last executing test programs:

2.968330512s ago: executing program 3 (id=2805):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @remote})

2.740194583s ago: executing program 3 (id=2807):
close(0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
r2 = socket(0x14, 0x2, 0x4)
setsockopt$inet_group_source_req(r2, 0x0, 0x2f, 0x0, 0x0)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0)

2.430460662s ago: executing program 2 (id=2808):
syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000008864"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1000, 0x0, 0x0, 0x41000}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001600010000000000000000000a000000040000000c000a"], 0x24}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

2.213971353s ago: executing program 0 (id=2811):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
unshare(0x6a040000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e0097f524bef7695acffb9508d876da00000400e9f27ffac19daf795fdcc3efcfff4a60021d337f1a751f7952ae6c79ff8c184f260d61e5e5e3b330678b21ed62fc6612aefa8b7fc8229bdcb58042d15ce7c414018d8bf6644d7fc1242181fd72c8ff47ccef541c9d4d8c45a250a9ca3f50970be35e630bdffd8fb953712f1ab275a082ac5ca69f7993f0568fb723fb96bea6e795f5775f838c5a9336bb274091e94549226e0e18a8b71ae676ec19", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@remote, @dev={0xac, 0x14, 0x14, 0x2a}, 0x19, 0x1}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48}, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)

2.02081716s ago: executing program 1 (id=2813):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a05000000000000000000070000000c0004"], 0x48}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014340000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000080004400000000214000000110001000000000000f18b7a47e63f790800000100000ae2c3"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={0x9c4, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x9a4, 0x3, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0x128, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "eb952823f038578ad9df400ae4d0ce31a84fa6c0ae8c44efa72dffb04b44dcd41cdb55b3624bacfc3b1529c6242b4174e2de99c3c54adf2933b75b4a0d36df6b554e22b31c36dd4134f20d942b6dbb5296ef246c76eb31c0f8681af1bfec908c895cd1af0373edf43258c3db9be4e8ff849ff51a5f5a8f0c6246"}, @NFTA_DATA_VALUE={0x76, 0x1, "2a42326f8740a8c2ab6f8cf7d9832384179b0feca3548ab7b7d6b5cea5274ae2bdee2d9b6daad9fcb117baf27bb04eb3386da1d0e89094b22b1d034199d0bd89b216afb9dc8ec377e56673ff3028b847dc714ef9690e390e65f6791c838163dd5eb7361fed62bffea60952b3ba4a5f564ef7"}, @NFTA_DATA_VALUE={0x2b, 0x1, "693fabb38cc92567b3f6febce7e7eb88cd49a2160f82b458aa619f7898a43353b68842f24c6549"}]}]}, {0x39c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x334, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xda, 0x1, "eb5d3542b387a100e41bf13eaac3f2f2b509923d6648a53fb315689f85937492b43cadd439a61f9c18f9ae11b8075ff54af8a17c1706fdbfa4b0f08237ba18eb36cfc61262950ed6d8ffe9727339160a1e7d6d3f0946eeb0678432fd0eedf3b3756e550160baa24ab929ef89d3654045bad0b090b8630cb32b3a70f767808733cca7e7b5fad79bc4113890855984a70d8743734a3ecefa8406e8d67f905dae82077d2923721ef827ae30146567e0d8e2b1b91f53022f8754555f3e374e9811ef12db6c9e55d42fb98545c7ce30054b89334a2cb68a38"}, @NFTA_DATA_VALUE={0xc9, 0x1, "84ded5a9d6ea29dbdf7fc162f91bf9713d6156a2c9ae4fdfe52799c4a31fd6603ca061c7624b5b5fcd42b4f812fca8e437ddd27f6b35219472cbecce2c597b8b3f9a53f26f6dacdec0534174706ebe283f022731ce7e7e5afaf95269ca7d9d8aa0e243301d83e0539e7d28ad233d91b1c177b652b403971df369110fd657bd1bd9dc934eed5870c8f017a2413d6b26dd721c023a46ea4d6c149a8c933755ed47769e6e0676afa70ecccc9930acd3ed078c3b1c470e3bb5f10c19dae5dfde837fb9a6b3f7df"}, @NFTA_DATA_VALUE={0x23, 0x1, "c4c5894774bf0b657b07204c4f1391ba1ed59f32bc1cfa85f9da64e3bee8d0"}, @NFTA_DATA_VALUE={0xb, 0x1, "77a5f36bdd5ec7"}, @NFTA_DATA_VALUE={0x31, 0x1, "871de898dfd558dd90273bb1693545bf4f75a31db8ee427b29440fac9eee45c3d1bab4e26c1c110535c994de6d"}, @NFTA_DATA_VALUE={0xbe, 0x1, "1981519dbc68fdfc3bd040b7cd94c7649edb137713c02f7138908c7efb0a1a200214a8bf48a1879bd7407c4f6d684d922955619987cd0e0ae549edb50e42ee78469b62ce24f7d9ffe403183d6a1d02e02e524ea2afea454aa59569f62ac79667dfccce48577f95d71196565657a50bab71e7aeb676f3be87133437a58ce666a54ed594b9fe182cbe14c98b3de09c5624c1a4275317d44e17861aefb2e5c850f6b9cfb0d1744d99ac262aee8749f8875562b3bfdaea5c22ad09b5"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x82, 0x6, 0x1, 0x0, "766b66d98bf480f82b47d7adf4317f0d90d4e4a22a18a763c51a8056a74298fb2a3a12023abe00d2b9d8d17fb81691649650a653d50232bf3eb6045e562b520bc7c415ce4aad98187d35f44db880659d0122297107879206b13cdf6ccb3b3d77af7b724d179c78f6db56aef242809829c50aa2e42ad34c1e9e29e5158ac4"}]}, {0x2e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_KEY={0x1d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "e97a2823df2cec652243ed57ed1b39a8ee81280509de6648261abcf81191fd60106b8b6165d5fa5bbf9ebcab6945202d177c91788250c9bf0176a015d277e5790743b749a2105fa16ac656eaaaf207df3ea03696a8a2783011a8f7a00f319f4b43ff33026e1bab4311a1b7a3ea612aa916df50ce537be1cd7e537b6aea1aa6c69cf897d7ea8e548da10ac3f6a195761ebfbd26211a1fc2d1fd1b47e1201b63f983bfdc6b7f3bd4f930da5b73374963cf1c2fae8bf4f905cb499bfe446af75fbb4ade3c3bca6e91212fa0f696cdf1ac194fec574192b1ba"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x46, 0x1, "09815efe6b3762ed79e986423be76aec02a47578196137773b454e0dae8d5fd46590793305597342b56c1b922fdab021adbea42982463cd02fd7066a677003935e37"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "d154ee979268e2fcd3d364ca2c71110a055a78e8a5ab93e059d8d7377e6a90007d65720b55bb9568db1dd21fcdbef0229f19e4cdcb631ee0435f61b24ae0d18bfc84abc4ad9f6634f9c594ad0a959a89e2839996880b5ab02ea2e724a526de93279136a339933db76a6fcde3f3221efabbfd9db2399b214ac13760b7e8bdbe8a1bb2ab911ca512f68097e8d81198e994587b3fae5db5c56fa022da4d4fa4929d218cb5be67e472f3cb94cc2291e20bea0645654963b91d1a3ec94f15d82b8ada5055fbcb41708fa245c9285dec93d1892943dc83ce3331561dc977889278e4661efc74a8bc911b154ef8"}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "f4c9d330f0fac55a96baac52a27123eef6e926e5530988"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0xb0, 0x6, 0x1, 0x0, "fc2c470fbba99c146bf79b9353866608e185371a30d781e4b02a831c931d0f81138a0fe1cb892e4fad4d45abab5a82e1fdca4f925b43757f3c1dd842abdd1009c7845a513f156ea1ca43b4fe904bbf05f424a606f039cf28ad25482feb0ea821fb3ceb19c66985e6042c319c8e7fb7f17219bb204d89e8774d310a3476866fd94fa52e08dbafd9983aba6702253dea6de816b3d87cba3eb7440429f375d6c934e4f29ddba2a662c9491be037"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x9c4}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x5d, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f00000033c0)=ANY=[@ANYBLOB="1c0000005e00040025bd7000fddbdf25000000006501d066fce211a8cece270cca176a65d2339504b6ddac0347505bbf25d5c942bbcbf5711645331ac88e0e901b2043e4e04cfeb1b9e073694e9e71bcdfddfa196718f48a908157086f8264ed78707ee3f482efcd7d846ac707ed4ee628a076687789d7def2b539b0cdbfae579edb9b2f83175f7de228ca1916ae13f2656520b65a07fe744e937e2707dc5e762491e7ae1279d542b179c0032be67e154eddc7a83cec8d7536f102a8c2b3aec2b99bcbeccdc01cc9c6d4e7b9bae4d042940517", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x400007)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000101101042cbd70000000000000000000", @ANYRES32=r8, @ANYBLOB="9800000014110000180012800b000100697036746e6c00000800028004001300"], 0x38}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010000104fcfffffffedbdf2500000000", @ANYRES32=r8, @ANYBLOB="8750a754ac000000300012800b000100697036746e6c0000200002800600100008000000080014003f0700000400130006000a00020000"], 0x50}, 0x1, 0x0, 0x0, 0x20040885}, 0x20004094)
r10 = socket$key(0xf, 0x3, 0x2)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_ro(r11, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
sendfile(r10, r12, 0x0, 0x400000013)
r13 = socket(0x1, 0x2, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r14, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r13}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000025c0)={0x6, 0xf, &(0x7f0000003280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5043, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xcc, &(0x7f0000002400)=""/204, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002500)={0x3, 0x6, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002540)=[r3, r1, r1, r1, r12, r1, r1, r1, r14], &(0x7f0000002580)=[{0x1, 0x3, 0x1}, {0x3, 0x3, 0xb, 0x1}, {0x4, 0x2, 0x0, 0xa}], 0x10, 0x8b3e}, 0x94)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000400)={<r15=>0x0, 0x0, "6371944c04eb6226c2f8d409c15c4450fbb79903b01e84ce71eb993fc61badd8808473b30605037d4d820c6372b4858a93513c58c23c27f9276669c0e9b34e3a5734f928c8036360b5f9ef5011f22daa1e1c4325ffaf2e5831a270a417a35a430da6940cafe48a66146bf8c90eaef35d071a53bf45acc224542cdc95f1a880c10b4b95106fa54dc5cbee34ea928a03934b5b8227e8e22f45addf5d7b02bf517eccbcbe217301e80ac1f524c40ebad78d25354750ec0b0c9d1b1aef5c0f5229ea622c63d2f8fb9277ffaf85d240b87e43d9804376f48ccf8b2867b2b31a24545b877c038729eff08da078b43cce60c767ec49e3d727cd17f985beb6e9d40cdcbf", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001400)={r15, 0x0, "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", "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"})

1.996091884s ago: executing program 2 (id=2814):
unshare(0x2040400)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x8000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000080))
r3 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0xec, 0x21, 0x1, 0x70bd2d, 0x0, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x400, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffe}, [@migrate={0x9c, 0x11, [{@in6=@empty, @in6=@remote, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x0, 0x0, 0x4}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, @in6=@private2, @in6=@loopback, 0x6c, 0x0, 0x0, 0xffffffff, 0x0, 0x2}]}]}, 0xec}}, 0x0)
ppoll(&(0x7f0000001c40)=[{r3, 0x8002}], 0x1, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_proto_private(r5, 0x89e0, &(0x7f00000002c0))

1.752899356s ago: executing program 4 (id=2817):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r3 = socket(0x2b, 0x80801, 0x1)
sendmmsg(r3, 0x0, 0x0, 0x20000090)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$can_raw(r6, &(0x7f00000002c0)={&(0x7f0000000140), 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x2, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "c58b8d224bef9eea"}, 0x10}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x10)
syz_init_net_socket$ax25(0x3, 0x5, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000)
socket$inet6(0xa, 0x800, 0x6)
r7 = socket$kcm(0x1e, 0x5, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x6e22}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
pipe(&(0x7f0000000040)={<r8=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/4096, 0x1000, 0x1, &(0x7f00000016c0)=""/217, 0xd9}, &(0x7f00000000c0)=0x40)

1.738542466s ago: executing program 1 (id=2818):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r1=>0x0}) (async)
r2 = socket$igmp(0x2, 0x3, 0x2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000d0076"], 0x34}}, 0x0)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f00000006c0), 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x5a210}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xaa}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x8}]}}}]}, 0x60}}, 0x90)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
poll(&(0x7f0000000180)=[{r5, 0x2}, {r5}], 0x2, 0x7f) (async)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)="780768d4939900", 0x7}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000240), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000300000002000000000028000000000067001c01001000"], 0x0, 0x2b, 0x0, 0x1, 0x502}, 0x28) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
preadv(r7, &(0x7f0000000600)=[{&(0x7f0000000080)=""/217, 0xd9}, {&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/151, 0x97}], 0x5, 0x10000, 0x6)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x58}}, 0x20004010)
getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000300), &(0x7f0000000680)=0x8)

1.616176068s ago: executing program 3 (id=2819):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000540)={0x80002000})
r3 = socket$netlink(0x10, 0x3, 0x4)
epoll_wait(r2, &(0x7f00000002c0)=[{}], 0x1, 0x9450)
epoll_wait(r2, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r6, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x15}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
epoll_create(0x6) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000540)={0x80002000}) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
epoll_wait(r2, &(0x7f00000002c0)=[{}], 0x1, 0x9450) (async)
epoll_wait(r2, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r6, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x15}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (async)

1.541072467s ago: executing program 0 (id=2820):
unshare(0x24060400) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x12) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x7ff}, 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

1.471744396s ago: executing program 0 (id=2821):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040))
r3 = accept4(r0, &(0x7f0000000240)=@can, &(0x7f0000000000)=0x80, 0x40800)
syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000002c0)=0x4)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x29, 0x5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @remote, 0x1000}}}, 0x84)

1.400168009s ago: executing program 1 (id=2822):
socket$netlink(0x10, 0x3, 0x13)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="66a819dcccf145002f598a995956fc44548dcfae92f9c30f6c99e9a347748e9ab5ef68a07d89bce3817e396e2e0f70b0d1b69f610fa806f65f0300000000000000f3c8aeefde47ada124688f69a34b0577a4d879490055c27f5cde5d59560721e83cb64f1c1c67d450682050decfc2f7d585df337a5026f7ce944671c8dfd61da44615", 0x83, 0x4014094, &(0x7f0000000100)={0x2, 0x4e21}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'batadv_slave_0\x00', &(0x7f0000000540)=@ethtool_eeprom={0xb, 0x2008d0, 0xffef0000}})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000180)=0x7, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000006, 0x13, 0xffffffffffffffff, 0xcfad5000)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xca7512}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0025a729ad6400fddbdf250a000008ff00000106000107000000000000000008000d00ff7f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x20040840)

1.399704513s ago: executing program 3 (id=2823):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1], 0x21c}}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRES16=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1], 0x21c}}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRES16=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) (async)

1.323411158s ago: executing program 3 (id=2824):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r3 = socket(0x8, 0x3, 0x0)
shutdown(r3, 0x1) (async)
readv(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) (async)
syz_open_procfs$namespace(0x0, 0x0) (async)
unshare(0x6a040000) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, 0x0, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300020e000000000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000000000020001000000000007000a00000000400589000500003000000a000000000000000000000000010000000000000000000000000000000000035d22f10866d80dfa53b9534136836e529a28162e66c30c7c70a073a81864ff295ba463c4"], 0x70}, 0x1, 0x7}, 0x0)

1.317938844s ago: executing program 4 (id=2825):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYRES8], 0x60}}, 0x80)
r0 = socket$inet6(0xa, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b0400000000000000000200fffe2a0000001100010000000000000000000504000a"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
tee(r3, 0xffffffffffffffff, 0x8000000000081, 0x0)
ioctl$sock_netdev_private(r2, 0x8943, &(0x7f0000000000))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000f9ff0700"], 0x20}}, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x7, @loopback}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000190001002dbd7000fedbdf251d"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

972.737648ms ago: executing program 1 (id=2826):
unshare(0x600)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000f5ff"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000086000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000030000008520328fbcbab6650e0a0000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94)

971.96054ms ago: executing program 3 (id=2827):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@can_newroute={0x3c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "70d2e33a169edf4d"}, 0x2}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffe, 0x4, 0x80}}, @CGW_MOD_UID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000038c0)=ANY=[@ANYRES64=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x2}, 0x10}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
ppoll(&(0x7f0000000140)=[{r1, 0x100}, {r4, 0x2412}, {r2, 0x10}, {r3, 0x280}], 0x4, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x7]}, 0x8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
unshare(0x6a040000)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0xff, 0x12}, 0x2c)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)

971.264638ms ago: executing program 0 (id=2828):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0xf, 0x4}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x3}]}, @fwd={0xb}, @const={0x7}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x30]}}, &(0x7f00000004c0)=""/166, 0x80, 0xa6, 0x0, 0x1000}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000005c0)={'erspan0\x00', <r1=>0x0, 0x7bf, 0x80, 0x7, 0x7c2e, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0x80, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x42}}}}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x996, '\x00', r1, 0x0, 0x0, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, <r4=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10)
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000200), &(0x7f00000002c0)=0x4)

953.683257ms ago: executing program 0 (id=2829):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010060f1be5908c457a21700000800030000", @ANYRES32=r3, @ANYBLOB="0c00308005000200fa000000", @ANYRES8=r2], 0x28}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x40000)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x110, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfd, {}, [{0xfc, 0x1, [@m_gact={0xf8, 0x1, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1298, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cb2, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x9, 0x10000000, 0x8, 0xa72b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c54, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xac, 0x6, 0x9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1db7, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd7f, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x258a, 0x8}}]}, {0x54, 0x6, "ebe8eb3dc2f34411173054f5c06413f0b0e7b144b10e4621be5f7ce180c94c3cc92de7d46ab85408150cbd69d3b8c8930c0b98fbc5f00da49b6dbeacee662d3bb153456c37e0b820ca09708256a7ad15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket(0x2b, 0x80801, 0x1)
socket$inet6(0xa, 0x80003, 0xff)
socket(0x2a, 0x2, 0xffffffff)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

864.170723ms ago: executing program 4 (id=2830):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000000000f800000000000000080005"], 0x20}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYBLOB="b78e45cbd8c1d528306316018b0da867e2762d7d31533d9e616c7fe48ad495950e19164de84e06b73846b2d67282f127e0f819c50bbd5f5087ccbc4806f0525648fd96dfc165f2a38d40725a5d6fecc543da27cebabc588e60f012757a1a93382862847566d43253c2b870b36d888f92410d43ff457f077113efa7e0bf99efbcab7582aed76132c68aeb53688b2edc0cb9cc329055a05f562eee64582caf1897715ac4e44954b5fafec40aece2897116330715f9b39121b33d07898574f6f961619dbc46491bdd825cbc353f58690e0c7e4c345c60", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="1f0033d1050000000000000025"], 0x3c}}, 0xec91d606fadb8735)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000390429bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="41250100034d0400140003006215746164763000000000000000000018001a8008000280040001800c000a800500080003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0)
recvfrom(r3, &(0x7f00000003c0)=""/239, 0xef, 0x40000062, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x2}}, 0x80)

851.801374ms ago: executing program 2 (id=2831):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async)
pipe(&(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r3)
splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x504, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x40040)

819.046558ms ago: executing program 1 (id=2832):
bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x1b0c, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xab2}], 0x1, 0x40003012, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000001}, 0x8045)

753.816997ms ago: executing program 2 (id=2833):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000005c072d3e1a91f61b883d0da4a9c0f6de8cd496bd2ff4ae3b9dc89e0cb27bc2b316867e6162c2dd0e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0) (async)
sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1}}], 0x1, 0x9200000000000000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000042b38ca12e7711ade75bf98c70336aed36fb30f77b7dde01e8795f362a798c5bd859137fb3a8e75bcb39d640cd0f996294b00ef816240c250dada1773bd3305e79b6fb3e9a6548354b6c4495e568f9507a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000201010200000f0000000002308dfb050800084000000000080015400000000408001a40c0000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xa0000000, 0x0) (async)
sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r11, 0x261, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048880)

655.931775ms ago: executing program 4 (id=2834):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000008dd3f389000078000000008211000000001b590064907802001600000000a60300403dca5f2543b1e083c173c64ba100000000000108655804030405ffffff09c56a3000000000000000000000000000009384bbeb271daeb21b661fe808b21b77694c875f9b4e15597015789d01240afb9ba53fa4057a62022a1564a329d3a188cb00014a5cd146673bd5b6de6a9471314a1d8c694f936802ca60f29d9a219206a03dea"], 0x0)
socket(0x2b, 0x2, 0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a3100000000540074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb710000000080fb78c7699c74e891a0c70800010054454500090002005e8427df8516df489573797a3200000000140000001100010000000000000000000100000a00"/177], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
socket(0x28, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf25090000003c0003800800010001000000140002006272696467655f736c6176655f300000080003000000000014000600ff01000000000000000001"], 0x50}}, 0x48040)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
close(r6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd419d3372cc6e4a6}, 0xc, &(0x7f0000000400)={&(0x7f0000001000)=ANY=[@ANYBLOB="b4040000", @ANYRES16=r7, @ANYBLOB="280226bd7000fddbdf253900000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x4b4}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x10, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0xb1}, [@NDA_VLAN={0x6, 0x5, 0x2}]}, 0x24}, 0x1, 0xba01}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

592.812254ms ago: executing program 2 (id=2835):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x7, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24)
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'})

575.030923ms ago: executing program 1 (id=2836):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
shutdown(r1, 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r2=>0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}})
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="fcffffff", 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0xd}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)

488.10511ms ago: executing program 0 (id=2837):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0xb00, 0x40822}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000040)={0x80000000})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x10000000}}, 0x10)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r11, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'veth0_to_hsr\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x1, [0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x5, 0x8, 0x7, 0x6, 0x3, 0x6, 0x10001, 0x80, 0x80000000, 0x0, 0x4, 0x2, 0xa46, 0x9, 0x6, 0x1, 0x3, 0x6, 0x7f, 0x80000000, 0x1, 0x944, 0x3ff, 0x1, 0x5, 0x80000001, 0x1, 0x10, 0x9, 0xfffffff8, 0xcf9e4886, 0x81, 0xf258, 0x0, 0x6, 0xd32, 0x6, 0xfffff19b, 0xcc, 0x1, 0x8b, 0x6, 0xb81, 0xfffffffc, 0x1, 0x32, 0x8, 0x6, 0x5a882c81, 0x80000000, 0x3e1b, 0x7f, 0x6, 0x80000000, 0x3, 0x31, 0xd67, 0xffff, 0xd05, 0x8, 0x46e0, 0x2, 0xfffffff7, 0x8, 0x7, 0x5, 0x1, 0x81, 0xd, 0x3, 0x401, 0x7, 0x6, 0x10001, 0x10001, 0x5d91, 0x8001, 0x80, 0xffff, 0x2, 0x5, 0x9, 0x4, 0x6, 0x85, 0xfffffff9, 0x65e0, 0x64, 0x323, 0x6, 0x11e, 0x27, 0x6, 0x1, 0x9, 0xef6, 0xe5, 0x9, 0xb4, 0x4, 0x10, 0x3ea, 0x8, 0x3, 0x3, 0xf3, 0x1, 0xffffff63, 0x2, 0x8000, 0x8, 0x5, 0x8, 0x1, 0x6, 0x4, 0x2, 0x200000, 0x5, 0x1, 0x4, 0x6], "9928dd26b1388df01817aa16e1d45a88a1e2b72fdfa61767c593bdb4b05eab00942487954469da45849d780300d5b19f61285fb9d20249318444da14d60ec94208857b39f167a1c8551228bfa4b2a5d004e3fb44c9980417f6b44d74e2909c0f376b3516bc709e00da2552811a22da809de40137bb39927b7ee26103fee58e6d1c13953c8d816264e06f5418d6e50e871ced844a3815b41153b0275e514889d731a74b59cf638032b19a214b543eda06bace6c2a854525393be1584da9b2e630a018e760701683"}})
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r13, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"})

433.880519ms ago: executing program 2 (id=2838):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='@O'], 0x40}}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=@newtaction={0x488, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x1ec, 0x1, [@m_connmark={0x1e8, 0x1a, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2c, 0x0, 0xffffffffffffffff, 0x3, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd020, 0x4, 0x6, 0x7, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x0, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xd93, 0x1, 0xfffffff9, 0x1ff}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x5, 0xfffffff8, 0x2}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8007, 0x3, 0x9, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x1, 0x3, 0x9, 0xb4dd0868}, 0x2e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7a99, 0x7fffffff, 0x0, 0xd, 0x10001}, 0x3c0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x7, 0x3, 0x8}, 0x4}}]}, {0xba, 0x6, "892a5d2471af33506b0d468730fe3ff127d6091f37fc0f7779e173eb084eca18b54314eb427bbef811ed052121249ce1581ead1b522bc383d627c9c0d6ab85b8805a480a1d358fe740a9d9998c822c002deda91e9f0383149dc62bbee854fa9b76e053dacd9bc50b2f614a5eb4699ce79b02729993272e6c8f5ad0fc2fe3a75d97542d02f13d7a7380e6fa4b83aa30562520c825ad0b05a64e7a679731ca8258b23e62b1af36f4c21b45315e6953fd3d8ca31f474b4d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x288, 0x1, [@m_skbmod={0x1b8, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x100, 0x2, 0x1, 0x5}}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x3, 0x6, 0x6, 0x6}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x12a, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0xcc, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0xa0, 0x6, "2c0aca90dfc376b58ec9ebae3944d54ab1d66168b02da582a39abc11f0bb80a41add88c6a17fc6123184e4fd4f71db165ce61f1263dc1e8e0399bd2d3c257df50ef56d738d1b6f8a466e7dda0f49070d71c84b5464c1c534394454533e669234a7d8c22567ee4885f84a7c7bfe8bce1edd0655dd4da21ca375e5f02c5b926c1ac17521eb2a4d138fe3b6a9fbe3efba57f7bffb76d3d03b75ad56113d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000cfffffff85000000170000009588cf38b1495e0bc9134fbf48dbcd784e233c625a8b8a06308fee6ee604ed619028acd2a096d3f90b9ac944a0509dc950aab5743187a7feb5cc15bcb4886160a0d070b9a3", @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvmmsg(r2, 0x0, 0x0, 0x10001, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/100, 0x64, <r7=>0x0, &(0x7f0000000200)=""/144, 0x90}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r7, 0x4)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0)

366.543269ms ago: executing program 4 (id=2839):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x2000000000000006, 0x0, 0x50000080000000, 0x0, 0x9, 0x0, 0x3ff7}, {0x2, 0x1000000000, 0x53e5, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@loopback, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffb, 0x1}}, 0xe8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x108, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0xfffffffc}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8, 0x47, 0x8000, 0x3, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @private=0xa010102}}}})
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000006c0)={0x73, @broadcast, 0x4e23, 0x5, 'lblc\x00', 0x8, 0x3, 0x68}, 0x2c)
listen(r4, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808001400000000000000000300000085100000030000001800080004000000000700000000000000000000000000003d01000100"/64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000002000007b01210000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r6=>r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8803, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000680)='pimreg1\x00')
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x68ed0000)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYRESOCT=r6], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, r7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r9}, 0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={<r10=>0x0, 0x3}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000005c0)={r10, 0x6}, &(0x7f0000000600)=0x8)
sendmsg$nl_crypto(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10000000350001002dbd7000ffdbdf25dd4b0dfcf4f58015d756b8c3478ea0362a2ede25f9d28536f55ca77b8cc41050846702e3b7d9e39521f43cbb135d3e024bec67354e1650e729a89046c71a3886b6820364fa74eb8b029cb81c9670400d3683b1b93ef54d463c8494bcfd54647cb183d38332e441844e9d435b95bc632ac447"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8010)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608fffffff80000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x108, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060086dd0000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

0s ago: executing program 4 (id=2840):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xd8, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5044}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x28000800}, 0x44011)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

kernel console output (not intermixed with test programs):

0xf0
[  285.305437][T12691]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  285.305459][T12691]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  285.305486][T12691]  bpf_prog_alloc+0x3c/0x1a0
[  285.305509][T12691]  bpf_prog_load+0x735/0x1930
[  285.305543][T12691]  ? __pfx_bpf_prog_load+0x10/0x10
[  285.305583][T12691]  ? bpf_lsm_bpf+0x9/0x20
[  285.305599][T12691]  ? security_bpf+0x7e/0x300
[  285.305622][T12691]  __sys_bpf+0x528/0x870
[  285.305643][T12691]  ? __pfx___sys_bpf+0x10/0x10
[  285.305671][T12691]  ? ksys_write+0x22a/0x250
[  285.305692][T12691]  ? __pfx_ksys_write+0x10/0x10
[  285.305708][T12691]  ? rcu_is_watching+0x15/0xb0
[  285.305731][T12691]  __x64_sys_bpf+0x7c/0x90
[  285.305751][T12691]  do_syscall_64+0xfa/0x3b0
[  285.305768][T12691]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.305784][T12691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.305799][T12691]  ? clear_bhb_loop+0x60/0xb0
[  285.305819][T12691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.305835][T12691] RIP: 0033:0x7f5ca6f8eec9
[  285.305850][T12691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.305864][T12691] RSP: 002b:00007f5ca7eac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  285.305883][T12691] RAX: ffffffffffffffda RBX: 00007f5ca71e5fa0 RCX: 00007f5ca6f8eec9
[  285.305904][T12691] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  285.305914][T12691] RBP: 00007f5ca7eac090 R08: 0000000000000000 R09: 0000000000000000
[  285.305924][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.305933][T12691] R13: 00007f5ca71e6038 R14: 00007f5ca71e5fa0 R15: 00007ffcf93f8498
[  285.305960][T12691]  </TASK>
[  285.305976][T12691] Mem-Info:
[  285.594234][T12691] active_anon:3904 inactive_anon:0 isolated_anon:0
[  285.594234][T12691]  active_file:3153 inactive_file:39981 isolated_file:0
[  285.594234][T12691]  unevictable:768 dirty:294 writeback:0
[  285.594234][T12691]  slab_reclaimable:12244 slab_unreclaimable:147444
[  285.594234][T12691]  mapped:29213 shmem:1352 pagetables:1010
[  285.594234][T12691]  sec_pagetables:0 bounce:0
[  285.594234][T12691]  kernel_misc_reclaimable:0
[  285.594234][T12691]  free:1278743 free_pcp:14592 free_cma:0
[  285.697256][T12691] Node 0 active_anon:15616kB inactive_anon:0kB active_file:12612kB inactive_file:159728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116752kB dirty:1176kB writeback:0kB shmem:3872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12244kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  285.767496][T12691] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  285.798177][T12691] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  285.866477][T12691] lowmem_reserve[]: 0 2497 2499 2499 2499
[  285.866623][T12709] netlink: 'syz.3.1770': attribute type 5 has an invalid length.
[  285.872300][T12691] Node 0 DMA32 free:1208992kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15540kB inactive_anon:0kB active_file:12612kB inactive_file:158160kB unevictable:1536kB writepending:1260kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:40816kB local_pcp:19112kB free_cma:0kB
[  285.928250][T12691] lowmem_reserve[]: 0 0 1 1 1
[  285.937784][T12691] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  285.949452][T12712] sctp: [Deprecated]: syz.2.1769 (pid 12712) Use of int in maxseg socket option.
[  285.949452][T12712] Use struct sctp_assoc_value instead
[  285.994369][T12691] lowmem_reserve[]: 0 0 0 0 0
[  286.020597][T12691] Node 1 Normal free:3893608kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15308kB local_pcp:8140kB free_cma:0kB
[  286.027456][T12715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.078246][T12691] lowmem_reserve[]: 0 0 0 0 0
[  286.083273][T12691] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  286.108809][T12691] Node 0 DMA32: 1635*4kB (UME) 853*8kB (UME) 168*16kB (UME) 940*32kB (UME) 570*64kB (UME) 178*128kB (UME) 78*256kB (UME) 26*512kB (UME) 17*1024kB (UME) 8*2048kB (UME) 253*4096kB (M) = 1208756kB
[  286.177720][T12691] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  286.192737][T12691] Node 1 Normal: 190*4kB (UE) 56*8kB (UME) 55*16kB (UME) 118*32kB (UME) 34*64kB (UME) 6*128kB (UM) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3893608kB
[  286.211551][T12691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  286.221771][T12691] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  286.232765][T12691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  286.253222][T12691] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  286.262731][T12691] 44483 total pagecache pages
[  286.280339][T12691] 0 pages in swap cache
[  286.288205][T12691] Free swap  = 124996kB
[  286.297332][T12691] Total swap = 124996kB
[  286.308923][T12691] 2097051 pages RAM
[  286.313254][T12691] 0 pages HighMem/MovableOnly
[  286.318287][T12691] 425681 pages reserved
[  286.322704][T12691] 0 pages cma reserved
[  286.692323][T12745] __nla_validate_parse: 8 callbacks suppressed
[  286.692342][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'.
[  286.826907][T12752] bond3 (unregistering): Released all slaves
[  286.911007][T12758] syzkaller1: entered promiscuous mode
[  286.937972][T12758] syzkaller1: entered allmulticast mode
[  287.104185][T12772] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1786'.
[  287.522250][T12789] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1792'.
[  287.670390][T12808] veth5: entered promiscuous mode
[  287.807373][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'.
[  287.834028][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1801'.
[  287.861242][T12819] pim6reg1: entered promiscuous mode
[  287.867595][T12819] pim6reg1: entered allmulticast mode
[  287.906814][T12814] lo speed is unknown, defaulting to 1000
[  288.334482][T12842] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1807'.
[  288.701006][T12856] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1810'.
[  288.767675][T12856] vlan2: entered allmulticast mode
[  288.793654][T12856] erspan0: entered allmulticast mode
[  288.945603][T12869] dvmrp0: entered allmulticast mode
[  289.449778][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1817'.
[  289.469387][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'.
[  289.592679][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1819'.
[  289.615706][T12885] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.635614][T12885] bond_slave_1: entered promiscuous mode
[  289.648129][T12885] bond_slave_1: entered allmulticast mode
[  289.813058][T12895] FAULT_INJECTION: forcing a failure.
[  289.813058][T12895] name failslab, interval 1, probability 0, space 0, times 0
[  289.895929][T12895] CPU: 0 UID: 0 PID: 12895 Comm: syz.1.1821 Not tainted syzkaller #0 PREEMPT(full) 
[  289.895956][T12895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  289.895966][T12895] Call Trace:
[  289.895974][T12895]  <TASK>
[  289.895981][T12895]  dump_stack_lvl+0x189/0x250
[  289.896004][T12895]  ? __pfx____ratelimit+0x10/0x10
[  289.896024][T12895]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.896042][T12895]  ? __pfx__printk+0x10/0x10
[  289.896065][T12895]  ? __pfx___might_resched+0x10/0x10
[  289.896081][T12895]  ? fs_reclaim_acquire+0x7d/0x100
[  289.896103][T12895]  should_fail_ex+0x414/0x560
[  289.896130][T12895]  should_failslab+0xa8/0x100
[  289.896153][T12895]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  289.896182][T12895]  ? __alloc_skb+0x112/0x2d0
[  289.896206][T12895]  __alloc_skb+0x112/0x2d0
[  289.896229][T12895]  alloc_skb_with_frags+0xca/0x890
[  289.896263][T12895]  sock_alloc_send_pskb+0x857/0x990
[  289.896306][T12895]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  289.896327][T12895]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.896353][T12895]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  289.896376][T12895]  unix_dgram_sendmsg+0x461/0x1850
[  289.896395][T12895]  ? __lock_acquire+0xab9/0xd20
[  289.896430][T12895]  ? rcu_is_watching+0x15/0xb0
[  289.896449][T12895]  ? trace_irq_disable+0x37/0x110
[  289.896468][T12895]  ? preempt_schedule_irq+0xde/0x150
[  289.896485][T12895]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  289.896502][T12895]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  289.896530][T12895]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  289.896549][T12895]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  289.896570][T12895]  __sock_sendmsg+0x21c/0x270
[  289.896590][T12895]  ____sys_sendmsg+0x52d/0x830
[  289.896617][T12895]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.896649][T12895]  ? import_iovec+0x74/0xa0
[  289.896673][T12895]  ___sys_sendmsg+0x21f/0x2a0
[  289.896696][T12895]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.896763][T12895]  ? __might_fault+0xb0/0x130
[  289.896789][T12895]  __sys_sendmmsg+0x227/0x430
[  289.896815][T12895]  ? __pfx___sys_sendmmsg+0x10/0x10
[  289.896833][T12895]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  289.896879][T12895]  ? ksys_write+0x22a/0x250
[  289.896902][T12895]  ? __pfx_ksys_write+0x10/0x10
[  289.896929][T12895]  __x64_sys_sendmmsg+0xa0/0xc0
[  289.896952][T12895]  do_syscall_64+0xfa/0x3b0
[  289.896969][T12895]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.896985][T12895]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.897002][T12895]  ? clear_bhb_loop+0x60/0xb0
[  289.897023][T12895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.897039][T12895] RIP: 0033:0x7faec098eec9
[  289.897054][T12895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.897068][T12895] RSP: 002b:00007faec179e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  289.897086][T12895] RAX: ffffffffffffffda RBX: 00007faec0be5fa0 RCX: 00007faec098eec9
[  289.897099][T12895] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  289.897110][T12895] RBP: 00007faec179e090 R08: 0000000000000000 R09: 0000000000000000
[  289.897121][T12895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  289.897131][T12895] R13: 00007faec0be6038 R14: 00007faec0be5fa0 R15: 00007ffe247514b8
[  289.897160][T12895]  </TASK>
[  290.676836][T12930] lo speed is unknown, defaulting to 1000
[  291.015822][T12962] netlink: 'syz.3.1836': attribute type 10 has an invalid length.
[  291.051648][T12962] geneve3: entered promiscuous mode
[  291.062203][ T1140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.084742][ T1140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.097498][ T1140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.108644][ T1140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.132955][T12967] lo speed is unknown, defaulting to 1000
[  291.599978][T12992] delete_channel: no stack
[  291.874709][T13001] __nla_validate_parse: 4 callbacks suppressed
[  291.874728][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'.
[  291.931070][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'.
[  292.146383][T13011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1851'.
[  292.177210][T13011] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1851'.
[  292.408610][T13019] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1854'.
[  292.609185][   T30] audit: type=1800 audit(1758604541.756:7): pid=13037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1855" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1832 res=0 errno=0
[  292.724870][T13039] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  293.021237][T13050] lo speed is unknown, defaulting to 1000
[  293.166858][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1865'.
[  293.755669][T13104] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1872'.
[  294.103684][T13125] openvswitch: netlink: IPv6 tunnel dst address is zero
[  294.152770][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'.
[  294.181164][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1878'.
[  294.226381][T13133] netlink: 'syz.0.1878': attribute type 1 has an invalid length.
[  294.490209][T13133] lo speed is unknown, defaulting to 1000
[  294.585875][T13141] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  294.910754][T13158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  295.112719][T13168] netlink: 'syz.3.1883': attribute type 1 has an invalid length.
[  295.133765][T13164] netlink: 'syz.0.1884': attribute type 1 has an invalid length.
[  295.180590][T13168] 8021q: adding VLAN 0 to HW filter on device bond3
[  295.229190][T13170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1885'.
[  295.382670][T13173] bridge5: entered promiscuous mode
[  295.405700][T13173] netlink: 'syz.0.1887': attribute type 23 has an invalid length.
[  295.868929][T13210] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  295.912019][T13209] Bluetooth: MGMT ver 1.23
[  295.928885][T13202] syzkaller1: entered promiscuous mode
[  295.934449][T13202] syzkaller1: entered allmulticast mode
[  296.169861][T13226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.365452][T13237] x_tables: ip_tables: udp match: only valid for protocol 17
[  296.718296][T13271] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  296.764018][T13266] netlink: 'syz.3.1916': attribute type 15 has an invalid length.
[  297.187435][T13291] __nla_validate_parse: 3 callbacks suppressed
[  297.187454][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'.
[  297.265062][T13291] lo speed is unknown, defaulting to 1000
[  297.516450][T13304] dvmrp0: left allmulticast mode
[  297.612210][T13307] IPVS: Error connecting to the multicast addr
[  297.633888][T13308] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1924'.
[  297.665893][T13308] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1924'.
[  297.872450][T13321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1927'.
[  297.988364][T13330] netlink: 'syz.1.1931': attribute type 1 has an invalid length.
[  298.009513][T13329] team0: Device gtp0 is up. Set it down before adding it as a team port
[  298.024248][T13330] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1931'.
[  298.086345][T13336] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1932'.
[  298.470086][T13356] syzkaller0: entered promiscuous mode
[  298.478160][T13356] syzkaller0: entered allmulticast mode
[  298.560086][T13357] syzkaller0: entered promiscuous mode
[  298.584975][T13357] syzkaller0: entered allmulticast mode
[  298.831212][T13377] netlink: 'syz.0.1945': attribute type 42 has an invalid length.
[  302.411872][T13403] netlink: 'syz.4.1953': attribute type 29 has an invalid length.
[  302.539084][T13423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.616657][T13437] syzkaller0: entered promiscuous mode
[  302.622164][T13437] syzkaller0: entered allmulticast mode
[  302.710160][T13423] tipc: Resetting bearer <eth:syzkaller0>
[  302.735746][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'.
[  302.745035][T13445] netlink: 'syz.4.1965': attribute type 30 has an invalid length.
[  302.762656][T13444] netlink: 'syz.3.1962': attribute type 1 has an invalid length.
[  302.770985][T13444] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1962'.
[  302.782131][T13422] tipc: Resetting bearer <eth:syzkaller0>
[  302.800322][T13422] tipc: Disabling bearer <eth:syzkaller0>
[  302.813216][ T9791] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.821665][ T9791] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.851988][ T9791] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.866437][ T9791] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.972438][T13462] FAULT_INJECTION: forcing a failure.
[  302.972438][T13462] name failslab, interval 1, probability 0, space 0, times 0
[  303.035398][T13462] CPU: 0 UID: 0 PID: 13462 Comm: syz.0.1967 Not tainted syzkaller #0 PREEMPT(full) 
[  303.035425][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  303.035436][T13462] Call Trace:
[  303.035443][T13462]  <TASK>
[  303.035451][T13462]  dump_stack_lvl+0x189/0x250
[  303.035475][T13462]  ? __pfx____ratelimit+0x10/0x10
[  303.035494][T13462]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.035513][T13462]  ? __pfx__printk+0x10/0x10
[  303.035537][T13462]  ? __pfx___might_resched+0x10/0x10
[  303.035554][T13462]  ? fs_reclaim_acquire+0x7d/0x100
[  303.035575][T13462]  should_fail_ex+0x414/0x560
[  303.035603][T13462]  should_failslab+0xa8/0x100
[  303.035626][T13462]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  303.035648][T13462]  ? __alloc_skb+0x112/0x2d0
[  303.035671][T13462]  __alloc_skb+0x112/0x2d0
[  303.035693][T13462]  alloc_skb_with_frags+0xca/0x890
[  303.035727][T13462]  sock_alloc_send_pskb+0x857/0x990
[  303.035767][T13462]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  303.035789][T13462]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.035823][T13462]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  303.035846][T13462]  unix_dgram_sendmsg+0x461/0x1850
[  303.035864][T13462]  ? __lock_acquire+0xab9/0xd20
[  303.035908][T13462]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  303.035925][T13462]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  303.035953][T13462]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  303.035972][T13462]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  303.035992][T13462]  __sock_sendmsg+0x21c/0x270
[  303.036013][T13462]  ____sys_sendmsg+0x52d/0x830
[  303.036040][T13462]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.036069][T13462]  ? import_iovec+0x74/0xa0
[  303.036094][T13462]  ___sys_sendmsg+0x21f/0x2a0
[  303.036117][T13462]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.036184][T13462]  ? __might_fault+0xb0/0x130
[  303.036209][T13462]  __sys_sendmmsg+0x227/0x430
[  303.036236][T13462]  ? __pfx___sys_sendmmsg+0x10/0x10
[  303.036254][T13462]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  303.036300][T13462]  ? ksys_write+0x22a/0x250
[  303.036323][T13462]  ? __pfx_ksys_write+0x10/0x10
[  303.036341][T13462]  ? rcu_is_watching+0x15/0xb0
[  303.036366][T13462]  __x64_sys_sendmmsg+0xa0/0xc0
[  303.036389][T13462]  do_syscall_64+0xfa/0x3b0
[  303.036405][T13462]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.036426][T13462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.036443][T13462]  ? clear_bhb_loop+0x60/0xb0
[  303.036463][T13462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.036479][T13462] RIP: 0033:0x7f61bfd8eec9
[  303.036495][T13462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.036509][T13462] RSP: 002b:00007f61c0bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  303.036527][T13462] RAX: ffffffffffffffda RBX: 00007f61bffe5fa0 RCX: 00007f61bfd8eec9
[  303.036540][T13462] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  303.036550][T13462] RBP: 00007f61c0bc6090 R08: 0000000000000000 R09: 0000000000000000
[  303.036561][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  303.036572][T13462] R13: 00007f61bffe6038 R14: 00007f61bffe5fa0 R15: 00007ffd86ffac78
[  303.036602][T13462]  </TASK>
[  303.736298][T13501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.766892][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1980'.
[  303.778619][T13509] sctp: [Deprecated]: syz.2.1976 (pid 13509) Use of struct sctp_assoc_value in delayed_ack socket option.
[  303.778619][T13509] Use struct sctp_sack_info instead
[  303.844995][T13501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.877337][T13513] FAULT_INJECTION: forcing a failure.
[  303.877337][T13513] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  303.890696][T13513] CPU: 1 UID: 0 PID: 13513 Comm: syz.3.1982 Not tainted syzkaller #0 PREEMPT(full) 
[  303.890719][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  303.890728][T13513] Call Trace:
[  303.890735][T13513]  <TASK>
[  303.890743][T13513]  dump_stack_lvl+0x189/0x250
[  303.890766][T13513]  ? __pfx____ratelimit+0x10/0x10
[  303.890786][T13513]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.890805][T13513]  ? __pfx__printk+0x10/0x10
[  303.890827][T13513]  ? __might_fault+0xb0/0x130
[  303.890861][T13513]  should_fail_ex+0x414/0x560
[  303.890889][T13513]  _copy_from_user+0x2d/0xb0
[  303.890911][T13513]  ___sys_sendmsg+0x158/0x2a0
[  303.890936][T13513]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.891004][T13513]  ? __might_fault+0xb0/0x130
[  303.891036][T13513]  __sys_sendmmsg+0x227/0x430
[  303.891063][T13513]  ? __pfx___sys_sendmmsg+0x10/0x10
[  303.891082][T13513]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  303.891128][T13513]  ? ksys_write+0x22a/0x250
[  303.891152][T13513]  ? __pfx_ksys_write+0x10/0x10
[  303.891169][T13513]  ? rcu_is_watching+0x15/0xb0
[  303.891194][T13513]  __x64_sys_sendmmsg+0xa0/0xc0
[  303.891218][T13513]  do_syscall_64+0xfa/0x3b0
[  303.891235][T13513]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.891253][T13513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.891270][T13513]  ? clear_bhb_loop+0x60/0xb0
[  303.891290][T13513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.891306][T13513] RIP: 0033:0x7fa2b278eec9
[  303.891323][T13513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.891337][T13513] RSP: 002b:00007fa2b35b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  303.891356][T13513] RAX: ffffffffffffffda RBX: 00007fa2b29e5fa0 RCX: 00007fa2b278eec9
[  303.891370][T13513] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  303.891381][T13513] RBP: 00007fa2b35b2090 R08: 0000000000000000 R09: 0000000000000000
[  303.891393][T13513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  303.891403][T13513] R13: 00007fa2b29e6038 R14: 00007fa2b29e5fa0 R15: 00007ffd14d180e8
[  303.891434][T13513]  </TASK>
[  304.164032][T13501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.213183][T13522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1985'.
[  304.224146][T13523] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1985'.
[  304.275856][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'.
[  304.302800][T13501] bond0: (slave netdevsim0): Releasing backup interface
[  304.337379][T13501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.471857][T13533] netlink: 'syz.4.1989': attribute type 1 has an invalid length.
[  304.497058][T13532] netlink: 'syz.1.1990': attribute type 3 has an invalid length.
[  304.545416][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1989'.
[  304.546716][T13533] bond7: entered promiscuous mode
[  304.559678][T13533] bond7: entered allmulticast mode
[  304.613049][ T9791] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.652852][ T3010] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.685228][ T9803] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.730450][ T9803] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.782980][T13544] FAULT_INJECTION: forcing a failure.
[  304.782980][T13544] name failslab, interval 1, probability 0, space 0, times 0
[  304.819575][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.0.1994 Not tainted syzkaller #0 PREEMPT(full) 
[  304.819600][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  304.819611][T13544] Call Trace:
[  304.819618][T13544]  <TASK>
[  304.819626][T13544]  dump_stack_lvl+0x189/0x250
[  304.819659][T13544]  ? __pfx____ratelimit+0x10/0x10
[  304.819679][T13544]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.819698][T13544]  ? __pfx__printk+0x10/0x10
[  304.819723][T13544]  ? __pfx___might_resched+0x10/0x10
[  304.819739][T13544]  ? fs_reclaim_acquire+0x7d/0x100
[  304.819760][T13544]  should_fail_ex+0x414/0x560
[  304.819788][T13544]  should_failslab+0xa8/0x100
[  304.819813][T13544]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  304.819835][T13544]  ? __alloc_skb+0x112/0x2d0
[  304.819858][T13544]  __alloc_skb+0x112/0x2d0
[  304.819881][T13544]  alloc_skb_with_frags+0xca/0x890
[  304.819914][T13544]  sock_alloc_send_pskb+0x857/0x990
[  304.819957][T13544]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  304.819979][T13544]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.820007][T13544]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  304.820030][T13544]  unix_dgram_sendmsg+0x461/0x1850
[  304.820050][T13544]  ? __lock_acquire+0xab9/0xd20
[  304.820096][T13544]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  304.820113][T13544]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  304.820146][T13544]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  304.820165][T13544]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  304.820185][T13544]  __sock_sendmsg+0x21c/0x270
[  304.820206][T13544]  ____sys_sendmsg+0x52d/0x830
[  304.820232][T13544]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.820264][T13544]  ? import_iovec+0x74/0xa0
[  304.820289][T13544]  ___sys_sendmsg+0x21f/0x2a0
[  304.820313][T13544]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.820380][T13544]  ? __might_fault+0xb0/0x130
[  304.820405][T13544]  __sys_sendmmsg+0x227/0x430
[  304.820432][T13544]  ? __pfx___sys_sendmmsg+0x10/0x10
[  304.820451][T13544]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  304.820497][T13544]  ? ksys_write+0x22a/0x250
[  304.820520][T13544]  ? __pfx_ksys_write+0x10/0x10
[  304.820539][T13544]  ? rcu_is_watching+0x15/0xb0
[  304.820562][T13544]  __x64_sys_sendmmsg+0xa0/0xc0
[  304.820585][T13544]  do_syscall_64+0xfa/0x3b0
[  304.820602][T13544]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.820617][T13544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.820633][T13544]  ? clear_bhb_loop+0x60/0xb0
[  304.820658][T13544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.820673][T13544] RIP: 0033:0x7f61bfd8eec9
[  304.820689][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.820703][T13544] RSP: 002b:00007f61c0bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  304.820721][T13544] RAX: ffffffffffffffda RBX: 00007f61bffe5fa0 RCX: 00007f61bfd8eec9
[  304.820733][T13544] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  304.820745][T13544] RBP: 00007f61c0bc6090 R08: 0000000000000000 R09: 0000000000000000
[  304.820756][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  304.820766][T13544] R13: 00007f61bffe6038 R14: 00007f61bffe5fa0 R15: 00007ffd86ffac78
[  304.820796][T13544]  </TASK>
[  305.313749][T13558] netlink: 'syz.0.1999': attribute type 1 has an invalid length.
[  305.464052][T13569] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2003'.
[  305.479399][T13569] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2003'.
[  305.589169][T13570] syzkaller1: entered promiscuous mode
[  305.649650][T13570] syzkaller1: entered allmulticast mode
[  305.703035][T13573] netlink: 'syz.2.2004': attribute type 11 has an invalid length.
[  305.890434][T13584] netlink: 'syz.2.2004': attribute type 9 has an invalid length.
[  305.927544][T13584] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.2004'.
[  306.140327][T13588] FAULT_INJECTION: forcing a failure.
[  306.140327][T13588] name failslab, interval 1, probability 0, space 0, times 0
[  306.198010][T13588] CPU: 0 UID: 0 PID: 13588 Comm: syz.4.2007 Not tainted syzkaller #0 PREEMPT(full) 
[  306.198036][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  306.198046][T13588] Call Trace:
[  306.198053][T13588]  <TASK>
[  306.198062][T13588]  dump_stack_lvl+0x189/0x250
[  306.198089][T13588]  ? __pfx____ratelimit+0x10/0x10
[  306.198109][T13588]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.198129][T13588]  ? __pfx__printk+0x10/0x10
[  306.198153][T13588]  ? __pfx___might_resched+0x10/0x10
[  306.198170][T13588]  ? fs_reclaim_acquire+0x7d/0x100
[  306.198192][T13588]  should_fail_ex+0x414/0x560
[  306.198220][T13588]  should_failslab+0xa8/0x100
[  306.198244][T13588]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  306.198266][T13588]  ? __alloc_skb+0x112/0x2d0
[  306.198289][T13588]  __alloc_skb+0x112/0x2d0
[  306.198311][T13588]  alloc_skb_with_frags+0xca/0x890
[  306.198367][T13588]  sock_alloc_send_pskb+0x857/0x990
[  306.198409][T13588]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  306.198429][T13588]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.198454][T13588]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  306.198477][T13588]  unix_dgram_sendmsg+0x461/0x1850
[  306.198524][T13588]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  306.198549][T13588]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  306.198578][T13588]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  306.198597][T13588]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  306.198618][T13588]  __sock_sendmsg+0x21c/0x270
[  306.198638][T13588]  ____sys_sendmsg+0x52d/0x830
[  306.198664][T13588]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.198693][T13588]  ? import_iovec+0x74/0xa0
[  306.198718][T13588]  ___sys_sendmsg+0x21f/0x2a0
[  306.198742][T13588]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.198808][T13588]  ? __might_fault+0xb0/0x130
[  306.198833][T13588]  __sys_sendmmsg+0x227/0x430
[  306.198860][T13588]  ? __pfx___sys_sendmmsg+0x10/0x10
[  306.198879][T13588]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  306.198925][T13588]  ? ksys_write+0x22a/0x250
[  306.198948][T13588]  ? __pfx_ksys_write+0x10/0x10
[  306.198965][T13588]  ? rcu_is_watching+0x15/0xb0
[  306.198990][T13588]  __x64_sys_sendmmsg+0xa0/0xc0
[  306.199012][T13588]  do_syscall_64+0xfa/0x3b0
[  306.199029][T13588]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.199046][T13588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.199064][T13588]  ? clear_bhb_loop+0x60/0xb0
[  306.199084][T13588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.199101][T13588] RIP: 0033:0x7f5ca6f8eec9
[  306.199117][T13588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.199131][T13588] RSP: 002b:00007f5ca7eac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  306.199151][T13588] RAX: ffffffffffffffda RBX: 00007f5ca71e5fa0 RCX: 00007f5ca6f8eec9
[  306.199164][T13588] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  306.199175][T13588] RBP: 00007f5ca7eac090 R08: 0000000000000000 R09: 0000000000000000
[  306.199186][T13588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  306.199196][T13588] R13: 00007f5ca71e6038 R14: 00007f5ca71e5fa0 R15: 00007ffcf93f8498
[  306.199226][T13588]  </TASK>
[  306.610820][T13592] netlink: 'syz.2.2009': attribute type 1 has an invalid length.
[  306.791684][T13592] netlink: 'syz.2.2009': attribute type 2 has an invalid length.
[  306.900465][T13603] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  307.492009][T13640] syzkaller1: entered allmulticast mode
[  307.793567][T13657] openvswitch: netlink: Message has 4 unknown bytes.
[  307.948142][T13648] netlink: 'syz.0.2023': attribute type 1 has an invalid length.
[  307.956351][T13648] __nla_validate_parse: 6 callbacks suppressed
[  307.956367][T13648] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2023'.
[  307.974576][T13648] netlink: 97 bytes leftover after parsing attributes in process `syz.0.2023'.
[  308.020766][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'.
[  308.132643][T13679] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2029'.
[  308.150912][T13680] !
: renamed from dummy0 (while UP)
[  308.175522][T13679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2029'.
[  308.242548][T13680] lo speed is unknown, defaulting to 1000
[  308.344427][T13688] sit0: entered promiscuous mode
[  308.358141][T13688] netlink: 'syz.4.2035': attribute type 1 has an invalid length.
[  308.371610][T13688] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2035'.
[  308.416176][T13696] sctp: [Deprecated]: syz.1.2036 (pid 13696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  308.416176][T13696] Use struct sctp_sack_info instead
[  308.500893][T13696] macsec1: entered promiscuous mode
[  308.548515][T13696] team0: entered promiscuous mode
[  308.568771][T13696] team_slave_0: entered promiscuous mode
[  308.587066][T13696] team_slave_1: entered promiscuous mode
[  308.616030][T13708] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  308.664121][T13716] dvmrp8: entered allmulticast mode
[  308.802692][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'.
[  308.834174][T13706] dvmrp8: left allmulticast mode
[  308.905615][T13733] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2046'.
[  308.941933][T13698] lo speed is unknown, defaulting to 1000
[  309.142341][T13755] netlink: 'syz.3.2052': attribute type 1 has an invalid length.
[  309.150423][T13755] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2052'.
[  309.177503][T13749] batadv1: entered promiscuous mode
[  309.183377][T13749] batadv1: entered allmulticast mode
[  309.303650][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'.
[  309.393980][T13751] lo speed is unknown, defaulting to 1000
[  309.654333][T13762] tipc: Cannot configure node identity twice
[  309.727316][T13782] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  309.887616][T13782] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.017877][T13790] batman_adv: batadv0: Adding interface: dummy0
[  310.045776][T13790] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  310.090831][T13790] batman_adv: batadv0: Interface activated: dummy0
[  310.116553][T13779] batadv0: mtu less than device minimum
[  310.137179][T13779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  310.149626][T13779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  310.161664][T13779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  310.173609][T13779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  310.185847][T13779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  310.197298][T13779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  310.208717][T13779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  310.220109][T13779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  310.267774][T13782] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.391420][T13806] sctp: [Deprecated]: syz.2.2063 (pid 13806) Use of int in max_burst socket option.
[  310.391420][T13806] Use struct sctp_assoc_value instead
[  310.429091][T13782] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.583907][ T9791] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  310.618513][ T9791] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  310.627117][T13815] sctp: [Deprecated]: syz.2.2063 (pid 13815) Use of struct sctp_assoc_value in delayed_ack socket option.
[  310.627117][T13815] Use struct sctp_sack_info instead
[  310.680875][ T9791] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.714438][ T1140] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  311.020409][T13845] FAULT_INJECTION: forcing a failure.
[  311.020409][T13845] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  311.034004][T13845] CPU: 0 UID: 0 PID: 13845 Comm: syz.3.2078 Not tainted syzkaller #0 PREEMPT(full) 
[  311.034021][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  311.034027][T13845] Call Trace:
[  311.034032][T13845]  <TASK>
[  311.034036][T13845]  dump_stack_lvl+0x189/0x250
[  311.034053][T13845]  ? __pfx____ratelimit+0x10/0x10
[  311.034068][T13845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.034079][T13845]  ? __pfx__printk+0x10/0x10
[  311.034093][T13845]  ? __might_fault+0xb0/0x130
[  311.034113][T13845]  should_fail_ex+0x414/0x560
[  311.034131][T13845]  _copy_from_user+0x2d/0xb0
[  311.034144][T13845]  ___sys_sendmsg+0x158/0x2a0
[  311.034159][T13845]  ? __pfx____sys_sendmsg+0x10/0x10
[  311.034197][T13845]  ? __might_fault+0xb0/0x130
[  311.034220][T13845]  __sys_sendmmsg+0x227/0x430
[  311.034246][T13845]  ? __pfx___sys_sendmmsg+0x10/0x10
[  311.034264][T13845]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  311.034293][T13845]  ? ksys_write+0x22a/0x250
[  311.034316][T13845]  ? __pfx_ksys_write+0x10/0x10
[  311.034327][T13845]  ? rcu_is_watching+0x15/0xb0
[  311.034341][T13845]  __x64_sys_sendmmsg+0xa0/0xc0
[  311.034355][T13845]  do_syscall_64+0xfa/0x3b0
[  311.034365][T13845]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.034376][T13845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.034385][T13845]  ? clear_bhb_loop+0x60/0xb0
[  311.034397][T13845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.034406][T13845] RIP: 0033:0x7fa2b278eec9
[  311.034416][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.034424][T13845] RSP: 002b:00007fa2b35b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  311.034436][T13845] RAX: ffffffffffffffda RBX: 00007fa2b29e5fa0 RCX: 00007fa2b278eec9
[  311.034443][T13845] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  311.034449][T13845] RBP: 00007fa2b35b2090 R08: 0000000000000000 R09: 0000000000000000
[  311.034455][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  311.034461][T13845] R13: 00007fa2b29e6038 R14: 00007fa2b29e5fa0 R15: 00007ffd14d180e8
[  311.034476][T13845]  </TASK>
[  311.585424][   T30] audit: type=1804 audit(1758604560.726:8): pid=13872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2085" name=7830303030303030303030303030303035FF dev="tmpfs" ino=2223 res=1 errno=0
[  311.679610][   T30] audit: type=1800 audit(1758604560.736:9): pid=13872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2085" name=7830303030303030303030303030303035FF dev="tmpfs" ino=2223 res=0 errno=0
[  311.743854][T13885] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  311.827592][T13885] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  311.897748][T13898] FAULT_INJECTION: forcing a failure.
[  311.897748][T13898] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  311.912165][T13898] CPU: 0 UID: 0 PID: 13898 Comm: syz.2.2093 Not tainted syzkaller #0 PREEMPT(full) 
[  311.912189][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  311.912200][T13898] Call Trace:
[  311.912206][T13898]  <TASK>
[  311.912213][T13898]  dump_stack_lvl+0x189/0x250
[  311.912236][T13898]  ? __pfx____ratelimit+0x10/0x10
[  311.912253][T13898]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.912270][T13898]  ? __pfx__printk+0x10/0x10
[  311.912289][T13898]  ? __might_fault+0xb0/0x130
[  311.912319][T13898]  should_fail_ex+0x414/0x560
[  311.912344][T13898]  _copy_from_user+0x2d/0xb0
[  311.912364][T13898]  ___sys_sendmsg+0x158/0x2a0
[  311.912386][T13898]  ? __pfx____sys_sendmsg+0x10/0x10
[  311.912441][T13898]  ? __fget_files+0x2a/0x420
[  311.912455][T13898]  ? __fget_files+0x3a0/0x420
[  311.912482][T13898]  __x64_sys_sendmsg+0x19b/0x260
[  311.912505][T13898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  311.912536][T13898]  ? __pfx_ksys_write+0x10/0x10
[  311.912554][T13898]  ? rcu_is_watching+0x15/0xb0
[  311.912575][T13898]  ? do_syscall_64+0xbe/0x3b0
[  311.912596][T13898]  do_syscall_64+0xfa/0x3b0
[  311.912611][T13898]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.912626][T13898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.912641][T13898]  ? clear_bhb_loop+0x60/0xb0
[  311.912659][T13898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.912675][T13898] RIP: 0033:0x7f2e0f98eec9
[  311.912691][T13898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.912706][T13898] RSP: 002b:00007f2e108e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  311.912725][T13898] RAX: ffffffffffffffda RBX: 00007f2e0fbe5fa0 RCX: 00007f2e0f98eec9
[  311.912738][T13898] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000003
[  311.912749][T13898] RBP: 00007f2e108e4090 R08: 0000000000000000 R09: 0000000000000000
[  311.912759][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.912770][T13898] R13: 00007f2e0fbe6038 R14: 00007f2e0fbe5fa0 R15: 00007ffe74fc7568
[  311.912799][T13898]  </TASK>
[  312.120156][ T9791] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  312.174406][T13885] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.202908][T13902] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  312.213411][T13902] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  312.222209][T13902] tipc: Resetting bearer <eth:syzkaller0>
[  312.232478][T13885] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.318764][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  312.365290][ T1140] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  312.375871][ T1140] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  312.411227][ T1140] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  312.854225][T13934] bridge0: port 1(erspan0) entered blocking state
[  312.860892][T13934] bridge0: port 1(erspan0) entered disabled state
[  312.867863][T13934] erspan0: entered allmulticast mode
[  312.874992][T13934] erspan0: entered promiscuous mode
[  312.883176][T13934] erspan0: left allmulticast mode
[  312.889240][T13934] erspan0: left promiscuous mode
[  312.895679][T13934] bridge0: port 1(erspan0) entered disabled state
[  312.910056][T13934] net_ratelimit: 11 callbacks suppressed
[  312.910074][T13934] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  312.973076][T13938] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  313.011679][T13950] FAULT_INJECTION: forcing a failure.
[  313.011679][T13950] name failslab, interval 1, probability 0, space 0, times 0
[  313.027996][T13950] CPU: 1 UID: 0 PID: 13950 Comm: syz.1.2106 Not tainted syzkaller #0 PREEMPT(full) 
[  313.028027][T13950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  313.028038][T13950] Call Trace:
[  313.028045][T13950]  <TASK>
[  313.028052][T13950]  dump_stack_lvl+0x189/0x250
[  313.028077][T13950]  ? __pfx____ratelimit+0x10/0x10
[  313.028095][T13950]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.028115][T13950]  ? __pfx__printk+0x10/0x10
[  313.028143][T13950]  ? __pfx___might_resched+0x10/0x10
[  313.028165][T13950]  should_fail_ex+0x414/0x560
[  313.028192][T13950]  should_failslab+0xa8/0x100
[  313.028217][T13950]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  313.028239][T13950]  ? __alloc_skb+0x112/0x2d0
[  313.028263][T13950]  __alloc_skb+0x112/0x2d0
[  313.028286][T13950]  netlink_sendmsg+0x5c6/0xb30
[  313.028316][T13950]  ? __pfx_netlink_sendmsg+0x10/0x10
[  313.028339][T13950]  ? aa_sock_msg_perm+0xf1/0x1d0
[  313.028359][T13950]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  313.028377][T13950]  ? __pfx_netlink_sendmsg+0x10/0x10
[  313.028398][T13950]  __sock_sendmsg+0x21c/0x270
[  313.028419][T13950]  ____sys_sendmsg+0x505/0x830
[  313.028446][T13950]  ? __pfx_____sys_sendmsg+0x10/0x10
[  313.028476][T13950]  ? import_iovec+0x74/0xa0
[  313.028501][T13950]  ___sys_sendmsg+0x21f/0x2a0
[  313.028524][T13950]  ? __pfx____sys_sendmsg+0x10/0x10
[  313.028582][T13950]  ? __fget_files+0x2a/0x420
[  313.028597][T13950]  ? __fget_files+0x3a0/0x420
[  313.028624][T13950]  __x64_sys_sendmsg+0x19b/0x260
[  313.028647][T13950]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  313.028679][T13950]  ? __pfx_ksys_write+0x10/0x10
[  313.028698][T13950]  ? rcu_is_watching+0x15/0xb0
[  313.028720][T13950]  ? do_syscall_64+0xbe/0x3b0
[  313.028742][T13950]  do_syscall_64+0xfa/0x3b0
[  313.028758][T13950]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.028776][T13950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.028792][T13950]  ? clear_bhb_loop+0x60/0xb0
[  313.028813][T13950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.028830][T13950] RIP: 0033:0x7faec098eec9
[  313.028845][T13950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.028859][T13950] RSP: 002b:00007faec179e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  313.028886][T13950] RAX: ffffffffffffffda RBX: 00007faec0be5fa0 RCX: 00007faec098eec9
[  313.028899][T13950] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000003
[  313.028910][T13950] RBP: 00007faec179e090 R08: 0000000000000000 R09: 0000000000000000
[  313.028921][T13950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  313.028932][T13950] R13: 00007faec0be6038 R14: 00007faec0be5fa0 R15: 00007ffe247514b8
[  313.028962][T13950]  </TASK>
[  313.330992][T13952] __nla_validate_parse: 9 callbacks suppressed
[  313.331011][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'.
[  313.479830][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'.
[  313.526064][T13965] netlink: 'syz.4.2111': attribute type 21 has an invalid length.
[  313.721730][T13974] netlink: 'syz.1.2112': attribute type 1 has an invalid length.
[  313.729704][T13974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2112'.
[  313.907435][T13982] netlink: 'syz.3.2116': attribute type 13 has an invalid length.
[  313.916341][T13982] netlink: 'syz.3.2116': attribute type 17 has an invalid length.
[  313.948965][T13982] xfrm0: entered promiscuous mode
[  313.957448][T13982] xfrm0: entered allmulticast mode
[  314.014122][T13982] lo speed is unknown, defaulting to 1000
[  314.124106][T13989] netlink: 412 bytes leftover after parsing attributes in process `syz.4.2119'.
[  314.386211][T14000] bridge6: entered allmulticast mode
[  314.987280][T14017] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2126'.
[  315.048434][T14019] netlink: 'syz.3.2126': attribute type 1 has an invalid length.
[  315.056919][T14019] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2126'.
[  317.210623][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2127'.
[  317.216789][T14029] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2129'.
[  317.225612][T14024] nbd: socks must be embedded in a SOCK_ITEM attr
[  317.261945][T14024] block nbd2: shutting down sockets
[  317.415623][T14036] FAULT_INJECTION: forcing a failure.
[  317.415623][T14036] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.446550][T14038] rdma_op ffff88802413c9f0 conn xmit_rdma 0000000000000000
[  317.465482][T14036] CPU: 0 UID: 0 PID: 14036 Comm: syz.4.2131 Not tainted syzkaller #0 PREEMPT(full) 
[  317.465508][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  317.465518][T14036] Call Trace:
[  317.465526][T14036]  <TASK>
[  317.465534][T14036]  dump_stack_lvl+0x189/0x250
[  317.465558][T14036]  ? __pfx____ratelimit+0x10/0x10
[  317.465584][T14036]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.465599][T14036]  ? __pfx__printk+0x10/0x10
[  317.465620][T14036]  ? __might_fault+0xb0/0x130
[  317.465649][T14036]  should_fail_ex+0x414/0x560
[  317.465675][T14036]  _copy_from_iter+0x1de/0x1790
[  317.465701][T14036]  ? rcu_is_watching+0x15/0xb0
[  317.465720][T14036]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  317.465743][T14036]  ? __pfx__copy_from_iter+0x10/0x10
[  317.465765][T14036]  ? __build_skb_around+0x257/0x3e0
[  317.465790][T14036]  ? netlink_sendmsg+0x642/0xb30
[  317.465808][T14036]  ? skb_put+0x11b/0x210
[  317.465832][T14036]  netlink_sendmsg+0x6b2/0xb30
[  317.465861][T14036]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.465884][T14036]  ? aa_sock_msg_perm+0xf1/0x1d0
[  317.465903][T14036]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  317.465922][T14036]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.465942][T14036]  __sock_sendmsg+0x21c/0x270
[  317.465963][T14036]  ____sys_sendmsg+0x505/0x830
[  317.465992][T14036]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.466022][T14036]  ? import_iovec+0x74/0xa0
[  317.466046][T14036]  ___sys_sendmsg+0x21f/0x2a0
[  317.466070][T14036]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.466123][T14036]  ? __fget_files+0x2a/0x420
[  317.466137][T14036]  ? __fget_files+0x3a0/0x420
[  317.466163][T14036]  __x64_sys_sendmsg+0x19b/0x260
[  317.466188][T14036]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  317.466220][T14036]  ? __pfx_ksys_write+0x10/0x10
[  317.466239][T14036]  ? rcu_is_watching+0x15/0xb0
[  317.466262][T14036]  ? do_syscall_64+0xbe/0x3b0
[  317.466284][T14036]  do_syscall_64+0xfa/0x3b0
[  317.466301][T14036]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.466317][T14036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.466334][T14036]  ? clear_bhb_loop+0x60/0xb0
[  317.466354][T14036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.466371][T14036] RIP: 0033:0x7f5ca6f8eec9
[  317.466387][T14036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.466402][T14036] RSP: 002b:00007f5ca7eac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.466421][T14036] RAX: ffffffffffffffda RBX: 00007f5ca71e5fa0 RCX: 00007f5ca6f8eec9
[  317.466432][T14036] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000003
[  317.466443][T14036] RBP: 00007f5ca7eac090 R08: 0000000000000000 R09: 0000000000000000
[  317.466453][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.466462][T14036] R13: 00007f5ca71e6038 R14: 00007f5ca71e5fa0 R15: 00007ffcf93f8498
[  317.466489][T14036]  </TASK>
[  317.768944][T14032] lo speed is unknown, defaulting to 1000
[  317.830874][T14046] openvswitch: netlink: Missing valid actions attribute.
[  317.841969][T14046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.856683][T14046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2134'.
[  317.907986][T14047] syz_tun: entered allmulticast mode
[  318.424379][T14053] syz_tun: left allmulticast mode
[  318.454365][T14058] lo speed is unknown, defaulting to 1000
[  318.499745][T14055] lo speed is unknown, defaulting to 1000
[  318.533164][T14073] lo speed is unknown, defaulting to 1000
[  318.549409][T14076] IPVS: Error connecting to the multicast addr
[  318.574118][T14074] netlink: 'syz.1.2139': attribute type 1 has an invalid length.
[  318.899136][T14094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2143'.
[  318.915428][T14094] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2143'.
[  318.956994][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2143'.
[  319.062887][T14096] bond4: (slave bridge0): Releasing active interface
[  319.170997][T14105] batman_adv: batadv0: Interface deactivated: dummy0
[  319.194035][T14105] batman_adv: batadv0: Removing interface: dummy0
[  319.207966][T14105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  319.325684][T14111] team0: Mode changed to "activebackup"
[  319.451413][T14126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2151'.
[  319.626280][T14132] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  319.951091][T14161] openvswitch: netlink: IPv6 tunnel dst address is zero
[  319.972562][T14156] nbd2: detected capacity change from 0 to 127
[  319.987144][ T5871] block nbd2: Receive control failed (result -32)
[  320.323184][T14176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2162'.
[  320.701377][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'.
[  320.736560][T14200] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  320.745162][T14198] netlink: 'syz.2.2168': attribute type 58 has an invalid length.
[  320.770990][T14198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2168'.
[  320.807850][T14202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.827285][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'.
[  320.827488][T14202] syzkaller0: entered promiscuous mode
[  320.860443][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'.
[  320.872952][T14202] syzkaller0: entered allmulticast mode
[  320.952107][T14196] tipc: Resetting bearer <eth:syzkaller0>
[  320.976307][T14195] tipc: Resetting bearer <eth:syzkaller0>
[  321.031725][T14195] tipc: Disabling bearer <eth:syzkaller0>
[  321.039510][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'.
[  321.066292][T14220] bridge7: entered allmulticast mode
[  321.091112][T14220] bridge8: entered allmulticast mode
[  321.168172][T14220] bridge9: entered allmulticast mode
[  321.181972][T14226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.225304][T14220] bridge10: entered allmulticast mode
[  321.251332][T14237] bridge4: entered promiscuous mode
[  321.257660][T14237] bridge4: entered allmulticast mode
[  321.269150][T14237] team0: Port device bridge4 added
[  321.284439][T14220] bridge11: entered allmulticast mode
[  321.326645][T14234] lo speed is unknown, defaulting to 1000
[  321.353148][T14220] bridge12: entered allmulticast mode
[  321.396856][T14220] bridge13: entered allmulticast mode
[  321.414877][T14220] bridge14: entered allmulticast mode
[  321.460660][T14220] bridge15: entered allmulticast mode
[  321.532214][T14220] bridge16: entered allmulticast mode
[  321.536158][T14250] netlink: 'syz.1.2183': attribute type 1 has an invalid length.
[  321.598346][T14220] bridge17: entered allmulticast mode
[  321.620284][T14220] bridge18: entered allmulticast mode
[  321.634881][T14239] lo speed is unknown, defaulting to 1000
[  321.641698][T14220] bridge19: entered allmulticast mode
[  321.690094][T14251] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  321.702769][T14251] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  321.741195][T14253] sit0: left promiscuous mode
[  321.754213][T14253] 8021q: adding VLAN 0 to HW filter on device team0
[  321.784841][T14253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  321.853143][T14220] bridge20: entered allmulticast mode
[  321.879218][T14239] lo speed is unknown, defaulting to 1000
[  321.926919][T14239] lo speed is unknown, defaulting to 1000
[  322.002726][T14259] lo speed is unknown, defaulting to 1000
[  322.115418][T14279] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  322.138843][T14278] hsr_slave_0: left promiscuous mode
[  322.146840][T14278] hsr_slave_1: left promiscuous mode
[  322.583287][T14239] infiniband syz0: set active
[  322.602706][T14239] infiniband syz0: added lo
[  322.607773][ T5982] lo speed is unknown, defaulting to 1000
[  322.612298][T14302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.626831][T14302] syzkaller0: entered promiscuous mode
[  322.632479][T14302] syzkaller0: entered allmulticast mode
[  322.642445][T14302] syzkaller0: mtu less than device minimum
[  322.670255][T14239] syz0: rxe_create_cq: returned err = -12
[  322.678054][T14239] infiniband syz0: Couldn't create ib_mad CQ
[  322.685855][T14239] infiniband syz0: Couldn't open port 1
[  322.780594][T14239] RDS/IB: syz0: added
[  322.803602][T14239] smc: adding ib device syz0 with port count 1
[  322.822112][T14239] smc:    ib device syz0 port 1 has no pnetid
[  322.858511][ T5982] lo speed is unknown, defaulting to 1000
[  322.869377][T14239] lo speed is unknown, defaulting to 1000
[  323.151305][T14317] netlink: 'syz.2.2198': attribute type 83 has an invalid length.
[  323.170400][T14239] lo speed is unknown, defaulting to 1000
[  323.324080][T14297] tipc: Resetting bearer <eth:syzkaller0>
[  323.360671][T14297] tipc: Disabling bearer <eth:syzkaller0>
[  323.436151][T14324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.467035][T14324] syzkaller0: entered promiscuous mode
[  323.472811][T14324] syzkaller0: entered allmulticast mode
[  323.486307][T14324] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  323.653051][T14239] lo speed is unknown, defaulting to 1000
[  323.660297][T14329] tipc: Resetting bearer <eth:syzkaller0>
[  324.096805][T14352] ip6gretap2: entered allmulticast mode
[  324.122429][T14239] lo speed is unknown, defaulting to 1000
[  324.189184][T14357] __nla_validate_parse: 8 callbacks suppressed
[  324.189201][T14357] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2210'.
[  324.258948][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2211'.
[  324.290941][T14359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2211'.
[  324.396113][T14239] lo speed is unknown, defaulting to 1000
[  324.471387][T14368] ip6tnl3: entered promiscuous mode
[  324.630636][T14239] lo speed is unknown, defaulting to 1000
[  324.770767][T14239] lo speed is unknown, defaulting to 1000
[  324.901185][T14239] lo speed is unknown, defaulting to 1000
[  325.046811][T14239] lo speed is unknown, defaulting to 1000
[  325.115161][T14374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2215'.
[  325.233557][T14377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.292001][T14340] lo speed is unknown, defaulting to 1000
[  325.329243][T14320] lo speed is unknown, defaulting to 1000
[  325.331977][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.343898][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.352137][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.360252][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.368359][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.376461][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.384605][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.459076][T14381] netlink: 'syz.4.2217': attribute type 4 has an invalid length.
[  325.555101][T14370] lo speed is unknown, defaulting to 1000
[  325.622837][ T5952] lo speed is unknown, defaulting to 1000
[  325.634577][ T5952] syz0: Port: 1 Link DOWN
[  325.685044][ T5884] Bluetooth: hci4: command 0x0405 tx timeout
[  325.690760][T14388] sctp: [Deprecated]: syz.4.2220 (pid 14388) Use of int in max_burst socket option.
[  325.690760][T14388] Use struct sctp_assoc_value instead
[  325.707447][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'.
[  325.714345][ T5952] lo speed is unknown, defaulting to 1000
[  325.722509][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.722568][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.212950][T14409] netlink: 'syz.3.2225': attribute type 1 has an invalid length.
[  326.362394][T14416] bond0: Unable to set down delay as MII monitoring is disabled
[  326.527241][T14418] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  326.641172][T14426] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2231'.
[  326.653638][T14426] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  326.665228][T14426] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2231'.
[  326.851298][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'.
[  326.866272][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'.
[  326.899563][T14437] bridge22: the hash_elasticity option has been deprecated and is always 16
[  326.911343][T14433] netlink: 'syz.1.2234': attribute type 5 has an invalid length.
[  326.920757][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2235'.
[  326.930358][T14437] bridge22: entered allmulticast mode
[  326.940005][T14433] netlink: 'syz.1.2234': attribute type 6 has an invalid length.
[  327.346429][T14460] netlink: 'syz.1.2242': attribute type 5 has an invalid length.
[  327.855555][T14458] tipc: Resetting bearer <eth:syzkaller0>
[  328.443662][T14499] netlink: 'syz.3.2252': attribute type 12 has an invalid length.
[  328.543517][T14514] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.700827][T14528] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001
[  328.713151][   T74] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  328.721661][   T74] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  328.734796][ T5938] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  329.048056][T14555] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  329.092784][T14563] netlink: 'syz.0.2272': attribute type 10 has an invalid length.
[  329.135105][ T5938] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  329.196814][T14575] __nla_validate_parse: 12 callbacks suppressed
[  329.196832][T14575] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2276'.
[  329.403575][T14592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2281'.
[  329.445509][ T5938] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  329.454837][T14595] FAULT_INJECTION: forcing a failure.
[  329.454837][T14595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  329.483151][T14595] CPU: 1 UID: 0 PID: 14595 Comm: syz.4.2282 Not tainted syzkaller #0 PREEMPT(full) 
[  329.483178][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  329.483189][T14595] Call Trace:
[  329.483196][T14595]  <TASK>
[  329.483204][T14595]  dump_stack_lvl+0x189/0x250
[  329.483228][T14595]  ? __pfx____ratelimit+0x10/0x10
[  329.483247][T14595]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.483266][T14595]  ? __pfx__printk+0x10/0x10
[  329.483288][T14595]  ? __might_fault+0xb0/0x130
[  329.483321][T14595]  should_fail_ex+0x414/0x560
[  329.483349][T14595]  _copy_from_user+0x2d/0xb0
[  329.483371][T14595]  ___sys_sendmsg+0x158/0x2a0
[  329.483396][T14595]  ? __pfx____sys_sendmsg+0x10/0x10
[  329.483464][T14595]  ? __might_fault+0xb0/0x130
[  329.483489][T14595]  __sys_sendmmsg+0x227/0x430
[  329.483515][T14595]  ? __pfx___sys_sendmmsg+0x10/0x10
[  329.483533][T14595]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  329.483579][T14595]  ? ksys_write+0x22a/0x250
[  329.483603][T14595]  ? __pfx_ksys_write+0x10/0x10
[  329.483621][T14595]  ? rcu_is_watching+0x15/0xb0
[  329.483645][T14595]  __x64_sys_sendmmsg+0xa0/0xc0
[  329.483668][T14595]  do_syscall_64+0xfa/0x3b0
[  329.483685][T14595]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.483707][T14595]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.483724][T14595]  ? clear_bhb_loop+0x60/0xb0
[  329.483743][T14595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.483759][T14595] RIP: 0033:0x7f5ca6f8eec9
[  329.483774][T14595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.483788][T14595] RSP: 002b:00007f5ca7eac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  329.483807][T14595] RAX: ffffffffffffffda RBX: 00007f5ca71e5fa0 RCX: 00007f5ca6f8eec9
[  329.483820][T14595] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  329.483831][T14595] RBP: 00007f5ca7eac090 R08: 0000000000000000 R09: 0000000000000000
[  329.483842][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  329.483851][T14595] R13: 00007f5ca71e6038 R14: 00007f5ca71e5fa0 R15: 00007ffcf93f8498
[  329.483881][T14595]  </TASK>
[  329.812865][T14602] netlink: 'syz.3.2285': attribute type 1 has an invalid length.
[  329.837303][T14599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2283'.
[  329.841322][T14602] netlink: 'syz.3.2285': attribute type 2 has an invalid length.
[  329.855271][T14602] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.2285'.
[  330.020309][T14609] lo speed is unknown, defaulting to 1000
[  330.047467][T14609] lo speed is unknown, defaulting to 1000
[  330.065099][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'.
[  330.116902][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'.
[  330.153566][T14615] bond0 (unregistering): (slave 
7
7ے): Releasing backup interface
[  330.166918][T14615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.194725][T14615] bond0 (unregistering): Released all slaves
[  330.344991][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'.
[  330.358348][T14629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2292'.
[  330.394466][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'.
[  330.403825][T14629] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2292'.
[  330.514194][T14633] FAULT_INJECTION: forcing a failure.
[  330.514194][T14633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  330.529111][T14633] CPU: 0 UID: 0 PID: 14633 Comm: syz.1.2293 Not tainted syzkaller #0 PREEMPT(full) 
[  330.529135][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  330.529146][T14633] Call Trace:
[  330.529153][T14633]  <TASK>
[  330.529160][T14633]  dump_stack_lvl+0x189/0x250
[  330.529185][T14633]  ? __pfx____ratelimit+0x10/0x10
[  330.529204][T14633]  ? __pfx_dump_stack_lvl+0x10/0x10
[  330.529229][T14633]  ? __pfx__printk+0x10/0x10
[  330.529259][T14633]  ? __might_fault+0xb0/0x130
[  330.529291][T14633]  should_fail_ex+0x414/0x560
[  330.529320][T14633]  _copy_from_user+0x2d/0xb0
[  330.529341][T14633]  ___sys_sendmsg+0x158/0x2a0
[  330.529366][T14633]  ? __pfx____sys_sendmsg+0x10/0x10
[  330.529427][T14633]  ? __might_fault+0xb0/0x130
[  330.529449][T14633]  __sys_sendmmsg+0x227/0x430
[  330.529476][T14633]  ? __pfx___sys_sendmmsg+0x10/0x10
[  330.529494][T14633]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  330.529539][T14633]  ? ksys_write+0x22a/0x250
[  330.529562][T14633]  ? __pfx_ksys_write+0x10/0x10
[  330.529580][T14633]  ? rcu_is_watching+0x15/0xb0
[  330.529603][T14633]  __x64_sys_sendmmsg+0xa0/0xc0
[  330.529628][T14633]  do_syscall_64+0xfa/0x3b0
[  330.529645][T14633]  ? lockdep_hardirqs_on+0x9c/0x150
[  330.529662][T14633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.529679][T14633]  ? clear_bhb_loop+0x60/0xb0
[  330.529699][T14633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.529714][T14633] RIP: 0033:0x7faec098eec9
[  330.529730][T14633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.529744][T14633] RSP: 002b:00007faec179e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  330.529760][T14633] RAX: ffffffffffffffda RBX: 00007faec0be5fa0 RCX: 00007faec098eec9
[  330.529769][T14633] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  330.529779][T14633] RBP: 00007faec179e090 R08: 0000000000000000 R09: 0000000000000000
[  330.529788][T14633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  330.529797][T14633] R13: 00007faec0be6038 R14: 00007faec0be5fa0 R15: 00007ffe247514b8
[  330.529827][T14633]  </TASK>
[  330.795529][T14636] lo speed is unknown, defaulting to 1000
[  330.803290][T14636] lo speed is unknown, defaulting to 1000
[  331.052600][ T9791] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  331.070786][ T9791] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.111687][T14650] net_ratelimit: 12 callbacks suppressed
[  331.111705][T14650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.129559][ T9791] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.161297][ T9791] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.291958][T14660] syzkaller1: entered promiscuous mode
[  331.297754][T14660] syzkaller1: entered allmulticast mode
[  331.305984][T14660] openvswitch: netlink: Actions may not be safe on all matching packets
[  331.309851][T14666] FAULT_INJECTION: forcing a failure.
[  331.309851][T14666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.337695][T14664] delete_channel: no stack
[  331.356130][T14666] CPU: 1 UID: 0 PID: 14666 Comm: syz.3.2303 Not tainted syzkaller #0 PREEMPT(full) 
[  331.356163][T14666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  331.356174][T14666] Call Trace:
[  331.356181][T14666]  <TASK>
[  331.356188][T14666]  dump_stack_lvl+0x189/0x250
[  331.356211][T14666]  ? __pfx____ratelimit+0x10/0x10
[  331.356230][T14666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.356248][T14666]  ? __pfx__printk+0x10/0x10
[  331.356268][T14666]  ? __might_fault+0xb0/0x130
[  331.356301][T14666]  should_fail_ex+0x414/0x560
[  331.356330][T14666]  _copy_from_user+0x2d/0xb0
[  331.356351][T14666]  dev_ethtool+0xd0/0x19c0
[  331.356377][T14666]  ? __lock_acquire+0xab9/0xd20
[  331.356404][T14666]  ? __pfx_dev_ethtool+0x10/0x10
[  331.356434][T14666]  ? dev_load+0x21/0x1f0
[  331.356454][T14666]  ? dev_load+0x21/0x1f0
[  331.356473][T14666]  dev_ioctl+0x392/0x1150
[  331.356495][T14666]  sock_do_ioctl+0x22c/0x300
[  331.356513][T14666]  ? __pfx_sock_do_ioctl+0x10/0x10
[  331.356526][T14666]  ? __lock_acquire+0xab9/0xd20
[  331.356564][T14666]  sock_ioctl+0x576/0x790
[  331.356589][T14666]  ? __pfx_sock_ioctl+0x10/0x10
[  331.356611][T14666]  ? __fget_files+0x2a/0x420
[  331.356625][T14666]  ? __fget_files+0x3a0/0x420
[  331.356638][T14666]  ? __fget_files+0x2a/0x420
[  331.356655][T14666]  ? bpf_lsm_file_ioctl+0x9/0x20
[  331.356675][T14666]  ? __pfx_sock_ioctl+0x10/0x10
[  331.356695][T14666]  __se_sys_ioctl+0xf9/0x170
[  331.356717][T14666]  do_syscall_64+0xfa/0x3b0
[  331.356733][T14666]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.356749][T14666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.356764][T14666]  ? clear_bhb_loop+0x60/0xb0
[  331.356784][T14666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.356800][T14666] RIP: 0033:0x7fa2b278eec9
[  331.356816][T14666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.356829][T14666] RSP: 002b:00007fa2b35b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  331.356848][T14666] RAX: ffffffffffffffda RBX: 00007fa2b29e5fa0 RCX: 00007fa2b278eec9
[  331.356859][T14666] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003
[  331.356869][T14666] RBP: 00007fa2b35b2090 R08: 0000000000000000 R09: 0000000000000000
[  331.356879][T14666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.356888][T14666] R13: 00007fa2b29e6038 R14: 00007fa2b29e5fa0 R15: 00007ffd14d180e8
[  331.356915][T14666]  </TASK>
[  331.676461][T14679] FAULT_INJECTION: forcing a failure.
[  331.676461][T14679] name failslab, interval 1, probability 0, space 0, times 0
[  331.690068][T14679] CPU: 0 UID: 0 PID: 14679 Comm: syz.2.2305 Not tainted syzkaller #0 PREEMPT(full) 
[  331.690103][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  331.690114][T14679] Call Trace:
[  331.690122][T14679]  <TASK>
[  331.690129][T14679]  dump_stack_lvl+0x189/0x250
[  331.690154][T14679]  ? __pfx____ratelimit+0x10/0x10
[  331.690173][T14679]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.690192][T14679]  ? __pfx__printk+0x10/0x10
[  331.690217][T14679]  ? __pfx___might_resched+0x10/0x10
[  331.690233][T14679]  ? fs_reclaim_acquire+0x7d/0x100
[  331.690254][T14679]  should_fail_ex+0x414/0x560
[  331.690283][T14679]  should_failslab+0xa8/0x100
[  331.690307][T14679]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  331.690330][T14679]  ? __alloc_skb+0x112/0x2d0
[  331.690354][T14679]  __alloc_skb+0x112/0x2d0
[  331.690377][T14679]  alloc_skb_with_frags+0xca/0x890
[  331.690416][T14679]  sock_alloc_send_pskb+0x857/0x990
[  331.690459][T14679]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  331.690481][T14679]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.690508][T14679]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  331.690532][T14679]  unix_dgram_sendmsg+0x461/0x1850
[  331.690551][T14679]  ? __lock_acquire+0xab9/0xd20
[  331.690597][T14679]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  331.690615][T14679]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  331.690645][T14679]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  331.690664][T14679]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  331.690685][T14679]  __sock_sendmsg+0x21c/0x270
[  331.690705][T14679]  ____sys_sendmsg+0x52d/0x830
[  331.690733][T14679]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.690764][T14679]  ? import_iovec+0x74/0xa0
[  331.690789][T14679]  ___sys_sendmsg+0x21f/0x2a0
[  331.690813][T14679]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.690878][T14679]  ? __might_fault+0xb0/0x130
[  331.690904][T14679]  __sys_sendmmsg+0x227/0x430
[  331.690932][T14679]  ? __pfx___sys_sendmmsg+0x10/0x10
[  331.690951][T14679]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  331.690997][T14679]  ? ksys_write+0x22a/0x250
[  331.691021][T14679]  ? __pfx_ksys_write+0x10/0x10
[  331.691039][T14679]  ? rcu_is_watching+0x15/0xb0
[  331.691063][T14679]  __x64_sys_sendmmsg+0xa0/0xc0
[  331.691092][T14679]  do_syscall_64+0xfa/0x3b0
[  331.691110][T14679]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.691127][T14679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.691144][T14679]  ? clear_bhb_loop+0x60/0xb0
[  331.691164][T14679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.691181][T14679] RIP: 0033:0x7f2e0f98eec9
[  331.691196][T14679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.691211][T14679] RSP: 002b:00007f2e108e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  331.691230][T14679] RAX: ffffffffffffffda RBX: 00007f2e0fbe5fa0 RCX: 00007f2e0f98eec9
[  331.691243][T14679] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  331.691255][T14679] RBP: 00007f2e108e4090 R08: 0000000000000000 R09: 0000000000000000
[  331.691265][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  331.691275][T14679] R13: 00007f2e0fbe6038 R14: 00007f2e0fbe5fa0 R15: 00007ffe74fc7568
[  331.691305][T14679]  </TASK>
[  332.132800][T14687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.146217][T14687] syzkaller0: entered promiscuous mode
[  332.152518][T14687] syzkaller0: entered allmulticast mode
[  332.287437][T14694] tipc: Resetting bearer <eth:syzkaller0>
[  332.330541][T14686] tipc: Resetting bearer <eth:syzkaller0>
[  332.387047][T14686] tipc: Disabling bearer <eth:syzkaller0>
[  332.724709][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  332.762558][T14721] FAULT_INJECTION: forcing a failure.
[  332.762558][T14721] name failslab, interval 1, probability 0, space 0, times 0
[  332.818393][T14721] CPU: 0 UID: 0 PID: 14721 Comm: syz.0.2317 Not tainted syzkaller #0 PREEMPT(full) 
[  332.818417][T14721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  332.818426][T14721] Call Trace:
[  332.818432][T14721]  <TASK>
[  332.818440][T14721]  dump_stack_lvl+0x189/0x250
[  332.818464][T14721]  ? __pfx____ratelimit+0x10/0x10
[  332.818482][T14721]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.818500][T14721]  ? __pfx__printk+0x10/0x10
[  332.818522][T14721]  ? __pfx___might_resched+0x10/0x10
[  332.818538][T14721]  ? fs_reclaim_acquire+0x7d/0x100
[  332.818557][T14721]  should_fail_ex+0x414/0x560
[  332.818582][T14721]  should_failslab+0xa8/0x100
[  332.818604][T14721]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[  332.818625][T14721]  ? __request_module+0x2d1/0x5e0
[  332.818650][T14721]  kstrdup+0x42/0x100
[  332.818668][T14721]  __request_module+0x2d1/0x5e0
[  332.818695][T14721]  ? __pfx___request_module+0x10/0x10
[  332.818732][T14721]  ? security_capable+0x7e/0x2e0
[  332.818759][T14721]  ? dev_load+0x21/0x1f0
[  332.818776][T14721]  dev_load+0x190/0x1f0
[  332.818794][T14721]  dev_ioctl+0x384/0x1150
[  332.818817][T14721]  sock_do_ioctl+0x22c/0x300
[  332.818836][T14721]  ? __pfx_sock_do_ioctl+0x10/0x10
[  332.818853][T14721]  ? __lock_acquire+0xab9/0xd20
[  332.818887][T14721]  sock_ioctl+0x576/0x790
[  332.818912][T14721]  ? __pfx_sock_ioctl+0x10/0x10
[  332.818933][T14721]  ? __fget_files+0x2a/0x420
[  332.818947][T14721]  ? __fget_files+0x3a0/0x420
[  332.818959][T14721]  ? __fget_files+0x2a/0x420
[  332.818977][T14721]  ? bpf_lsm_file_ioctl+0x9/0x20
[  332.819005][T14721]  ? __pfx_sock_ioctl+0x10/0x10
[  332.819027][T14721]  __se_sys_ioctl+0xf9/0x170
[  332.819047][T14721]  do_syscall_64+0xfa/0x3b0
[  332.819063][T14721]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.819080][T14721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.819097][T14721]  ? clear_bhb_loop+0x60/0xb0
[  332.819118][T14721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.819133][T14721] RIP: 0033:0x7f61bfd8eec9
[  332.819149][T14721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.819164][T14721] RSP: 002b:00007f61c0bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  332.819183][T14721] RAX: ffffffffffffffda RBX: 00007f61bffe5fa0 RCX: 00007f61bfd8eec9
[  332.819196][T14721] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003
[  332.819207][T14721] RBP: 00007f61c0bc6090 R08: 0000000000000000 R09: 0000000000000000
[  332.819218][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.819228][T14721] R13: 00007f61bffe6038 R14: 00007f61bffe5fa0 R15: 00007ffd86ffac78
[  332.819257][T14721]  </TASK>
[  333.190687][T14731] validate_nla: 1 callbacks suppressed
[  333.190706][T14731] netlink: 'syz.3.2320': attribute type 16 has an invalid length.
[  333.226490][T14731] netlink: 'syz.3.2320': attribute type 17 has an invalid length.
[  334.748100][T14731] tipc: Resetting bearer <eth:syzkaller0>
[  334.804799][T14734] __nla_validate_parse: 8 callbacks suppressed
[  334.804827][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2320'.
[  334.835727][T14737] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  334.875259][ T5938] lo speed is unknown, defaulting to 1000
[  334.884364][ T9796] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  334.901578][ T5938] syz2: Port: 1 Link DOWN
[  334.906347][ T9796] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.915968][ T9796] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  334.925027][ T9796] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.940117][ T9796] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  334.951930][ T9796] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.978293][ T9796] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.004751][ T9796] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.088369][T14755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.096372][T14755] syzkaller0: entered promiscuous mode
[  335.101962][T14755] syzkaller0: entered allmulticast mode
[  335.126724][T14755] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  335.205636][T14755] lo speed is unknown, defaulting to 1000
[  335.228047][T14755] lo speed is unknown, defaulting to 1000
[  335.295604][T14777] FAULT_INJECTION: forcing a failure.
[  335.295604][T14777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  335.304682][T14779] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2332'.
[  335.371078][T14777] CPU: 0 UID: 0 PID: 14777 Comm: syz.3.2331 Not tainted syzkaller #0 PREEMPT(full) 
[  335.371105][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  335.371116][T14777] Call Trace:
[  335.371123][T14777]  <TASK>
[  335.371131][T14777]  dump_stack_lvl+0x189/0x250
[  335.371156][T14777]  ? __pfx____ratelimit+0x10/0x10
[  335.371175][T14777]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.371195][T14777]  ? __pfx__printk+0x10/0x10
[  335.371218][T14777]  ? __might_fault+0xb0/0x130
[  335.371254][T14777]  should_fail_ex+0x414/0x560
[  335.371282][T14777]  _copy_from_user+0x2d/0xb0
[  335.371303][T14777]  ethtool_get_link_ksettings+0x132/0x3a0
[  335.371327][T14777]  ? __pfx_ethtool_get_link_ksettings+0x10/0x10
[  335.371354][T14777]  ? dev_ethtool+0x1d0/0x19c0
[  335.371390][T14777]  ? full_name_hash+0x92/0xe0
[  335.371412][T14777]  ? netdev_name_node_lookup+0xdf/0x120
[  335.371440][T14777]  dev_ethtool+0xa2e/0x19c0
[  335.371474][T14777]  ? __pfx_dev_ethtool+0x10/0x10
[  335.371512][T14777]  ? dev_load+0x21/0x1f0
[  335.371533][T14777]  dev_ioctl+0x392/0x1150
[  335.371556][T14777]  sock_do_ioctl+0x22c/0x300
[  335.371577][T14777]  ? __pfx_sock_do_ioctl+0x10/0x10
[  335.371590][T14777]  ? __lock_acquire+0xab9/0xd20
[  335.371630][T14777]  sock_ioctl+0x576/0x790
[  335.371657][T14777]  ? __pfx_sock_ioctl+0x10/0x10
[  335.371680][T14777]  ? __fget_files+0x2a/0x420
[  335.371695][T14777]  ? __fget_files+0x3a0/0x420
[  335.371708][T14777]  ? __fget_files+0x2a/0x420
[  335.371727][T14777]  ? bpf_lsm_file_ioctl+0x9/0x20
[  335.371752][T14777]  ? __pfx_sock_ioctl+0x10/0x10
[  335.371774][T14777]  __se_sys_ioctl+0xf9/0x170
[  335.371795][T14777]  do_syscall_64+0xfa/0x3b0
[  335.371812][T14777]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.371829][T14777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.371845][T14777]  ? clear_bhb_loop+0x60/0xb0
[  335.371866][T14777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.371882][T14777] RIP: 0033:0x7fa2b278eec9
[  335.371899][T14777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.371913][T14777] RSP: 002b:00007fa2b35b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  335.371931][T14777] RAX: ffffffffffffffda RBX: 00007fa2b29e5fa0 RCX: 00007fa2b278eec9
[  335.371943][T14777] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003
[  335.371954][T14777] RBP: 00007fa2b35b2090 R08: 0000000000000000 R09: 0000000000000000
[  335.371964][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.371974][T14777] R13: 00007fa2b29e6038 R14: 00007fa2b29e5fa0 R15: 00007ffd14d180e8
[  335.372005][T14777]  </TASK>
[  335.705369][T14786] lo speed is unknown, defaulting to 1000
[  335.948158][T14754] tipc: Resetting bearer <eth:syzkaller0>
[  336.026507][T14754] tipc: Disabling bearer <eth:syzkaller0>
[  336.037014][T14794] lo speed is unknown, defaulting to 1000
[  336.065825][T14793] lo speed is unknown, defaulting to 1000
[  336.073685][T14786] lo speed is unknown, defaulting to 1000
[  336.079481][T14801] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  336.084724][T14806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2340'.
[  336.301364][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'.
[  336.381830][T14794] lo speed is unknown, defaulting to 1000
[  336.627753][T14819] ip6gretap0: entered promiscuous mode
[  336.633665][T14819] macsec0: entered allmulticast mode
[  336.640070][T14819] ip6gretap0: entered allmulticast mode
[  336.662265][T14819] ip6gretap0: left allmulticast mode
[  336.675876][T14819] ip6gretap0: left promiscuous mode
[  336.750863][T14793] lo speed is unknown, defaulting to 1000
[  336.898852][T14827] macvlan1: entered promiscuous mode
[  336.904631][T14827] bond0: entered promiscuous mode
[  336.909839][T14827] macvlan1: entered allmulticast mode
[  336.915901][T14827] bond0: entered allmulticast mode
[  336.922169][T14827] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  337.218914][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2351'.
[  337.228640][T14844] netlink: 'syz.2.2351': attribute type 1 has an invalid length.
[  337.578932][T14846] netlink: 'syz.1.2352': attribute type 10 has an invalid length.
[  337.734744][T14846] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2352'.
[  338.225845][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2357'.
[  338.539729][T14876] netlink: 'syz.4.2361': attribute type 1 has an invalid length.
[  338.547929][T14876] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2361'.
[  338.566742][T14878] netlink: 'syz.0.2362': attribute type 7 has an invalid length.
[  338.575164][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'.
[  338.587940][T14879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2362'.
[  338.677145][T14883] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.684984][T14883] syzkaller0: entered promiscuous mode
[  338.690998][T14883] syzkaller0: entered allmulticast mode
[  338.759911][T14883] tipc: Resetting bearer <eth:syzkaller0>
[  338.778407][T14889] macvlan0: entered allmulticast mode
[  338.783893][T14889] bond0: entered allmulticast mode
[  338.789748][T14889] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  338.808424][T14889] bond0: left allmulticast mode
[  338.828164][T14881] tipc: Resetting bearer <eth:syzkaller0>
[  338.844032][T14881] tipc: Disabling bearer <eth:syzkaller0>
[  338.925785][T14896] netlink: 'syz.2.2367': attribute type 9 has an invalid length.
[  339.061590][   T30] audit: type=1804 audit(1758604588.206:10): pid=14906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2370" name="/newroot/446/cgroup.controllers" dev="tmpfs" ino=2312 res=1 errno=0
[  339.096249][   T30] audit: type=1800 audit(1758604588.236:11): pid=14906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2370" name="cgroup.controllers" dev="tmpfs" ino=2312 res=0 errno=0
[  339.415527][T14921] netlink: 'syz.0.2373': attribute type 4 has an invalid length.
[  339.427501][T14921] netlink: 'syz.0.2373': attribute type 4 has an invalid length.
[  339.982013][T14962] __nla_validate_parse: 2 callbacks suppressed
[  339.982033][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2387'.
[  339.992823][T14964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2388'.
[  340.007249][T14964] openvswitch: netlink: Flow key attr not present in new flow.
[  340.150253][T14971] netlink: 'syz.1.2386': attribute type 10 has an invalid length.
[  340.367112][T14980] netlink: 'syz.3.2391': attribute type 1 has an invalid length.
[  340.407546][T14980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2391'.
[  340.521697][T14989] netlink: 'syz.3.2394': attribute type 4 has an invalid length.
[  340.621127][T15001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.662634][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'.
[  340.674416][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2398'.
[  340.696519][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'.
[  340.708444][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'.
[  340.798929][T15014] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  340.855413][T15015] netlink: 'syz.1.2401': attribute type 1 has an invalid length.
[  340.880179][T15015] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2401'.
[  340.891531][T15015] netlink: 'syz.1.2401': attribute type 1 has an invalid length.
[  340.899616][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'.
[  340.928428][T15020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.936265][T15020] syzkaller0: entered promiscuous mode
[  340.941854][T15020] syzkaller0: entered allmulticast mode
[  340.970792][T15020] tipc: Resetting bearer <eth:syzkaller0>
[  340.978807][T15019] tipc: Resetting bearer <eth:syzkaller0>
[  341.001075][T15019] tipc: Disabling bearer <eth:syzkaller0>
[  341.021513][T15023] lo speed is unknown, defaulting to 1000
[  341.028947][T15023] lo speed is unknown, defaulting to 1000
[  341.143013][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2405'.
[  341.414470][T15041] team0: Mode changed to "loadbalance"
[  341.444712][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  341.860036][T15057] 8021q: adding VLAN 0 to HW filter on device bond5
[  341.870095][T15052] lo speed is unknown, defaulting to 1000
[  341.899499][T15060] bond5: (slave veth9): Enslaving as an active interface with a down link
[  341.908412][T15052] lo speed is unknown, defaulting to 1000
[  341.958700][T15061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.015216][T15057] 8021q: adding VLAN 0 to HW filter on device batadv1
[  342.023685][T15057] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  342.118361][T15061] syzkaller0: entered promiscuous mode
[  342.146066][T15061] syzkaller0: entered allmulticast mode
[  342.190997][T15072] tipc: Resetting bearer <eth:syzkaller0>
[  342.238927][T15059] tipc: Resetting bearer <eth:syzkaller0>
[  342.303417][T15059] tipc: Disabling bearer <eth:syzkaller0>
[  342.623676][T15085] batman_adv: batadv0: Removing interface: virt_wifi0
[  343.150662][T15125] syzkaller1: entered allmulticast mode
[  343.712073][   T30] audit: type=1107 audit(1758604592.856:12): pid=15151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ين'
[  343.899464][T15168] 8021q: adding VLAN 0 to HW filter on device team0
[  343.906353][T15168] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  344.028814][T15170] validate_nla: 3 callbacks suppressed
[  344.028831][T15170] netlink: 'syz.0.2445': attribute type 1 has an invalid length.
[  344.097680][T15175] netlink: 'syz.1.2446': attribute type 1 has an invalid length.
[  344.205616][T15189] bond0: entered promiscuous mode
[  344.211868][T15189] bond0: entered allmulticast mode
[  344.221036][T15189] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.251062][T15188] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.318597][T15197] netlink: 'syz.4.2453': attribute type 1 has an invalid length.
[  344.391601][T15197] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  344.406245][T15201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.425708][ T9791] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  344.426546][T15197] 8021q: adding VLAN 0 to HW filter on device bond8
[  344.461130][T15188] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.514973][T15207] delete_channel: no stack
[  344.524280][T15202] veth3: entered promiscuous mode
[  344.548402][ T3010] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  344.551612][T15210] netlink: 'syz.1.2457': attribute type 8 has an invalid length.
[  344.583678][T15197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  344.609140][T15188] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.689601][T15188] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.795988][T15223] bridge0: entered promiscuous mode
[  344.801404][T15223] bridge0: entered allmulticast mode
[  344.882270][ T9802] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  344.896109][ T9802] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  344.904302][T15225] dvmrp1: tun_chr_ioctl cmd 1074025677
[  344.912393][T15225] dvmrp1: linktype set to 768
[  344.943586][ T9802] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.952646][ T9802] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.964071][T15233] tipc: Can't bind to reserved service type 1
[  344.986382][T15225] syzkaller0: entered promiscuous mode
[  344.996974][T15225] syzkaller0: entered allmulticast mode
[  345.072017][T15225] __nla_validate_parse: 13 callbacks suppressed
[  345.072035][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'.
[  345.256702][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'.
[  345.259303][T15248] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.338904][T15248] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.339718][T15251] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2470'.
[  345.354793][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'.
[  345.412610][T15248] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.451088][T15262] netlink: 'syz.2.2473': attribute type 1 has an invalid length.
[  345.459123][T15262] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2473'.
[  345.517787][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2473'.
[  345.712107][T15283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2476'.
[  345.887785][T15248] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  346.204407][T15292] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2479'.
[  346.230946][T15291] lo speed is unknown, defaulting to 1000
[  346.242527][T15291] lo speed is unknown, defaulting to 1000
[  346.307618][ T3010] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  347.687249][ T5884] Bluetooth: hci4: command 0x0405 tx timeout
[  347.926832][T15295] syz_tun: left allmulticast mode
[  347.932098][T15295] bridge0: port 3(syz_tun) entered disabled state
[  347.942281][T15295] bridge_slave_0: left allmulticast mode
[  347.948187][T15295] bridge_slave_0: left promiscuous mode
[  347.954405][T15295] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.963320][T15295] bridge_slave_1: left allmulticast mode
[  347.970081][T15295] bridge_slave_1: left promiscuous mode
[  347.976614][T15295] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.989489][T15295] team_slave_0: left promiscuous mode
[  348.001131][T15295] team0: Port device team_slave_0 removed
[  348.008120][T15295] team_slave_1: left promiscuous mode
[  348.015401][T15295] team0: Port device team_slave_1 removed
[  348.022099][T15295] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.030475][T15295] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.040926][T15295] bond2: (slave veth7): Releasing active interface
[  348.050849][T15295] bond4: (slave gretap1): Releasing active interface
[  348.058003][T15295] bond4: (slave gretap1): the permanent HWaddr of slave - 52:1f:03:d8:46:61 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  348.075684][T15295] bond4: (slave gretap2): making interface the new active one
[  348.091357][T15295] bond4: (slave gretap2): Releasing active interface
[  348.122255][T15295] team0: Port device bridge4 removed
[  348.154677][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2485'.
[  348.178472][ T5982] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  348.333792][   T74] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  348.358834][   T74] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  348.379390][ T9803] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  348.503617][T15332] delete_channel: no stack
[  348.526889][T15329] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2486'.
[  348.776738][T15344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.114785][ T5982] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  349.457366][T15358] lo speed is unknown, defaulting to 1000
[  349.524081][T15358] lo speed is unknown, defaulting to 1000
[  349.782985][T15377] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  350.130819][T15386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.312895][T15386] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  350.378516][T15384] __nla_validate_parse: 5 callbacks suppressed
[  350.378535][T15384] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2503'.
[  351.468617][T15413] lo speed is unknown, defaulting to 1000
[  351.477320][T15413] lo speed is unknown, defaulting to 1000
[  351.495644][T15414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2511'.
[  352.017785][T15433] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2514'.
[  352.453536][T15438] lo speed is unknown, defaulting to 1000
[  352.466213][T15438] lo speed is unknown, defaulting to 1000
[  352.844182][T15443] lo speed is unknown, defaulting to 1000
[  352.914365][T15443] lo speed is unknown, defaulting to 1000
[  353.095188][T15480] netlink: 'syz.0.2525': attribute type 9 has an invalid length.
[  353.555217][T15495] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2529'.
[  353.621450][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2529'.
[  353.908077][T15504] netlink: 'syz.4.2533': attribute type 61 has an invalid length.
[  354.360544][T15537] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  354.373685][T15537] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  354.385311][T15537] bond9: (slave ipvlan3): Error -95 calling set_mac_address
[  354.419002][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2539'.
[  354.931615][T15562] lo speed is unknown, defaulting to 1000
[  354.983106][T15562] lo speed is unknown, defaulting to 1000
[  355.208790][T15577] lo speed is unknown, defaulting to 1000
[  355.612274][T15591] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  355.750953][T15577] lo speed is unknown, defaulting to 1000
[  355.859260][T15601] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2559'.
[  355.955066][T15607] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2559'.
[  356.059342][T15605] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2559'.
[  356.082471][T15605] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  357.085585][T15650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2570'.
[  357.251839][T15652] lo speed is unknown, defaulting to 1000
[  357.303238][T15652] lo speed is unknown, defaulting to 1000
[  357.828613][T15681] netlink: 'syz.2.2578': attribute type 10 has an invalid length.
[  357.905619][T15681] team0: Device dummy0 failed to register rx_handler
[  357.922000][T15688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2581'.
[  357.931399][T15688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  357.938666][T15688] IPv6: NLM_F_CREATE should be set when creating new route
[  357.946142][T15688] IPv6: NLM_F_CREATE should be set when creating new route
[  357.997531][T15690] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2582'.
[  358.124067][T15698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.724915][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  359.598077][T15697] sit0: entered promiscuous mode
[  359.607141][T15697] netlink: 'syz.1.2585': attribute type 2 has an invalid length.
[  359.659679][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2588'.
[  359.911060][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2595'.
[  359.929226][T15735] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[  359.945116][T15734] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  360.043704][T15735] 8021q: VLANs not supported on caif0
[  360.208602][T15748] netlink: 'syz.3.2603': attribute type 1 has an invalid length.
[  360.256894][T15746] netlink: 'syz.4.2602': attribute type 10 has an invalid length.
[  360.266121][T15746] bond0: (slave wlan1): Opening slave failed
[  360.335645][T15751] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  360.346112][T15760] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  360.362722][T15748] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface
[  360.406655][T15748] bond7 (unregistering): Released all slaves
[  360.500391][T15766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2605'.
[  360.641744][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'.
[  360.658258][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  360.754740][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  360.827437][T15782] can: request_module (can-proto-5) failed.
[  360.920130][T15795] FAULT_INJECTION: forcing a failure.
[  360.920130][T15795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.935289][T15795] CPU: 0 UID: 0 PID: 15795 Comm: syz.0.2616 Not tainted syzkaller #0 PREEMPT(full) 
[  360.935315][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  360.935325][T15795] Call Trace:
[  360.935333][T15795]  <TASK>
[  360.935340][T15795]  dump_stack_lvl+0x189/0x250
[  360.935365][T15795]  ? __pfx____ratelimit+0x10/0x10
[  360.935384][T15795]  ? __pfx_dump_stack_lvl+0x10/0x10
[  360.935404][T15795]  ? __pfx__printk+0x10/0x10
[  360.935426][T15795]  ? __might_fault+0xb0/0x130
[  360.935459][T15795]  should_fail_ex+0x414/0x560
[  360.935488][T15795]  _copy_from_user+0x2d/0xb0
[  360.935509][T15795]  ___sys_sendmsg+0x158/0x2a0
[  360.935533][T15795]  ? __pfx____sys_sendmsg+0x10/0x10
[  360.935590][T15795]  ? __fget_files+0x2a/0x420
[  360.935605][T15795]  ? __fget_files+0x3a0/0x420
[  360.935631][T15795]  __sys_sendmmsg+0x227/0x430
[  360.935657][T15795]  ? __pfx___sys_sendmmsg+0x10/0x10
[  360.935676][T15795]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  360.935721][T15795]  ? ksys_write+0x22a/0x250
[  360.935744][T15795]  ? __pfx_ksys_write+0x10/0x10
[  360.935763][T15795]  ? rcu_is_watching+0x15/0xb0
[  360.935786][T15795]  __x64_sys_sendmmsg+0xa0/0xc0
[  360.935809][T15795]  do_syscall_64+0xfa/0x3b0
[  360.935827][T15795]  ? lockdep_hardirqs_on+0x9c/0x150
[  360.935852][T15795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.935868][T15795]  ? clear_bhb_loop+0x60/0xb0
[  360.935888][T15795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.935904][T15795] RIP: 0033:0x7f61bfd8eec9
[  360.935921][T15795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.935936][T15795] RSP: 002b:00007f61c0bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  360.935954][T15795] RAX: ffffffffffffffda RBX: 00007f61bffe5fa0 RCX: 00007f61bfd8eec9
[  360.935968][T15795] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003
[  360.935979][T15795] RBP: 00007f61c0bc6090 R08: 0000000000000000 R09: 0000000000000000
[  360.935989][T15795] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000001
[  360.936000][T15795] R13: 00007f61bffe6038 R14: 00007f61bffe5fa0 R15: 00007ffd86ffac78
[  360.936030][T15795]  </TASK>
[  361.221270][T15797] __nla_validate_parse: 1 callbacks suppressed
[  361.221289][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2615'.
[  361.257487][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'.
[  361.315359][T15803] dvmrp0: left allmulticast mode
[  361.380599][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2619'.
[  361.408125][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2619'.
[  361.521934][T15815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2618'.
[  361.576360][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'.
[  361.707375][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'.
[  361.759164][T15809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  361.862620][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'.
[  361.895146][   T10] lo speed is unknown, defaulting to 1000
[  361.895201][T15828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2623'.
[  361.909735][   T10] syz2: Port: 1 Link ACTIVE
[  362.071052][T15841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'.
[  362.083870][T15834] lo speed is unknown, defaulting to 1000
[  362.104851][T15834] lo speed is unknown, defaulting to 1000
[  362.842378][T15873] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.264999][ T9802] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  363.287765][ T9802] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  363.298752][T15900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  363.308247][ T9802] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  363.321867][ T9802] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  363.494478][T15914] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  363.878279][T15934] lo speed is unknown, defaulting to 1000
[  363.899417][T15934] lo speed is unknown, defaulting to 1000
[  363.966891][T15946] lo speed is unknown, defaulting to 1000
[  364.017317][T15955] bridge10: entered promiscuous mode
[  364.242757][T15946] lo speed is unknown, defaulting to 1000
[  364.371724][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.401879][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.429425][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.448148][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.459747][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.481083][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.510991][T15977] lo speed is unknown, defaulting to 1000
[  364.518298][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.529319][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.549520][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.647138][T15977] lo speed is unknown, defaulting to 1000
[  364.917514][T15995] netlink: 'syz.2.2663': attribute type 16 has an invalid length.
[  364.927331][T15995] netlink: 'syz.2.2663': attribute type 17 has an invalid length.
[  365.018243][T15992] lo speed is unknown, defaulting to 1000
[  365.062661][T15992] lo speed is unknown, defaulting to 1000
[  365.727269][T16010] netlink: 'syz.0.2667': attribute type 13 has an invalid length.
[  365.929823][T16010] tipc: Resetting bearer <eth:syzkaller0>
[  365.962291][ T9803] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.972837][ T9803] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.992347][ T9803] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.022136][ T9803] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.210928][T16023] netlink: 'syz.0.2669': attribute type 6 has an invalid length.
[  366.218626][T16026] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  366.568169][T16056] FAULT_INJECTION: forcing a failure.
[  366.568169][T16056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  366.581705][T16056] CPU: 1 UID: 0 PID: 16056 Comm: syz.3.2679 Not tainted syzkaller #0 PREEMPT(full) 
[  366.581730][T16056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  366.581745][T16056] Call Trace:
[  366.581752][T16056]  <TASK>
[  366.581760][T16056]  dump_stack_lvl+0x189/0x250
[  366.581784][T16056]  ? __pfx____ratelimit+0x10/0x10
[  366.581803][T16056]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.581822][T16056]  ? __pfx__printk+0x10/0x10
[  366.581844][T16056]  ? __might_fault+0xb0/0x130
[  366.581878][T16056]  should_fail_ex+0x414/0x560
[  366.581906][T16056]  _copy_from_user+0x2d/0xb0
[  366.581928][T16056]  ___sys_sendmsg+0x158/0x2a0
[  366.581953][T16056]  ? __pfx____sys_sendmsg+0x10/0x10
[  366.582012][T16056]  ? __fget_files+0x2a/0x420
[  366.582027][T16056]  ? __fget_files+0x3a0/0x420
[  366.582052][T16056]  __x64_sys_sendmsg+0x19b/0x260
[  366.582075][T16056]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  366.582107][T16056]  ? __pfx_ksys_write+0x10/0x10
[  366.582125][T16056]  ? rcu_is_watching+0x15/0xb0
[  366.582148][T16056]  ? do_syscall_64+0xbe/0x3b0
[  366.582170][T16056]  do_syscall_64+0xfa/0x3b0
[  366.582187][T16056]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.582204][T16056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.582220][T16056]  ? clear_bhb_loop+0x60/0xb0
[  366.582241][T16056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.582261][T16056] RIP: 0033:0x7fa2b278eec9
[  366.582277][T16056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.582291][T16056] RSP: 002b:00007fa2b35b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  366.582310][T16056] RAX: ffffffffffffffda RBX: 00007fa2b29e5fa0 RCX: 00007fa2b278eec9
[  366.582323][T16056] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  366.582334][T16056] RBP: 00007fa2b35b2090 R08: 0000000000000000 R09: 0000000000000000
[  366.582345][T16056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  366.582355][T16056] R13: 00007fa2b29e6038 R14: 00007fa2b29e5fa0 R15: 00007ffd14d180e8
[  366.582386][T16056]  </TASK>
[  366.940386][T16066] __nla_validate_parse: 75 callbacks suppressed
[  366.940404][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2684'.
[  367.064424][T16074] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2686'.
[  367.152299][T16075] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2685'.
[  367.197708][T16075] netlink: 'syz.4.2685': attribute type 39 has an invalid length.
[  367.246667][T16086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2690'.
[  367.254031][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2689'.
[  367.373265][T16093] FAULT_INJECTION: forcing a failure.
[  367.373265][T16093] name failslab, interval 1, probability 0, space 0, times 0
[  367.407576][T16093] CPU: 0 UID: 0 PID: 16093 Comm: syz.3.2692 Not tainted syzkaller #0 PREEMPT(full) 
[  367.407601][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  367.407611][T16093] Call Trace:
[  367.407618][T16093]  <TASK>
[  367.407626][T16093]  dump_stack_lvl+0x189/0x250
[  367.407650][T16093]  ? __pfx____ratelimit+0x10/0x10
[  367.407668][T16093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.407686][T16093]  ? __pfx__printk+0x10/0x10
[  367.407712][T16093]  ? __pfx___might_resched+0x10/0x10
[  367.407734][T16093]  should_fail_ex+0x414/0x560
[  367.407761][T16093]  should_failslab+0xa8/0x100
[  367.407783][T16093]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  367.407805][T16093]  ? __alloc_skb+0x112/0x2d0
[  367.407827][T16093]  __alloc_skb+0x112/0x2d0
[  367.407850][T16093]  netlink_sendmsg+0x5c6/0xb30
[  367.407879][T16093]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.407900][T16093]  ? aa_sock_msg_perm+0xf1/0x1d0
[  367.407919][T16093]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  367.407936][T16093]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.407957][T16093]  __sock_sendmsg+0x21c/0x270
[  367.407975][T16093]  ____sys_sendmsg+0x505/0x830
[  367.408000][T16093]  ? __pfx_____sys_sendmsg+0x10/0x10
[  367.408027][T16093]  ? import_iovec+0x74/0xa0
[  367.408049][T16093]  ___sys_sendmsg+0x21f/0x2a0
[  367.408071][T16093]  ? __pfx____sys_sendmsg+0x10/0x10
[  367.408127][T16093]  ? __fget_files+0x2a/0x420
[  367.408142][T16093]  ? __fget_files+0x3a0/0x420
[  367.408167][T16093]  __x64_sys_sendmsg+0x19b/0x260
[  367.408191][T16093]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  367.408220][T16093]  ? __pfx_ksys_write+0x10/0x10
[  367.408238][T16093]  ? rcu_is_watching+0x15/0xb0
[  367.408260][T16093]  ? do_syscall_64+0xbe/0x3b0
[  367.408283][T16093]  do_syscall_64+0xfa/0x3b0
[  367.408299][T16093]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.408315][T16093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.408331][T16093]  ? clear_bhb_loop+0x60/0xb0
[  367.408351][T16093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.408367][T16093] RIP: 0033:0x7fa2b278eec9
[  367.408384][T16093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.408406][T16093] RSP: 002b:00007fa2b35b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.408425][T16093] RAX: ffffffffffffffda RBX: 00007fa2b29e5fa0 RCX: 00007fa2b278eec9
[  367.408438][T16093] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  367.408449][T16093] RBP: 00007fa2b35b2090 R08: 0000000000000000 R09: 0000000000000000
[  367.408459][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.408470][T16093] R13: 00007fa2b29e6038 R14: 00007fa2b29e5fa0 R15: 00007ffd14d180e8
[  367.408500][T16093]  </TASK>
[  367.969329][T16099] lo speed is unknown, defaulting to 1000
[  368.009406][T16099] lo speed is unknown, defaulting to 1000
[  368.094773][T16109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2696'.
[  368.131932][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'.
[  368.155539][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'.
[  368.218217][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'.
[  368.332417][T16123] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2703'.
[  369.117851][T16153] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.207206][T16153] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.293548][T16153] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.405984][T16153] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.503505][T16176] netlink: 'syz.0.2718': attribute type 4 has an invalid length.
[  369.563777][ T9803] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  369.612101][ T9803] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  369.652507][ T9803] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  369.702280][ T9796] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  370.065018][T16200] net_ratelimit: 57 callbacks suppressed
[  370.065037][T16200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.129569][T16208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.481005][T16228] lo speed is unknown, defaulting to 1000
[  370.489463][T16228] lo speed is unknown, defaulting to 1000
[  370.850788][ T9796] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  370.882265][ T9796] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  370.912679][ T9796] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  370.940354][ T9796] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  372.936679][T16240] lo speed is unknown, defaulting to 1000
[  372.942566][T16257] pimreg: tun_chr_ioctl cmd 2148553947
[  372.964809][T16262] vlan0: entered allmulticast mode
[  372.970074][T16262] bridge_slave_0: entered allmulticast mode
[  372.991344][T16265] ip6erspan0: entered promiscuous mode
[  372.997813][T16265] ip6erspan0: entered allmulticast mode
[  373.005325][T16270] C: renamed from team_slave_0
[  373.013074][T16270] netlink: 'syz.1.2740': attribute type 2 has an invalid length.
[  373.021771][T16270] __nla_validate_parse: 9 callbacks suppressed
[  373.021790][T16270] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2740'.
[  373.039955][T16270] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  373.090181][T16240] lo speed is unknown, defaulting to 1000
[  373.291470][T16275] lo speed is unknown, defaulting to 1000
[  373.501520][T16275] lo speed is unknown, defaulting to 1000
[  373.803023][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2749'.
[  373.993793][T16300] netlink: 'syz.0.2750': attribute type 1 has an invalid length.
[  374.270675][T16309] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  374.356373][T16313] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  374.539202][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2755'.
[  374.559004][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'.
[  375.687337][T16356] lo speed is unknown, defaulting to 1000
[  375.695648][T16356] lo speed is unknown, defaulting to 1000
[  375.712668][T16375] netlink: 'syz.4.2768': attribute type 2 has an invalid length.
[  376.107009][T16390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2772'.
[  376.357160][   T10] lo speed is unknown, defaulting to 1000
[  376.371828][T16388] macvlan0: entered promiscuous mode
[  376.384486][   T10] syz2: Port: 1 Link DOWN
[  376.396142][T16388] batadv0: entered promiscuous mode
[  376.413415][T16388] debugfs: 'hsr1' already exists in 'hsr'
[  376.420909][T16388] Cannot create hsr debugfs directory
[  376.427591][T16388] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  376.438728][T16388] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  376.451074][T16388] hsr1: entered allmulticast mode
[  376.457092][T16388] macvlan0: entered allmulticast mode
[  376.462956][T16388] batadv0: entered allmulticast mode
[  376.486580][T16388] macvlan0: left promiscuous mode
[  376.493922][T16388] batadv0: left promiscuous mode
[  376.595188][T16375] ‏: entered promiscuous mode
[  376.606275][T16401] !
: renamed from dummy0 (while UP)
[  376.682339][   T74] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.733524][   T74] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.852667][   T74] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.872447][   T74] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.918287][T16409] lo speed is unknown, defaulting to 1000
[  376.931800][T16409] lo speed is unknown, defaulting to 1000
[  376.968989][T16447] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2779'.
[  377.086094][T16452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2780'.
[  377.136496][T16454] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  377.170810][T16454] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  377.970102][T16473] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.2786'.
[  378.195396][T16482] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2789'.
[  378.240981][T16471] netlink: 'syz.0.2786': attribute type 10 has an invalid length.
[  378.557977][T16489] IPv6: sit1: Disabled Multicast RS
[  378.708953][T16498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2795'.
[  378.712763][T16496] netlink: 'syz.0.2793': attribute type 29 has an invalid length.
[  378.732848][T16496] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2793'.
[  378.749528][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2793'.
[  378.766628][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2793'.
[  378.828134][T16498] netlink: 'syz.3.2795': attribute type 32 has an invalid length.
[  378.830404][T16507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2797'.
[  379.001449][T16520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2800'.
[  379.128222][T16527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2801'.
[  380.070816][T16553] netlink: 'syz.2.2808': attribute type 10 has an invalid length.
[  380.352867][T16566] lo speed is unknown, defaulting to 1000
[  380.390653][T16566] lo speed is unknown, defaulting to 1000
[  380.738543][T16588] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  380.794091][T16592] openvswitch: netlink: IP tunnel TTL not specified.
[  381.498835][T16631] lo speed is unknown, defaulting to 1000
[  381.544658][T16631] lo speed is unknown, defaulting to 1000
[  381.671077][T16636] lo speed is unknown, defaulting to 1000
[  381.763860][T16656] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2833'.
[  381.875285][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'.
[  381.904057][T16661] IPVS: Error connecting to the multicast addr
[  381.998038][T16668] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[  382.012385][T16665] lo speed is unknown, defaulting to 1000
[  382.113445][T16668] 8021q: adding VLAN 0 to HW filter on device bond6
[  382.147479][T16636] lo speed is unknown, defaulting to 1000
[  382.162589][T16681] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  382.221801][T16673] bond6: (slave veth7): Enslaving as an active interface with a down link
[  382.262621][T16679] gretap1: entered promiscuous mode
[  382.286228][T16679] bond6: (slave gretap1): making interface the new active one
[  382.308518][T16679] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  382.327057][T16669] lo speed is unknown, defaulting to 1000
[  382.374110][T16668] macvlan2: entered promiscuous mode
[  382.393833][T16668] macvlan2: entered allmulticast mode
[  382.419903][T16668] bond6: entered promiscuous mode
[  382.436893][T16668] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  382.454362][T16668] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  382.483079][T16668] bond6: left promiscuous mode
[  382.551434][T16678] ==================================================================
[  382.555678][T16665] lo speed is unknown, defaulting to 1000
[  382.559534][T16678] BUG: KASAN: use-after-free in __xfrm_state_insert+0x8af/0x1450
[  382.559569][T16678] Read of size 1 at addr ffff88805a953a70 by task syz.2.2838/16678
[  382.580856][T16678] 
[  382.583177][T16678] CPU: 0 UID: 0 PID: 16678 Comm: syz.2.2838 Not tainted syzkaller #0 PREEMPT(full) 
[  382.583212][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  382.583229][T16678] Call Trace:
[  382.583236][T16678]  <TASK>
[  382.583244][T16678]  dump_stack_lvl+0x189/0x250
[  382.583262][T16678]  ? __kasan_check_byte+0x12/0x40
[  382.583283][T16678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.583297][T16678]  ? lock_release+0x4b/0x3e0
[  382.583320][T16678]  ? __virt_addr_valid+0x4a5/0x5c0
[  382.583338][T16678]  print_report+0xca/0x240
[  382.583350][T16678]  ? __xfrm_state_insert+0x8af/0x1450
[  382.583368][T16678]  kasan_report+0x118/0x150
[  382.583386][T16678]  ? __xfrm_state_insert+0x8af/0x1450
[  382.583406][T16678]  __xfrm_state_insert+0x8af/0x1450
[  382.583427][T16678]  ? xfrm_state_insert+0x44/0x60
[  382.583446][T16678]  xfrm_state_insert+0x54/0x60
[  382.583463][T16678]  ipcomp6_init_state+0x655/0x900
[  382.583484][T16678]  __xfrm_init_state+0xa73/0x13f0
[  382.583496][T16678]  ? __xfrm_init_state+0x7ef/0x13f0
[  382.583511][T16678]  xfrm_init_state+0x18/0xa0
[  382.583529][T16678]  pfkey_add+0x1d38/0x2e00
[  382.583553][T16678]  ? __pfx_pfkey_add+0x10/0x10
[  382.583567][T16678]  ? kmem_cache_free+0x18f/0x400
[  382.583589][T16678]  pfkey_sendmsg+0xbfe/0x1090
[  382.583610][T16678]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  382.583636][T16678]  ? aa_sock_msg_perm+0xf1/0x1d0
[  382.583650][T16678]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  382.583664][T16678]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  382.583680][T16678]  __sock_sendmsg+0x21c/0x270
[  382.583694][T16678]  ____sys_sendmsg+0x52d/0x830
[  382.583714][T16678]  ? __pfx_____sys_sendmsg+0x10/0x10
[  382.583734][T16678]  ? import_iovec+0x74/0xa0
[  382.583751][T16678]  ___sys_sendmsg+0x21f/0x2a0
[  382.583768][T16678]  ? __pfx____sys_sendmsg+0x10/0x10
[  382.583802][T16678]  ? __fget_files+0x2a/0x420
[  382.583813][T16678]  ? __fget_files+0x3a0/0x420
[  382.583828][T16678]  __sys_sendmmsg+0x227/0x430
[  382.583845][T16678]  ? __pfx___sys_sendmmsg+0x10/0x10
[  382.583860][T16678]  ? do_futex+0x395/0x420
[  382.583880][T16678]  ? fdget+0x184/0x1e0
[  382.583898][T16678]  ? rcu_is_watching+0x15/0xb0
[  382.583914][T16678]  __x64_sys_sendmmsg+0xa0/0xc0
[  382.583930][T16678]  do_syscall_64+0xfa/0x3b0
[  382.583944][T16678]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.583959][T16678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.583972][T16678]  ? clear_bhb_loop+0x60/0xb0
[  382.583987][T16678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.584000][T16678] RIP: 0033:0x7f2e0f98eec9
[  382.584014][T16678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.584026][T16678] RSP: 002b:00007f2e108c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  382.584041][T16678] RAX: ffffffffffffffda RBX: 00007f2e0fbe6090 RCX: 00007f2e0f98eec9
[  382.584052][T16678] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000004
[  382.584061][T16678] RBP: 00007f2e0fa11f91 R08: 0000000000000000 R09: 0000000000000000
[  382.584070][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.584079][T16678] R13: 00007f2e0fbe6128 R14: 00007f2e0fbe6090 R15: 00007ffe74fc7568
[  382.584096][T16678]  </TASK>
[  382.584101][T16678] 
[  382.896407][T16678] The buggy address belongs to the physical page:
[  382.902827][T16678] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a953
[  382.911588][T16678] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  382.918687][T16678] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  382.927256][T16678] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  382.935822][T16678] page dumped because: kasan: bad access detected
[  382.942220][T16678] page_owner tracks the page as freed
[  382.947564][T16678] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14609, tgid 14608 (syz.0.2287), ts 330438241354, free_ts 378336026589
[  382.969080][T16678]  post_alloc_hook+0x240/0x2a0
[  382.973836][T16678]  get_page_from_freelist+0x21e4/0x22c0
[  382.979363][T16678]  __alloc_frozen_pages_noprof+0x181/0x370
[  382.985151][T16678]  alloc_pages_mpol+0x232/0x4a0
[  382.989986][T16678]  allocate_slab+0x8a/0x370
[  382.994471][T16678]  ___slab_alloc+0xbeb/0x1420
[  382.999138][T16678]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[  383.005014][T16678]  kmalloc_reserve+0xbd/0x290
[  383.009678][T16678]  __alloc_skb+0x142/0x2d0
[  383.014074][T16678]  alloc_uevent_skb+0x7d/0x230
[  383.018826][T16678]  kobject_uevent_net_broadcast+0x184/0x560
[  383.024702][T16678]  kobject_uevent_env+0x55b/0x8c0
[  383.029709][T16678]  net_rx_queue_update_kobjects+0x3e5/0x740
[  383.035589][T16678]  netdev_register_kobject+0x21f/0x310
[  383.041031][T16678]  register_netdevice+0x126c/0x1ae0
[  383.046216][T16678]  __ip_tunnel_create+0x3e7/0x560
[  383.051224][T16678] page last free pid 9802 tgid 9802 stack trace:
[  383.057534][T16678]  __free_frozen_pages+0xbc4/0xd30
[  383.062631][T16678]  __slab_free+0x303/0x3c0
[  383.067028][T16678]  qlist_free_all+0x97/0x140
[  383.071603][T16678]  kasan_quarantine_reduce+0x148/0x160
[  383.077043][T16678]  __kasan_slab_alloc+0x22/0x80
[  383.081876][T16678]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  383.087321][T16678]  security_inode_alloc+0x39/0x330
[  383.092416][T16678]  inode_init_always_gfp+0x9ed/0xdc0
[  383.097683][T16678]  alloc_inode+0x82/0x1b0
[  383.101996][T16678]  __sock_create+0x12d/0x9f0
[  383.106567][T16678]  rds_tcp_conn_path_connect+0x282/0x680
[  383.112181][T16678]  rds_connect_worker+0x1d5/0x290
[  383.117190][T16678]  process_scheduled_works+0xae1/0x17b0
[  383.122716][T16678]  worker_thread+0x8a0/0xda0
[  383.127286][T16678]  kthread+0x70e/0x8a0
[  383.131338][T16678]  ret_from_fork+0x439/0x7d0
[  383.135913][T16678] 
[  383.138216][T16678] Memory state around the buggy address:
[  383.143825][T16678]  ffff88805a953900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  383.151867][T16678]  ffff88805a953980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  383.159914][T16678] >ffff88805a953a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  383.167957][T16678]                                                              ^
[  383.175649][T16678]  ffff88805a953a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  383.183691][T16678]  ffff88805a953b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  383.191728][T16678] ==================================================================
[  383.199913][T16678] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  383.207111][T16678] CPU: 0 UID: 0 PID: 16678 Comm: syz.2.2838 Not tainted syzkaller #0 PREEMPT(full) 
[  383.216483][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  383.226529][T16678] Call Trace:
[  383.229802][T16678]  <TASK>
[  383.232722][T16678]  dump_stack_lvl+0x99/0x250
[  383.237319][T16678]  ? __asan_memcpy+0x40/0x70
[  383.241896][T16678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.247079][T16678]  ? __pfx__printk+0x10/0x10
[  383.251667][T16678]  vpanic+0x281/0x750
[  383.255634][T16678]  ? __pfx_vpanic+0x10/0x10
[  383.260123][T16678]  ? irqentry_exit+0x74/0x90
[  383.264703][T16678]  panic+0xb9/0xc0
[  383.268411][T16678]  ? __pfx_panic+0x10/0x10
[  383.272811][T16678]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  383.278691][T16678]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  383.284580][T16678]  ? __xfrm_state_insert+0x8af/0x1450
[  383.289938][T16678]  check_panic_on_warn+0x89/0xb0
[  383.295383][T16678]  ? __xfrm_state_insert+0x8af/0x1450
[  383.300750][T16678]  end_report+0x78/0x160
[  383.304988][T16678]  kasan_report+0x129/0x150
[  383.309480][T16678]  ? __xfrm_state_insert+0x8af/0x1450
[  383.314840][T16678]  __xfrm_state_insert+0x8af/0x1450
[  383.320029][T16678]  ? xfrm_state_insert+0x44/0x60
[  383.324957][T16678]  xfrm_state_insert+0x54/0x60
[  383.329710][T16678]  ipcomp6_init_state+0x655/0x900
[  383.334725][T16678]  __xfrm_init_state+0xa73/0x13f0
[  383.339733][T16678]  ? __xfrm_init_state+0x7ef/0x13f0
[  383.344915][T16678]  xfrm_init_state+0x18/0xa0
[  383.349492][T16678]  pfkey_add+0x1d38/0x2e00
[  383.353905][T16678]  ? __pfx_pfkey_add+0x10/0x10
[  383.358654][T16678]  ? kmem_cache_free+0x18f/0x400
[  383.363587][T16678]  pfkey_sendmsg+0xbfe/0x1090
[  383.368256][T16678]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  383.373364][T16678]  ? aa_sock_msg_perm+0xf1/0x1d0
[  383.378287][T16678]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  383.383556][T16678]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  383.388655][T16678]  __sock_sendmsg+0x21c/0x270
[  383.393317][T16678]  ____sys_sendmsg+0x52d/0x830
[  383.398071][T16678]  ? __pfx_____sys_sendmsg+0x10/0x10
[  383.403346][T16678]  ? import_iovec+0x74/0xa0
[  383.407836][T16678]  ___sys_sendmsg+0x21f/0x2a0
[  383.412500][T16678]  ? __pfx____sys_sendmsg+0x10/0x10
[  383.417695][T16678]  ? __fget_files+0x2a/0x420
[  383.422265][T16678]  ? __fget_files+0x3a0/0x420
[  383.426926][T16678]  __sys_sendmmsg+0x227/0x430
[  383.431591][T16678]  ? __pfx___sys_sendmmsg+0x10/0x10
[  383.436780][T16678]  ? do_futex+0x395/0x420
[  383.441102][T16678]  ? fdget+0x184/0x1e0
[  383.445161][T16678]  ? rcu_is_watching+0x15/0xb0
[  383.449913][T16678]  __x64_sys_sendmmsg+0xa0/0xc0
[  383.454753][T16678]  do_syscall_64+0xfa/0x3b0
[  383.459246][T16678]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.464424][T16678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.470475][T16678]  ? clear_bhb_loop+0x60/0xb0
[  383.475138][T16678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.481012][T16678] RIP: 0033:0x7f2e0f98eec9
[  383.485410][T16678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  383.504998][T16678] RSP: 002b:00007f2e108c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  383.513402][T16678] RAX: ffffffffffffffda RBX: 00007f2e0fbe6090 RCX: 00007f2e0f98eec9
[  383.521359][T16678] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000004
[  383.529320][T16678] RBP: 00007f2e0fa11f91 R08: 0000000000000000 R09: 0000000000000000
[  383.537289][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.545245][T16678] R13: 00007f2e0fbe6128 R14: 00007f2e0fbe6090 R15: 00007ffe74fc7568
[  383.553209][T16678]  </TASK>
[  383.556353][T16678] Kernel Offset: disabled
[  383.560657][T16678] Rebooting in 86400 seconds..