RCX: 00007fdc8858d8dc
[  563.940150][T24620] RDX: 000000000000000f RSI: 00007fdc893b60a0 RDI: 0000000000000004
[  563.940163][T24620] RBP: 00007fdc893b6090 R08: 0000000000000000 R09: 0000000000000000
[  563.940176][T24620] R10: 0000000040000040 R11: 0000000000000246 R12: 0000000000000001
[  563.940189][T24620] R13: 00007fdc887e6038 R14: 00007fdc887e5fa0 R15: 00007ffda9af8028
[  563.940225][T24620]  </TASK>
[  564.300395][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5050'.
[  564.516261][T24647] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  564.544195][T24647] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  564.571199][T24647] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  564.703140][T24662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5059'.
[  564.725983][T24661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  564.760168][T24655] syzkaller0: entered promiscuous mode
[  564.781421][T24655] syzkaller0: entered allmulticast mode
[  564.917527][T24655] tipc: Resetting bearer <eth:syzkaller0>
[  564.928318][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5060'.
[  564.986783][T24654] tipc: Resetting bearer <eth:syzkaller0>
[  565.013994][T24677] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5062'.
[  565.023153][T24677] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5062'.
[  565.189489][T24654] tipc: Disabling bearer <eth:syzkaller0>
[  565.352019][T24692] FAULT_INJECTION: forcing a failure.
[  565.352019][T24692] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  565.366463][T24692] CPU: 1 UID: 0 PID: 24692 Comm: syz.1.5065 Not tainted syzkaller #0 PREEMPT(full) 
[  565.366491][T24692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  565.366503][T24692] Call Trace:
[  565.366511][T24692]  <TASK>
[  565.366519][T24692]  dump_stack_lvl+0x189/0x250
[  565.366547][T24692]  ? __pfx____ratelimit+0x10/0x10
[  565.366577][T24692]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.366599][T24692]  ? __pfx__printk+0x10/0x10
[  565.366626][T24692]  ? __might_fault+0xb0/0x130
[  565.366662][T24692]  should_fail_ex+0x414/0x560
[  565.366693][T24692]  _copy_from_user+0x2d/0xb0
[  565.366717][T24692]  ___sys_sendmsg+0x158/0x2a0
[  565.366744][T24692]  ? __pfx____sys_sendmsg+0x10/0x10
[  565.366808][T24692]  ? __fget_files+0x2a/0x420
[  565.366832][T24692]  ? __fget_files+0x3a0/0x420
[  565.366869][T24692]  __x64_sys_sendmsg+0x19b/0x260
[  565.366893][T24692]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  565.366926][T24692]  ? __pfx_ksys_write+0x10/0x10
[  565.366945][T24692]  ? rcu_is_watching+0x15/0xb0
[  565.366972][T24692]  ? do_syscall_64+0xbe/0x3b0
[  565.366995][T24692]  do_syscall_64+0xfa/0x3b0
[  565.367012][T24692]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.367036][T24692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.367056][T24692]  ? clear_bhb_loop+0x60/0xb0
[  565.367079][T24692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.367095][T24692] RIP: 0033:0x7fdc8858eec9
[  565.367113][T24692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  565.367129][T24692] RSP: 002b:00007fdc893b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  565.367148][T24692] RAX: ffffffffffffffda RBX: 00007fdc887e5fa0 RCX: 00007fdc8858eec9
[  565.367162][T24692] RDX: 000000000000c080 RSI: 0000200000000080 RDI: 0000000000000003
[  565.367175][T24692] RBP: 00007fdc893b6090 R08: 0000000000000000 R09: 0000000000000000
[  565.367186][T24692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.367198][T24692] R13: 00007fdc887e6038 R14: 00007fdc887e5fa0 R15: 00007ffda9af8028
[  565.367231][T24692]  </TASK>
[  565.644275][T24693] bond4: entered promiscuous mode
[  565.649820][T24693] 8021q: adding VLAN 0 to HW filter on device bond4
[  565.663408][T24693] netlink: 'syz.0.5066': attribute type 7 has an invalid length.
[  565.703372][T24696] FAULT_INJECTION: forcing a failure.
[  565.703372][T24696] name failslab, interval 1, probability 0, space 0, times 0
[  565.716404][T24696] CPU: 1 UID: 0 PID: 24696 Comm: syz.2.5067 Not tainted syzkaller #0 PREEMPT(full) 
[  565.716432][T24696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  565.716445][T24696] Call Trace:
[  565.716453][T24696]  <TASK>
[  565.716462][T24696]  dump_stack_lvl+0x189/0x250
[  565.716490][T24696]  ? __pfx____ratelimit+0x10/0x10
[  565.716522][T24696]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.716547][T24696]  ? __pfx__printk+0x10/0x10
[  565.716581][T24696]  ? __pfx___might_resched+0x10/0x10
[  565.716606][T24696]  should_fail_ex+0x414/0x560
[  565.716639][T24696]  should_failslab+0xa8/0x100
[  565.716665][T24696]  __kmalloc_cache_noprof+0x70/0x3d0
[  565.716688][T24696]  ? ovs_flow_tbl_init+0x1fa/0x800
[  565.716718][T24696]  ovs_flow_tbl_init+0x1fa/0x800
[  565.716744][T24696]  ? ovs_dp_cmd_new+0x1ac/0xaf0
[  565.716777][T24696]  ovs_dp_cmd_new+0x24b/0xaf0
[  565.716819][T24696]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  565.716857][T24696]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  565.716894][T24696]  genl_family_rcv_msg_doit+0x212/0x300
[  565.716928][T24696]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  565.716968][T24696]  ? bpf_lsm_capable+0x9/0x20
[  565.716990][T24696]  ? security_capable+0x7e/0x2e0
[  565.717021][T24696]  genl_rcv_msg+0x60e/0x790
[  565.717052][T24696]  ? __pfx_genl_rcv_msg+0x10/0x10
[  565.717075][T24696]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  565.717105][T24696]  ? __asan_memcpy+0x40/0x70
[  565.717123][T24696]  ? __pfx_ref_tracker_free+0x10/0x10
[  565.717159][T24696]  netlink_rcv_skb+0x208/0x470
[  565.717177][T24696]  ? __lock_acquire+0xab9/0xd20
[  565.717196][T24696]  ? __pfx_genl_rcv_msg+0x10/0x10
[  565.717222][T24696]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  565.717273][T24696]  ? down_read+0x1ad/0x2e0
[  565.717296][T24696]  genl_rcv+0x28/0x40
[  565.717317][T24696]  netlink_unicast+0x82c/0x9e0
[  565.717354][T24696]  ? __pfx_netlink_unicast+0x10/0x10
[  565.717384][T24696]  ? netlink_sendmsg+0x642/0xb30
[  565.717400][T24696]  ? skb_put+0x11b/0x210
[  565.717427][T24696]  netlink_sendmsg+0x805/0xb30
[  565.717458][T24696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  565.717480][T24696]  ? aa_sock_msg_perm+0xf1/0x1d0
[  565.717509][T24696]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  565.717537][T24696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  565.717557][T24696]  __sock_sendmsg+0x21c/0x270
[  565.717588][T24696]  ____sys_sendmsg+0x505/0x830
[  565.717617][T24696]  ? __pfx_____sys_sendmsg+0x10/0x10
[  565.717650][T24696]  ? import_iovec+0x74/0xa0
[  565.717676][T24696]  ___sys_sendmsg+0x21f/0x2a0
[  565.717702][T24696]  ? __pfx____sys_sendmsg+0x10/0x10
[  565.717766][T24696]  ? __fget_files+0x2a/0x420
[  565.717791][T24696]  ? __fget_files+0x3a0/0x420
[  565.717828][T24696]  __x64_sys_sendmsg+0x19b/0x260
[  565.717855][T24696]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  565.717889][T24696]  ? __pfx_ksys_write+0x10/0x10
[  565.717908][T24696]  ? rcu_is_watching+0x15/0xb0
[  565.717937][T24696]  ? do_syscall_64+0xbe/0x3b0
[  565.717961][T24696]  do_syscall_64+0xfa/0x3b0
[  565.717979][T24696]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.718008][T24696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.718026][T24696]  ? clear_bhb_loop+0x60/0xb0
[  565.718050][T24696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.718069][T24696] RIP: 0033:0x7f5a61f8eec9
[  565.718087][T24696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  565.718104][T24696] RSP: 002b:00007f5a62eba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  565.718124][T24696] RAX: ffffffffffffffda RBX: 00007f5a621e5fa0 RCX: 00007f5a61f8eec9
[  565.718138][T24696] RDX: 000000000000c080 RSI: 0000200000000080 RDI: 0000000000000003
[  565.718151][T24696] RBP: 00007f5a62eba090 R08: 0000000000000000 R09: 0000000000000000
[  565.718163][T24696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  565.718175][T24696] R13: 00007f5a621e6038 R14: 00007f5a621e5fa0 R15: 00007ffe7fe5a818
[  565.718205][T24696]  </TASK>
[  566.115135][T24706] FAULT_INJECTION: forcing a failure.
[  566.115135][T24706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  566.128681][T24706] CPU: 0 UID: 0 PID: 24706 Comm: syz.1.5068 Not tainted syzkaller #0 PREEMPT(full) 
[  566.128710][T24706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  566.128723][T24706] Call Trace:
[  566.128731][T24706]  <TASK>
[  566.128740][T24706]  dump_stack_lvl+0x189/0x250
[  566.128767][T24706]  ? __pfx____ratelimit+0x10/0x10
[  566.128798][T24706]  ? __pfx_dump_stack_lvl+0x10/0x10
[  566.128823][T24706]  ? __pfx__printk+0x10/0x10
[  566.128851][T24706]  ? __might_fault+0xb0/0x130
[  566.128886][T24706]  should_fail_ex+0x414/0x560
[  566.128916][T24706]  _copy_from_iter+0x1de/0x1790
[  566.128942][T24706]  ? rcu_is_watching+0x15/0xb0
[  566.128964][T24706]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  566.128987][T24706]  ? __pfx__copy_from_iter+0x10/0x10
[  566.129008][T24706]  ? __build_skb_around+0x257/0x3e0
[  566.129031][T24706]  ? netlink_sendmsg+0x642/0xb30
[  566.129049][T24706]  ? skb_put+0x11b/0x210
[  566.129071][T24706]  netlink_sendmsg+0x6b2/0xb30
[  566.129102][T24706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  566.129126][T24706]  ? aa_sock_msg_perm+0xf1/0x1d0
[  566.129165][T24706]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  566.129193][T24706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  566.129214][T24706]  __sock_sendmsg+0x21c/0x270
[  566.129245][T24706]  ____sys_sendmsg+0x505/0x830
[  566.129274][T24706]  ? __pfx_____sys_sendmsg+0x10/0x10
[  566.129307][T24706]  ? import_iovec+0x74/0xa0
[  566.129333][T24706]  ___sys_sendmsg+0x21f/0x2a0
[  566.129358][T24706]  ? __pfx____sys_sendmsg+0x10/0x10
[  566.129421][T24706]  ? __fget_files+0x2a/0x420
[  566.129445][T24706]  ? __fget_files+0x3a0/0x420
[  566.129483][T24706]  __x64_sys_sendmsg+0x19b/0x260
[  566.129509][T24706]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  566.129543][T24706]  ? __pfx_ksys_write+0x10/0x10
[  566.129564][T24706]  ? rcu_is_watching+0x15/0xb0
[  566.129591][T24706]  ? do_syscall_64+0xbe/0x3b0
[  566.129616][T24706]  do_syscall_64+0xfa/0x3b0
[  566.129635][T24706]  ? lockdep_hardirqs_on+0x9c/0x150
[  566.129664][T24706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.129684][T24706]  ? clear_bhb_loop+0x60/0xb0
[  566.129709][T24706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.129728][T24706] RIP: 0033:0x7fdc8858eec9
[  566.129746][T24706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.129763][T24706] RSP: 002b:00007fdc893b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  566.129784][T24706] RAX: ffffffffffffffda RBX: 00007fdc887e5fa0 RCX: 00007fdc8858eec9
[  566.129799][T24706] RDX: 000000000000c080 RSI: 0000200000000080 RDI: 0000000000000003
[  566.129813][T24706] RBP: 00007fdc893b6090 R08: 0000000000000000 R09: 0000000000000000
[  566.129826][T24706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  566.129838][T24706] R13: 00007fdc887e6038 R14: 00007fdc887e5fa0 R15: 00007ffda9af8028
[  566.129872][T24706]  </TASK>
[  566.532216][T24711] wg1 speed is unknown, defaulting to 1000
[  566.625475][T24722] |: entered promiscuous mode
[  566.677457][T24725] |ªA–K: entered promiscuous mode
[  566.732793][T24723] wg1 speed is unknown, defaulting to 1000
[  566.948120][T24737] |ªA: entered promiscuous mode
[  567.121237][T24749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5082'.
[  567.211323][T24749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5082'.
[  567.292578][T24752] wg1 speed is unknown, defaulting to 1000
[  567.452478][T24764] netlink: 'syz.3.5085': attribute type 9 has an invalid length.
[  567.471842][T24764] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5085'.
[  567.531905][T24749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5082'.
[  567.790301][T24776] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  567.837167][T24772] |: entered promiscuous mode
[  567.838853][T24781] FAULT_INJECTION: forcing a failure.
[  567.838853][T24781] name failslab, interval 1, probability 0, space 0, times 0
[  567.853242][T24777] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  567.862273][T24781] CPU: 0 UID: 0 PID: 24781 Comm: syz.3.5090 Not tainted syzkaller #0 PREEMPT(full) 
[  567.862304][T24781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  567.862316][T24781] Call Trace:
[  567.862331][T24781]  <TASK>
[  567.862340][T24781]  dump_stack_lvl+0x189/0x250
[  567.862370][T24781]  ? __pfx____ratelimit+0x10/0x10
[  567.862401][T24781]  ? __pfx_dump_stack_lvl+0x10/0x10
[  567.862425][T24781]  ? __pfx__printk+0x10/0x10
[  567.862459][T24781]  ? __pfx___might_resched+0x10/0x10
[  567.862486][T24781]  should_fail_ex+0x414/0x560
[  567.862519][T24781]  should_failslab+0xa8/0x100
[  567.862546][T24781]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  567.862571][T24781]  ? __get_vm_area_node+0x13f/0x300
[  567.862600][T24781]  __get_vm_area_node+0x13f/0x300
[  567.862621][T24781]  ? __might_fault+0xb0/0x130
[  567.862648][T24781]  __vmalloc_node_range_noprof+0x301/0x12f0
[  567.862675][T24781]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  567.862697][T24781]  ? __lock_acquire+0xab9/0xd20
[  567.862741][T24781]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  567.862768][T24781]  ? __might_fault+0xb0/0x130
[  567.862799][T24781]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  567.862816][T24781]  __vmalloc_noprof+0xb1/0xf0
[  567.862840][T24781]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  567.862861][T24781]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  567.862886][T24781]  bpf_prog_alloc+0x3c/0x1a0
[  567.862907][T24781]  bpf_prog_load+0x735/0x19e0
[  567.862950][T24781]  ? __pfx_bpf_prog_load+0x10/0x10
[  567.863004][T24781]  ? bpf_lsm_bpf+0x9/0x20
[  567.863024][T24781]  ? security_bpf+0x7e/0x300
[  567.863048][T24781]  __sys_bpf+0x507/0x860
[  567.863075][T24781]  ? __pfx___sys_bpf+0x10/0x10
[  567.863116][T24781]  ? ksys_write+0x22a/0x250
[  567.863141][T24781]  ? __pfx_ksys_write+0x10/0x10
[  567.863158][T24781]  ? __task_pid_nr_ns+0x28/0x490
[  567.863193][T24781]  __x64_sys_bpf+0x7c/0x90
[  567.863219][T24781]  do_syscall_64+0xfa/0x3b0
[  567.863237][T24781]  ? lockdep_hardirqs_on+0x9c/0x150
[  567.863265][T24781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.863284][T24781]  ? clear_bhb_loop+0x60/0xb0
[  567.863308][T24781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.863334][T24781] RIP: 0033:0x7fc18db8eec9
[  567.863350][T24781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  567.863368][T24781] RSP: 002b:00007fc18eac4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  567.863387][T24781] RAX: ffffffffffffffda RBX: 00007fc18dde5fa0 RCX: 00007fc18db8eec9
[  567.863402][T24781] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  567.863415][T24781] RBP: 00007fc18eac4090 R08: 0000000000000000 R09: 0000000000000000
[  567.863428][T24781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  567.863440][T24781] R13: 00007fc18dde6038 R14: 00007fc18dde5fa0 R15: 00007ffdb9719f68
[  567.863473][T24781]  </TASK>
[  568.155462][T24790] FAULT_INJECTION: forcing a failure.
[  568.155462][T24790] name failslab, interval 1, probability 0, space 0, times 0
[  568.177883][T24790] CPU: 1 UID: 0 PID: 24790 Comm: syz.2.5094 Not tainted syzkaller #0 PREEMPT(full) 
[  568.177910][T24790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  568.177921][T24790] Call Trace:
[  568.177928][T24790]  <TASK>
[  568.177936][T24790]  dump_stack_lvl+0x189/0x250
[  568.177962][T24790]  ? __pfx____ratelimit+0x10/0x10
[  568.177989][T24790]  ? __pfx_dump_stack_lvl+0x10/0x10
[  568.178009][T24790]  ? __pfx__printk+0x10/0x10
[  568.178041][T24790]  ? __pfx___might_resched+0x10/0x10
[  568.178063][T24790]  should_fail_ex+0x414/0x560
[  568.178092][T24790]  should_failslab+0xa8/0x100
[  568.178116][T24790]  __kmalloc_cache_noprof+0x70/0x3d0
[  568.178136][T24790]  ? ovs_flow_tbl_init+0x1fa/0x800
[  568.178164][T24790]  ovs_flow_tbl_init+0x1fa/0x800
[  568.178188][T24790]  ? ovs_dp_cmd_new+0x1ac/0xaf0
[  568.178218][T24790]  ovs_dp_cmd_new+0x24b/0xaf0
[  568.178266][T24790]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  568.178298][T24790]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  568.178330][T24790]  genl_family_rcv_msg_doit+0x212/0x300
[  568.178360][T24790]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  568.178397][T24790]  ? bpf_lsm_capable+0x9/0x20
[  568.178416][T24790]  ? security_capable+0x7e/0x2e0
[  568.178445][T24790]  genl_rcv_msg+0x60e/0x790
[  568.178474][T24790]  ? __pfx_genl_rcv_msg+0x10/0x10
[  568.178495][T24790]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  568.178522][T24790]  ? __asan_memcpy+0x40/0x70
[  568.178539][T24790]  ? __pfx_ref_tracker_free+0x10/0x10
[  568.178572][T24790]  netlink_rcv_skb+0x208/0x470
[  568.178588][T24790]  ? __lock_acquire+0xab9/0xd20
[  568.178605][T24790]  ? __pfx_genl_rcv_msg+0x10/0x10
[  568.178628][T24790]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  568.178666][T24790]  ? down_read+0x1ad/0x2e0
[  568.178688][T24790]  genl_rcv+0x28/0x40
[  568.178708][T24790]  netlink_unicast+0x82c/0x9e0
[  568.178744][T24790]  ? __pfx_netlink_unicast+0x10/0x10
[  568.178771][T24790]  ? netlink_sendmsg+0x642/0xb30
[  568.178787][T24790]  ? skb_put+0x11b/0x210
[  568.178809][T24790]  netlink_sendmsg+0x805/0xb30
[  568.178837][T24790]  ? __pfx_netlink_sendmsg+0x10/0x10
[  568.178859][T24790]  ? aa_sock_msg_perm+0xf1/0x1d0
[  568.178886][T24790]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  568.178910][T24790]  ? __pfx_netlink_sendmsg+0x10/0x10
[  568.178928][T24790]  __sock_sendmsg+0x21c/0x270
[  568.178956][T24790]  ____sys_sendmsg+0x505/0x830
[  568.178983][T24790]  ? __pfx_____sys_sendmsg+0x10/0x10
[  568.179014][T24790]  ? import_iovec+0x74/0xa0
[  568.179038][T24790]  ___sys_sendmsg+0x21f/0x2a0
[  568.179061][T24790]  ? __pfx____sys_sendmsg+0x10/0x10
[  568.179121][T24790]  ? __fget_files+0x2a/0x420
[  568.179142][T24790]  ? __fget_files+0x3a0/0x420
[  568.179176][T24790]  __x64_sys_sendmsg+0x19b/0x260
[  568.179199][T24790]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  568.179238][T24790]  ? __pfx_ksys_write+0x10/0x10
[  568.179256][T24790]  ? __task_pid_nr_ns+0x28/0x490
[  568.179284][T24790]  ? do_syscall_64+0xbe/0x3b0
[  568.179306][T24790]  do_syscall_64+0xfa/0x3b0
[  568.179322][T24790]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.179348][T24790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.179365][T24790]  ? clear_bhb_loop+0x60/0xb0
[  568.179386][T24790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.179402][T24790] RIP: 0033:0x7f5a61f8eec9
[  568.179420][T24790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  568.179436][T24790] RSP: 002b:00007f5a62eba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  568.179455][T24790] RAX: ffffffffffffffda RBX: 00007f5a621e5fa0 RCX: 00007f5a61f8eec9
[  568.179468][T24790] RDX: 000000000000c080 RSI: 0000200000000080 RDI: 0000000000000003
[  568.179479][T24790] RBP: 00007f5a62eba090 R08: 0000000000000000 R09: 0000000000000000
[  568.179490][T24790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  568.179499][T24790] R13: 00007f5a621e6038 R14: 00007f5a621e5fa0 R15: 00007ffe7fe5a818
[  568.179530][T24790]  </TASK>
[  568.585661][T24794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5096'.
[  568.662189][T24800] netlink: 'syz.4.5095': attribute type 8 has an invalid length.
[  568.784337][T24806] netlink: 'syz.3.5098': attribute type 15 has an invalid length.
[  568.785148][T24812] netlink: 'syz.3.5098': attribute type 17 has an invalid length.
[  568.810274][T24812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  568.836414][T24813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5100'.
[  568.900844][T24819] netlink: 'syz.4.5103': attribute type 4 has an invalid length.
[  568.930750][T24819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5103'.
[  568.977601][T24826] FAULT_INJECTION: forcing a failure.
[  568.977601][T24826] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  568.991090][T24826] CPU: 1 UID: 0 PID: 24826 Comm: syz.1.5104 Not tainted syzkaller #0 PREEMPT(full) 
[  568.991117][T24826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  568.991130][T24826] Call Trace:
[  568.991138][T24826]  <TASK>
[  568.991147][T24826]  dump_stack_lvl+0x189/0x250
[  568.991185][T24826]  ? __pfx____ratelimit+0x10/0x10
[  568.991214][T24826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  568.991236][T24826]  ? __pfx__printk+0x10/0x10
[  568.991267][T24826]  ? fs_reclaim_acquire+0x7d/0x100
[  568.991302][T24826]  should_fail_ex+0x414/0x560
[  568.991333][T24826]  prepare_alloc_pages+0x213/0x610
[  568.991370][T24826]  __alloc_frozen_pages_noprof+0x123/0x370
[  568.991403][T24826]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  568.991439][T24826]  ? policy_nodemask+0x27c/0x720
[  568.991458][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5103'.
[  568.991462][T24826]  ? __lock_acquire+0xab9/0xd20
[  568.991484][T24826]  alloc_pages_mpol+0x232/0x4a0
[  568.991508][T24826]  alloc_pages_noprof+0xa9/0x190
[  568.991533][T24826]  get_free_pages_noprof+0xf/0x80
[  568.991561][T24826]  kasan_populate_vmalloc+0x38/0x270
[  568.991583][T24826]  ? do_raw_spin_unlock+0x122/0x240
[  568.991615][T24826]  alloc_vmap_area+0xd62/0x14a0
[  568.991655][T24826]  ? __pfx_alloc_vmap_area+0x10/0x10
[  568.991677][T24826]  ? __kasan_kmalloc+0x93/0xb0
[  568.991702][T24826]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  568.991726][T24826]  ? __get_vm_area_node+0x13f/0x300
[  568.991749][T24826]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  568.991769][T24826]  __get_vm_area_node+0x1f8/0x300
[  568.991801][T24826]  __vmalloc_node_range_noprof+0x301/0x12f0
[  568.991827][T24826]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  568.991848][T24826]  ? __lock_acquire+0xab9/0xd20
[  568.991891][T24826]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  568.991918][T24826]  ? __might_fault+0xb0/0x130
[  568.991950][T24826]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  568.991966][T24826]  __vmalloc_noprof+0xb1/0xf0
[  568.991991][T24826]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  568.992012][T24826]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  568.992036][T24826]  bpf_prog_alloc+0x3c/0x1a0
[  568.992057][T24826]  bpf_prog_load+0x735/0x19e0
[  568.992101][T24826]  ? __pfx_bpf_prog_load+0x10/0x10
[  568.992155][T24826]  ? bpf_lsm_bpf+0x9/0x20
[  568.992181][T24826]  ? security_bpf+0x7e/0x300
[  568.992207][T24826]  __sys_bpf+0x507/0x860
[  568.992239][T24826]  ? __pfx___sys_bpf+0x10/0x10
[  568.992285][T24826]  ? ksys_write+0x22a/0x250
[  568.992311][T24826]  ? __pfx_ksys_write+0x10/0x10
[  568.992342][T24826]  __x64_sys_bpf+0x7c/0x90
[  568.992370][T24826]  do_syscall_64+0xfa/0x3b0
[  568.992389][T24826]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.992418][T24826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.992438][T24826]  ? clear_bhb_loop+0x60/0xb0
[  568.992461][T24826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.992480][T24826] RIP: 0033:0x7fdc8858eec9
[  568.992498][T24826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  568.992515][T24826] RSP: 002b:00007fdc893b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  568.992536][T24826] RAX: ffffffffffffffda RBX: 00007fdc887e5fa0 RCX: 00007fdc8858eec9
[  568.992551][T24826] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  568.992564][T24826] RBP: 00007fdc893b6090 R08: 0000000000000000 R09: 0000000000000000
[  568.992576][T24826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.992588][T24826] R13: 00007fdc887e6038 R14: 00007fdc887e5fa0 R15: 00007ffda9af8028
[  568.992621][T24826]  </TASK>
[  569.268747][T24840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5106'.
[  569.451830][T24840] bond19: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  569.468996][T24840] bond19 (unregistering): Released all slaves
[  569.613443][T24852] lo: Caught tx_queue_len zero misconfig
[  569.633727][T24852] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  569.677512][T24860] FAULT_INJECTION: forcing a failure.
[  569.677512][T24860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  569.732237][T24861] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  569.741599][T24861] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  569.766355][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5114'.
[  569.809811][T24860] CPU: 1 UID: 0 PID: 24860 Comm: syz.4.5113 Not tainted syzkaller #0 PREEMPT(full) 
[  569.809840][T24860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  569.809853][T24860] Call Trace:
[  569.809862][T24860]  <TASK>
[  569.809872][T24860]  dump_stack_lvl+0x189/0x250
[  569.809901][T24860]  ? __pfx____ratelimit+0x10/0x10
[  569.809933][T24860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  569.809959][T24860]  ? __pfx__printk+0x10/0x10
[  569.810004][T24860]  should_fail_ex+0x414/0x560
[  569.810038][T24860]  _copy_to_user+0x31/0xb0
[  569.810066][T24860]  simple_read_from_buffer+0xe1/0x170
[  569.810104][T24860]  proc_fail_nth_read+0x1b3/0x220
[  569.810130][T24860]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  569.810156][T24860]  ? rw_verify_area+0x2a6/0x4d0
[  569.810177][T24860]  ? __lock_acquire+0xab9/0xd20
[  569.810195][T24860]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  569.810218][T24860]  vfs_read+0x1fd/0xa30
[  569.810240][T24860]  ? fdget_pos+0x247/0x320
[  569.810280][T24860]  ? __pfx___mutex_lock+0x10/0x10
[  569.810301][T24860]  ? __pfx_vfs_read+0x10/0x10
[  569.810327][T24860]  ? __fget_files+0x2a/0x420
[  569.810357][T24860]  ? __fget_files+0x3a0/0x420
[  569.810382][T24860]  ? __fget_files+0x2a/0x420
[  569.810417][T24860]  ksys_read+0x145/0x250
[  569.810443][T24860]  ? __pfx_ksys_read+0x10/0x10
[  569.810461][T24860]  ? rcu_is_watching+0x15/0xb0
[  569.810491][T24860]  ? do_syscall_64+0xbe/0x3b0
[  569.810514][T24860]  do_syscall_64+0xfa/0x3b0
[  569.810532][T24860]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.810560][T24860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.810579][T24860]  ? clear_bhb_loop+0x60/0xb0
[  569.810602][T24860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.810621][T24860] RIP: 0033:0x7f1b6b58d8dc
[  569.810639][T24860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  569.810656][T24860] RSP: 002b:00007f1b6c3ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  569.810677][T24860] RAX: ffffffffffffffda RBX: 00007f1b6b7e5fa0 RCX: 00007f1b6b58d8dc
[  569.810692][T24860] RDX: 000000000000000f RSI: 00007f1b6c3ff0a0 RDI: 0000000000000005
[  569.810705][T24860] RBP: 00007f1b6c3ff090 R08: 0000000000000000 R09: 0000000000000000
[  569.810718][T24860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.810731][T24860] R13: 00007f1b6b7e6038 R14: 00007f1b6b7e5fa0 R15: 00007ffc221f6eb8
[  569.810766][T24860]  </TASK>
[  570.158467][T24877] FAULT_INJECTION: forcing a failure.
[  570.158467][T24877] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  570.172159][T24877] CPU: 1 UID: 0 PID: 24877 Comm: syz.4.5118 Not tainted syzkaller #0 PREEMPT(full) 
[  570.172187][T24877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  570.172200][T24877] Call Trace:
[  570.172208][T24877]  <TASK>
[  570.172216][T24877]  dump_stack_lvl+0x189/0x250
[  570.172245][T24877]  ? __pfx____ratelimit+0x10/0x10
[  570.172277][T24877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.172301][T24877]  ? __pfx__printk+0x10/0x10
[  570.172332][T24877]  ? fs_reclaim_acquire+0x7d/0x100
[  570.172371][T24877]  should_fail_ex+0x414/0x560
[  570.172404][T24877]  prepare_alloc_pages+0x213/0x610
[  570.172441][T24877]  __alloc_frozen_pages_noprof+0x123/0x370
[  570.172476][T24877]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  570.172518][T24877]  ? policy_nodemask+0x27c/0x720
[  570.172549][T24877]  alloc_pages_bulk_noprof+0x560/0x710
[  570.172586][T24877]  ? alloc_pages_noprof+0xbe/0x190
[  570.172615][T24877]  kasan_populate_vmalloc+0xd1/0x270
[  570.172637][T24877]  ? do_raw_spin_unlock+0x122/0x240
[  570.172670][T24877]  alloc_vmap_area+0xd62/0x14a0
[  570.172713][T24877]  ? __pfx_alloc_vmap_area+0x10/0x10
[  570.172736][T24877]  ? __kasan_kmalloc+0x93/0xb0
[  570.172778][T24877]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  570.172803][T24877]  ? __get_vm_area_node+0x13f/0x300
[  570.172826][T24877]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.172847][T24877]  __get_vm_area_node+0x1f8/0x300
[  570.172880][T24877]  __vmalloc_node_range_noprof+0x301/0x12f0
[  570.172907][T24877]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.172929][T24877]  ? __lock_acquire+0xab9/0xd20
[  570.172975][T24877]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  570.173003][T24877]  ? __might_fault+0xb0/0x130
[  570.173036][T24877]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.173059][T24877]  __vmalloc_noprof+0xb1/0xf0
[  570.173084][T24877]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.173107][T24877]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.173132][T24877]  bpf_prog_alloc+0x3c/0x1a0
[  570.173154][T24877]  bpf_prog_load+0x735/0x19e0
[  570.173199][T24877]  ? __pfx_bpf_prog_load+0x10/0x10
[  570.173255][T24877]  ? bpf_lsm_bpf+0x9/0x20
[  570.173275][T24877]  ? security_bpf+0x7e/0x300
[  570.173302][T24877]  __sys_bpf+0x507/0x860
[  570.173334][T24877]  ? __pfx___sys_bpf+0x10/0x10
[  570.173382][T24877]  ? ksys_write+0x22a/0x250
[  570.173408][T24877]  ? __pfx_ksys_write+0x10/0x10
[  570.173441][T24877]  __x64_sys_bpf+0x7c/0x90
[  570.173469][T24877]  do_syscall_64+0xfa/0x3b0
[  570.173488][T24877]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.173518][T24877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.173538][T24877]  ? clear_bhb_loop+0x60/0xb0
[  570.173563][T24877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.173583][T24877] RIP: 0033:0x7f1b6b58eec9
[  570.173602][T24877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.173620][T24877] RSP: 002b:00007f1b6c3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  570.173642][T24877] RAX: ffffffffffffffda RBX: 00007f1b6b7e5fa0 RCX: 00007f1b6b58eec9
[  570.173657][T24877] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  570.173670][T24877] RBP: 00007f1b6c3ff090 R08: 0000000000000000 R09: 0000000000000000
[  570.173683][T24877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.173696][T24877] R13: 00007f1b6b7e6038 R14: 00007f1b6b7e5fa0 R15: 00007ffc221f6eb8
[  570.173730][T24877]  </TASK>
[  570.173783][T24877] warn_alloc: 2 callbacks suppressed
[  570.512656][T24877] syz.4.5118: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  570.529085][T24877] CPU: 1 UID: 0 PID: 24877 Comm: syz.4.5118 Not tainted syzkaller #0 PREEMPT(full) 
[  570.529110][T24877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  570.529120][T24877] Call Trace:
[  570.529129][T24877]  <TASK>
[  570.529137][T24877]  dump_stack_lvl+0x189/0x250
[  570.529166][T24877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.529190][T24877]  ? __pfx__printk+0x10/0x10
[  570.529216][T24877]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  570.529239][T24877]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  570.529265][T24877]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  570.529292][T24877]  warn_alloc+0x214/0x310
[  570.529318][T24877]  ? kasan_quarantine_put+0xdd/0x220
[  570.529340][T24877]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.529372][T24877]  ? __pfx_warn_alloc+0x10/0x10
[  570.529399][T24877]  ? kfree+0x18e/0x440
[  570.529418][T24877]  ? __get_vm_area_node+0x13f/0x300
[  570.529443][T24877]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.529463][T24877]  ? __get_vm_area_node+0x211/0x300
[  570.529495][T24877]  __vmalloc_node_range_noprof+0x326/0x12f0
[  570.529524][T24877]  ? __lock_acquire+0xab9/0xd20
[  570.529569][T24877]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  570.529598][T24877]  ? __might_fault+0xb0/0x130
[  570.529630][T24877]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.529647][T24877]  __vmalloc_noprof+0xb1/0xf0
[  570.529672][T24877]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.529694][T24877]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  570.529718][T24877]  bpf_prog_alloc+0x3c/0x1a0
[  570.529741][T24877]  bpf_prog_load+0x735/0x19e0
[  570.529796][T24877]  ? __pfx_bpf_prog_load+0x10/0x10
[  570.529853][T24877]  ? bpf_lsm_bpf+0x9/0x20
[  570.529872][T24877]  ? security_bpf+0x7e/0x300
[  570.529896][T24877]  __sys_bpf+0x507/0x860
[  570.529926][T24877]  ? __pfx___sys_bpf+0x10/0x10
[  570.529974][T24877]  ? ksys_write+0x22a/0x250
[  570.529999][T24877]  ? __pfx_ksys_write+0x10/0x10
[  570.530031][T24877]  __x64_sys_bpf+0x7c/0x90
[  570.530059][T24877]  do_syscall_64+0xfa/0x3b0
[  570.530078][T24877]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.530106][T24877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.530126][T24877]  ? clear_bhb_loop+0x60/0xb0
[  570.530151][T24877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.530171][T24877] RIP: 0033:0x7f1b6b58eec9
[  570.530189][T24877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.530207][T24877] RSP: 002b:00007f1b6c3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  570.530229][T24877] RAX: ffffffffffffffda RBX: 00007f1b6b7e5fa0 RCX: 00007f1b6b58eec9
[  570.530244][T24877] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  570.530257][T24877] RBP: 00007f1b6c3ff090 R08: 0000000000000000 R09: 0000000000000000
[  570.530270][T24877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.530282][T24877] R13: 00007f1b6b7e6038 R14: 00007f1b6b7e5fa0 R15: 00007ffc221f6eb8
[  570.530317][T24877]  </TASK>
[  570.530324][T24877] Mem-Info:
[  570.841584][T24877] active_anon:10520 inactive_anon:0 isolated_anon:0
[  570.841584][T24877]  active_file:3674 inactive_file:40086 isolated_file:0
[  570.841584][T24877]  unevictable:768 dirty:216 writeback:0
[  570.841584][T24877]  slab_reclaimable:12885 slab_unreclaimable:151790
[  570.841584][T24877]  mapped:29395 shmem:3422 pagetables:1174
[  570.841584][T24877]  sec_pagetables:0 bounce:0
[  570.841584][T24877]  kernel_misc_reclaimable:0
[  570.841584][T24877]  free:1249328 free_pcp:10909 free_cma:0
[  570.929994][T24877] Node 0 active_anon:41980kB inactive_anon:0kB active_file:14696kB inactive_file:160144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121780kB dirty:864kB writeback:0kB shmem:12152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13892kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  570.996229][T24877] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  571.078199][T24877] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  571.154277][T24877] lowmem_reserve[]: 0 2506 2506 2506 2506
[  571.160298][T24877] Node 0 DMA32 free:1088212kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39484kB inactive_anon:0kB active_file:14696kB inactive_file:159820kB unevictable:1536kB writepending:868kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:27708kB local_pcp:12556kB free_cma:0kB
[  571.281221][T24877] lowmem_reserve[]: 0 0 0 0 0
[  571.293900][T24877] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  571.369095][T24877] lowmem_reserve[]: 0 0 0 0 0
[  571.391607][T24877] Node 1 Normal free:3893724kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19044kB local_pcp:10112kB free_cma:0kB
[  571.427081][T24916] ipvlan0: entered promiscuous mode
[  571.434647][T24916] ipvlan0: left promiscuous mode
[  571.459516][T24877] lowmem_reserve[]: 0 0 0 0 0
[  571.465699][T24877] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  571.479226][T24877] Node 0 DMA32: 2611*4kB (UM) 1101*8kB (UME) 792*16kB (UME) 673*32kB (UM) 286*64kB (UME) 183*128kB (UME) 113*256kB (UM) 75*512kB (UME) 22*1024kB (UM) 13*2048kB (UME) 214*4096kB (UM) = 1088212kB
[  571.500949][T24877] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  571.513103][T24877] Node 1 Normal: 211*4kB (UE) 70*8kB (UME) 46*16kB (UME) 102*32kB (UME) 45*64kB (UME) 11*128kB (UME) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 947*4096kB (M) = 3893724kB
[  571.572526][T24877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  571.582986][T24877] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  571.596319][T24877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  571.684390][T24877] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  571.704061][T24877] 46383 total pagecache pages
[  571.714409][T24877] 0 pages in swap cache
[  571.718693][T24877] Free swap  = 124996kB
[  571.722846][T24877] Total swap = 124996kB
[  571.747599][T24877] 2097051 pages RAM
[  571.751467][T24877] 0 pages HighMem/MovableOnly
[  571.754837][T24929] |ªA–K: entered promiscuous mode
[  571.769624][T24877] 423781 pages reserved
[  571.783920][T24877] 0 pages cma reserved
[  571.798494][T24933] netlink: 'syz.3.5132': attribute type 1 has an invalid length.
[  571.858986][T24933] 8021q: adding VLAN 0 to HW filter on device bond7
[  571.916630][T24935] bond7: (slave geneve2): making interface the new active one
[  571.953092][T24935] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  571.979926][T24933] bond7: entered promiscuous mode
[  571.987249][T24933] geneve2: entered promiscuous mode
[  572.019102][ T6217] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.029013][ T6217] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.054245][ T6217] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.083230][ T6217] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.420383][T24960] macsec2: entered promiscuous mode
[  572.434793][T24960] macvlan0: entered promiscuous mode
[  572.447124][T24958] __nla_validate_parse: 3 callbacks suppressed
[  572.447143][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5140'.
[  572.472253][T24960] macvlan0: left promiscuous mode
[  572.546272][T24958] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5140'.
[  572.603581][T24965] wg1 speed is unknown, defaulting to 1000
[  572.674207][T24968] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5143'.
[  572.963277][T24973] wg1 speed is unknown, defaulting to 1000
[  573.071260][T24983] |ªA–: entered promiscuous mode
[  574.131578][T25017] FAULT_INJECTION: forcing a failure.
[  574.131578][T25017] name failslab, interval 1, probability 0, space 0, times 0
[  574.173918][T25017] CPU: 0 UID: 0 PID: 25017 Comm: syz.2.5160 Not tainted syzkaller #0 PREEMPT(full) 
[  574.173947][T25017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  574.173960][T25017] Call Trace:
[  574.173968][T25017]  <TASK>
[  574.173978][T25017]  dump_stack_lvl+0x189/0x250
[  574.174008][T25017]  ? __pfx____ratelimit+0x10/0x10
[  574.174041][T25017]  ? __pfx_dump_stack_lvl+0x10/0x10
[  574.174066][T25017]  ? __pfx__printk+0x10/0x10
[  574.174100][T25017]  ? __pfx___might_resched+0x10/0x10
[  574.174124][T25017]  should_fail_ex+0x414/0x560
[  574.174156][T25017]  should_failslab+0xa8/0x100
[  574.174183][T25017]  __kmalloc_noprof+0xcb/0x4f0
[  574.174205][T25017]  ? ovs_vport_alloc+0x30/0x300
[  574.174222][T25017]  ? __phys_addr+0xd3/0x180
[  574.174252][T25017]  ovs_vport_alloc+0x30/0x300
[  574.174278][T25017]  internal_dev_create+0x2b/0x470
[  574.174306][T25017]  ovs_vport_add+0x110/0x370
[  574.174324][T25017]  ? new_vport+0x12/0x190
[  574.174356][T25017]  new_vport+0x1a/0x190
[  574.174387][T25017]  ovs_dp_cmd_new+0x69f/0xaf0
[  574.174443][T25017]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  574.174482][T25017]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  574.174520][T25017]  genl_family_rcv_msg_doit+0x212/0x300
[  574.174556][T25017]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  574.174601][T25017]  ? bpf_lsm_capable+0x9/0x20
[  574.174623][T25017]  ? security_capable+0x7e/0x2e0
[  574.174656][T25017]  genl_rcv_msg+0x60e/0x790
[  574.174690][T25017]  ? __pfx_genl_rcv_msg+0x10/0x10
[  574.174711][T25017]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  574.174738][T25017]  ? __asan_memcpy+0x40/0x70
[  574.174754][T25017]  ? __pfx_ref_tracker_free+0x10/0x10
[  574.174785][T25017]  netlink_rcv_skb+0x208/0x470
[  574.174801][T25017]  ? __lock_acquire+0xab9/0xd20
[  574.174817][T25017]  ? __pfx_genl_rcv_msg+0x10/0x10
[  574.174840][T25017]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  574.174875][T25017]  ? down_read+0x1ad/0x2e0
[  574.174897][T25017]  genl_rcv+0x28/0x40
[  574.174916][T25017]  netlink_unicast+0x82c/0x9e0
[  574.174950][T25017]  ? __pfx_netlink_unicast+0x10/0x10
[  574.174976][T25017]  ? netlink_sendmsg+0x642/0xb30
[  574.174991][T25017]  ? skb_put+0x11b/0x210
[  574.175013][T25017]  netlink_sendmsg+0x805/0xb30
[  574.175040][T25017]  ? __pfx_netlink_sendmsg+0x10/0x10
[  574.175061][T25017]  ? aa_sock_msg_perm+0xf1/0x1d0
[  574.175085][T25017]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  574.175109][T25017]  ? __pfx_netlink_sendmsg+0x10/0x10
[  574.175128][T25017]  __sock_sendmsg+0x21c/0x270
[  574.175155][T25017]  ____sys_sendmsg+0x505/0x830
[  574.175180][T25017]  ? __pfx_____sys_sendmsg+0x10/0x10
[  574.175209][T25017]  ? import_iovec+0x74/0xa0
[  574.175232][T25017]  ___sys_sendmsg+0x21f/0x2a0
[  574.175254][T25017]  ? __pfx____sys_sendmsg+0x10/0x10
[  574.175310][T25017]  ? __fget_files+0x2a/0x420
[  574.175330][T25017]  ? __fget_files+0x3a0/0x420
[  574.175362][T25017]  __x64_sys_sendmsg+0x19b/0x260
[  574.175385][T25017]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  574.175420][T25017]  ? __pfx_ksys_write+0x10/0x10
[  574.175437][T25017]  ? rcu_is_watching+0x15/0xb0
[  574.175461][T25017]  ? do_syscall_64+0xbe/0x3b0
[  574.175482][T25017]  do_syscall_64+0xfa/0x3b0
[  574.175497][T25017]  ? lockdep_hardirqs_on+0x9c/0x150
[  574.175524][T25017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.175541][T25017]  ? clear_bhb_loop+0x60/0xb0
[  574.175561][T25017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.175577][T25017] RIP: 0033:0x7f5a61f8eec9
[  574.175593][T25017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  574.175607][T25017] RSP: 002b:00007f5a62eba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  574.175625][T25017] RAX: ffffffffffffffda RBX: 00007f5a621e5fa0 RCX: 00007f5a61f8eec9
[  574.175638][T25017] RDX: 000000000000c080 RSI: 0000200000000080 RDI: 0000000000000003
[  574.175649][T25017] RBP: 00007f5a62eba090 R08: 0000000000000000 R09: 0000000000000000
[  574.175661][T25017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  574.175671][T25017] R13: 00007f5a621e6038 R14: 00007f5a621e5fa0 R15: 00007ffe7fe5a818
[  574.175700][T25017]  </TASK>
[  574.658738][T25026] netlink: 'syz.0.5164': attribute type 3 has an invalid length.
[  574.671291][T25026] netlink: 'syz.0.5164': attribute type 3 has an invalid length.
[  574.841143][T25036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5168'.
[  574.886248][T25032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5168'.
[  575.040154][T25050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5169'.
[  575.158366][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5173'.
[  575.387297][T25069] FAULT_INJECTION: forcing a failure.
[  575.387297][T25069] name failslab, interval 1, probability 0, space 0, times 0
[  575.465057][T25069] CPU: 1 UID: 0 PID: 25069 Comm: syz.0.5177 Not tainted syzkaller #0 PREEMPT(full) 
[  575.465086][T25069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  575.465099][T25069] Call Trace:
[  575.465109][T25069]  <TASK>
[  575.465119][T25069]  dump_stack_lvl+0x189/0x250
[  575.465148][T25069]  ? __pfx____ratelimit+0x10/0x10
[  575.465181][T25069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  575.465206][T25069]  ? __pfx__printk+0x10/0x10
[  575.465244][T25069]  ? __pfx___might_resched+0x10/0x10
[  575.465273][T25069]  ? fs_reclaim_acquire+0x7d/0x100
[  575.465308][T25069]  should_fail_ex+0x414/0x560
[  575.465343][T25069]  should_failslab+0xa8/0x100
[  575.465372][T25069]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  575.465396][T25069]  ? __d_alloc+0x36/0x7a0
[  575.465433][T25069]  __d_alloc+0x36/0x7a0
[  575.465470][T25069]  d_alloc_parallel+0xe5/0x15e0
[  575.465491][T25069]  ? __lock_acquire+0xab9/0xd20
[  575.465522][T25069]  ? __lock_acquire+0xab9/0xd20
[  575.465549][T25069]  ? __pfx_d_alloc_parallel+0x10/0x10
[  575.465576][T25069]  ? __raw_spin_lock_init+0x45/0x100
[  575.465605][T25069]  ? __init_waitqueue_head+0xa9/0x150
[  575.465639][T25069]  __lookup_slow+0x116/0x3d0
[  575.465662][T25069]  ? __pfx___lookup_slow+0x10/0x10
[  575.465695][T25069]  ? d_lookup+0x8a/0xa0
[  575.465714][T25069]  ? lookup_noperm+0x112/0x220
[  575.465738][T25069]  simple_start_creating+0xfd/0x1e0
[  575.465767][T25069]  ? __pfx_simple_start_creating+0x10/0x10
[  575.465809][T25069]  debugfs_start_creating+0x10f/0x180
[  575.465842][T25069]  __debugfs_create_file+0x79/0x4f0
[  575.465878][T25069]  debugfs_create_file_full+0x3f/0x60
[  575.465912][T25069]  ref_tracker_dir_debugfs+0x14e/0x270
[  575.465944][T25069]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  575.466005][T25069]  ? rcu_is_watching+0x15/0xb0
[  575.466027][T25069]  ? alloc_netdev_mqs+0xa3/0x11b0
[  575.466060][T25069]  ? __raw_spin_lock_init+0x45/0x100
[  575.466094][T25069]  alloc_netdev_mqs+0x26f/0x11b0
[  575.466119][T25069]  ? __pfx_do_setup+0x10/0x10
[  575.466149][T25069]  internal_dev_create+0x8b/0x470
[  575.466178][T25069]  ovs_vport_add+0x110/0x370
[  575.466198][T25069]  ? new_vport+0x12/0x190
[  575.466229][T25069]  new_vport+0x1a/0x190
[  575.466269][T25069]  ovs_dp_cmd_new+0x69f/0xaf0
[  575.466316][T25069]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  575.466357][T25069]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  575.466394][T25069]  genl_family_rcv_msg_doit+0x212/0x300
[  575.466431][T25069]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  575.466474][T25069]  ? bpf_lsm_capable+0x9/0x20
[  575.466496][T25069]  ? security_capable+0x7e/0x2e0
[  575.466529][T25069]  genl_rcv_msg+0x60e/0x790
[  575.466563][T25069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  575.466589][T25069]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  575.466637][T25069]  netlink_rcv_skb+0x208/0x470
[  575.466655][T25069]  ? __lock_acquire+0xab9/0xd20
[  575.466675][T25069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  575.466703][T25069]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  575.466748][T25069]  ? down_read+0x1ad/0x2e0
[  575.466775][T25069]  genl_rcv+0x28/0x40
[  575.466798][T25069]  netlink_unicast+0x82c/0x9e0
[  575.466840][T25069]  ? __pfx_netlink_unicast+0x10/0x10
[  575.466873][T25069]  ? netlink_sendmsg+0x642/0xb30
[  575.466892][T25069]  ? skb_put+0x11b/0x210
[  575.466919][T25069]  netlink_sendmsg+0x805/0xb30
[  575.466953][T25069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  575.466978][T25069]  ? aa_sock_msg_perm+0xf1/0x1d0
[  575.467008][T25069]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  575.467038][T25069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  575.467060][T25069]  __sock_sendmsg+0x21c/0x270
[  575.467094][T25069]  ____sys_sendmsg+0x505/0x830
[  575.467126][T25069]  ? __pfx_____sys_sendmsg+0x10/0x10
[  575.467163][T25069]  ? import_iovec+0x74/0xa0
[  575.467190][T25069]  ___sys_sendmsg+0x21f/0x2a0
[  575.467218][T25069]  ? __pfx____sys_sendmsg+0x10/0x10
[  575.467295][T25069]  ? __fget_files+0x2a/0x420
[  575.467321][T25069]  ? __fget_files+0x3a0/0x420
[  575.467361][T25069]  __x64_sys_sendmsg+0x19b/0x260
[  575.467389][T25069]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  575.467426][T25069]  ? __pfx_ksys_write+0x10/0x10
[  575.467447][T25069]  ? rcu_is_watching+0x15/0xb0
[  575.467477][T25069]  ? do_syscall_64+0xbe/0x3b0
[  575.467504][T25069]  do_syscall_64+0xfa/0x3b0
[  575.467522][T25069]  ? lockdep_hardirqs_on+0x9c/0x150
[  575.467551][T25069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.467571][T25069]  ? clear_bhb_loop+0x60/0xb0
[  575.467597][T25069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.467616][T25069] RIP: 0033:0x7f9c38d8eec9
[  575.467635][T25069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  575.467653][T25069] RSP: 002b:00007f9c36ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  575.467674][T25069] RAX: ffffffffffffffda RBX: 00007f9c38fe5fa0 RCX: 00007f9c38d8eec9
[  575.467690][T25069] RDX: 000000000000c080 RSI: 0000200000000080 RDI: 0000000000000003
[  575.467703][T25069] RBP: 00007f9c36ff6090 R08: 0000000000000000 R09: 0000000000000000
[  575.467716][T25069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  575.467728][T25069] R13: 00007f9c38fe6038 R14: 00007f9c38fe5fa0 R15: 00007ffe0dbefaf8
[  575.467763][T25069]  </TASK>
[  576.483514][T25093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5188'.
[  576.525340][T25095] netlink: 'syz.3.5189': attribute type 17 has an invalid length.
[  576.533436][T25095] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5189'.
[  576.671153][T25102] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5192'.
[  576.761549][T25106] FAULT_INJECTION: forcing a failure.
[  576.761549][T25106] name failslab, interval 1, probability 0, space 0, times 0
[  576.956812][T25106] CPU: 1 UID: 0 PID: 25106 Comm: syz.0.5194 Not tainted syzkaller #0 PREEMPT(full) 
[  576.956840][T25106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  576.956853][T25106] Call Trace:
[  576.956861][T25106]  <TASK>
[  576.956871][T25106]  dump_stack_lvl+0x189/0x250
[  576.956898][T25106]  ? __pfx____ratelimit+0x10/0x10
[  576.956929][T25106]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.956954][T25106]  ? __pfx__printk+0x10/0x10
[  576.956989][T25106]  ? __pfx___might_resched+0x10/0x10
[  576.957016][T25106]  should_fail_ex+0x414/0x560
[  576.957047][T25106]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  576.957076][T25106]  should_failslab+0xa8/0x100
[  576.957102][T25106]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  576.957128][T25106]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  576.957150][T25106]  ? alloc_inode+0x6a/0x1b0
[  576.957173][T25106]  ? __pfx_simple_start_creating+0x10/0x10
[  576.957203][T25106]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  576.957232][T25106]  alloc_inode+0x6a/0x1b0
[  576.957258][T25106]  new_inode+0x22/0x170
[  576.957289][T25106]  __debugfs_create_file+0x14d/0x4f0
[  576.957326][T25106]  debugfs_create_file_full+0x3f/0x60
[  576.957368][T25106]  ref_tracker_dir_debugfs+0x14e/0x270
[  576.957398][T25106]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  576.957459][T25106]  ? rcu_is_watching+0x15/0xb0
[  576.957481][T25106]  ? alloc_netdev_mqs+0xa3/0x11b0
[  576.957513][T25106]  ? __raw_spin_lock_init+0x45/0x100
[  576.957544][T25106]  alloc_netdev_mqs+0x26f/0x11b0
[  576.957569][T25106]  ? __pfx_do_setup+0x10/0x10
[  576.957599][T25106]  internal_dev_create+0x8b/0x470
[  576.957628][T25106]  ovs_vport_add+0x110/0x370
[  576.957647][T25106]  ? new_vport+0x12/0x190
[  576.957679][T25106]  new_vport+0x1a/0x190
[  576.957711][T25106]  ovs_dp_cmd_new+0x69f/0xaf0
[  576.957757][T25106]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  576.957797][T25106]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  576.957835][T25106]  genl_family_rcv_msg_doit+0x212/0x300
[  576.957871][T25106]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  576.957914][T25106]  ? bpf_lsm_capable+0x9/0x20
[  576.957936][T25106]  ? security_capable+0x7e/0x2e0
[  576.957970][T25106]  genl_rcv_msg+0x60e/0x790
[  576.958005][T25106]  ? __pfx_genl_rcv_msg+0x10/0x10
[  576.958030][T25106]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  576.958061][T25106]  ? __asan_memcpy+0x40/0x70
[  576.958079][T25106]  ? __pfx_ref_tracker_free+0x10/0x10
[  576.958117][T25106]  netlink_rcv_skb+0x208/0x470
[  576.958135][T25106]  ? __lock_acquire+0xab9/0xd20
[  576.958155][T25106]  ? __pfx_genl_rcv_msg+0x10/0x10
[  576.958182][T25106]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  576.958227][T25106]  ? down_read+0x1ad/0x2e0
[  576.958252][T25106]  genl_rcv+0x28/0x40
[  576.958280][T25106]  netlink_unicast+0x82c/0x9e0
[  576.958321][T25106]  ? __pfx_netlink_unicast+0x10/0x10
[  576.958360][T25106]  ? netlink_sendmsg+0x642/0xb30
[  576.958379][T25106]  ? skb_put+0x11b/0x210
[  576.958403][T25106]  netlink_sendmsg+0x805/0xb30
[  576.958431][T25106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.958455][T25106]  ? aa_sock_msg_perm+0xf1/0x1d0
[  576.958482][T25106]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  576.958509][T25106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.958529][T25106]  __sock_sendmsg+0x21c/0x270
[  576.958560][T25106]  ____sys_sendmsg+0x505/0x830
[  576.958591][T25106]  ? __pfx_____sys_sendmsg+0x10/0x10
[  576.958627][T25106]  ? import_iovec+0x74/0xa0
[  576.958656][T25106]  ___sys_sendmsg+0x21f/0x2a0
[  576.958683][T25106]  ? __pfx____sys_sendmsg+0x10/0x10
[  576.958753][T25106]  ? __fget_files+0x2a/0x420
[  576.958779][T25106]  ? __fget_files+0x3a0/0x420
[  576.958820][T25106]  __x64_sys_sendmsg+0x19b/0x260
[  576.958847][T25106]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  576.958884][T25106]  ? __pfx_ksys_write+0x10/0x10
[  576.958905][T25106]  ? rcu_is_watching+0x15/0xb0
[  576.958935][T25106]  ? do_syscall_64+0xbe/0x3b0
[  576.958961][T25106]  do_syscall_64+0xfa/0x3b0
[  576.958980][T25106]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.959010][T25106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.959030][T25106]  ? clear_bhb_loop+0x60/0xb0
[  576.959055][T25106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.959075][T25106] RIP: 0033:0x7f9c38d8eec9
[  576.959094][T25106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.959109][T25106] RSP: 002b:00007f9c36ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.959130][T25106] RAX: ffffffffffffffda RBX: 00007f9c38fe5fa0 RCX: 00007f9c38d8eec9
[  576.959146][T25106] RDX: 000000000000c080 RSI: 0000200000000080 RDI: 0000000000000003
[  576.959159][T25106] RBP: 00007f9c36ff6090 R08: 0000000000000000 R09: 0000000000000000
[  576.959172][T25106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  576.959184][T25106] R13: 00007f9c38fe6038 R14: 00007f9c38fe5fa0 R15: 00007ffe0dbefaf8
[  576.959221][T25106]  </TASK>
[  576.959817][T25106] debugfs: out of free dentries, can not create file 'netdev@ffff88802ad3a610'
[  577.591024][T25132] netlink: 'syz.1.5198': attribute type 6 has an invalid length.
[  577.620536][T25127] wg1 speed is unknown, defaulting to 1000
[  577.735351][T25132] netlink: 'syz.1.5198': attribute type 12 has an invalid length.
[  577.749281][T25132] __nla_validate_parse: 3 callbacks suppressed
[  577.749303][T25132] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5198'.
[  578.028782][T25152] netlink: 'syz.2.5203': attribute type 1 has an invalid length.
[  578.084515][T25152] bond19: entered promiscuous mode
[  578.089835][T25152] bond19: entered allmulticast mode
[  578.140345][T25150] bridge5: entered promiscuous mode
[  578.159289][T25150] bridge5: entered allmulticast mode
[  578.168258][T25150] bond19: (slave bridge5): making interface the new active one
[  578.178334][T25150] bond19: (slave bridge5): Enslaving as an active interface with an up link
[  578.202526][T25157] netlink: 'syz.3.5204': attribute type 1 has an invalid length.
[  578.212680][T25157] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5204'.
[  578.249725][T25159] syzkaller1: entered promiscuous mode
[  578.255693][T25159] syzkaller1: entered allmulticast mode
[  578.390209][T25168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'.
[  578.526453][T25168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5210'.
[  578.661271][T25181] wg1 speed is unknown, defaulting to 1000
[  578.788701][T25187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  578.996814][T25189] syzkaller0: entered promiscuous mode
[  579.034979][T25189] syzkaller0: entered allmulticast mode
[  579.102335][T25189] tipc: Resetting bearer <eth:syzkaller0>
[  579.283575][T25192] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5213'.
[  579.329207][T25186] tipc: Resetting bearer <eth:syzkaller0>
[  579.360289][T25186] tipc: Disabling bearer <eth:syzkaller0>
[  579.394587][T25193] |ªA–
: entered promiscuous mode
[  579.399040][T25198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'.
[  579.740362][T25218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5221'.
[  579.770633][T25218] nbd: must specify at least one socket
[  580.141342][T25239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5227'.
[  580.178336][T25239] 8021q: adding VLAN 0 to HW filter on device bond4
[  580.287207][T25247] IPVS: Scheduler module ip_vs_sip not found
[  580.428725][T25256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5234'.
[  580.715929][T25265] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5236'.
[  580.852059][T25271] wg1 speed is unknown, defaulting to 1000
[  581.597483][T25280] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  581.621997][T25280] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  581.830279][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  581.839508][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  581.886313][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  581.907144][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  581.951677][T25310] IPVS: Unknown mcast interface: vcan0
[  581.988086][T25312] netlink: 'syz.2.5249': attribute type 4 has an invalid length.
[  582.044295][T13961] syzkaller1: tun_net_xmit 90
[  582.073188][T25320] syzkaller1: tun_chr_ioctl cmd 1074025688
[  582.090482][T25320] syzkaller1: left promiscuous mode
[  582.100317][T25320] syzkaller1: left allmulticast mode
[  582.174201][T13961] syzkaller1: tun_net_xmit 90
[  582.354258][T13961] syzkaller1: tun_net_xmit 90
[  582.906310][T25330] netlink: 'syz.4.5254': attribute type 17 has an invalid length.
[  583.006992][ T6217] syzkaller1: tun_net_xmit 90
[  583.012498][ T6217] syzkaller1: tun_net_xmit 70
[  583.175918][T25352] |ªA–: entered promiscuous mode
[  583.190705][T25360] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.253702][T25350] __nla_validate_parse: 1 callbacks suppressed
[  583.253722][T25350] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5260'.
[  583.296364][T25356] pim6reg: entered allmulticast mode
[  583.361776][T25361] pim6reg: left allmulticast mode
[  583.476086][T25377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5263'.
[  583.646036][T25360] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.671295][T25368] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5264'.
[  583.684339][T25368] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5264'.
[  583.724724][T25360] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.796381][T25360] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.856898][T25384] veth0: entered promiscuous mode
[  583.867062][T25383] veth0: left promiscuous mode
[  583.898718][ T6218] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.930881][ T6218] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.968559][ T6218] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.018176][ T6218] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.645453][T25415] geneve0: entered promiscuous mode
[  584.663225][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.675248][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.691995][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.712666][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.733630][T25417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5270'.
[  585.697030][T25447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5278'.
[  585.782523][T25450] |ªA–K: entered promiscuous mode
[  585.837429][T25452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5281'.
[  585.880684][T25452] IPv6: sit1: Disabled Multicast RS
[  585.896999][T25452] sit1: entered allmulticast mode
[  586.585247][T25460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  586.605142][T25460] syzkaller0: entered promiscuous mode
[  586.610725][T25460] syzkaller0: entered allmulticast mode
[  586.654644][T25460] tipc: Resetting bearer <eth:syzkaller0>
[  586.704815][T25459] tipc: Resetting bearer <eth:syzkaller0>
[  586.792048][T25459] tipc: Disabling bearer <eth:syzkaller0>
[  587.213332][T25433] Set syz1 is full, maxelem 65536 reached
[  587.432112][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5289'.
[  587.529715][T25493] wg1 speed is unknown, defaulting to 1000
[  587.737488][T25507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5298'.
[  588.162370][T25528] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  588.201993][T25535] FAULT_INJECTION: forcing a failure.
[  588.201993][T25535] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  588.218007][T25535] CPU: 1 UID: 0 PID: 25535 Comm: syz.1.5307 Not tainted syzkaller #0 PREEMPT(full) 
[  588.218035][T25535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  588.218048][T25535] Call Trace:
[  588.218057][T25535]  <TASK>
[  588.218067][T25535]  dump_stack_lvl+0x189/0x250
[  588.218098][T25535]  ? __pfx____ratelimit+0x10/0x10
[  588.218130][T25535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  588.218155][T25535]  ? __pfx__printk+0x10/0x10
[  588.218185][T25535]  ? __might_fault+0xb0/0x130
[  588.218224][T25535]  should_fail_ex+0x414/0x560
[  588.218257][T25535]  _copy_from_user+0x2d/0xb0
[  588.218290][T25535]  ___sys_sendmsg+0x158/0x2a0
[  588.218318][T25535]  ? __pfx____sys_sendmsg+0x10/0x10
[  588.218384][T25535]  ? __fget_files+0x2a/0x420
[  588.218410][T25535]  ? __fget_files+0x3a0/0x420
[  588.218448][T25535]  __x64_sys_sendmsg+0x19b/0x260
[  588.218475][T25535]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  588.218510][T25535]  ? __pfx_ksys_write+0x10/0x10
[  588.218531][T25535]  ? rcu_is_watching+0x15/0xb0
[  588.218560][T25535]  ? do_syscall_64+0xbe/0x3b0
[  588.218585][T25535]  do_syscall_64+0xfa/0x3b0
[  588.218604][T25535]  ? lockdep_hardirqs_on+0x9c/0x150
[  588.218634][T25535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.218654][T25535]  ? clear_bhb_loop+0x60/0xb0
[  588.218679][T25535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.218698][T25535] RIP: 0033:0x7fdc8858eec9
[  588.218716][T25535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  588.218734][T25535] RSP: 002b:00007fdc893b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.218756][T25535] RAX: ffffffffffffffda RBX: 00007fdc887e5fa0 RCX: 00007fdc8858eec9
[  588.218772][T25535] RDX: 0000000020040044 RSI: 0000200000000000 RDI: 0000000000000003
[  588.218785][T25535] RBP: 00007fdc893b6090 R08: 0000000000000000 R09: 0000000000000000
[  588.218799][T25535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.218811][T25535] R13: 00007fdc887e6038 R14: 00007fdc887e5fa0 R15: 00007ffda9af8028
[  588.218846][T25535]  </TASK>
[  589.145091][T25583] syzkaller1: tun_chr_ioctl cmd 1074025677
[  589.152294][T25583] syzkaller1: linktype set to 519
[  589.161447][T25587] netlink: 'syz.1.5322': attribute type 13 has an invalid length.
[  589.170440][T25587] netlink: 'syz.1.5322': attribute type 17 has an invalid length.
[  589.298048][T25587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  589.321663][ T6217] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  589.338154][T13968] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  589.346757][T13968] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  589.411754][T25589] wg1 speed is unknown, defaulting to 1000
[  589.516654][T13962] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  589.667309][T25610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5331'.
[  589.796813][T25613] |ªA–: entered promiscuous mode
[  590.015013][T25628] lo: entered allmulticast mode
[  590.034414][ T5849] Bluetooth: hci2: link tx timeout
[  590.041257][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  590.052483][ T5849] Bluetooth: hci2: link tx timeout
[  590.057088][T25633] sctp: [Deprecated]: syz.3.5341 (pid 25633) Use of int in max_burst socket option.
[  590.057088][T25633] Use struct sctp_assoc_value instead
[  590.058944][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  590.081002][ T5849] Bluetooth: hci2: link tx timeout
[  590.086829][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  590.095085][ T5849] Bluetooth: hci2: link tx timeout
[  590.100213][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  590.109935][ T5849] Bluetooth: hci2: link tx timeout
[  590.115520][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  590.123326][ T5849] Bluetooth: hci2: link tx timeout
[  590.128605][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  590.136455][ T5849] Bluetooth: hci2: link tx timeout
[  590.141665][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  590.149825][ T5849] Bluetooth: hci2: link tx timeout
[  590.155184][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  590.156979][T25636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'.
[  590.234293][T13968] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  590.320249][T25627] lo: left allmulticast mode
[  590.544184][T25652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5346'.
[  590.589327][T25654] gtp0: entered promiscuous mode
[  590.632514][T25654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5347'.
[  590.804563][T13962] syzkaller1: tun_net_xmit 90
[  591.004863][T13962] syzkaller1: tun_net_xmit 90
[  591.125022][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5353'.
[  591.177179][T25688] batadv0: entered promiscuous mode
[  591.191493][T25688] macvtap3: entered promiscuous mode
[  591.196434][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5353'.
[  591.227788][T25688] macvtap3: entered allmulticast mode
[  591.286418][T25688] batadv0: entered allmulticast mode
[  591.293757][T25688] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  591.308323][T25690] batadv0: left allmulticast mode
[  591.328584][T25690] batadv0: left promiscuous mode
[  591.548046][T25711] syzkaller1: entered promiscuous mode
[  591.573953][T25711] syzkaller1: entered allmulticast mode
[  591.622966][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'.
[  591.647310][T25714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5362'.
[  591.656572][T25714] netlink: 'syz.0.5362': attribute type 18 has an invalid length.
[  591.664951][T25714] netlink: 'syz.0.5362': attribute type 20 has an invalid length.
[  591.698926][T25720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5363'.
[  591.979838][T25727] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.003673][T25727] 8021q: adding VLAN 0 to HW filter on device team0
[  592.017100][T25727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  592.156810][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  592.676519][T25765] netlink: 'syz.3.5375': attribute type 4 has an invalid length.
[  592.702561][T25765] netlink: 'syz.3.5375': attribute type 4 has an invalid length.
[  592.810906][T25778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5379'.
[  592.838123][T25780] FAULT_INJECTION: forcing a failure.
[  592.838123][T25780] name failslab, interval 1, probability 0, space 0, times 0
[  592.850985][T25780] CPU: 0 UID: 0 PID: 25780 Comm: syz.1.5380 Not tainted syzkaller #0 PREEMPT(full) 
[  592.851012][T25780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  592.851025][T25780] Call Trace:
[  592.851036][T25780]  <TASK>
[  592.851045][T25780]  dump_stack_lvl+0x189/0x250
[  592.851075][T25780]  ? __pfx____ratelimit+0x10/0x10
[  592.851105][T25780]  ? __pfx_dump_stack_lvl+0x10/0x10
[  592.851129][T25780]  ? __pfx__printk+0x10/0x10
[  592.851162][T25780]  ? __lock_acquire+0xab9/0xd20
[  592.851192][T25780]  should_fail_ex+0x414/0x560
[  592.851227][T25780]  should_failslab+0xa8/0x100
[  592.851256][T25780]  kmem_cache_alloc_noprof+0x73/0x3c0
[  592.851278][T25780]  ? skb_clone+0x212/0x3a0
[  592.851308][T25780]  skb_clone+0x212/0x3a0
[  592.851337][T25780]  __netlink_deliver_tap+0x404/0x850
[  592.851369][T25780]  ? netlink_deliver_tap+0x2e/0x1b0
[  592.851390][T25780]  netlink_deliver_tap+0x19c/0x1b0
[  592.851413][T25780]  netlink_unicast+0x7fa/0x9e0
[  592.851453][T25780]  ? __pfx_netlink_unicast+0x10/0x10
[  592.851485][T25780]  ? netlink_sendmsg+0x642/0xb30
[  592.851504][T25780]  ? skb_put+0x11b/0x210
[  592.851529][T25780]  netlink_sendmsg+0x805/0xb30
[  592.851563][T25780]  ? __pfx_netlink_sendmsg+0x10/0x10
[  592.851597][T25780]  ? aa_sock_msg_perm+0xf1/0x1d0
[  592.851627][T25780]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  592.851656][T25780]  ? __pfx_netlink_sendmsg+0x10/0x10
[  592.851677][T25780]  __sock_sendmsg+0x21c/0x270
[  592.851710][T25780]  ____sys_sendmsg+0x505/0x830
[  592.851741][T25780]  ? __pfx_____sys_sendmsg+0x10/0x10
[  592.851776][T25780]  ? import_iovec+0x74/0xa0
[  592.851804][T25780]  ___sys_sendmsg+0x21f/0x2a0
[  592.851829][T25780]  ? __pfx____sys_sendmsg+0x10/0x10
[  592.851891][T25780]  ? __fget_files+0x2a/0x420
[  592.851916][T25780]  ? __fget_files+0x3a0/0x420
[  592.851955][T25780]  __x64_sys_sendmsg+0x19b/0x260
[  592.851982][T25780]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  592.852018][T25780]  ? __pfx_ksys_write+0x10/0x10
[  592.852039][T25780]  ? rcu_is_watching+0x15/0xb0
[  592.852068][T25780]  ? do_syscall_64+0xbe/0x3b0
[  592.852094][T25780]  do_syscall_64+0xfa/0x3b0
[  592.852112][T25780]  ? lockdep_hardirqs_on+0x9c/0x150
[  592.852142][T25780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.852161][T25780]  ? clear_bhb_loop+0x60/0xb0
[  592.852186][T25780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.852206][T25780] RIP: 0033:0x7fdc8858eec9
[  592.852225][T25780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.852243][T25780] RSP: 002b:00007fdc893b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  592.852265][T25780] RAX: ffffffffffffffda RBX: 00007fdc887e5fa0 RCX: 00007fdc8858eec9
[  592.852280][T25780] RDX: 0000000020040044 RSI: 0000200000000000 RDI: 0000000000000003
[  592.852294][T25780] RBP: 00007fdc893b6090 R08: 0000000000000000 R09: 0000000000000000
[  592.852307][T25780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.852319][T25780] R13: 00007fdc887e6038 R14: 00007fdc887e5fa0 R15: 00007ffda9af8028
[  592.852354][T25780]  </TASK>
[  593.273019][T25784] wg1 speed is unknown, defaulting to 1000
[  593.273999][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  593.308870][T25785] wg1 speed is unknown, defaulting to 1000
[  593.897775][T25811] netlink: 'syz.0.5388': attribute type 10 has an invalid length.
[  593.912953][T25811] 8021q: adding VLAN 0 to HW filter on device team0
[  593.969092][T25811] team0: entered promiscuous mode
[  593.975646][T25811] team_slave_1: entered promiscuous mode
[  594.234510][ T5159] Bluetooth: hci2: command 0x0405 tx timeout
[  594.525947][T25820] wg1 speed is unknown, defaulting to 1000
[  594.564750][T25842] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[  594.836559][T25858] __nla_validate_parse: 4 callbacks suppressed
[  594.836578][T25858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5400'.
[  594.862061][T25852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5403'.
[  595.436240][T25886] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5408'.
[  595.708580][T25894] wg1 speed is unknown, defaulting to 1000
[  596.489401][T25925] wg1 speed is unknown, defaulting to 1000
[  596.761176][T25942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5428'.
[  596.778907][T25942] vlan3: entered promiscuous mode
[  596.786781][T25942] gretap0: entered promiscuous mode
[  596.842691][T25946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5429'.
[  596.859661][T25946] bond0: (slave rose0): Error: Device can not be enslaved while up
[  597.408232][T25982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5437'.
[  597.468941][T25980] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5440'.
[  597.541300][T25985] netlink: 'syz.1.5441': attribute type 1 has an invalid length.
[  597.556516][T25985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5441'.
[  598.053553][T26016] netlink: 'syz.3.5450': attribute type 1 has an invalid length.
[  598.142143][T26016] 8021q: adding VLAN 0 to HW filter on device bond8
[  598.219664][T26016] bond8: (slave dummy0): making interface the new active one
[  598.235212][T26030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5454'.
[  598.324936][T26016] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  598.508316][T26022] bond8: (slave veth7): Enslaving as an active interface with a down link
[  598.561775][T26029] wg1 speed is unknown, defaulting to 1000
[  598.815977][T26059] netlink: 'syz.1.5460': attribute type 41 has an invalid length.
[  599.620643][T26112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5475'.
[  599.705960][T26112] wg1 speed is unknown, defaulting to 1000
[  599.879348][T26119] wg1 speed is unknown, defaulting to 1000
[  600.042952][T26126] netlink: 'syz.0.5481': attribute type 5 has an invalid length.
[  600.055182][T26126] netlink: 'syz.0.5481': attribute type 1 has an invalid length.
[  600.062969][T26126] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5481'.
[  600.084541][T26127] netlink: 'syz.0.5481': attribute type 1 has an invalid length.
[  600.104637][T26127] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5481'.
[  600.138984][T26129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5482'.
[  600.229578][T26135] sctp: [Deprecated]: syz.2.5484 (pid 26135) Use of int in maxseg socket option.
[  600.229578][T26135] Use struct sctp_assoc_value instead
[  600.282284][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5484'.
[  600.293002][T26135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5484'.
[  601.246111][T26170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.254234][T26170] syzkaller0: entered promiscuous mode
[  601.279077][T26170] syzkaller0: entered allmulticast mode
[  601.428135][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5497'.
[  601.437322][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.450947][T26169] tipc: Resetting bearer <eth:syzkaller0>
[  601.469657][T26169] tipc: Disabling bearer <eth:syzkaller0>
[  601.785236][T26195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5502'.
[  601.797203][T26195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5502'.
[  602.153713][T26217] FAULT_INJECTION: forcing a failure.
[  602.153713][T26217] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  602.169383][T26217] CPU: 1 UID: 0 PID: 26217 Comm: syz.0.5507 Not tainted syzkaller #0 PREEMPT(full) 
[  602.169413][T26217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  602.169425][T26217] Call Trace:
[  602.169434][T26217]  <TASK>
[  602.169443][T26217]  dump_stack_lvl+0x189/0x250
[  602.169479][T26217]  ? __pfx____ratelimit+0x10/0x10
[  602.169515][T26217]  ? __pfx_dump_stack_lvl+0x10/0x10
[  602.169540][T26217]  ? __pfx__printk+0x10/0x10
[  602.169587][T26217]  should_fail_ex+0x414/0x560
[  602.169620][T26217]  _copy_from_user+0x2d/0xb0
[  602.169661][T26217]  __copy_msghdr+0x3c5/0x5b0
[  602.169692][T26217]  ___sys_sendmsg+0x1a5/0x2a0
[  602.169718][T26217]  ? __pfx____sys_sendmsg+0x10/0x10
[  602.169786][T26217]  ? __fget_files+0x2a/0x420
[  602.169812][T26217]  ? __fget_files+0x3a0/0x420
[  602.169851][T26217]  __x64_sys_sendmsg+0x19b/0x260
[  602.169878][T26217]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  602.169921][T26217]  ? __pfx_ksys_write+0x10/0x10
[  602.169942][T26217]  ? rcu_is_watching+0x15/0xb0
[  602.169971][T26217]  ? do_syscall_64+0xbe/0x3b0
[  602.169996][T26217]  do_syscall_64+0xfa/0x3b0
[  602.170015][T26217]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.170045][T26217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.170065][T26217]  ? clear_bhb_loop+0x60/0xb0
[  602.170091][T26217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.170111][T26217] RIP: 0033:0x7f9c38d8eec9
[  602.170130][T26217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  602.170148][T26217] RSP: 002b:00007f9c36ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  602.170171][T26217] RAX: ffffffffffffffda RBX: 00007f9c38fe5fa0 RCX: 00007f9c38d8eec9
[  602.170186][T26217] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[  602.170200][T26217] RBP: 00007f9c36ff6090 R08: 0000000000000000 R09: 0000000000000000
[  602.170213][T26217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.170225][T26217] R13: 00007f9c38fe6038 R14: 00007f9c38fe5fa0 R15: 00007ffe0dbefaf8
[  602.170260][T26217]  </TASK>
[  602.455524][T26222] netlink: 'syz.0.5509': attribute type 4 has an invalid length.
[  602.465124][T26222] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5509'.
[  602.592607][T26234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5512'.
[  602.616494][T26235] netlink: 'syz.1.5513': attribute type 10 has an invalid length.
[  602.628198][T26234] team1: entered promiscuous mode
[  602.633378][T26234] team1: entered allmulticast mode
[  602.690356][T26235] team0: Port device netdevsim0 added
[  602.841544][T26248] FAULT_INJECTION: forcing a failure.
[  602.841544][T26248] name failslab, interval 1, probability 0, space 0, times 0
[  602.857054][T26248] CPU: 1 UID: 0 PID: 26248 Comm: syz.3.5519 Not tainted syzkaller #0 PREEMPT(full) 
[  602.857084][T26248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  602.857097][T26248] Call Trace:
[  602.857105][T26248]  <TASK>
[  602.857114][T26248]  dump_stack_lvl+0x189/0x250
[  602.857143][T26248]  ? __pfx____ratelimit+0x10/0x10
[  602.857174][T26248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  602.857199][T26248]  ? __pfx__printk+0x10/0x10
[  602.857231][T26248]  ? __pfx___might_resched+0x10/0x10
[  602.857253][T26248]  ? fs_reclaim_acquire+0x7d/0x100
[  602.857286][T26248]  should_fail_ex+0x414/0x560
[  602.857319][T26248]  should_failslab+0xa8/0x100
[  602.857347][T26248]  __kmalloc_noprof+0xcb/0x4f0
[  602.857370][T26248]  ? sock_kmalloc+0xd6/0x160
[  602.857400][T26248]  sock_kmalloc+0xd6/0x160
[  602.857426][T26248]  ____sys_sendmsg+0x1b5/0x830
[  602.857457][T26248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  602.857492][T26248]  ? import_iovec+0x74/0xa0
[  602.857520][T26248]  ___sys_sendmsg+0x21f/0x2a0
[  602.857546][T26248]  ? __pfx____sys_sendmsg+0x10/0x10
[  602.857620][T26248]  ? __fget_files+0x2a/0x420
[  602.857644][T26248]  ? __fget_files+0x3a0/0x420
[  602.857682][T26248]  __x64_sys_sendmsg+0x19b/0x260
[  602.857708][T26248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  602.857740][T26248]  ? __pfx_ksys_write+0x10/0x10
[  602.857760][T26248]  ? rcu_is_watching+0x15/0xb0
[  602.857789][T26248]  ? do_syscall_64+0xbe/0x3b0
[  602.857815][T26248]  do_syscall_64+0xfa/0x3b0
[  602.857833][T26248]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.857861][T26248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.857882][T26248]  ? clear_bhb_loop+0x60/0xb0
[  602.857908][T26248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.857926][T26248] RIP: 0033:0x7fc18db8eec9
[  602.857945][T26248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  602.857964][T26248] RSP: 002b:00007fc18eac4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  602.857985][T26248] RAX: ffffffffffffffda RBX: 00007fc18dde5fa0 RCX: 00007fc18db8eec9
[  602.858001][T26248] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[  602.858014][T26248] RBP: 00007fc18eac4090 R08: 0000000000000000 R09: 0000000000000000
[  602.858027][T26248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.858039][T26248] R13: 00007fc18dde6038 R14: 00007fc18dde5fa0 R15: 00007ffdb9719f68
[  602.858074][T26248]  </TASK>
[  603.158856][T26254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  603.171445][T26253] syzkaller0: entered promiscuous mode
[  603.182794][T26253] syzkaller0: entered allmulticast mode
[  603.341857][T26253] tipc: Resetting bearer <eth:syzkaller0>
[  603.392282][T26253] tipc: Disabling bearer <eth:syzkaller0>
[  603.421299][T26251] wg1 speed is unknown, defaulting to 1000
[  603.446784][T26263] wg1 speed is unknown, defaulting to 1000
[  603.981536][T26283] ipvlan2: entered promiscuous mode
[  604.134958][T26293] FAULT_INJECTION: forcing a failure.
[  604.134958][T26293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.193547][T26293] CPU: 0 UID: 0 PID: 26293 Comm: syz.2.5531 Not tainted syzkaller #0 PREEMPT(full) 
[  604.193575][T26293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  604.193587][T26293] Call Trace:
[  604.193596][T26293]  <TASK>
[  604.193605][T26293]  dump_stack_lvl+0x189/0x250
[  604.193632][T26293]  ? __pfx____ratelimit+0x10/0x10
[  604.193661][T26293]  ? __pfx_dump_stack_lvl+0x10/0x10
[  604.193684][T26293]  ? __pfx__printk+0x10/0x10
[  604.193713][T26293]  ? __might_fault+0xb0/0x130
[  604.193750][T26293]  should_fail_ex+0x414/0x560
[  604.193780][T26293]  _copy_from_user+0x2d/0xb0
[  604.193805][T26293]  ____sys_sendmsg+0x2fe/0x830
[  604.193836][T26293]  ? __pfx_____sys_sendmsg+0x10/0x10
[  604.193870][T26293]  ? import_iovec+0x74/0xa0
[  604.193895][T26293]  ___sys_sendmsg+0x21f/0x2a0
[  604.193920][T26293]  ? __pfx____sys_sendmsg+0x10/0x10
[  604.193985][T26293]  ? __fget_files+0x2a/0x420
[  604.194011][T26293]  ? __fget_files+0x3a0/0x420
[  604.194050][T26293]  __x64_sys_sendmsg+0x19b/0x260
[  604.194078][T26293]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  604.194114][T26293]  ? __pfx_ksys_write+0x10/0x10
[  604.194136][T26293]  ? rcu_is_watching+0x15/0xb0
[  604.194165][T26293]  ? do_syscall_64+0xbe/0x3b0
[  604.194191][T26293]  do_syscall_64+0xfa/0x3b0
[  604.194210][T26293]  ? lockdep_hardirqs_on+0x9c/0x150
[  604.194240][T26293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.194261][T26293]  ? clear_bhb_loop+0x60/0xb0
[  604.194287][T26293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.194307][T26293] RIP: 0033:0x7f5a61f8eec9
[  604.194326][T26293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  604.194345][T26293] RSP: 002b:00007f5a62eba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  604.194365][T26293] RAX: ffffffffffffffda RBX: 00007f5a621e5fa0 RCX: 00007f5a61f8eec9
[  604.194379][T26293] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[  604.194390][T26293] RBP: 00007f5a62eba090 R08: 0000000000000000 R09: 0000000000000000
[  604.194403][T26293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.194415][T26293] R13: 00007f5a621e6038 R14: 00007f5a621e5fa0 R15: 00007ffe7fe5a818
[  604.194449][T26293]  </TASK>
[  604.731022][T26312] vlan3: entered allmulticast mode
[  604.736528][T26312] bond20: entered allmulticast mode
[  605.247378][T26320] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  605.425881][T26322] wg1 speed is unknown, defaulting to 1000
[  605.472075][T26333] netlink: 'syz.2.5540': attribute type 13 has an invalid length.
[  605.492872][T26333] netlink: 'syz.2.5540': attribute type 17 has an invalid length.
[  605.578277][T26317] wg1 speed is unknown, defaulting to 1000
[  605.716925][T26333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  605.805201][T26328] wg1 speed is unknown, defaulting to 1000
[  606.130005][T26352] FAULT_INJECTION: forcing a failure.
[  606.130005][T26352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.147875][T26352] CPU: 1 UID: 0 PID: 26352 Comm: syz.1.5544 Not tainted syzkaller #0 PREEMPT(full) 
[  606.147902][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  606.147914][T26352] Call Trace:
[  606.147922][T26352]  <TASK>
[  606.147932][T26352]  dump_stack_lvl+0x189/0x250
[  606.147961][T26352]  ? __pfx____ratelimit+0x10/0x10
[  606.147991][T26352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  606.148015][T26352]  ? __pfx__printk+0x10/0x10
[  606.148058][T26352]  should_fail_ex+0x414/0x560
[  606.148091][T26352]  _copy_to_user+0x31/0xb0
[  606.148117][T26352]  simple_read_from_buffer+0xe1/0x170
[  606.148152][T26352]  proc_fail_nth_read+0x1b3/0x220
[  606.148177][T26352]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  606.148199][T26352]  ? rw_verify_area+0x2a6/0x4d0
[  606.148220][T26352]  ? __lock_acquire+0xab9/0xd20
[  606.148237][T26352]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  606.148267][T26352]  vfs_read+0x1fd/0xa30
[  606.148289][T26352]  ? fdget_pos+0x247/0x320
[  606.148320][T26352]  ? __pfx___mutex_lock+0x10/0x10
[  606.148342][T26352]  ? __pfx_vfs_read+0x10/0x10
[  606.148367][T26352]  ? __fget_files+0x2a/0x420
[  606.148398][T26352]  ? __fget_files+0x3a0/0x420
[  606.148423][T26352]  ? __fget_files+0x2a/0x420
[  606.148457][T26352]  ksys_read+0x145/0x250
[  606.148483][T26352]  ? __pfx_ksys_read+0x10/0x10
[  606.148503][T26352]  ? rcu_is_watching+0x15/0xb0
[  606.148531][T26352]  ? do_syscall_64+0xbe/0x3b0
[  606.148557][T26352]  do_syscall_64+0xfa/0x3b0
[  606.148576][T26352]  ? lockdep_hardirqs_on+0x9c/0x150
[  606.148606][T26352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.148626][T26352]  ? clear_bhb_loop+0x60/0xb0
[  606.148652][T26352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.148671][T26352] RIP: 0033:0x7fdc8858d8dc
[  606.148697][T26352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  606.148715][T26352] RSP: 002b:00007fdc893b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  606.148737][T26352] RAX: ffffffffffffffda RBX: 00007fdc887e5fa0 RCX: 00007fdc8858d8dc
[  606.148752][T26352] RDX: 000000000000000f RSI: 00007fdc893b60a0 RDI: 0000000000000004
[  606.148765][T26352] RBP: 00007fdc893b6090 R08: 0000000000000000 R09: 0000000000000000
[  606.148779][T26352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  606.148790][T26352] R13: 00007fdc887e6038 R14: 00007fdc887e5fa0 R15: 00007ffda9af8028
[  606.148826][T26352]  </TASK>
[  606.460136][T26363] __nla_validate_parse: 5 callbacks suppressed
[  606.460157][T26363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5545'.
[  606.480149][T26363] netlink: 560 bytes leftover after parsing attributes in process `syz.0.5545'.
[  606.572759][T26362] veth0: entered promiscuous mode
[  606.593327][T26359] veth0: left promiscuous mode
[  606.792626][T26377] netlink: 'syz.1.5550': attribute type 1 has an invalid length.
[  606.793381][T26372] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  606.816728][T26377] netlink: 'syz.1.5550': attribute type 1 has an invalid length.
[  606.845353][T26377] netlink: 'syz.1.5550': attribute type 11 has an invalid length.
[  606.855580][T26372] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.981154][T26372] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  607.002858][T26384] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  607.016052][T26372] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.230910][T26372] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  607.241259][T26372] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.301911][T26372] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  607.323570][T26372] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.465253][ T6208] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  607.480033][ T6208] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.519726][ T6217] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  607.529989][ T6217] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.551401][ T6217] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  607.562155][ T6217] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.621679][ T6217] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  607.631823][ T6217] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.799690][T26407] pimreg: entered allmulticast mode
[  608.388273][ T6217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.403935][ T6217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.495264][T26456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5569'.
[  608.505106][T26456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5569'.
[  609.140123][ T6217] bond6: left allmulticast mode
[  609.145560][ T6217] bond6: left promiscuous mode
[  609.154329][ T6217] bridge0: port 1(bond6) entered disabled state
[  609.700633][ T6217] bond7 (unregistering): (slave erspan0): Releasing active interface
[  609.740489][ T6217] bond4 (unregistering): (slave gretap1): Releasing active interface
[  609.749141][ T6217] gretap1 (unregistering): left promiscuous mode
[  609.756340][ T6217] gretap1 (unregistering): left allmulticast mode
[  609.777175][ T6217] bond5 (unregistering): (slave gretap2): Releasing active interface
[  609.948395][ T6217] bond2 (unregistering): (slave vlan2): Releasing active interface
[  610.440253][ T6217] bond1 (unregistering): (slave macvlan2): Releasing active interface
[  610.452741][ T6217] bond0 (unregistering): Released all slaves
[  610.466349][ T6217] bond1 (unregistering): Released all slaves
[  610.480137][ T6217] bond2 (unregistering): Released all slaves
[  610.603532][ T6217] bond3 (unregistering): Released all slaves
[  610.727856][ T6217] bond4 (unregistering): Released all slaves
[  610.865094][ T6217] bond5 (unregistering): Released all slaves
[  610.988978][ T6217] bond6 (unregistering): Released all slaves
[  611.100529][ T6217] bond7 (unregistering): Released all slaves
[  611.221579][ T6217] bond8 (unregistering): Released all slaves
[  611.234868][ T6217] bond9 (unregistering): Released all slaves
[  611.352932][ T6217] bond10 (unregistering): Released all slaves
[  611.471478][ T6217] bond11 (unregistering): Released all slaves
[  611.485453][ T6217] bond12 (unregistering): Released all slaves
[  611.917300][ T6217] ûý: left promiscuous mode
[  611.951735][T26516] wg1 speed is unknown, defaulting to 1000
[  612.041862][ T6217] tipc: Disabling bearer <udp:§>
[  612.054855][ T6217] tipc: Left network mode
[  612.131335][T26547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5593'.
[  612.225851][T26547] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  612.236994][T26547] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.287323][T26554] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5593'.
[  612.345604][T26547] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  612.356462][T26547] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.448116][T26560] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  612.457011][T26562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5600'.
[  612.491501][T26547] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  612.502348][T26547] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.532114][T26562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5600'.
[  612.545920][ T6217] hsr_slave_0: left promiscuous mode
[  612.552808][ T6217] hsr_slave_1: left promiscuous mode
[  613.565933][T26547] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.576526][T26547] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.746078][T26582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5606'.
[  613.769826][ T6222] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  613.793136][ T6222] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.894869][ T6218] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  613.915620][ T6218] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.981614][ T6222] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  613.991105][ T6222] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.000324][ T6222] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  614.009747][ T6222] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.076320][ T6217] IPVS: stop unused estimator thread 0...
[  614.422859][   T30] audit: type=1800 audit(1759603519.588:9): pid=26621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5614" name="memory.events" dev="tmpfs" ino=2164 res=0 errno=0
[  614.512287][T26630] netlink: 'syz.4.5614': attribute type 1 has an invalid length.
[  614.520260][T26630] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5614'.
[  614.596752][T26639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5618'.
[  614.759762][T26646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5621'.
[  615.297296][T26670] netlink: 'syz.0.5630': attribute type 2 has an invalid length.
[  615.376336][T26673] netlink: 'syz.0.5630': attribute type 2 has an invalid length.
[  616.142644][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  616.156567][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  616.165578][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  616.178373][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  616.187389][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  616.616550][T26709] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  616.636420][T26713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5644'.
[  616.659066][T26715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5645'.
[  616.708716][T26713] ip6gretap1: entered promiscuous mode
[  616.740201][T26713] ip6gretap1: entered allmulticast mode
[  616.780819][T26697] chnl_net:caif_netlink_parms(): no params data found
[  616.947481][T26726] netlink: 'syz.4.5650': attribute type 21 has an invalid length.
[  617.280355][T26726] __nla_validate_parse: 1 callbacks suppressed
[  617.280375][T26726] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5650'.
[  617.434005][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  617.489911][T26697] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.498904][T26697] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.506809][T26697] bridge_slave_0: entered allmulticast mode
[  617.517399][T26697] bridge_slave_0: entered promiscuous mode
[  617.751303][T26750] team0 (unregistering): Port device netdevsim0 removed
[  617.771590][T26697] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.779368][T26697] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.787961][T26697] bridge_slave_1: entered allmulticast mode
[  617.801540][T26697] bridge_slave_1: entered promiscuous mode
[  617.849953][T26762] bond5 (unregistering): Released all slaves
[  617.982291][T26697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.014866][T26697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  618.213096][T26697] team0: Port device team_slave_0 added
[  618.233688][T26697] team0: Port device team_slave_1 added
[  618.251615][ T5849] Bluetooth: hci4: command tx timeout
[  618.397809][T26697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.406553][T26697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.436562][T26697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.452680][T26697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.460031][T26697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.486365][T26697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  618.656425][T26697] hsr_slave_0: entered promiscuous mode
[  618.674932][T26697] hsr_slave_1: entered promiscuous mode
[  618.839627][T26812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5673'.
[  618.901264][T26812] vlan3: entered promiscuous mode
[  619.077413][T26828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5676'.
[  619.361690][T26837] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5677'.
[  619.376855][T26842] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  619.416087][T26697] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.472626][T26844] netlink: zone id is out of range
[  619.481176][T26844] netlink: zone id is out of range
[  619.486710][T26844] netlink: zone id is out of range
[  619.489346][T26839] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  619.491942][T26844] netlink: zone id is out of range
[  619.508903][T26844] netlink: zone id is out of range
[  619.543249][T26844] netlink: zone id is out of range
[  619.550122][T26844] netlink: zone id is out of range
[  619.555589][T26844] netlink: zone id is out of range
[  619.560948][T26844] netlink: zone id is out of range
[  619.573892][T26844] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20004
[  619.589567][T26697] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.664453][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'.
[  619.673552][T26855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'.
[  619.744473][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'.
[  619.746252][T26861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5687'.
[  619.753460][T26855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'.
[  619.765863][T26697] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.849052][T26697] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.921680][T26868] netlink: 'syz.4.5685': attribute type 12 has an invalid length.
[  619.956252][T26864] netlink: 'syz.4.5685': attribute type 1 has an invalid length.
[  620.001437][T26864] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5685'.
[  620.324537][ T5849] Bluetooth: hci4: command tx timeout
[  620.471185][T26887] bridge0: entered promiscuous mode
[  620.477629][T26887] macsec2: entered promiscuous mode
[  620.483483][T26887] bridge0: port 1(macsec2) entered blocking state
[  620.490579][T26887] bridge0: port 1(macsec2) entered disabled state
[  620.500645][T26887] macsec2: entered allmulticast mode
[  620.506523][T26887] bridge0: entered allmulticast mode
[  620.515238][T26887] macsec2: left allmulticast mode
[  620.520289][T26887] bridge0: left allmulticast mode
[  620.527092][T26887] bridge0: left promiscuous mode
[  620.653538][T26697] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  620.668150][T26697] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  620.690245][T26697] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  620.718292][T26895] netlink: 'syz.2.5695': attribute type 1 has an invalid length.
[  620.726974][T26697] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  620.767981][T26895] 8021q: adding VLAN 0 to HW filter on device bond21
[  620.807625][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.829768][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.937716][T26697] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.975301][T26697] 8021q: adding VLAN 0 to HW filter on device team0
[  621.148120][T26909] tipc: Resetting bearer <ib:hsr0>
[  621.153771][T26909] tipc: Resetting bearer <ib:hsr0>
[  621.215895][T26909] vlan2: left promiscuous mode
[  621.220744][T26909] bond0: left promiscuous mode
[  621.226496][T26909] bond15: left promiscuous mode
[  621.235549][T26909] geneve2: left promiscuous mode
[  621.241252][T26909] macsec1: left promiscuous mode
[  621.247593][T26909] macsec1: left allmulticast mode
[  621.253195][T26909] bond16: left promiscuous mode
[  621.258538][T26909] bond16: left allmulticast mode
[  621.267046][T26909] geneve3: left promiscuous mode
[  621.278016][T26909] bond19: left promiscuous mode
[  621.283032][T26909] bond19: left allmulticast mode
[  621.288881][T26909] bridge5: left promiscuous mode
[  621.294739][T26909] bridge5: left allmulticast mode
[  621.300643][T26909] sit1: left allmulticast mode
[  621.306133][T26909] macvtap3: left promiscuous mode
[  621.311251][T26909] macvtap3: left allmulticast mode
[  621.318367][T26909] ip6gretap1: left promiscuous mode
[  621.323599][T26909] ip6gretap1: left allmulticast mode
[  621.339733][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.346998][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.357561][ T6223] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  621.374090][ T6223] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  621.388752][ T6223] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  621.399499][ T6223] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  621.408412][ T1158] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  621.430853][ T1158] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  621.466716][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.474041][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.498443][ T1158] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  621.507720][ T1158] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  621.890317][T26697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.972901][T26697] veth0_vlan: entered promiscuous mode
[  621.988253][T26697] veth1_vlan: entered promiscuous mode
[  622.033423][T26697] veth0_macvtap: entered promiscuous mode
[  622.047366][T26697] veth1_macvtap: entered promiscuous mode
[  622.072411][T26697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  622.093580][T26697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  622.113286][ T6217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.133179][ T6217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.157101][ T6217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.176508][ T6208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.288886][ T6223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.305072][ T6223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.345427][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.354798][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.394570][ T5849] Bluetooth: hci4: command tx timeout
[  622.473765][T26960] bond1: Removing last ns target with arp_interval on
[  622.745340][T26970] __nla_validate_parse: 3 callbacks suppressed
[  622.745361][T26970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5713'.
[  622.783167][T26970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5713'.
[  622.804246][T26970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5713'.
[  622.907405][T26990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  622.917359][T26990] syzkaller0: entered promiscuous mode
[  622.922947][T26990] syzkaller0: entered allmulticast mode
[  622.947322][T26990] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5720'.
[  622.962101][T26990] tipc: Resetting bearer <eth:syzkaller0>
[  622.972243][T26990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5720'.
[  622.986426][T26988] tipc: Resetting bearer <eth:syzkaller0>
[  623.018972][T26988] tipc: Disabling bearer <eth:syzkaller0>
[  623.551524][T27016] geneve3: entered promiscuous mode
[  623.569247][ T6209] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  623.586125][ T6209] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  623.623467][ T6209] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  623.654425][ T6209] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  623.829174][T27035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5731'.
[  624.026232][T27033] netlink: 'syz.3.5732': attribute type 16 has an invalid length.
[  624.032571][T27044] netlink: 'syz.4.5734': attribute type 1 has an invalid length.
[  624.051940][T27033] netlink: 'syz.3.5732': attribute type 17 has an invalid length.
[  624.065560][T27044] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5734'.
[  624.382986][T27055] tipc: Started in network mode
[  624.403643][T27055] tipc: Node identity 8246736d6a26, cluster identity 4711
[  624.431016][T27055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  624.468771][T27058] syzkaller0: entered promiscuous mode
[  624.484318][ T5849] Bluetooth: hci4: command tx timeout
[  624.492800][T27058] syzkaller0: entered allmulticast mode
[  624.519642][T27062] netlink: 'syz.0.5738': attribute type 39 has an invalid length.
[  624.675870][T27058] tipc: Resetting bearer <eth:syzkaller0>
[  624.703702][T27054] tipc: Resetting bearer <eth:syzkaller0>
[  624.711354][T27072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5743'.
[  625.063553][T27054] tipc: Disabling bearer <eth:syzkaller0>
[  625.421550][T27098] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5746'.
[  625.639163][T27106] vlan3: entered promiscuous mode
[  625.663247][T27106] bond0: entered promiscuous mode
[  625.891854][T27127] syzkaller1: entered promiscuous mode
[  625.907696][T27127] syzkaller1: entered allmulticast mode
[  625.962735][T27133] netlink: 'syz.1.5761': attribute type 11 has an invalid length.
[  625.970994][T27133] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5761'.
[  626.198974][T27150] netlink: 'syz.0.5766': attribute type 4 has an invalid length.
[  626.254179][T27158] netlink: 'syz.0.5766': attribute type 4 has an invalid length.
[  626.724318][T27174] geneve2: entered promiscuous mode
[  627.647224][T27207] netlink: 'syz.3.5780': attribute type 7 has an invalid length.
[  628.106736][T27233] netlink: 'syz.0.5784': attribute type 1 has an invalid length.
[  628.154396][T27233] __nla_validate_parse: 5 callbacks suppressed
[  628.154416][T27233] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5784'.
[  629.826585][T27283] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5801'.
[  630.130547][T27302] netlink: 'syz.3.5804': attribute type 2 has an invalid length.
[  630.154829][T27303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5805'.
[  630.215219][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5806'.
[  630.233637][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5806'.
[  630.513163][T27316] syzkaller1: entered promiscuous mode
[  630.519406][T27316] syzkaller1: entered allmulticast mode
[  630.763259][T27327] netlink: 'syz.3.5813': attribute type 21 has an invalid length.
[  630.793034][T27327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5813'.
[  631.012123][T27341] netlink: 'syz.2.5817': attribute type 2 has an invalid length.
[  631.060286][T27343] netlink: 'syz.3.5818': attribute type 1 has an invalid length.
[  631.082899][T27343] netlink: 'syz.3.5818': attribute type 3 has an invalid length.
[  631.108920][T27343] netlink: 'syz.3.5818': attribute type 1 has an invalid length.
[  631.129479][T27343] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5818'.
[  631.193875][T27343] NCSI netlink: No device for ifindex 0
[  631.444328][T27366] FAULT_INJECTION: forcing a failure.
[  631.444328][T27366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  631.459075][T27366] CPU: 1 UID: 0 PID: 27366 Comm: syz.0.5822 Not tainted syzkaller #0 PREEMPT(full) 
[  631.459114][T27366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  631.459126][T27366] Call Trace:
[  631.459135][T27366]  <TASK>
[  631.459144][T27366]  dump_stack_lvl+0x189/0x250
[  631.459174][T27366]  ? __pfx____ratelimit+0x10/0x10
[  631.459206][T27366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  631.459230][T27366]  ? __pfx__printk+0x10/0x10
[  631.459260][T27366]  ? __might_fault+0xb0/0x130
[  631.459298][T27366]  should_fail_ex+0x414/0x560
[  631.459329][T27366]  _copy_from_user+0x2d/0xb0
[  631.459353][T27366]  ___sys_sendmsg+0x158/0x2a0
[  631.459380][T27366]  ? __pfx____sys_sendmsg+0x10/0x10
[  631.459446][T27366]  ? __fget_files+0x2a/0x420
[  631.459471][T27366]  ? __fget_files+0x3a0/0x420
[  631.459509][T27366]  __x64_sys_sendmsg+0x19b/0x260
[  631.459536][T27366]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  631.459571][T27366]  ? __pfx_ksys_write+0x10/0x10
[  631.459601][T27366]  ? do_syscall_64+0xbe/0x3b0
[  631.459624][T27366]  do_syscall_64+0xfa/0x3b0
[  631.459645][T27366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.459663][T27366]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  631.459684][T27366]  ? clear_bhb_loop+0x60/0xb0
[  631.459709][T27366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.459728][T27366] RIP: 0033:0x7f9c38d8eec9
[  631.459745][T27366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  631.459763][T27366] RSP: 002b:00007f9c36fb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  631.459785][T27366] RAX: ffffffffffffffda RBX: 00007f9c38fe6180 RCX: 00007f9c38d8eec9
[  631.459801][T27366] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000006
[  631.459815][T27366] RBP: 00007f9c36fb4090 R08: 0000000000000000 R09: 0000000000000000
[  631.459828][T27366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.459839][T27366] R13: 00007f9c38fe6218 R14: 00007f9c38fe6180 R15: 00007ffe0dbefaf8
[  631.459873][T27366]  </TASK>
[  631.752032][T27364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5823'.
[  631.762916][T27364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5823'.
[  632.352673][T27398] ip6gre0: entered allmulticast mode
[  632.411913][T27401] netlink: 'syz.2.5835': attribute type 1 has an invalid length.
[  632.533302][T27401] 8021q: adding VLAN 0 to HW filter on device bond22
[  632.549634][T27404] scsi_nl_rcv_msg: discarding partial skb
[  632.563988][ T5849] Bluetooth: hci4: command tx timeout
[  632.579787][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5839'.
[  632.587244][T27412] erspan0: entered allmulticast mode
[  632.650020][T27412] bond22: (slave erspan0): making interface the new active one
[  632.666875][T27412] bond22: (slave erspan0): Enslaving as an active interface with an up link
[  632.687694][T27401] bond22: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  632.951159][T27437] FAULT_INJECTION: forcing a failure.
[  632.951159][T27437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.977819][T27437] CPU: 0 UID: 0 PID: 27437 Comm: syz.3.5844 Not tainted syzkaller #0 PREEMPT(full) 
[  632.977846][T27437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  632.977858][T27437] Call Trace:
[  632.977866][T27437]  <TASK>
[  632.977874][T27437]  dump_stack_lvl+0x189/0x250
[  632.977903][T27437]  ? __pfx____ratelimit+0x10/0x10
[  632.977934][T27437]  ? __pfx_dump_stack_lvl+0x10/0x10
[  632.977956][T27437]  ? __pfx__printk+0x10/0x10
[  632.977998][T27437]  should_fail_ex+0x414/0x560
[  632.978029][T27437]  _copy_from_user+0x2d/0xb0
[  632.978052][T27437]  __copy_msghdr+0x3c5/0x5b0
[  632.978078][T27437]  ___sys_sendmsg+0x1a5/0x2a0
[  632.978103][T27437]  ? __pfx____sys_sendmsg+0x10/0x10
[  632.978166][T27437]  ? __fget_files+0x2a/0x420
[  632.978191][T27437]  ? __fget_files+0x3a0/0x420
[  632.978226][T27437]  __x64_sys_sendmsg+0x19b/0x260
[  632.978253][T27437]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  632.978287][T27437]  ? __pfx_ksys_write+0x10/0x10
[  632.978306][T27437]  ? rcu_is_watching+0x15/0xb0
[  632.978335][T27437]  ? do_syscall_64+0xbe/0x3b0
[  632.978358][T27437]  do_syscall_64+0xfa/0x3b0
[  632.978377][T27437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.978395][T27437]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  632.978415][T27437]  ? clear_bhb_loop+0x60/0xb0
[  632.978439][T27437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.978458][T27437] RIP: 0033:0x7f7bbe18eec9
[  632.978475][T27437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  632.978491][T27437] RSP: 002b:00007f7bbf075038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  632.978511][T27437] RAX: ffffffffffffffda RBX: 00007f7bbe3e6090 RCX: 00007f7bbe18eec9
[  632.978525][T27437] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000006
[  632.978538][T27437] RBP: 00007f7bbf075090 R08: 0000000000000000 R09: 0000000000000000
[  632.978550][T27437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.978562][T27437] R13: 00007f7bbe3e6128 R14: 00007f7bbe3e6090 R15: 00007ffccca53de8
[  632.978595][T27437]  </TASK>
[  633.443015][T27458] bond6 (unregistering): Released all slaves
[  633.921454][T27487] __nla_validate_parse: 1 callbacks suppressed
[  633.921475][T27487] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5857'.
[  634.097982][T27494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5858'.
[  634.102678][T27498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5859'.
[  634.705719][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5864'.
[  634.733946][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5864'.
[  635.997225][ T6208] wlan0: Trigger new scan to find an IBSS to join
[  637.241012][ T6209] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  637.347840][T27522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5865'.
[  637.371554][T27500] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  637.500931][T27527] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5869'.
[  637.819883][T27545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5872'.
[  638.059780][T27559] Bluetooth: MGMT ver 1.23
[  638.072651][T27559] geneve3: entered promiscuous mode
[  638.085558][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5878'.
[  638.096321][T27562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5877'.
[  639.359516][T27613] __nla_validate_parse: 1 callbacks suppressed
[  639.359534][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.436001][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.500212][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.561314][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.614635][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.644635][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.674602][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.696020][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.706333][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  639.734767][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5896'.
[  640.359125][T27644] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  640.875315][T27671] netlink: 'syz.1.5911': attribute type 11 has an invalid length.
[  641.094307][T27683] netlink: 'syz.1.5916': attribute type 1 has an invalid length.
[  641.120234][T27683] netlink: 'syz.1.5916': attribute type 3 has an invalid length.
[  641.142801][T27683] netlink: 'syz.1.5916': attribute type 1 has an invalid length.
[  641.151519][T27683] NCSI netlink: No device for ifindex 0
[  641.976212][T27718] syzkaller1: entered promiscuous mode
[  641.993263][T27718] syzkaller1: entered allmulticast mode
[  642.515285][T27732] wg1 speed is unknown, defaulting to 1000
[  642.541842][T27732] wg1 speed is unknown, defaulting to 1000
[  642.568289][T27732] wg1 speed is unknown, defaulting to 1000
[  642.658337][T27732] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  642.776975][T27729] wg1 speed is unknown, defaulting to 1000
[  642.820581][T27732] wg1 speed is unknown, defaulting to 1000
[  642.885139][T27732] wg1 speed is unknown, defaulting to 1000
[  642.929642][T27732] wg1 speed is unknown, defaulting to 1000
[  642.976924][T27732] wg1 speed is unknown, defaulting to 1000
[  643.005976][T27732] wg1 speed is unknown, defaulting to 1000
[  643.067077][T27732] wg1 speed is unknown, defaulting to 1000
[  643.625136][T27759] FAULT_INJECTION: forcing a failure.
[  643.625136][T27759] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  643.664214][T27759] CPU: 0 UID: 0 PID: 27759 Comm: syz.2.5938 Not tainted syzkaller #0 PREEMPT(full) 
[  643.664242][T27759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  643.664255][T27759] Call Trace:
[  643.664264][T27759]  <TASK>
[  643.664273][T27759]  dump_stack_lvl+0x189/0x250
[  643.664302][T27759]  ? __pfx____ratelimit+0x10/0x10
[  643.664331][T27759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  643.664357][T27759]  ? __pfx__printk+0x10/0x10
[  643.664402][T27759]  should_fail_ex+0x414/0x560
[  643.664435][T27759]  _copy_to_user+0x31/0xb0
[  643.664462][T27759]  simple_read_from_buffer+0xe1/0x170
[  643.664494][T27759]  proc_fail_nth_read+0x1b3/0x220
[  643.664519][T27759]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  643.664542][T27759]  ? rw_verify_area+0x2a6/0x4d0
[  643.664563][T27759]  ? __lock_acquire+0xab9/0xd20
[  643.664580][T27759]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  643.664603][T27759]  vfs_read+0x1fd/0xa30
[  643.664624][T27759]  ? fdget_pos+0x247/0x320
[  643.664653][T27759]  ? __pfx___mutex_lock+0x10/0x10
[  643.664675][T27759]  ? __pfx_vfs_read+0x10/0x10
[  643.664700][T27759]  ? __fget_files+0x2a/0x420
[  643.664731][T27759]  ? __fget_files+0x3a0/0x420
[  643.664756][T27759]  ? __fget_files+0x2a/0x420
[  643.664793][T27759]  ksys_read+0x145/0x250
[  643.664819][T27759]  ? __pfx_ksys_read+0x10/0x10
[  643.664839][T27759]  ? rcu_is_watching+0x15/0xb0
[  643.664868][T27759]  ? do_syscall_64+0xbe/0x3b0
[  643.664892][T27759]  do_syscall_64+0xfa/0x3b0
[  643.664915][T27759]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.664943][T27759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.664963][T27759]  ? clear_bhb_loop+0x60/0xb0
[  643.664989][T27759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.665008][T27759] RIP: 0033:0x7f5a61f8d8dc
[  643.665027][T27759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  643.665044][T27759] RSP: 002b:00007f5a62eba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  643.665066][T27759] RAX: ffffffffffffffda RBX: 00007f5a621e5fa0 RCX: 00007f5a61f8d8dc
[  643.665081][T27759] RDX: 000000000000000f RSI: 00007f5a62eba0a0 RDI: 0000000000000009
[  643.665093][T27759] RBP: 00007f5a62eba090 R08: 0000000000000000 R09: 0000000000000000
[  643.665106][T27759] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001
[  643.665119][T27759] R13: 00007f5a621e6038 R14: 00007f5a621e5fa0 R15: 00007ffe7fe5a818
[  643.665158][T27759]  </TASK>
[  644.128961][T27765] netlink: 'syz.2.5939': attribute type 15 has an invalid length.
[  644.509667][T27783] __nla_validate_parse: 26 callbacks suppressed
[  644.509690][T27783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5944'.
[  644.596628][T27783] macvtap0: entered promiscuous mode
[  644.610899][T27783] macvtap0: entered allmulticast mode
[  644.621225][T27783] ip6gretap0: entered allmulticast mode
[  645.036838][T27819] sctp: [Deprecated]: syz.3.5952 (pid 27819) Use of struct sctp_assoc_value in delayed_ack socket option.
[  645.036838][T27819] Use struct sctp_sack_info instead
[  645.085967][T27819] |ªA–: entered promiscuous mode
[  645.107239][T27817] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5954'.
[  645.748555][T17427] ------------[ cut here ]------------
[  645.754975][T17427] ida_free called for id=2673 which is not allocated.
[  645.788029][T17427] WARNING: CPU: 1 PID: 17427 at lib/idr.c:592 ida_free+0x280/0x310
[  645.796653][T17427] Modules linked in:
[  645.800763][T17427] CPU: 1 UID: 0 PID: 17427 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  645.810946][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  645.821538][T17427] RIP: 0010:ida_free+0x280/0x310
[  645.827299][T17427] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb
[  645.848028][T17427] RSP: 0018:ffffc90005117880 EFLAGS: 00010246
[  645.855738][T17427] RAX: 92c4f76fdcf4dd00 RBX: 0000000000000a06 RCX: ffff88802dfb1e40
[  645.863747][T17427] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  645.872469][T17427] RBP: ffffc90005117968 R08: 0000000000000003 R09: 0000000000000004
[  645.881435][T17427] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92000a22f14
[  645.890738][T17427] R13: dffffc0000000000 R14: ffff888075578200 R15: 0000000000000a71
[  645.899750][T17427] FS:  0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000
[  645.909759][T17427] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  645.917968][T17427] CR2: 00007f1b6b574860 CR3: 0000000060988000 CR4: 00000000003526f0
[  645.926844][T17427] Call Trace:
[  645.930143][T17427]  <TASK>
[  645.933154][T17427]  ? __pfx_ida_free+0x10/0x10
[  645.938370][T17427]  ? namespace_unlock+0x486/0x760
[  645.943441][T17427]  free_mnt_ns+0x52/0xe0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  645.948490][T17427]  namespace_unlock+0x529/0x760
[  645.953385][T17427]  ? __pfx_namespace_unlock+0x10/0x10
[  645.960106][T17427]  ? free_nsproxy+0x3e/0x350
[  645.966014][T17427]  free_nsproxy+0x3e/0x350
[  645.970477][T17427]  do_exit+0x6b0/0x2300
[  645.975433][T17427]  ? do_raw_spin_lock+0x121/0x290
[  645.980501][T17427]  ? __pfx_do_exit+0x10/0x10
[  645.985675][T17427]  do_group_exit+0x21c/0x2d0
[  645.990309][T17427]  ? lockdep_hardirqs_on+0x9c/0x150
[  645.996116][T17427]  get_signal+0x1285/0x1340
[  646.000665][T17427]  arch_do_signal_or_restart+0xa0/0x790
[  646.007079][T17427]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  646.013298][T17427]  ? exit_to_user_mode_loop+0x40/0x110
[  646.019305][T17427]  exit_to_user_mode_loop+0x72/0x110
[  646.025269][T17427]  do_syscall_64+0x2bd/0x3b0
[  646.029910][T17427]  ? lockdep_hardirqs_on+0x9c/0x150
[  646.035919][T17427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.042008][T17427]  ? clear_bhb_loop+0x60/0xb0
[  646.047242][T17427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.053157][T17427] RIP: 0033:0x7fdc8858d8dc
[  646.058985][T17427] Code: Unable to access opcode bytes at 0x7fdc8858d8b2.
[  646.067160][T17427] RSP: 002b:00007ffda9af8380 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  646.075685][T17427] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fdc8858d8dc
[  646.083680][T17427] RDX: 0000000000000030 RSI: 00007ffda9af8440 RDI: 00000000000000f9
[  646.091768][T17427] RBP: 00007ffda9af83ec R08: 0000000000000000 R09: 00007ffda9af80f7
[  646.100504][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258
[  646.109021][T17427] R13: 00000000000927c0 R14: 000000000009d89d R15: 00007ffda9af8440
[  646.117500][T17427]  </TASK>
[  646.120559][T17427] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  646.127849][T17427] CPU: 1 UID: 0 PID: 17427 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  646.137387][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  646.147435][T17427] Call Trace:
[  646.150710][T17427]  <TASK>
[  646.153634][T17427]  dump_stack_lvl+0x99/0x250
[  646.158232][T17427]  ? __asan_memcpy+0x40/0x70
[  646.162814][T17427]  ? __pfx_dump_stack_lvl+0x10/0x10
[  646.168009][T17427]  ? __pfx__printk+0x10/0x10
[  646.172614][T17427]  vpanic+0x281/0x750
[  646.176599][T17427]  ? __pfx__printk+0x10/0x10
[  646.181193][T17427]  ? __pfx_vpanic+0x10/0x10
[  646.185701][T17427]  ? is_bpf_text_address+0x26/0x2b0
[  646.190899][T17427]  panic+0xb9/0xc0
[  646.194620][T17427]  ? __pfx_panic+0x10/0x10
[  646.199048][T17427]  __warn+0x31b/0x4b0
[  646.203023][T17427]  ? ida_free+0x280/0x310
[  646.207347][T17427]  ? ida_free+0x280/0x310
[  646.211693][T17427]  report_bug+0x2be/0x4f0
[  646.216012][T17427]  ? ida_free+0x280/0x310
[  646.220331][T17427]  ? ida_free+0x280/0x310
[  646.224669][T17427]  ? ida_free+0x282/0x310
[  646.228992][T17427]  handle_bug+0x84/0x160
[  646.233233][T17427]  exc_invalid_op+0x1a/0x50
[  646.237733][T17427]  asm_exc_invalid_op+0x1a/0x20
[  646.242585][T17427] RIP: 0010:ida_free+0x280/0x310
[  646.247518][T17427] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb
[  646.267234][T17427] RSP: 0018:ffffc90005117880 EFLAGS: 00010246
[  646.273300][T17427] RAX: 92c4f76fdcf4dd00 RBX: 0000000000000a06 RCX: ffff88802dfb1e40
[  646.281282][T17427] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  646.289249][T17427] RBP: ffffc90005117968 R08: 0000000000000003 R09: 0000000000000004
[  646.297387][T17427] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92000a22f14
[  646.305365][T17427] R13: dffffc0000000000 R14: ffff888075578200 R15: 0000000000000a71
[  646.313354][T17427]  ? __pfx_ida_free+0x10/0x10
[  646.318032][T17427]  ? namespace_unlock+0x486/0x760
[  646.323059][T17427]  free_mnt_ns+0x52/0xe0
[  646.327326][T17427]  namespace_unlock+0x529/0x760
[  646.332185][T17427]  ? __pfx_namespace_unlock+0x10/0x10
[  646.337585][T17427]  ? free_nsproxy+0x3e/0x350
[  646.342173][T17427]  free_nsproxy+0x3e/0x350
[  646.346593][T17427]  do_exit+0x6b0/0x2300
[  646.350768][T17427]  ? do_raw_spin_lock+0x121/0x290
[  646.355792][T17427]  ? __pfx_do_exit+0x10/0x10
[  646.360396][T17427]  do_group_exit+0x21c/0x2d0
[  646.364985][T17427]  ? lockdep_hardirqs_on+0x9c/0x150
[  646.370212][T17427]  get_signal+0x1285/0x1340
[  646.374809][T17427]  arch_do_signal_or_restart+0xa0/0x790
[  646.380650][T17427]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  646.386826][T17427]  ? exit_to_user_mode_loop+0x40/0x110
[  646.392294][T17427]  exit_to_user_mode_loop+0x72/0x110
[  646.397583][T17427]  do_syscall_64+0x2bd/0x3b0
[  646.402165][T17427]  ? lockdep_hardirqs_on+0x9c/0x150
[  646.407363][T17427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.413453][T17427]  ? clear_bhb_loop+0x60/0xb0
[  646.418149][T17427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.424061][T17427] RIP: 0033:0x7fdc8858d8dc
[  646.428467][T17427] Code: Unable to access opcode bytes at 0x7fdc8858d8b2.
[  646.435496][T17427] RSP: 002b:00007ffda9af8380 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  646.443904][T17427] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fdc8858d8dc
[  646.451870][T17427] RDX: 0000000000000030 RSI: 00007ffda9af8440 RDI: 00000000000000f9
[  646.459836][T17427] RBP: 00007ffda9af83ec R08: 0000000000000000 R09: 00007ffda9af80f7
[  646.467800][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258
[  646.475769][T17427] R13: 00000000000927c0 R14: 000000000009d89d R15: 00007ffda9af8440
[  646.483753][T17427]  </TASK>
[  646.487167][T17427] Kernel Offset: disabled
[  646.491516][T17427] Rebooting in 86400 seconds..