last executing test programs:

4.460714804s ago: executing program 2 (id=2774):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100003040000000000000001"], 0x3c}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x80002, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000000000400200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
sendmmsg$inet6(r5, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100), 0xffffffae}], 0x1}}], 0x1, 0x4000)
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x70bd27, 0xffffffff, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}}}]}, 0x38}}, 0xc4c4)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000a6a69dfd176ca85de8288bb19d0116e50500000000000000c54f589186c43e000d98fc3c562498f44ea9acc711e6ad8af208aeb2d763", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25030000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44854)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r11)
read(r5, &(0x7f0000000480)=""/189, 0xbd)
setsockopt(r5, 0x4, 0x9, &(0x7f0000000340)="96b2f5bd2933ded6a6b1f95bce2189b20719212ee3a5d92aae9fb95649b165295a17c549c0bf079f1dc77f82c30135c2e445921ff913c48d950d91590cd0abaaf78e468b4a3b95bbb28d7737d1eca1635d2d4b19eec4d6f7d7c038323ff78d116f15658949be27b0abc0851b8ebd98ef3dda3f7799f13b2c86165ba1fde76547f3749ebb5c22e345", 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r12, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044011}, 0x20004080)

3.430185375s ago: executing program 2 (id=2786):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="a679232f1000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01040000000000000000010000000900010073797a30000000000000048000000300697036677265746170300000000000000000030076657468315f746f5f687372000000002c000000060a010400000000000000000100000108000b4000000000040004800900010073797a3000000000140000001100010000000000000000000000000a63a46d993f5d1d1ad1b2c4a23a3b9b0348fe140969987a0854a5da46ddb1466f7e617ddcb1e8ee86f1ffd46ea7e5abfbf7684b32e691091de4b98f8d43ef7ea3db6b95f67b7708766246ec12c64490c2fc18dadcaaa8cdc754f450b7fa3140cf6b86315696dd7422cd6e25cabdce7f0be2c272ff9f66e32ac6766a9d207fb9a842656235dda6e0a208e1b69d45d6560327213ac54e01636aecc61e1e9507ff5db29337043e2c2c01602aa7256110abd5d0007ea2ddf34c5af6ad02393167da95c10e"], 0xa0}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100100009000000050000004100000041f1085f0cd7fe4b846de214f0c42f422cf5c36f557ba91bb5b5dc870df0057815043df57de2e96dbb8ec7542edb4b7a89a25f3e675956fb4e734da8360eac11e9bb3018ef228bac0d6b4fcaca6ef908f98856c0d9a226da6c8dab3de0ad4d67ce247d26d1470b218649ccd02ef6653108122a6fd4a55c6d0487948485c9675e058dc761a2f890f071b89f65091e39fe4192da0eddb6c3c15144db46983d54a126718392b6c5c14c5fb2e6b37b5ba1d071306b23d2b119ec530bbdba9555ee0f4f8b0783552e81de17360160", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), 0x0}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x8, 0x300000, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x7, 0xe000000, 0x6}})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x25, &(0x7f0000000a00)=ANY=[@ANYBLOB="03a05a0008fb0000181200a7", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x2}, 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r4, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004", @ANYBLOB="ec01d5c5f595b7d4e5540c71f2d53e89af289196d9646d4a9812b2eadc7d9b6fb9e6812dda7619892ce031b7ccd700df84114a337236f0dc86589053e3f78150144765a6fc5164ca078a7f4ce25f3c809f2c399ef030d9aaca9c45cdffa3c5833f7152de9ffec778901afb7ca68fc270cf31"], 0x0, 0x26, 0x0, 0x2, 0xe20}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x22, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0x20, 0x10}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x82}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x44}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x5, 0x21, &(0x7f0000000900)=""/33, 0x41000, 0x4, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x9, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000d00)=[{0x5, 0x4, 0x9, 0x4}, {0x1, 0x5, 0xf, 0x2}, {0x0, 0x5, 0x9, 0x6}, {0x0, 0x4, 0xc, 0xb}, {0x3, 0x4, 0x0, 0x6}, {0x5, 0x2, 0xd, 0x2}], 0x10, 0x3}, 0x94)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
write(r9, &(0x7f0000000040)="cb", 0xfffffdef)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000340))

3.050846192s ago: executing program 4 (id=2788):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x42c, 0x3f3, 0x10, 0x70bd27, 0x25dfdbfe, {0x4, 0x1, 0x11, [0x5, 0x1, 0x9, 0x2a5, 0x80, 0x2, 0x7, 0x1, 0x5, 0xfffff800, 0x8, 0xffffffff, 0x7, 0x80, 0x2, 0x0, 0x4, 0x6, 0x1, 0x0, 0x1000, 0xb0, 0xf39b, 0xfffff273, 0xffc00000, 0xf, 0x3, 0xfffffffa, 0xb3fe, 0x80, 0x98, 0x9, 0x1, 0x7f, 0x7fb6, 0x5, 0x2, 0x3, 0x7, 0x1, 0x8001, 0xb0, 0x7fffffff, 0xfff, 0x7fff, 0x3, 0x7, 0x1, 0x9, 0x800, 0x10000, 0x101, 0x0, 0xde, 0x3ff, 0x5, 0x7, 0xfffffffd, 0xa10, 0xf32, 0x0, 0x2, 0x0, 0x2], [0x81, 0x6, 0xe194, 0x6, 0x7, 0x10001, 0x369e, 0x3, 0x4, 0xbd9, 0xc, 0x7, 0x40, 0x9, 0x80000000, 0x1, 0x4, 0x8, 0xe0, 0x5, 0x5, 0x6, 0xffffffff, 0x8001, 0xba50, 0x5, 0x840, 0xf, 0xc121, 0x0, 0x7fffffff, 0x7, 0x6, 0x2, 0xa60, 0x5e, 0x20, 0x5, 0xa740, 0x6fae, 0x7, 0xae, 0x5, 0xff, 0x11, 0x3184, 0x1, 0x2, 0x9, 0x3, 0x1, 0x1ff, 0xc, 0x3, 0x7, 0x3, 0x9b, 0x10001, 0x4, 0x80000000, 0x8, 0x1, 0x211, 0x9], [0x9, 0xbe2, 0x0, 0x7fff, 0x9, 0x5, 0x7, 0x1, 0x7, 0x8, 0x101, 0x8, 0x3, 0x8, 0x9, 0x9, 0xfffffff7, 0x5, 0x71, 0x43, 0xfffffffc, 0x4, 0x1, 0x87b0, 0x5, 0x1, 0x4, 0x8, 0x0, 0x81, 0x7, 0x4, 0x2, 0x8f, 0x1000, 0x5, 0x0, 0x3, 0xffffffff, 0x9, 0x4, 0xb, 0xa49f, 0x800, 0x1, 0x1ffe0, 0x1, 0xffffffff, 0x1ca, 0x1, 0xfffffff5, 0x7, 0x8, 0x4, 0x6e, 0x2, 0x7fff, 0x0, 0x1, 0x2, 0x10, 0x10000, 0x2a8], [0xe, 0x4, 0x5, 0xfffffff9, 0x5, 0x5, 0x400, 0x401, 0x17c, 0x3, 0x3, 0x3ae0, 0x6b7, 0x9, 0x4, 0x363a62cd, 0x6189, 0x6, 0x0, 0xe00000, 0xe6, 0x2, 0x7, 0xe, 0xf, 0x5, 0xffff8000, 0xc, 0x9, 0x0, 0x81, 0x4, 0x5, 0x6, 0xfffffffb, 0xf8a4, 0x9d5d, 0x6, 0x777, 0x9, 0x7, 0x2, 0x1, 0x200, 0x2, 0x8, 0x4, 0xa, 0x3, 0x100, 0xc, 0x70, 0x8, 0x8, 0x10000, 0x3, 0x6, 0x9, 0x7, 0x1, 0x6, 0x1, 0x8, 0x3d86e0bb], 0xa, ['*:]&\x00', ':@,{\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xad}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x604c001)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x8, 0x9, 0x0, 0x1040, r1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000880)={0x7, 0x3, 0x0, 0x40, 0xfffff34c, 0x2, 0x5, 0x4}, &(0x7f00000008c0)=0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000a40))
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000bc0)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000dc0)={{r7, 0x3, 0x4, 0x3, 0x7, 0xc, 0x3344, 0x6, 0x0, 0x6, 0x8, 0x0, 0xd, 0x7e60, 0x97}})
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x74, r8, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xf}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r8, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x20040090)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r1)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2d8, r10, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x629}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47b}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x221}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff286}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x839}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6b}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfcd3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x512}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1662}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff9e5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x246f6e91}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x75}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x43}]}]}, 0x2d8}}, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r1)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x100)
gettid()
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x17, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0xe, 0x9, 0x3, 0x3, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8936}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000001740)='GPL\x00', 0x6, 0x15, &(0x7f0000001780)=""/21, 0x40f00, 0x23, '\x00', r3, 0x25, r1, 0x8, &(0x7f00000017c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x0, 0x9, 0x42d1f4c3, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001840)=[r2], &(0x7f0000001880)=[{0x2, 0x4, 0x7}, {0x5, 0x4, 0x10, 0x4}, {0x5, 0x3, 0xf, 0x5}, {0x1, 0x2, 0x9, 0x1}, {0x1, 0x2, 0xd, 0x8}, {0x2, 0x2, 0xa, 0x7}, {0x3, 0x2, 0xb, 0xa}, {0x4, 0x5, 0x2}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={r12, 0x0, 0xf4, 0xb7, &(0x7f00000019c0)="1317ab33b3221b075dff6e2b145a4b25320d88599cfc7f6df3a69ecd3598a213fc284c48d357cc2c1b1afc4c71be58045532e43a83f469bd97c2d987ecdd551fe8f915a9dc21b49c550b24a369fc671c26a4cb74e8c9260b01d7ee3c102bcf0cc05b5f6d75064e29e030b68401f34589e0932fea9532ced21eaa654bc509da380a3d2484d32e00731ce0d12ca5d41a59fca5039a2d5bf42ff0b612ef8b508f2f3bff9021dd01ff92513f7f057518aedd18a47280e5a34bcc385bb0a3ceada2db05b179bd63266cb2183dda3f5deb6dd1474973c2067d248d76b9f7f6a49d3e2fcb7ca2d169863d98abdebca16ade013de27c6b3b", &(0x7f0000001ac0)=""/183, 0x62, 0x0, 0x0, 0xfe, &(0x7f0000001b80), &(0x7f0000001bc0)="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", 0x5, 0x0, 0x2}, 0x50)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004884)

2.891012576s ago: executing program 4 (id=2789):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}}, 0x20040054)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000001000)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180))
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000011c0)=<r3=>0x0, &(0x7f0000001280)=0x4)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001300)={0x3c, 0x0, 0x200, 0x2, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x3c}}, 0x20040000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

2.823234788s ago: executing program 0 (id=2790):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000170001030000000000000000000600054e2300000000000000000000810000000000000001000000fdffffff00000100000000", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfedeff"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)

2.794609483s ago: executing program 0 (id=2791):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000))
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108)

2.687052083s ago: executing program 0 (id=2793):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async)
listen(r0, 0xb) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x25, 0x14, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async)
unshare(0x400)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) (async)
close(0x3)

2.579452537s ago: executing program 0 (id=2794):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc)
getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000)
getsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, &(0x7f0000000080))
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x2, 0x40}, 0x100, './file0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0xffff, 0x3, 0x7fff})
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid_for_children\x00')
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x4d46a000)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="080096000a000200aaaaaaaaaac000000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={0x0, 0x2e, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000003070101000000000000000005000003ad805f4f5b5b2635625eae8787465e5fdd4d55272b0408990462e443da7c57cf280c08c2f158faa2b6a53e6050300bf9e563a3d6616f1667f11e8d2788e48915d09974a13b68843b28714790f3cc8b5ff6ea2c57302afc79d80b4f223c25320962fc97c3ec21b43ea07e2247359daa3f223aab4bca38c0642314cb349c1a56b3281e"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x810)

2.399122797s ago: executing program 4 (id=2796):
socket$inet6(0xa, 0x1, 0x0) (async)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002680)={@ipv4={'\x00', '\xff\xff', @remote}, 0xb, 0x2, 0x1, 0xb, 0x0, 0xd}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002680)={@ipv4={'\x00', '\xff\xff', @remote}, 0xb, 0x2, 0x1, 0xb, 0x0, 0xd}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x303}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000100)=""/189, 0xbd, 0x0, &(0x7f0000000840)=""/170, 0xaa}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000100)=""/189, 0xbd, <r3=>0x0, &(0x7f0000000840)=""/170, 0xaa}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x200000000000010f, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

2.269985095s ago: executing program 4 (id=2798):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x2d6, 0x0, 0xec67}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b700009500"/71], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000019580)=ANY=[@ANYBLOB="fc0100001900010000000000ffdbdf2500000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000000000000039b44abe7afa694ccd38243e704763b2a6f9b5c3c779990c9ba721d3a0bf2030e2a5da", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000004d63300000000000000000000000000000000000000000000000000000000000000100000000000000044000000fe8000000000000000000000000000bb000000003c00000002000000fe8000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000000000000e0000001000000000000000000000000000000000000000000000000000000000000000020010000000000000000000000000002000000006c00000000000000fe8800000000000000000000000000010000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000033000000027a000000000000000000000000ffffffffffff000000000100fe00"/436], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r7 = socket(0x2c, 0x2, 0x2)
getsockopt(r7, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000197c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000020000000900010073797a30000000005400000003000000000000020000000900010073797a30000000000900030073797a30000000002800048003000140000000030800014000d68de769ea8a11a7f83e0ff8458410b732ca438d839b0e7c390000001400030076657468305f746f5f626f6e660000001400000011000100000000000000"], 0x9c}}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
socket$l2tp6(0xa, 0x2, 0x73)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
read(r4, &(0x7f0000000000)=""/31, 0x1f)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000340)="4700000001003f", 0x7)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r2, 0xffffffffffffffff, 0x35, 0x0, 0x0, @void, @value=r5}, 0x20)

2.152564473s ago: executing program 3 (id=2799):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x42c, 0x3f3, 0x10, 0x70bd27, 0x25dfdbfe, {0x4, 0x1, 0x11, [0x5, 0x1, 0x9, 0x2a5, 0x80, 0x2, 0x7, 0x1, 0x5, 0xfffff800, 0x8, 0xffffffff, 0x7, 0x80, 0x2, 0x0, 0x4, 0x6, 0x1, 0x0, 0x1000, 0xb0, 0xf39b, 0xfffff273, 0xffc00000, 0xf, 0x3, 0xfffffffa, 0xb3fe, 0x80, 0x98, 0x9, 0x1, 0x7f, 0x7fb6, 0x5, 0x2, 0x3, 0x7, 0x1, 0x8001, 0xb0, 0x7fffffff, 0xfff, 0x7fff, 0x3, 0x7, 0x1, 0x9, 0x800, 0x10000, 0x101, 0x0, 0xde, 0x3ff, 0x5, 0x7, 0xfffffffd, 0xa10, 0xf32, 0x0, 0x2, 0x0, 0x2], [0x81, 0x6, 0xe194, 0x6, 0x7, 0x10001, 0x369e, 0x3, 0x4, 0xbd9, 0xc, 0x7, 0x40, 0x9, 0x80000000, 0x1, 0x4, 0x8, 0xe0, 0x5, 0x5, 0x6, 0xffffffff, 0x8001, 0xba50, 0x5, 0x840, 0xf, 0xc121, 0x0, 0x7fffffff, 0x7, 0x6, 0x2, 0xa60, 0x5e, 0x20, 0x5, 0xa740, 0x6fae, 0x7, 0xae, 0x5, 0xff, 0x11, 0x3184, 0x1, 0x2, 0x9, 0x3, 0x1, 0x1ff, 0xc, 0x3, 0x7, 0x3, 0x9b, 0x10001, 0x4, 0x80000000, 0x8, 0x1, 0x211, 0x9], [0x9, 0xbe2, 0x0, 0x7fff, 0x9, 0x5, 0x7, 0x1, 0x7, 0x8, 0x101, 0x8, 0x3, 0x8, 0x9, 0x9, 0xfffffff7, 0x5, 0x71, 0x43, 0xfffffffc, 0x4, 0x1, 0x87b0, 0x5, 0x1, 0x4, 0x8, 0x0, 0x81, 0x7, 0x4, 0x2, 0x8f, 0x1000, 0x5, 0x0, 0x3, 0xffffffff, 0x9, 0x4, 0xb, 0xa49f, 0x800, 0x1, 0x1ffe0, 0x1, 0xffffffff, 0x1ca, 0x1, 0xfffffff5, 0x7, 0x8, 0x4, 0x6e, 0x2, 0x7fff, 0x0, 0x1, 0x2, 0x10, 0x10000, 0x2a8], [0xe, 0x4, 0x5, 0xfffffff9, 0x5, 0x5, 0x400, 0x401, 0x17c, 0x3, 0x3, 0x3ae0, 0x6b7, 0x9, 0x4, 0x363a62cd, 0x6189, 0x6, 0x0, 0xe00000, 0xe6, 0x2, 0x7, 0xe, 0xf, 0x5, 0xffff8000, 0xc, 0x9, 0x0, 0x81, 0x4, 0x5, 0x6, 0xfffffffb, 0xf8a4, 0x9d5d, 0x6, 0x777, 0x9, 0x7, 0x2, 0x1, 0x200, 0x2, 0x8, 0x4, 0xa, 0x3, 0x100, 0xc, 0x70, 0x8, 0x8, 0x10000, 0x3, 0x6, 0x9, 0x7, 0x1, 0x6, 0x1, 0x8, 0x3d86e0bb], 0xa, ['*:]&\x00', ':@,{\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xad}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x604c001)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x8, 0x9, 0x0, 0x1040, r1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000880)={0x7, 0x3, 0x0, 0x40, 0xfffff34c, 0x2, 0x5, 0x4}, &(0x7f00000008c0)=0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000a40))
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000bc0)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000dc0)={{r7, 0x3, 0x4, 0x3, 0x7, 0xc, 0x3344, 0x6, 0x0, 0x6, 0x8, 0x0, 0xd, 0x7e60, 0x97}})
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x74, r8, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xf}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r8, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x20040090)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r1)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2d8, r10, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x629}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47b}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x221}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff286}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x839}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6b}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfcd3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x512}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1662}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff9e5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x246f6e91}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x75}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x43}]}]}, 0x2d8}}, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r1)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x100)
gettid()
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x17, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0xe, 0x9, 0x3, 0x3, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8936}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000001740)='GPL\x00', 0x6, 0x15, &(0x7f0000001780)=""/21, 0x40f00, 0x23, '\x00', r3, 0x25, r1, 0x8, &(0x7f00000017c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x0, 0x9, 0x42d1f4c3, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001840)=[r2], &(0x7f0000001880)=[{0x2, 0x4, 0x7}, {0x5, 0x4, 0x10, 0x4}, {0x5, 0x3, 0xf, 0x5}, {0x1, 0x2, 0x9, 0x1}, {0x1, 0x2, 0xd, 0x8}, {0x2, 0x2, 0xa, 0x7}, {0x3, 0x2, 0xb, 0xa}, {0x4, 0x5, 0x2}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={r12, 0x0, 0xf4, 0xb7, &(0x7f00000019c0)="1317ab33b3221b075dff6e2b145a4b25320d88599cfc7f6df3a69ecd3598a213fc284c48d357cc2c1b1afc4c71be58045532e43a83f469bd97c2d987ecdd551fe8f915a9dc21b49c550b24a369fc671c26a4cb74e8c9260b01d7ee3c102bcf0cc05b5f6d75064e29e030b68401f34589e0932fea9532ced21eaa654bc509da380a3d2484d32e00731ce0d12ca5d41a59fca5039a2d5bf42ff0b612ef8b508f2f3bff9021dd01ff92513f7f057518aedd18a47280e5a34bcc385bb0a3ceada2db05b179bd63266cb2183dda3f5deb6dd1474973c2067d248d76b9f7f6a49d3e2fcb7ca2d169863d98abdebca16ade013de27c6b3b", &(0x7f0000001ac0)=""/183, 0x62, 0x0, 0x0, 0xfe, &(0x7f0000001b80), &(0x7f0000001bc0)="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", 0x5, 0x0, 0x2}, 0x50)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004884)

2.05891769s ago: executing program 4 (id=2800):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='svcrdma_dma_map_rw_err\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9ac, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000001400000000000000290000003400000000fcffff00000000"], 0x70}}], 0x2, 0x2400c044)
shutdown(r1, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00c4a00000f5fd42b6be60e8b053ef949fe13eff39e097b9af"], 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="060083fa98cf84c500000000"], 0xc)
readv(r6, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001800"/29], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r7, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r9, &(0x7f0000000480), 0x0, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x3c, 0x26, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x5, 0x9}, {0x3059ba33a1eae62b, 0x4}, {0xc, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="4a10001e", @ANYRES16=r11, @ANYBLOB="010000002000fddbdf2501000000"], 0x14}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010)

2.039826931s ago: executing program 3 (id=2801):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000170001030000000000000000000600054e2300000000000000000000810000000000000001000000fdffffff00000100000000", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfedeff"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)

1.983092414s ago: executing program 0 (id=2802):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
close(0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x24040400)
setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200"], 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x51, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES8=r4], 0x10)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.855089273s ago: executing program 3 (id=2804):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r2, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)

1.854582177s ago: executing program 4 (id=2805):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000f39700", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000ff0100"/28], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091116770000000009500004000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0xca, r3}, 0x38)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b0040000000800000030000000002000008000100020000"], 0x28}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040805}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa0, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x8, 0x7, 0x5, 0x6, 0x8, 0x9}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xea7591f979d30d29}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x3}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x1}, @TCA_NETEM_CORR={0x10, 0x1, {0x2, 0x6, 0xd4}}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0xa0}}, 0x880)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x80000000, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.748407772s ago: executing program 3 (id=2806):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f00000000000000d641000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0xc1000)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8)
sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0xc03, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.639202806s ago: executing program 0 (id=2808):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
unshare(0x62040200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1410, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}}, 0xc000)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r5, 0x0, &(0x7f0000000ac0)=""/68}, 0x20)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10)
r6 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r6)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401})
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3)
sendmmsg$inet6(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000400)=0x8, 0x4)

1.138661641s ago: executing program 1 (id=2811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x42c, 0x3f3, 0x10, 0x70bd27, 0x25dfdbfe, {0x4, 0x1, 0x11, [0x5, 0x1, 0x9, 0x2a5, 0x80, 0x2, 0x7, 0x1, 0x5, 0xfffff800, 0x8, 0xffffffff, 0x7, 0x80, 0x2, 0x0, 0x4, 0x6, 0x1, 0x0, 0x1000, 0xb0, 0xf39b, 0xfffff273, 0xffc00000, 0xf, 0x3, 0xfffffffa, 0xb3fe, 0x80, 0x98, 0x9, 0x1, 0x7f, 0x7fb6, 0x5, 0x2, 0x3, 0x7, 0x1, 0x8001, 0xb0, 0x7fffffff, 0xfff, 0x7fff, 0x3, 0x7, 0x1, 0x9, 0x800, 0x10000, 0x101, 0x0, 0xde, 0x3ff, 0x5, 0x7, 0xfffffffd, 0xa10, 0xf32, 0x0, 0x2, 0x0, 0x2], [0x81, 0x6, 0xe194, 0x6, 0x7, 0x10001, 0x369e, 0x3, 0x4, 0xbd9, 0xc, 0x7, 0x40, 0x9, 0x80000000, 0x1, 0x4, 0x8, 0xe0, 0x5, 0x5, 0x6, 0xffffffff, 0x8001, 0xba50, 0x5, 0x840, 0xf, 0xc121, 0x0, 0x7fffffff, 0x7, 0x6, 0x2, 0xa60, 0x5e, 0x20, 0x5, 0xa740, 0x6fae, 0x7, 0xae, 0x5, 0xff, 0x11, 0x3184, 0x1, 0x2, 0x9, 0x3, 0x1, 0x1ff, 0xc, 0x3, 0x7, 0x3, 0x9b, 0x10001, 0x4, 0x80000000, 0x8, 0x1, 0x211, 0x9], [0x9, 0xbe2, 0x0, 0x7fff, 0x9, 0x5, 0x7, 0x1, 0x7, 0x8, 0x101, 0x8, 0x3, 0x8, 0x9, 0x9, 0xfffffff7, 0x5, 0x71, 0x43, 0xfffffffc, 0x4, 0x1, 0x87b0, 0x5, 0x1, 0x4, 0x8, 0x0, 0x81, 0x7, 0x4, 0x2, 0x8f, 0x1000, 0x5, 0x0, 0x3, 0xffffffff, 0x9, 0x4, 0xb, 0xa49f, 0x800, 0x1, 0x1ffe0, 0x1, 0xffffffff, 0x1ca, 0x1, 0xfffffff5, 0x7, 0x8, 0x4, 0x6e, 0x2, 0x7fff, 0x0, 0x1, 0x2, 0x10, 0x10000, 0x2a8], [0xe, 0x4, 0x5, 0xfffffff9, 0x5, 0x5, 0x400, 0x401, 0x17c, 0x3, 0x3, 0x3ae0, 0x6b7, 0x9, 0x4, 0x363a62cd, 0x6189, 0x6, 0x0, 0xe00000, 0xe6, 0x2, 0x7, 0xe, 0xf, 0x5, 0xffff8000, 0xc, 0x9, 0x0, 0x81, 0x4, 0x5, 0x6, 0xfffffffb, 0xf8a4, 0x9d5d, 0x6, 0x777, 0x9, 0x7, 0x2, 0x1, 0x200, 0x2, 0x8, 0x4, 0xa, 0x3, 0x100, 0xc, 0x70, 0x8, 0x8, 0x10000, 0x3, 0x6, 0x9, 0x7, 0x1, 0x6, 0x1, 0x8, 0x3d86e0bb], 0xa, ['*:]&\x00', ':@,{\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xad}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x604c001)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x8, 0x9, 0x0, 0x1040, r1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000880)={0x7, 0x3, 0x0, 0x40, 0xfffff34c, 0x2, 0x5, 0x4}, &(0x7f00000008c0)=0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000a40))
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000bc0)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000dc0)={{r7, 0x3, 0x4, 0x3, 0x7, 0xc, 0x3344, 0x6, 0x0, 0x6, 0x8, 0x0, 0xd, 0x7e60, 0x97}, 0x18, [0x0, 0x0, 0x0]})
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x74, r8, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xf}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r8, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x20040090)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r1)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2d8, r10, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x629}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47b}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x221}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff286}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x839}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb6b}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfcd3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x512}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1662}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff9e5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x246f6e91}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x75}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x43}]}]}, 0x2d8}}, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r1)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x100)
gettid()
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x17, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0xe, 0x9, 0x3, 0x3, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8936}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000001740)='GPL\x00', 0x6, 0x15, &(0x7f0000001780)=""/21, 0x40f00, 0x23, '\x00', r3, 0x25, r1, 0x8, &(0x7f00000017c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x0, 0x9, 0x42d1f4c3, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001840)=[r2], &(0x7f0000001880)=[{0x2, 0x4, 0x7}, {0x5, 0x4, 0x10, 0x4}, {0x5, 0x3, 0xf, 0x5}, {0x1, 0x2, 0x9, 0x1}, {0x1, 0x2, 0xd, 0x8}, {0x2, 0x2, 0xa, 0x7}, {0x3, 0x2, 0xb, 0xa}, {0x4, 0x5, 0x2}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={r12, 0x0, 0xf4, 0xb7, &(0x7f00000019c0)="1317ab33b3221b075dff6e2b145a4b25320d88599cfc7f6df3a69ecd3598a213fc284c48d357cc2c1b1afc4c71be58045532e43a83f469bd97c2d987ecdd551fe8f915a9dc21b49c550b24a369fc671c26a4cb74e8c9260b01d7ee3c102bcf0cc05b5f6d75064e29e030b68401f34589e0932fea9532ced21eaa654bc509da380a3d2484d32e00731ce0d12ca5d41a59fca5039a2d5bf42ff0b612ef8b508f2f3bff9021dd01ff92513f7f057518aedd18a47280e5a34bcc385bb0a3ceada2db05b179bd63266cb2183dda3f5deb6dd1474973c2067d248d76b9f7f6a49d3e2fcb7ca2d169863d98abdebca16ade013de27c6b3b", &(0x7f0000001ac0)=""/183, 0x62, 0x0, 0x0, 0xfe, &(0x7f0000001b80), &(0x7f0000001bc0)="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", 0x5, 0x0, 0x2}, 0x50)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004884)

1.079813511s ago: executing program 1 (id=2812):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

928.389741ms ago: executing program 3 (id=2813):
socket$nl_route(0x10, 0x3, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
epoll_create1(0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x8000)
socket(0x2, 0x80805, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x24}}, 0x0)

657.397979ms ago: executing program 1 (id=2814):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120003030000000000000000000600054e2300000000000000000000810000000000000001000000fdffffff00000100000000", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfedeff"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)

553.647703ms ago: executing program 2 (id=2815):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xfffffff8, 0x8, 0x9}, 0x50)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, &(0x7f00000000c0))
accept4(r0, &(0x7f00000002c0)=@x25, &(0x7f0000000340)=0x80, 0x80000)
r3 = accept4(r0, 0x0, 0x0, 0x800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x262040, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="132d216eef9b5528a10cce7b5b71a4ca60c1269db3d0fcbd0ce147c69db4", 0x1e}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

552.794783ms ago: executing program 3 (id=2816):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) (async, rerun: 64)
r1 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (rerun: 32)
setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000300)=0x1, 0x4) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x3, 0x7, 0x200, 0x9, 0x1, 0xfffffff7, 0x5, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)

399.025266ms ago: executing program 1 (id=2817):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\a\b\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0xdc}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0xc0000008})
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r5, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dd6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d415c12e6c42021b43e26578db3f2b475ea0ebb199323d", 0xfffffda9, 0x0, &(0x7f0000000380), 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000506000000000000000000000c"], 0x0, 0x32, 0x0, 0xa, 0x7ff}, 0x28)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={0x0, 0x3}, &(0x7f00000002c0)=0x8)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x4010, r2, 0x69935000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'bond_slave_0\x00', 0x10})
write$tun(r7, &(0x7f0000000080)=ANY=[], 0xfdef)
r8 = socket$isdn_base(0x22, 0x3, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES16=r9, @ANYBLOB='\x00'/20, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="00000000fcffffff00000000"], 0x50)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r2, r3, 0x0, r3}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRESDEC=r8, @ANYBLOB='&\x00'/12, @ANYRES64=r7, @ANYRES8=r10, @ANYRESDEC=r4], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r11, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r9}, 0x20)
recvmmsg(r9, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf2ff, 0x0)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0)
ioctl$PPPIOCATTCHAN(r12, 0x40047438, 0x0)
ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0xa281)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x23, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000081000000000000006b3c000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000400000018540000040000000000000000000000b54ee0ffffffffff9500000000000000180000000600000000000000c80000000d9a04000100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b0000008500000006000000180000000400000000000000ff7f000018160000", @ANYRES32=r11, @ANYBLOB="0000000000000000bf91000000000000b700ffffdf000000000400950000000007000059e7c7e66dd972c2f61d66d7613263468611262749ecf2643e1d9c8857e28fff7e483aca93af7ac098014d99534dbd946a0189cfc5d8892bc1c281fbeae45db0"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)

393.873023ms ago: executing program 2 (id=2818):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x20]}}, 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

263.098977ms ago: executing program 2 (id=2819):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x6c9d, @empty, 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="2690fa0dddb0c3f1dc48b1cbb17211a296578d24b163079763000705d4503948c88e28861def7571568783f4959353f9cf2c8c79c62b5702632d03dbe4313de9254d87c2c5172d6587341eacd58ce7aa1ec0c1d420d7a3d291c01f3a9e0e3ece6d42742e8cf80a5a6bbc35fea95beb0eac74948e3105e82b29a676774dc0723d021dd665513d742427f102a941d8815b702dd6c1927752bf84", 0x99}, {&(0x7f0000000080)="627159f1c709dd55c093a7dd9b2aef2d88da702a2f40ff2f07de8ca032378c45b3e40077c3317d04e187114e48", 0x2d}, {&(0x7f0000000100)="e875b07925fb086ceca512183f65aeb6ea388dabc48989423fe67429d2ae9dd70df97dd07cf3f5aa8181b2943974b943a1fbf63f0e95ad65e82eb634d6927b5a714add5e97c6b73803c535780e24c3c019dd53", 0x53}, {&(0x7f00000002c0)="36fc358a32f6efd9f1cc12ed938759d62aaf61c5e416472493babe676e375318796dc48cef263c5f65027ad413bf53af9024235db48c6709272dc6", 0x3b}], 0x4, &(0x7f0000000580)=[@dstopts_2292={{0x80, 0x29, 0x4, {0xc, 0xc, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x7ff, [0xfffffffffffff801, 0xe, 0x10001, 0x1ff, 0x5]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x40, 0x100, [0x7, 0xa]}}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x5}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hopopts={{0x70, 0x29, 0x36, {0x3a, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x38, {0x3, 0xc, 0x8, 0x6, [0x3, 0x4, 0xfffffffffffffffb, 0x2, 0x5, 0x3]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x5, [0x4]}}, @ra={0x5, 0x2, 0x6}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff8}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0xf7bd9a3df3adaebd, 0x2, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x2, 0x1, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x16, 0x12, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, @calipso={0x7, 0x40, {0x3, 0xe, 0xa2, 0x8, [0x8, 0x1, 0xfffffffffffffffe, 0x6, 0x59, 0x193, 0x6c]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0xffff, [0xfffffffffffffff7]}}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0xf0}, @jumbo={0xc2, 0x4, 0x96}]}}}], 0x240}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x9, @empty, 0xffff3ca5}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000380)="5a1e50704d36ddaab1c61977a15c3ba44ea60bbfffa8e0cbbb366febdc8f43f8584b0113705fe6cdde052ab6e2c89e3c3b1ce2f8847f2096584d7cb571dc72f5f7180028ca29076fe3dd96b8c8b2cc409864a5aa21e9678ad8d50122c51336f8c321d5ad634a58bf226a3bcdf86aa206b05ac5955ef71af301bbe7372b7f7505000787c1320a5f5db698d9eeb6f38d09eb425ca41db7e33f766eb8ef0a", 0x9d}, {&(0x7f0000000440)="ef76c1cf8d0e0b464b9216b0460aeb05b441776a6e54064bda97957a56d80a066679f8bfe047a34299a872dc6b6d8924d81d40cf28e6e1002190fd9b31ad90285aa086dedccf3094c75cd4bffdd981e70412952c181afb1ca3babef6c27e8f8fbb802da4f84528f0c1089a1e4ec61b83b3a9f411ba05bdffcc6215aee8a71013d50fad", 0x83}, {&(0x7f00000007c0)="fe772c56e7694709100b0d32490f73c6d89a3e8931abbbc26c79916c1b4a9fb475f01dbecb9b809d09ba83d5efe346f07ede5bf90e9902a5f695f697d0a6ad527aaecc3ad8203c8f2b83cacfb4a9f2fdf1d0a4246703f4717441e5", 0x5b}], 0x3, &(0x7f0000000880)=[@hoplimit={{0x14}}, @rthdr={{0x48, 0x29, 0x39, {0xdc, 0x6, 0x1, 0xf0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x22}, @loopback, @local]}}}], 0x60}}], 0x2, 0x2800)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES8=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

138.515712ms ago: executing program 2 (id=2820):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4)
pipe(&(0x7f0000000000)) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x897}, 0x24040084) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)

76.868851ms ago: executing program 1 (id=2821):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000580)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(0xffffffffffffffff, &(0x7f0000000100), 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(r3)
write$cgroup_int(r2, &(0x7f0000000140), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc)
getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000105de29ba770180000fcecbb4a0000000000001b00000000005b000000", @ANYRES32=r7, @ANYBLOB="0100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1}, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0xedc623580215bdcd, 0x12, r8, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffd, 0x0)
r9 = socket(0x1f, 0x1, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
unshare(0x22020600)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r9)
sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x445d1}, 0x20040058)

0s ago: executing program 1 (id=2822):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x9cf000, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="171afdb5c254ab57d2457df5831858a49908837dae500632174cac1efc0e61b90ab2c50b0070c8bb46c63d478881c9e2989a68cc82811babf3c8f223e64546e7bea3e40149aa70572e323a9b76d3fe56fc", 0x51}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb6", 0x3f}], 0x2, 0x0, 0x0, 0x20008884}], 0x1, 0x4000844)
recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/177, 0xb1}], 0x1}, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000200)=0x1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r9, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
close(r7)
r11 = socket$unix(0x1, 0x5, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$inet6_icmp(0xa, 0x2, 0x3a)
accept4$inet6(r13, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x1c, 0x800)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000)

kernel console output (not intermixed with test programs):

rsing attributes in process `syz.3.1568'.
[  234.591765][T12235] xt_hashlimit: invalid rate
[  234.881372][T12251] wg1 speed is unknown, defaulting to 1000
[  235.164877][T12256] bond0: option miimon: invalid value (18446744072937799680)
[  235.175207][T12256] bond0: option miimon: allowed values 0 - 2147483647
[  235.224037][T12251] vxcan1 speed is unknown, defaulting to 1000
[  235.247685][T12264] FAULT_INJECTION: forcing a failure.
[  235.247685][T12264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.297478][T12264] CPU: 1 UID: 0 PID: 12264 Comm: syz.0.1579 Not tainted syzkaller #0 PREEMPT(full) 
[  235.297503][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  235.297513][T12264] Call Trace:
[  235.297520][T12264]  <TASK>
[  235.297528][T12264]  dump_stack_lvl+0x189/0x250
[  235.297562][T12264]  ? __pfx____ratelimit+0x10/0x10
[  235.297586][T12264]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.297604][T12264]  ? __pfx__printk+0x10/0x10
[  235.297622][T12264]  ? __might_fault+0xb0/0x130
[  235.297653][T12264]  should_fail_ex+0x414/0x560
[  235.297675][T12264]  _copy_from_user+0x2d/0xb0
[  235.297699][T12264]  ___sys_sendmsg+0x158/0x2a0
[  235.297727][T12264]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.297786][T12264]  ? __fget_files+0x2a/0x420
[  235.297804][T12264]  ? __fget_files+0x3a0/0x420
[  235.297831][T12264]  __x64_sys_sendmsg+0x19b/0x260
[  235.297856][T12264]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  235.297887][T12264]  ? __pfx_ksys_write+0x10/0x10
[  235.297908][T12264]  ? do_syscall_64+0xbe/0xfa0
[  235.297934][T12264]  do_syscall_64+0xfa/0xfa0
[  235.297954][T12264]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.297975][T12264]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.297991][T12264]  ? clear_bhb_loop+0x60/0xb0
[  235.298010][T12264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.298026][T12264] RIP: 0033:0x7f61ad78eec9
[  235.298047][T12264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.298061][T12264] RSP: 002b:00007f61ae572038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.298087][T12264] RAX: ffffffffffffffda RBX: 00007f61ad9e5fa0 RCX: 00007f61ad78eec9
[  235.298100][T12264] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  235.298111][T12264] RBP: 00007f61ae572090 R08: 0000000000000000 R09: 0000000000000000
[  235.298122][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.298132][T12264] R13: 00007f61ad9e6038 R14: 00007f61ad9e5fa0 R15: 00007ffffcb89128
[  235.298159][T12264]  </TASK>
[  235.361585][T12266] __nla_validate_parse: 2 callbacks suppressed
[  235.361603][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  235.491552][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'.
[  235.576297][T12272] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.1581'.
[  235.594627][T12272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1581'.
[  235.608412][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'.
[  235.789952][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1586'.
[  235.824718][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1586'.
[  236.048570][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'.
[  236.213845][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'.
[  236.304873][T12312] FAULT_INJECTION: forcing a failure.
[  236.304873][T12312] name failslab, interval 1, probability 0, space 0, times 1
[  236.352785][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.3.1592 Not tainted syzkaller #0 PREEMPT(full) 
[  236.352814][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  236.352826][T12312] Call Trace:
[  236.352833][T12312]  <TASK>
[  236.352843][T12312]  dump_stack_lvl+0x189/0x250
[  236.352867][T12312]  ? __pfx____ratelimit+0x10/0x10
[  236.352891][T12312]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.352909][T12312]  ? __pfx__printk+0x10/0x10
[  236.352934][T12312]  ? __pfx___might_resched+0x10/0x10
[  236.352964][T12312]  should_fail_ex+0x414/0x560
[  236.353088][T12312]  should_failslab+0xa8/0x100
[  236.353111][T12312]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  236.353130][T12312]  ? __alloc_skb+0x112/0x2d0
[  236.353152][T12312]  __alloc_skb+0x112/0x2d0
[  236.353175][T12312]  netlink_sendmsg+0x5c6/0xb30
[  236.353207][T12312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.353230][T12312]  ? aa_sock_msg_perm+0xf1/0x1d0
[  236.353251][T12312]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  236.353272][T12312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.353295][T12312]  __sock_sendmsg+0x21c/0x270
[  236.353317][T12312]  ____sys_sendmsg+0x505/0x830
[  236.353346][T12312]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.353379][T12312]  ? import_iovec+0x74/0xa0
[  236.353405][T12312]  ___sys_sendmsg+0x21f/0x2a0
[  236.353431][T12312]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.353492][T12312]  ? __fget_files+0x2a/0x420
[  236.353511][T12312]  ? __fget_files+0x3a0/0x420
[  236.353546][T12312]  __x64_sys_sendmsg+0x19b/0x260
[  236.353572][T12312]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.353605][T12312]  ? __pfx_ksys_write+0x10/0x10
[  236.353628][T12312]  ? do_syscall_64+0xbe/0xfa0
[  236.353656][T12312]  do_syscall_64+0xfa/0xfa0
[  236.353677][T12312]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.353700][T12312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.353717][T12312]  ? clear_bhb_loop+0x60/0xb0
[  236.353738][T12312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.353755][T12312] RIP: 0033:0x7f802a58eec9
[  236.353771][T12312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.353786][T12312] RSP: 002b:00007f802b398038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.353806][T12312] RAX: ffffffffffffffda RBX: 00007f802a7e5fa0 RCX: 00007f802a58eec9
[  236.353818][T12312] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  236.353829][T12312] RBP: 00007f802b398090 R08: 0000000000000000 R09: 0000000000000000
[  236.353840][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.353851][T12312] R13: 00007f802a7e6038 R14: 00007f802a7e5fa0 R15: 00007ffd0761f728
[  236.353883][T12312]  </TASK>
[  237.043237][T12314] syzkaller0: entered promiscuous mode
[  237.049915][T12314] syzkaller0: entered allmulticast mode
[  237.153471][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1595'.
[  237.294078][T12320] bond3: option primary_reselect: invalid value (255)
[  237.335491][T12320] bond3 (unregistering): Released all slaves
[  237.392426][T12321] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  238.149084][T12352] wg1 speed is unknown, defaulting to 1000
[  238.625140][T12352] vxcan1 speed is unknown, defaulting to 1000
[  238.956135][T12377] netlink: 'syz.3.1609': attribute type 10 has an invalid length.
[  239.296807][T12385] FAULT_INJECTION: forcing a failure.
[  239.296807][T12385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.344420][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.2.1612 Not tainted syzkaller #0 PREEMPT(full) 
[  239.344449][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  239.344474][T12385] Call Trace:
[  239.344481][T12385]  <TASK>
[  239.344490][T12385]  dump_stack_lvl+0x189/0x250
[  239.344514][T12385]  ? __pfx____ratelimit+0x10/0x10
[  239.344538][T12385]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.344555][T12385]  ? __pfx__printk+0x10/0x10
[  239.344574][T12385]  ? __might_fault+0xb0/0x130
[  239.344602][T12385]  should_fail_ex+0x414/0x560
[  239.344624][T12385]  _copy_from_user+0x2d/0xb0
[  239.344648][T12385]  ___sys_sendmsg+0x158/0x2a0
[  239.344673][T12385]  ? __pfx____sys_sendmsg+0x10/0x10
[  239.344731][T12385]  ? __fget_files+0x2a/0x420
[  239.344751][T12385]  ? __fget_files+0x3a0/0x420
[  239.344782][T12385]  __x64_sys_sendmsg+0x19b/0x260
[  239.344808][T12385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  239.344841][T12385]  ? __pfx_ksys_write+0x10/0x10
[  239.344864][T12385]  ? do_syscall_64+0xbe/0xfa0
[  239.344891][T12385]  do_syscall_64+0xfa/0xfa0
[  239.344913][T12385]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.344936][T12385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.344953][T12385]  ? clear_bhb_loop+0x60/0xb0
[  239.344981][T12385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.344997][T12385] RIP: 0033:0x7ff4b6d8eec9
[  239.345014][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.345029][T12385] RSP: 002b:00007ff4b4ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.345049][T12385] RAX: ffffffffffffffda RBX: 00007ff4b6fe5fa0 RCX: 00007ff4b6d8eec9
[  239.345063][T12385] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003
[  239.345074][T12385] RBP: 00007ff4b4ff6090 R08: 0000000000000000 R09: 0000000000000000
[  239.345085][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.345093][T12385] R13: 00007ff4b6fe6038 R14: 00007ff4b6fe5fa0 R15: 00007ffd0c7ebb48
[  239.345124][T12385]  </TASK>
[  239.795625][T12391] FAULT_INJECTION: forcing a failure.
[  239.795625][T12391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.878296][T12391] CPU: 1 UID: 0 PID: 12391 Comm: syz.2.1615 Not tainted syzkaller #0 PREEMPT(full) 
[  239.878324][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  239.878335][T12391] Call Trace:
[  239.878343][T12391]  <TASK>
[  239.878352][T12391]  dump_stack_lvl+0x189/0x250
[  239.878375][T12391]  ? __pfx____ratelimit+0x10/0x10
[  239.878399][T12391]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.878417][T12391]  ? __pfx__printk+0x10/0x10
[  239.878436][T12391]  ? __might_fault+0xb0/0x130
[  239.878467][T12391]  should_fail_ex+0x414/0x560
[  239.878491][T12391]  _copy_from_iter+0x1de/0x1790
[  239.878521][T12391]  ? rcu_is_watching+0x15/0xb0
[  239.878540][T12391]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  239.878561][T12391]  ? __pfx__copy_from_iter+0x10/0x10
[  239.878584][T12391]  ? __build_skb_around+0x257/0x3e0
[  239.878611][T12391]  ? netlink_sendmsg+0x642/0xb30
[  239.878631][T12391]  ? skb_put+0x11b/0x210
[  239.878656][T12391]  netlink_sendmsg+0x6b2/0xb30
[  239.878686][T12391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.878711][T12391]  ? aa_sock_msg_perm+0xf1/0x1d0
[  239.878734][T12391]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  239.878756][T12391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.878779][T12391]  __sock_sendmsg+0x21c/0x270
[  239.878801][T12391]  ____sys_sendmsg+0x505/0x830
[  239.878831][T12391]  ? __pfx_____sys_sendmsg+0x10/0x10
[  239.878864][T12391]  ? import_iovec+0x74/0xa0
[  239.878890][T12391]  ___sys_sendmsg+0x21f/0x2a0
[  239.878916][T12391]  ? __pfx____sys_sendmsg+0x10/0x10
[  239.878985][T12391]  ? __fget_files+0x2a/0x420
[  239.879004][T12391]  ? __fget_files+0x3a0/0x420
[  239.879035][T12391]  __x64_sys_sendmsg+0x19b/0x260
[  239.879061][T12391]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  239.879094][T12391]  ? __pfx_ksys_write+0x10/0x10
[  239.879117][T12391]  ? do_syscall_64+0xbe/0xfa0
[  239.879144][T12391]  do_syscall_64+0xfa/0xfa0
[  239.879166][T12391]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.879188][T12391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.879206][T12391]  ? clear_bhb_loop+0x60/0xb0
[  239.879227][T12391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.879244][T12391] RIP: 0033:0x7ff4b6d8eec9
[  239.879263][T12391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.879278][T12391] RSP: 002b:00007ff4b4ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.879298][T12391] RAX: ffffffffffffffda RBX: 00007ff4b6fe5fa0 RCX: 00007ff4b6d8eec9
[  239.879311][T12391] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  239.879323][T12391] RBP: 00007ff4b4ff6090 R08: 0000000000000000 R09: 0000000000000000
[  239.879334][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.879344][T12391] R13: 00007ff4b6fe6038 R14: 00007ff4b6fe5fa0 R15: 00007ffd0c7ebb48
[  239.879376][T12391]  </TASK>
[  240.576939][T12394] wg1 speed is unknown, defaulting to 1000
[  240.644050][T12401] nbd3: detected capacity change from 0 to 127
[  240.672978][ T5144] block nbd3: Receive control failed (result -32)
[  240.938055][T12394] vxcan1 speed is unknown, defaulting to 1000
[  241.572061][T12415] wg1 speed is unknown, defaulting to 1000
[  242.073894][T12419] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.092305][T12415] vxcan1 speed is unknown, defaulting to 1000
[  242.145100][T12421] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  242.177755][T12421] bond2: (slave macvlan3): Enslaving as a backup interface with an up link
[  242.233939][ T6197] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  242.256330][ T6165] bond2: (slave macvlan3): link status up again after 0 ms
[  242.296611][T12419] bond0: (slave syz_tun): Releasing backup interface
[  242.316824][ T6165] bond2: (slave macvlan3): link status up again after 0 ms
[  242.349694][T12419] veth0_to_bond: left allmulticast mode
[  242.357607][ T6165] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  242.382757][ T6165] bond2: (slave macvlan3): link status up again after 0 ms
[  242.394215][T12419] veth0_to_bond: left promiscuous mode
[  242.400868][T12419] bridge1: port 2(veth0_to_bond) entered disabled state
[  242.408295][ T6165] bond2: (slave macvlan3): link status up again after 0 ms
[  242.454529][ T6165] bond2: (slave macvlan3): link status up again after 0 ms
[  242.483026][ T6165] bond2: (slave macvlan3): link status up again after 0 ms
[  242.502843][ T6165] bond2: (slave macvlan3): link status up again after 0 ms
[  242.522903][T12419] bond0: (slave bond_slave_0): Releasing backup interface
[  242.555317][ T6197] bond2: (slave macvlan3): link status up again after 0 ms
[  242.600175][T12419] bond0: (slave bond_slave_1): Releasing backup interface
[  242.688868][T12419] team0: Port device team_slave_0 removed
[  242.739861][T12419] team0: Port device team_slave_1 removed
[  242.760942][T12419] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.826001][T12419] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.905933][T12419] bond0: (slave wlan1): Releasing backup interface
[  242.957654][T12419] veth3: left allmulticast mode
[  242.986122][T12419] veth3: left promiscuous mode
[  242.991849][T12419] bridge1: port 1(veth3) entered disabled state
[  243.042520][T12419] vlan2: left allmulticast mode
[  243.056877][T12419] veth1: left allmulticast mode
[  243.063145][T12419] vlan2: left promiscuous mode
[  243.068042][T12419] veth1: left promiscuous mode
[  243.080193][T12419] bridge1: port 3(vlan2) entered disabled state
[  243.098419][T12419] team0: Port device bridge2 removed
[  243.107010][T12419] bond2: (slave macvlan3): Removing an active aggregator
[  243.118545][T12419] bond2: (slave macvlan3): Releasing backup interface
[  243.480737][T12433] FAULT_INJECTION: forcing a failure.
[  243.480737][T12433] name failslab, interval 1, probability 0, space 0, times 0
[  243.530324][T12433] CPU: 0 UID: 0 PID: 12433 Comm: syz.0.1628 Not tainted syzkaller #0 PREEMPT(full) 
[  243.530361][T12433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  243.530373][T12433] Call Trace:
[  243.530380][T12433]  <TASK>
[  243.530389][T12433]  dump_stack_lvl+0x189/0x250
[  243.530413][T12433]  ? __pfx____ratelimit+0x10/0x10
[  243.530437][T12433]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.530454][T12433]  ? __pfx__printk+0x10/0x10
[  243.530475][T12433]  ? __lock_acquire+0xab9/0xd20
[  243.530507][T12433]  should_fail_ex+0x414/0x560
[  243.530531][T12433]  should_failslab+0xa8/0x100
[  243.530553][T12433]  kmem_cache_alloc_noprof+0x73/0x3c0
[  243.530570][T12433]  ? skb_clone+0x212/0x3a0
[  243.530599][T12433]  skb_clone+0x212/0x3a0
[  243.530626][T12433]  __netlink_deliver_tap+0x404/0x850
[  243.530661][T12433]  ? netlink_deliver_tap+0x2e/0x1b0
[  243.530683][T12433]  netlink_deliver_tap+0x19c/0x1b0
[  243.530705][T12433]  netlink_unicast+0x7fa/0x9e0
[  243.530735][T12433]  ? __pfx_netlink_unicast+0x10/0x10
[  243.530756][T12433]  ? netlink_sendmsg+0x642/0xb30
[  243.530775][T12433]  ? skb_put+0x11b/0x210
[  243.530800][T12433]  netlink_sendmsg+0x805/0xb30
[  243.530831][T12433]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.530853][T12433]  ? aa_sock_msg_perm+0xf1/0x1d0
[  243.530877][T12433]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  243.530898][T12433]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.530919][T12433]  __sock_sendmsg+0x21c/0x270
[  243.530943][T12433]  ____sys_sendmsg+0x505/0x830
[  243.530974][T12433]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.531007][T12433]  ? import_iovec+0x74/0xa0
[  243.531034][T12433]  ___sys_sendmsg+0x21f/0x2a0
[  243.531060][T12433]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.531124][T12433]  ? __fget_files+0x2a/0x420
[  243.531144][T12433]  ? __fget_files+0x3a0/0x420
[  243.531176][T12433]  __x64_sys_sendmsg+0x19b/0x260
[  243.531203][T12433]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.531237][T12433]  ? __pfx_ksys_write+0x10/0x10
[  243.531260][T12433]  ? do_syscall_64+0xbe/0xfa0
[  243.531288][T12433]  do_syscall_64+0xfa/0xfa0
[  243.531310][T12433]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.531333][T12433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.531350][T12433]  ? clear_bhb_loop+0x60/0xb0
[  243.531464][T12433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.531480][T12433] RIP: 0033:0x7f61ad78eec9
[  243.531499][T12433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.531515][T12433] RSP: 002b:00007f61ae572038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.531535][T12433] RAX: ffffffffffffffda RBX: 00007f61ad9e5fa0 RCX: 00007f61ad78eec9
[  243.531548][T12433] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  243.531559][T12433] RBP: 00007f61ae572090 R08: 0000000000000000 R09: 0000000000000000
[  243.531571][T12433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.531582][T12433] R13: 00007f61ad9e6038 R14: 00007f61ad9e5fa0 R15: 00007ffffcb89128
[  243.531616][T12433]  </TASK>
[  243.531824][T12433] __nla_validate_parse: 2 callbacks suppressed
[  243.531837][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1628'.
[  243.942226][T12433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1628'.
[  243.961645][T12439] syzkaller0: entered promiscuous mode
[  243.973832][T12439] syzkaller0: entered allmulticast mode
[  244.041027][T12433] bond6: option primary_reselect: invalid value (255)
[  244.065354][T12433] bond6 (unregistering): Released all slaves
[  244.226678][T12444] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  244.339485][T12447] netlink: 'syz.0.1632': attribute type 1 has an invalid length.
[  244.348583][T12446] netlink: 'syz.0.1632': attribute type 1 has an invalid length.
[  244.438498][T12447] 8021q: adding VLAN 0 to HW filter on device bond6
[  244.727615][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'.
[  245.008740][T12481] netlink: 'syz.2.1641': attribute type 13 has an invalid length.
[  245.036138][T12481] netlink: 'syz.2.1641': attribute type 17 has an invalid length.
[  245.061966][T12481] erspan0: left promiscuous mode
[  245.189364][T12481] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.203462][T12481] 8021q: adding VLAN 0 to HW filter on device team0
[  245.223679][T12491] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1644'.
[  245.257695][T12489] wg1 speed is unknown, defaulting to 1000
[  245.280554][T12481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.361956][T12481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.609431][T12489] vxcan1 speed is unknown, defaulting to 1000
[  245.880973][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'.
[  245.942816][T12522] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  246.191865][T12540] netlink: 'syz.1.1655': attribute type 1 has an invalid length.
[  246.587508][ T6196] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  246.605045][ T6196] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  246.624635][  T979] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  246.671142][T12549] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  246.681054][  T982] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  246.689101][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'.
[  246.928569][T12557] syzkaller0: entered promiscuous mode
[  246.941481][T12557] syzkaller0: entered allmulticast mode
[  246.965803][T12578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1662'.
[  247.002834][T12572] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  247.066747][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1662'.
[  247.084189][   T24] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  247.414581][T12584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'.
[  247.475014][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1664'.
[  249.647535][T12584] FAULT_INJECTION: forcing a failure.
[  249.647535][T12584] name failslab, interval 1, probability 0, space 0, times 0
[  249.663417][T12584] CPU: 1 UID: 0 PID: 12584 Comm: syz.0.1664 Not tainted syzkaller #0 PREEMPT(full) 
[  249.663443][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  249.663453][T12584] Call Trace:
[  249.663460][T12584]  <TASK>
[  249.663467][T12584]  dump_stack_lvl+0x189/0x250
[  249.663483][T12584]  ? __pfx____ratelimit+0x10/0x10
[  249.663498][T12584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.663508][T12584]  ? __pfx__printk+0x10/0x10
[  249.663522][T12584]  ? __pfx___might_resched+0x10/0x10
[  249.663537][T12584]  ? fs_reclaim_acquire+0x7d/0x100
[  249.663553][T12584]  should_fail_ex+0x414/0x560
[  249.663567][T12584]  should_failslab+0xa8/0x100
[  249.663580][T12584]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  249.663591][T12584]  ? __d_alloc+0x36/0x7a0
[  249.663607][T12584]  __d_alloc+0x36/0x7a0
[  249.663622][T12584]  d_alloc_parallel+0xe5/0x15e0
[  249.663644][T12584]  ? __lock_acquire+0xab9/0xd20
[  249.663662][T12584]  ? __pfx_d_alloc_parallel+0x10/0x10
[  249.663678][T12584]  ? __raw_spin_lock_init+0x45/0x100
[  249.663690][T12584]  ? __init_waitqueue_head+0xa9/0x150
[  249.663704][T12584]  __lookup_slow+0x116/0x3d0
[  249.663720][T12584]  ? __pfx___lookup_slow+0x10/0x10
[  249.663740][T12584]  ? d_lookup+0x8a/0xa0
[  249.663753][T12584]  ? lookup_noperm+0x112/0x220
[  249.663769][T12584]  simple_start_creating+0xfd/0x1e0
[  249.663781][T12584]  ? __pfx_simple_start_creating+0x10/0x10
[  249.663800][T12584]  debugfs_start_creating+0x10f/0x180
[  249.663815][T12584]  __debugfs_create_file+0x79/0x4f0
[  249.663833][T12584]  debugfs_create_file_full+0x3f/0x60
[  249.663848][T12584]  ref_tracker_dir_debugfs+0x14e/0x270
[  249.663860][T12584]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  249.663886][T12584]  ? rcu_is_watching+0x15/0xb0
[  249.663896][T12584]  ? alloc_netdev_mqs+0xa3/0x11b0
[  249.663909][T12584]  ? __raw_spin_lock_init+0x45/0x100
[  249.663921][T12584]  alloc_netdev_mqs+0x26f/0x11b0
[  249.663930][T12584]  ? __pfx_bond_setup+0x10/0x10
[  249.663945][T12584]  rtnl_create_link+0x31f/0xd10
[  249.663960][T12584]  rtnl_newlink_create+0x25c/0xb00
[  249.663976][T12584]  ? __mutex_lock+0x5bb/0x1350
[  249.663996][T12584]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  249.664011][T12584]  ? __pfx___mutex_lock+0x10/0x10
[  249.664026][T12584]  ? ns_capable+0x8a/0xf0
[  249.664043][T12584]  rtnl_newlink+0x16e4/0x1c80
[  249.664056][T12584]  ? __dev_queue_xmit+0x1b8d/0x3b50
[  249.664079][T12584]  ? __pfx_rtnl_newlink+0x10/0x10
[  249.664108][T12584]  ? kasan_quarantine_put+0xdd/0x220
[  249.664117][T12584]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.664135][T12584]  ? nlmon_xmit+0xb0/0x100
[  249.664146][T12584]  ? kmem_cache_free+0x18f/0x400
[  249.664161][T12584]  ? __local_bh_enable_ip+0x12d/0x1c0
[  249.664176][T12584]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.664190][T12584]  ? __local_bh_enable_ip+0x12d/0x1c0
[  249.664203][T12584]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  249.664219][T12584]  ? __dev_queue_xmit+0x27b/0x3b50
[  249.664228][T12584]  ? __dev_queue_xmit+0x27b/0x3b50
[  249.664236][T12584]  ? __dev_queue_xmit+0x27b/0x3b50
[  249.664246][T12584]  ? __dev_queue_xmit+0x1d79/0x3b50
[  249.664258][T12584]  ? __lock_acquire+0xab9/0xd20
[  249.664285][T12584]  ? __pfx_rtnl_newlink+0x10/0x10
[  249.664297][T12584]  rtnetlink_rcv_msg+0x7cf/0xb70
[  249.664311][T12584]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  249.664322][T12584]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  249.664333][T12584]  ? ref_tracker_free+0x63a/0x7d0
[  249.664343][T12584]  ? __asan_memcpy+0x40/0x70
[  249.664357][T12584]  ? __pfx_ref_tracker_free+0x10/0x10
[  249.664373][T12584]  netlink_rcv_skb+0x208/0x470
[  249.664388][T12584]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  249.664400][T12584]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  249.664419][T12584]  ? netlink_deliver_tap+0x2e/0x1b0
[  249.664436][T12584]  netlink_unicast+0x82f/0x9e0
[  249.664454][T12584]  ? __pfx_netlink_unicast+0x10/0x10
[  249.664466][T12584]  ? netlink_sendmsg+0x642/0xb30
[  249.664477][T12584]  ? skb_put+0x11b/0x210
[  249.664491][T12584]  netlink_sendmsg+0x805/0xb30
[  249.664510][T12584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  249.664524][T12584]  ? aa_sock_msg_perm+0xf1/0x1d0
[  249.664538][T12584]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  249.664560][T12584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  249.664579][T12584]  __sock_sendmsg+0x21c/0x270
[  249.664595][T12584]  ____sys_sendmsg+0x505/0x830
[  249.664613][T12584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  249.664632][T12584]  ? import_iovec+0x74/0xa0
[  249.664651][T12584]  ___sys_sendmsg+0x21f/0x2a0
[  249.664666][T12584]  ? __pfx____sys_sendmsg+0x10/0x10
[  249.664702][T12584]  ? __fget_files+0x2a/0x420
[  249.664713][T12584]  ? __fget_files+0x3a0/0x420
[  249.664731][T12584]  __x64_sys_sendmsg+0x19b/0x260
[  249.664746][T12584]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  249.664765][T12584]  ? __pfx_ksys_write+0x10/0x10
[  249.664778][T12584]  ? do_syscall_64+0xbe/0xfa0
[  249.664795][T12584]  do_syscall_64+0xfa/0xfa0
[  249.664808][T12584]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.664824][T12584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.664835][T12584]  ? clear_bhb_loop+0x60/0xb0
[  249.664855][T12584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.664865][T12584] RIP: 0033:0x7f61ad78eec9
[  249.664877][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.664886][T12584] RSP: 002b:00007f61ae572038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  249.664898][T12584] RAX: ffffffffffffffda RBX: 00007f61ad9e5fa0 RCX: 00007f61ad78eec9
[  249.664905][T12584] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  249.664911][T12584] RBP: 00007f61ae572090 R08: 0000000000000000 R09: 0000000000000000
[  249.664917][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.664923][T12584] R13: 00007f61ad9e6038 R14: 00007f61ad9e5fa0 R15: 00007ffffcb89128
[  249.664941][T12584]  </TASK>
[  249.665316][T12584] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  250.386773][T12594] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  250.418163][T12594] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  250.432965][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  250.533760][T12597] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  250.646606][T12608] wg1 speed is unknown, defaulting to 1000
[  250.881765][T12616] netlink: 'syz.3.1676': attribute type 24 has an invalid length.
[  250.945230][T12622] dvmrp8: entered allmulticast mode
[  251.072238][T12608] vxcan1 speed is unknown, defaulting to 1000
[  251.073304][T12621] wg1 speed is unknown, defaulting to 1000
[  251.216513][T12622] wg1 speed is unknown, defaulting to 1000
[  251.378673][T12632] syzkaller0: entered promiscuous mode
[  251.405381][T12632] syzkaller0: entered allmulticast mode
[  253.662511][T12619] dvmrp8: left allmulticast mode
[  253.692273][T12621] vxcan1 speed is unknown, defaulting to 1000
[  253.794134][T12643] wg1 speed is unknown, defaulting to 1000
[  254.018594][T12650] syzkaller0: entered promiscuous mode
[  254.025956][T12650] syzkaller0: entered allmulticast mode
[  254.061598][T12650] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  254.216504][T12652] __nla_validate_parse: 1 callbacks suppressed
[  254.216523][T12652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1687'.
[  254.236618][T12652] netlink: 'syz.2.1687': attribute type 7 has an invalid length.
[  254.246199][T12652] netlink: 'syz.2.1687': attribute type 8 has an invalid length.
[  254.257129][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'.
[  254.375137][T12643] vxcan1 speed is unknown, defaulting to 1000
[  254.463842][T12656] x_tables: duplicate underflow at hook 3
[  254.471986][T12656] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1688'.
[  254.570210][T12658] netlink: 'syz.2.1689': attribute type 24 has an invalid length.
[  254.584491][T12622] vxcan1 speed is unknown, defaulting to 1000
[  255.198291][T12668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1692'.
[  256.084816][T12683] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  256.098041][T12683] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  256.783389][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'.
[  257.875319][T12776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1721'.
[  257.896396][ T6165] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.899240][T12776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1721'.
[  257.916255][ T6165] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.932389][T12780] netlink: 'syz.3.1719': attribute type 1 has an invalid length.
[  257.934406][ T6165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.940934][T12780] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1719'.
[  257.951328][ T6165] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.965720][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1721'.
[  257.988478][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'.
[  258.072201][T12776] bond3: option primary_reselect: invalid value (255)
[  258.088283][T12776] bond3 (unregistering): Released all slaves
[  258.160871][T12781] netlink: 'syz.4.1723': attribute type 2 has an invalid length.
[  258.198392][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  258.230855][T12781] : entered promiscuous mode
[  258.296359][T12790] syzkaller1: entered promiscuous mode
[  258.331639][T12790] syzkaller1: entered allmulticast mode
[  258.790844][T12815] wg1 speed is unknown, defaulting to 1000
[  259.307378][T12815] vxcan1 speed is unknown, defaulting to 1000
[  259.337888][T12848] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1739'.
[  259.597116][T12859] nft_compat: unsupported protocol 0
[  259.599850][T12860] nft_compat: unsupported protocol 0
[  259.678199][T12864] wg1 speed is unknown, defaulting to 1000
[  259.991270][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'.
[  260.002090][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'.
[  260.013180][T12881] netlink: 'syz.1.1751': attribute type 14 has an invalid length.
[  260.021919][T12881] netlink: 'syz.1.1751': attribute type 13 has an invalid length.
[  260.378608][   T30] audit: type=1107 audit(1759911038.210:5): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  260.582124][T12864] vxcan1 speed is unknown, defaulting to 1000
[  260.704494][T12900] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  260.941179][T12901] wg1 speed is unknown, defaulting to 1000
[  260.986682][T12902] wg1 speed is unknown, defaulting to 1000
[  261.138107][T12909] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  261.247237][T12912] syzkaller0: entered promiscuous mode
[  261.259037][T12912] syzkaller0: entered allmulticast mode
[  261.393105][ T6195] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  261.418309][T12912] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  261.696795][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'.
[  262.164392][T12917] wg1 speed is unknown, defaulting to 1000
[  262.168320][T12901] vxcan1 speed is unknown, defaulting to 1000
[  262.197993][T12934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1767'.
[  262.345506][T12940] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1768'.
[  262.366891][T12940] nbd: couldn't find a device at index 0
[  262.394354][T12937] wg1 speed is unknown, defaulting to 1000
[  262.809830][T12950] netlink: 'syz.0.1772': attribute type 25 has an invalid length.
[  262.846176][T12902] vxcan1 speed is unknown, defaulting to 1000
[  263.314663][T12917] vxcan1 speed is unknown, defaulting to 1000
[  263.320020][T12962] netlink: 'syz.0.1776': attribute type 6 has an invalid length.
[  263.755210][T12967] syzkaller0: entered promiscuous mode
[  263.762014][T12967] syzkaller0: entered allmulticast mode
[  263.781441][T12967] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1778'.
[  263.794932][T12967] net_ratelimit: 27 callbacks suppressed
[  263.794949][T12967] syzkaller0: mtu greater than device maximum
[  263.858371][T12937] vxcan1 speed is unknown, defaulting to 1000
[  265.747872][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'.
[  265.812986][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'.
[  266.459977][T13006] wg1 speed is unknown, defaulting to 1000
[  267.082859][T13006] vxcan1 speed is unknown, defaulting to 1000
[  267.338535][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'.
[  267.394154][T13050] batman_adv: batadv0: Adding interface: ipvlan2
[  267.416956][T13050] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.508793][T13050] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  268.213290][T13087] netlink: 384 bytes leftover after parsing attributes in process `syz.4.1794'.
[  268.600243][T13097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.709093][T13093] syzkaller0: entered promiscuous mode
[  268.725904][T13093] syzkaller0: entered allmulticast mode
[  268.761285][T13101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  268.871970][T13100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  268.992006][T13097] tipc: Resetting bearer <eth:syzkaller0>
[  269.124879][T13097] tipc: Disabling bearer <eth:syzkaller0>
[  269.215657][T13111] wg1 speed is unknown, defaulting to 1000
[  269.329859][T13131] netlink: 'syz.4.1802': attribute type 25 has an invalid length.
[  269.409031][T13138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1804'.
[  269.943705][T13154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1808'.
[  270.027303][T13156] wg1 speed is unknown, defaulting to 1000
[  270.299831][T13169] netlink: 'syz.0.1811': attribute type 2 has an invalid length.
[  270.314046][T13111] vxcan1 speed is unknown, defaulting to 1000
[  271.099369][T13197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1816'.
[  271.433280][T13156] vxcan1 speed is unknown, defaulting to 1000
[  271.814171][T13210] netlink: 'syz.0.1817': attribute type 1 has an invalid length.
[  271.997796][T13219] x_tables: duplicate underflow at hook 1
[  272.007053][T13223] x_tables: duplicate underflow at hook 1
[  272.498847][T13242] veth0_to_batadv: entered allmulticast mode
[  272.783777][T13257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.913306][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  272.984948][T13263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1830'.
[  273.024851][T13263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1830'.
[  273.048452][T13263] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1830'.
[  273.856109][T13287] veth0_to_batadv: entered allmulticast mode
[  273.946204][T13291] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1840'.
[  273.985681][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'.
[  274.000678][T13291] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1840'.
[  274.034215][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'.
[  274.047789][T13300] syzkaller1: entered promiscuous mode
[  274.073230][T13300] syzkaller1: entered allmulticast mode
[  274.189987][T13308] netlink: 'syz.0.1844': attribute type 1 has an invalid length.
[  274.210707][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'.
[  274.265183][T13308] nbd: couldn't find a device at index 0
[  274.370980][T13325] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000
[  274.664754][ T5144] Bluetooth: hci3: link tx timeout
[  274.672031][ T5144] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  274.873669][T13365] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1858'.
[  275.235324][T13374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.262229][T13374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.306292][T13380] geneve2: entered allmulticast mode
[  275.508930][T13374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.527520][T13374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.675345][T13374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.686722][T13374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.711277][T13397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.827243][T13399] wg1 speed is unknown, defaulting to 1000
[  275.878765][T13374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.913149][T13374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.244880][ T6190] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.258703][ T6190] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.355643][ T6190] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.387049][ T6190] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.478789][T13422] wg1 speed is unknown, defaulting to 1000
[  276.560929][T13399] vxcan1 speed is unknown, defaulting to 1000
[  276.574301][ T6190] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.601230][ T6190] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.641387][ T6190] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.671808][ T6190] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.762874][ T5830] Bluetooth: hci3: command 0x0405 tx timeout
[  277.238137][T13422] vxcan1 speed is unknown, defaulting to 1000
[  277.594343][T13443] netlink: 'syz.4.1878': attribute type 303 has an invalid length.
[  277.659457][T13453] __nla_validate_parse: 2 callbacks suppressed
[  277.659477][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'.
[  278.006360][T13461] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  278.254193][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1888'.
[  278.301946][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'.
[  278.337868][T13478] netlink: 'syz.0.1888': attribute type 4 has an invalid length.
[  278.358665][T13478] netlink: 'syz.0.1888': attribute type 4 has an invalid length.
[  278.440477][T13484] IPVS: length: 209 != 48888
[  278.629110][T13487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1891'.
[  278.996538][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1893'.
[  279.175109][T13505] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.206906][T13505] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.328228][T13516] veth0_to_batadv: entered allmulticast mode
[  279.347354][T13505] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.374742][T13505] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.439163][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'.
[  279.458009][T13525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1901'.
[  279.471713][T13505] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.497931][T13505] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.554264][T13505] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.570360][T13505] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.593428][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'.
[  279.724060][ T6192] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.736565][ T6192] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.766388][ T6192] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.777090][ T6192] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.787633][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'.
[  279.817876][ T6192] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.829557][ T6192] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.846087][T13534] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  279.883358][ T6192] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.904391][ T6192] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.927326][T13534] syzkaller0: entered promiscuous mode
[  279.934352][T13534] syzkaller0: entered allmulticast mode
[  279.985208][T13534] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  280.565010][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'.
[  280.638493][T13583] netlink: 'syz.1.1919': attribute type 3 has an invalid length.
[  280.794795][T13584] syzkaller0: entered promiscuous mode
[  280.808785][T13584] syzkaller0: entered allmulticast mode
[  280.829508][T13591] netlink: 'syz.2.1920': attribute type 10 has an invalid length.
[  281.040463][T13596] netlink: 'syz.0.1921': attribute type 16 has an invalid length.
[  281.055499][T13596] netlink: 'syz.0.1921': attribute type 17 has an invalid length.
[  283.064204][T13591] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  283.087626][T13593] veth0: entered promiscuous mode
[  283.095906][T13596] erspan0: left allmulticast mode
[  283.118447][T13596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.162457][T13606] dvmrp0: entered allmulticast mode
[  283.181930][T13613] __nla_validate_parse: 2 callbacks suppressed
[  283.181949][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'.
[  283.202910][T13613] netlink: 'syz.2.1926': attribute type 21 has an invalid length.
[  283.217046][T13589] wg1 speed is unknown, defaulting to 1000
[  283.246546][T13593] veth0: left promiscuous mode
[  283.254615][T13619] syzkaller0: entered promiscuous mode
[  283.262373][T13619] syzkaller0: entered allmulticast mode
[  283.271515][T13618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.366452][T13618] tipc: Resetting bearer <eth:syzkaller0>
[  283.499945][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'.
[  283.544500][T13617] tipc: Resetting bearer <eth:syzkaller0>
[  283.600179][T13617] tipc: Disabling bearer <eth:syzkaller0>
[  283.712523][T13635] wg1 speed is unknown, defaulting to 1000
[  283.716449][T13626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1929'.
[  283.838212][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'.
[  283.899738][T13589] vxcan1 speed is unknown, defaulting to 1000
[  284.383323][T13635] vxcan1 speed is unknown, defaulting to 1000
[  284.411347][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1939'.
[  284.771107][T13665] syzkaller0: entered promiscuous mode
[  284.778586][T13665] syzkaller0: entered allmulticast mode
[  284.799934][T13665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.809295][T13666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.917481][T13674] FAULT_INJECTION: forcing a failure.
[  284.917481][T13674] name failslab, interval 1, probability 0, space 0, times 0
[  284.940585][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.2.1942 Not tainted syzkaller #0 PREEMPT(full) 
[  284.940616][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  284.940628][T13674] Call Trace:
[  284.940635][T13674]  <TASK>
[  284.940644][T13674]  dump_stack_lvl+0x189/0x250
[  284.940668][T13674]  ? __pfx____ratelimit+0x10/0x10
[  284.940693][T13674]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.940712][T13674]  ? __pfx__printk+0x10/0x10
[  284.940737][T13674]  ? __pfx___might_resched+0x10/0x10
[  284.940760][T13674]  ? fs_reclaim_acquire+0x7d/0x100
[  284.940787][T13674]  should_fail_ex+0x414/0x560
[  284.940812][T13674]  should_failslab+0xa8/0x100
[  284.940834][T13674]  __kmalloc_noprof+0xcb/0x4f0
[  284.940851][T13674]  ? kfree+0x4d/0x440
[  284.940865][T13674]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  284.940893][T13674]  tomoyo_realpath_from_path+0xe3/0x5d0
[  284.940925][T13674]  ? tomoyo_domain+0xd9/0x130
[  284.940954][T13674]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  284.940973][T13674]  tomoyo_path_number_perm+0x1e8/0x5a0
[  284.940994][T13674]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  284.941052][T13674]  ? __fget_files+0x2a/0x420
[  284.941078][T13674]  ? __fget_files+0x3a0/0x420
[  284.941097][T13674]  ? __fget_files+0x2a/0x420
[  284.941121][T13674]  security_file_ioctl+0xcb/0x2d0
[  284.941142][T13674]  __se_sys_ioctl+0x47/0x170
[  284.941169][T13674]  do_syscall_64+0xfa/0xfa0
[  284.941191][T13674]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.941262][T13674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.941280][T13674]  ? clear_bhb_loop+0x60/0xb0
[  284.941302][T13674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.941319][T13674] RIP: 0033:0x7ff4b6d8eec9
[  284.941336][T13674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.941351][T13674] RSP: 002b:00007ff4b4fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  284.941370][T13674] RAX: ffffffffffffffda RBX: 00007ff4b6fe6090 RCX: 00007ff4b6d8eec9
[  284.941383][T13674] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000003
[  284.941394][T13674] RBP: 00007ff4b4fd5090 R08: 0000000000000000 R09: 0000000000000000
[  284.941405][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.941416][T13674] R13: 00007ff4b6fe6128 R14: 00007ff4b6fe6090 R15: 00007ffd0c7ebb48
[  284.941449][T13674]  </TASK>
[  284.941489][T13674] ERROR: Out of memory at tomoyo_realpath_from_path.
[  284.966240][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'.
[  285.502469][T13664] tipc: Resetting bearer <eth:syzkaller0>
[  285.525100][T13664] tipc: Disabling bearer <eth:syzkaller0>
[  285.795854][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'.
[  285.881714][T13694] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  285.906826][T13694] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.931927][T13698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1950'.
[  285.957640][T13696] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1949'.
[  286.091324][T13694] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.120329][T13694] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.235699][T13694] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.263211][T13694] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.412257][T13694] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.423366][T13694] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.465831][T13703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.484815][T13703] syzkaller0: entered promiscuous mode
[  286.490864][T13703] syzkaller0: entered allmulticast mode
[  286.534570][T13703] tipc: Resetting bearer <eth:syzkaller0>
[  286.569563][T13702] tipc: Resetting bearer <eth:syzkaller0>
[  286.606046][T13702] tipc: Disabling bearer <eth:syzkaller0>
[  286.727436][ T6198] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.748378][ T6198] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.773330][ T5144] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  286.792501][ T6198] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.853507][T13714] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1955'.
[  286.876048][ T6198] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.918121][ T6198] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.937681][T13715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.960878][ T6198] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.002054][ T6198] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.033762][ T6198] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.265673][T13726] sch_fq: defrate 2 ignored.
[  287.501344][T13748] vlan3: entered promiscuous mode
[  287.513580][T13748] batadv0: entered promiscuous mode
[  287.649776][T13754] wg1 speed is unknown, defaulting to 1000
[  288.479042][   T30] audit: type=1107 audit(1759911066.310:6): pid=13767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  288.554566][T13774] dvmrp8: entered allmulticast mode
[  288.771069][T13790] bridge0: port 1(netdevsim2) entered blocking state
[  288.792908][T13790] bridge0: port 1(netdevsim2) entered disabled state
[  288.833772][T13790] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  288.893828][T13790] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  289.344255][T13754] vxcan1 speed is unknown, defaulting to 1000
[  289.498627][T13810] __nla_validate_parse: 2 callbacks suppressed
[  289.498652][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'.
[  289.920763][T13819] netlink: 'syz.4.1988': attribute type 2 has an invalid length.
[  289.953673][T13819] netlink: 4040 bytes leftover after parsing attributes in process `syz.4.1988'.
[  290.043104][T13825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1989'.
[  290.054663][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'.
[  290.605240][T13847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1996'.
[  290.795045][T13853] netlink: 'syz.0.1998': attribute type 10 has an invalid length.
[  290.822900][T13853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1998'.
[  290.902957][T13853] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  291.045723][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'.
[  291.362144][T13869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2003'.
[  291.517813][T13875] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2005'.
[  291.649181][T13877] 8021q: adding VLAN 0 to HW filter on device bond3
[  291.727893][T13891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  292.580798][T13911] netlink: 'syz.3.2014': attribute type 30 has an invalid length.
[  292.598267][T13910] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  292.811087][T13927] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2017'.
[  293.049442][T13943] bridge: RTM_NEWNEIGH with invalid ether address
[  293.421360][T13965] netlink: 'syz.4.2030': attribute type 2 has an invalid length.
[  293.487400][T13971] bond4: option broadcast_neighbor: invalid value (5)
[  293.520041][T13971] bond4 (unregistering): Released all slaves
[  293.751477][T13990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.894002][T13989] syzkaller0: entered promiscuous mode
[  293.900206][T13989] syzkaller0: entered allmulticast mode
[  293.909702][T13989] tipc: Resetting bearer <eth:syzkaller0>
[  293.948082][T13986] tipc: Resetting bearer <eth:syzkaller0>
[  294.338818][T14005] nbd4: detected capacity change from 0 to 127
[  294.390614][ T5144] block nbd4: Receive control failed (result -32)
[  296.718974][T13986] tipc: Disabling bearer <eth:syzkaller0>
[  296.731454][T14014] bond0: (slave syz_tun): Releasing backup interface
[  296.746011][T14014] batman_adv: batadv0: Removing interface: ipvlan2
[  296.777647][T14033] __nla_validate_parse: 6 callbacks suppressed
[  296.777665][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'.
[  296.932047][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'.
[  296.948576][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'.
[  297.046492][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2055'.
[  297.124603][T14059] netlink: 'syz.0.2057': attribute type 1 has an invalid length.
[  297.144932][T14059] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  297.172335][T14057] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2056'.
[  297.307159][T14069] bond8 (unregistering): Released all slaves
[  297.335011][T14072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2059'.
[  297.395335][T14074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2060'.
[  297.500603][T14078] bridge0: entered promiscuous mode
[  297.872894][T14104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2069'.
[  298.180797][T14119] veth0_to_batadv: left allmulticast mode
[  298.188103][T14119] batadv_slave_0: left promiscuous mode
[  298.202275][T14119] bridge1: left promiscuous mode
[  298.208506][T14119] bridge1: left allmulticast mode
[  298.214687][T14119] bridge2: left promiscuous mode
[  298.222164][T14119] gtp0: left promiscuous mode
[  298.227510][T14119] gtp0: left allmulticast mode
[  298.250896][T14119] bond3: left promiscuous mode
[  298.260809][T14119] ip6gre1: left allmulticast mode
[  298.275277][T14119] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  298.283795][T14119] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  298.321562][T14119] geneve2: left allmulticast mode
[  298.388088][T14132] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  298.477633][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.486304][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.497233][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.506617][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.515230][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.523981][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.532025][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.541860][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.550472][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.559187][T14137] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  298.817048][T14166] sctp: [Deprecated]: syz.1.2087 (pid 14166) Use of int in max_burst socket option deprecated.
[  298.817048][T14166] Use struct sctp_assoc_value instead
[  299.045090][T14176] netlink: 'syz.3.2090': attribute type 1 has an invalid length.
[  299.096504][T14183] x_tables: duplicate underflow at hook 2
[  299.161076][T14186] netlink: 'syz.2.2094': attribute type 11 has an invalid length.
[  299.466387][T14195] sctp: [Deprecated]: syz.4.2096 (pid 14195) Use of int in max_burst socket option.
[  299.466387][T14195] Use struct sctp_assoc_value instead
[  299.549551][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  299.590958][T14197] veth1: entered promiscuous mode
[  299.614156][T14197] veth1: left promiscuous mode
[  299.964196][T14209] ipvlan1: entered allmulticast mode
[  299.970971][T14209] veth0_vlan: entered allmulticast mode
[  300.117186][T14214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'.
[  300.133753][T14217] netlink: 'syz.3.2105': attribute type 1 has an invalid length.
[  300.160654][T14214] macvtap2: entered promiscuous mode
[  300.173414][T14214] macvtap2: entered allmulticast mode
[  300.179970][T14214] veth1_to_hsr: entered allmulticast mode
[  300.534022][T14253] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  300.735881][T14264] wg1 speed is unknown, defaulting to 1000
[  301.271224][T14286] 8021q: adding VLAN 0 to HW filter on device bond5
[  301.639069][T14264] vxcan1 speed is unknown, defaulting to 1000
[  302.007381][T14318] __nla_validate_parse: 7 callbacks suppressed
[  302.007399][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'.
[  302.097600][ T5875] IPVS: starting estimator thread 0...
[  302.193139][T14322] IPVS: using max 25 ests per chain, 60000 per kthread
[  302.280431][T14324] wg1 speed is unknown, defaulting to 1000
[  302.386189][T14328] netlink: 'syz.4.2136': attribute type 4 has an invalid length.
[  302.764320][T14324] vxcan1 speed is unknown, defaulting to 1000
[  303.060453][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2138'.
[  303.605075][T14358] netlink: 28464 bytes leftover after parsing attributes in process `syz.1.2139'.
[  303.923039][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2141'.
[  304.161693][T14368] IPVS: Error connecting to the multicast addr
[  304.312405][T14370] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20000
[  304.572328][T14377] xt_time: invalid argument - start or stop time greater than 23:59:59
[  304.620291][T14377] netlink: 'syz.0.2145': attribute type 1 has an invalid length.
[  304.792746][T14377] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2145'.
[  304.802248][T14377] netlink: 'syz.0.2145': attribute type 1 has an invalid length.
[  304.870848][T14386] wg1 speed is unknown, defaulting to 1000
[  304.914490][T14388] wg1 speed is unknown, defaulting to 1000
[  305.019076][T14389] wg1 speed is unknown, defaulting to 1000
[  305.083025][T14395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.090566][T14386] vxcan1 speed is unknown, defaulting to 1000
[  305.106223][T14396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2148'.
[  305.492416][T14404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2152'.
[  306.056009][T14388] vxcan1 speed is unknown, defaulting to 1000
[  306.207140][T14420] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2157'.
[  306.888346][T14389] vxcan1 speed is unknown, defaulting to 1000
[  306.888357][T14415] wg1 speed is unknown, defaulting to 1000
[  307.763614][T14415] vxcan1 speed is unknown, defaulting to 1000
[  308.098394][T14449] wg1 speed is unknown, defaulting to 1000
[  308.421562][T14463] wg1 speed is unknown, defaulting to 1000
[  308.441459][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'.
[  309.124661][T14463] vxcan1 speed is unknown, defaulting to 1000
[  309.502260][T14449] vxcan1 speed is unknown, defaulting to 1000
[  309.525924][T14479] netlink: 'syz.1.2172': attribute type 5 has an invalid length.
[  309.609866][T14482] netlink: 'syz.2.2173': attribute type 1 has an invalid length.
[  309.629187][T14482] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2173'.
[  310.238234][T14499] netlink: 'syz.2.2178': attribute type 1 has an invalid length.
[  310.249145][T14499] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2178'.
[  310.971759][T14519] wg1 speed is unknown, defaulting to 1000
[  311.425176][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'.
[  311.873778][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'.
[  311.931944][T14519] vxcan1 speed is unknown, defaulting to 1000
[  311.957487][T14543] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2191'.
[  312.138776][T14546] wg1 speed is unknown, defaulting to 1000
[  312.404196][T14556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2194'.
[  312.509905][T14556] nbd: socks must be embedded in a SOCK_ITEM attr
[  312.576259][T14546] vxcan1 speed is unknown, defaulting to 1000
[  312.592046][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'.
[  312.616575][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'.
[  312.647055][ T6189] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  312.662584][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'.
[  312.709329][ T6189] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  312.741688][ T6189] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  312.861765][ T6189] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  312.961636][T14566] delete_channel: no stack
[  313.315694][T14580] wg1 speed is unknown, defaulting to 1000
[  313.458027][T14593] netlink: 'syz.0.2208': attribute type 13 has an invalid length.
[  313.553751][T14596] netlink: 'syz.4.2209': attribute type 1 has an invalid length.
[  313.951821][ T5928] wg1 speed is unknown, defaulting to 1000
[  313.964492][ T5875] syz1: Port: 1 Link DOWN
[  313.982356][ T5928] syz0: Port: 1 Link DOWN
[  314.004249][ T6198] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  314.015343][ T6198] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.024390][ T6198] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  314.034611][ T6198] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.053305][T14580] vxcan1 speed is unknown, defaulting to 1000
[  314.174910][ T6198] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  314.198515][ T6198] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.216673][ T6198] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  314.227987][ T6198] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.316522][T14610] __nla_validate_parse: 3 callbacks suppressed
[  314.316540][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2213'.
[  314.343324][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2213'.
[  314.381423][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2213'.
[  315.052865][T14630] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2221'.
[  315.518578][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2226'.
[  315.529406][T14647] netlink: 'syz.4.2227': attribute type 12 has an invalid length.
[  315.544842][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2226'.
[  315.710807][T14655] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20001
[  315.746279][T14652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.766260][T14652] syzkaller0: entered promiscuous mode
[  315.801968][T14652] syzkaller0: entered allmulticast mode
[  315.865598][T14651] tipc: Resetting bearer <eth:syzkaller0>
[  315.914661][T14651] tipc: Disabling bearer <eth:syzkaller0>
[  316.005416][T14664] sctp: [Deprecated]: syz.0.2234 (pid 14664) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.005416][T14664] Use struct sctp_sack_info instead
[  316.058009][T14666] sctp: [Deprecated]: syz.0.2234 (pid 14666) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.058009][T14666] Use struct sctp_sack_info instead
[  316.141220][T14670] wg1 speed is unknown, defaulting to 1000
[  316.189355][T14674] net_ratelimit: 47 callbacks suppressed
[  316.189373][T14674] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  316.213472][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2235'.
[  316.232913][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2235'.
[  316.257704][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2235'.
[  316.265411][T14682] syzkaller0: entered promiscuous mode
[  316.274706][T14682] syzkaller0: entered allmulticast mode
[  316.302940][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2235'.
[  316.407844][T14687] wg1 speed is unknown, defaulting to 1000
[  316.488516][T14668] wg1 speed is unknown, defaulting to 1000
[  316.987686][T14670] vxcan1 speed is unknown, defaulting to 1000
[  317.079823][T14709] syzkaller1: entered promiscuous mode
[  317.102764][T14709] syzkaller1: entered allmulticast mode
[  317.579747][T14687] vxcan1 speed is unknown, defaulting to 1000
[  317.756410][T14734] sctp: [Deprecated]: syz.1.2249 (pid 14734) Use of struct sctp_assoc_value in delayed_ack socket option.
[  317.756410][T14734] Use struct sctp_sack_info instead
[  318.008431][T14743] wg1 speed is unknown, defaulting to 1000
[  318.339903][T14752] Bluetooth: MGMT ver 1.23
[  318.393745][T14668] vxcan1 speed is unknown, defaulting to 1000
[  318.946647][T14743] vxcan1 speed is unknown, defaulting to 1000
[  319.215317][T14773] dvmrp8: entered allmulticast mode
[  319.377827][T14773] wg1 speed is unknown, defaulting to 1000
[  320.010823][T14782] __nla_validate_parse: 5 callbacks suppressed
[  320.010842][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'.
[  320.159048][T14784] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2261'.
[  320.169098][T14782] netlink: 'syz.0.2261': attribute type 3 has an invalid length.
[  320.539970][T14786] wg1 speed is unknown, defaulting to 1000
[  320.545049][T14773] vxcan1 speed is unknown, defaulting to 1000
[  320.855230][ T5909] IPVS: starting estimator thread 0...
[  320.890841][T14804] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2267'.
[  320.963292][T14802] IPVS: using max 29 ests per chain, 69600 per kthread
[  321.028939][T14806] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2268'.
[  321.069844][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2268'.
[  321.081934][T14806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2268'.
[  321.160720][T14786] vxcan1 speed is unknown, defaulting to 1000
[  321.442295][T14773] dvmrp8: left allmulticast mode
[  321.871521][T14821] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2274'.
[  321.917201][T14818] syzkaller1: entered promiscuous mode
[  321.944299][T14818] syzkaller1: entered allmulticast mode
[  321.957242][T14823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2273'.
[  322.030258][ T5909] IPVS: starting estimator thread 0...
[  322.162797][T14828] IPVS: using max 30 ests per chain, 72000 per kthread
[  322.367530][T14827] wg1 speed is unknown, defaulting to 1000
[  322.496280][T14831] wg1 speed is unknown, defaulting to 1000
[  322.561401][T14840] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.2278'.
[  322.578631][T14840] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2278'.
[  322.644485][T14844] xt_bpf: check failed: parse error
[  323.098729][T14849] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  323.291663][T14827] vxcan1 speed is unknown, defaulting to 1000
[  323.308922][  T982] vxcan1 speed is unknown, defaulting to 1000
[  323.323169][  T982] syz2: Port: 1 Link DOWN
[  323.331401][  T982] vxcan1 speed is unknown, defaulting to 1000
[  323.546522][T14858] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  323.575987][T14858] bond5: (slave erspan0): Releasing active interface
[  323.585889][T14858] ip6gretap1: entered promiscuous mode
[  323.595336][T14858] `: Port device dummy0 removed
[  323.601759][T14858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  323.633721][T14858] netlink: 'syz.0.2285': attribute type 10 has an invalid length.
[  323.642412][T14858] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  323.650823][T14858] bond0: (slave wlan1): refused to change device type
[  323.717974][T14831] vxcan1 speed is unknown, defaulting to 1000
[  324.003911][T14873] netlink: 'syz.3.2289': attribute type 1 has an invalid length.
[  324.075202][ T8602] smc: removing ib device syz2
[  324.507946][T14885] netlink: 'syz.2.2292': attribute type 10 has an invalid length.
[  324.532553][T14885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.740913][T14886] syzkaller1: entered promiscuous mode
[  324.780441][T14886] syzkaller1: entered allmulticast mode
[  324.977694][T14909] FAULT_INJECTION: forcing a failure.
[  324.977694][T14909] name failslab, interval 1, probability 0, space 0, times 0
[  324.998695][T14909] CPU: 1 UID: 0 PID: 14909 Comm: syz.0.2296 Not tainted syzkaller #0 PREEMPT(full) 
[  324.998724][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  324.998734][T14909] Call Trace:
[  324.998741][T14909]  <TASK>
[  324.998749][T14909]  dump_stack_lvl+0x189/0x250
[  324.998771][T14909]  ? __pfx____ratelimit+0x10/0x10
[  324.998792][T14909]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.998809][T14909]  ? __pfx__printk+0x10/0x10
[  324.998831][T14909]  ? __pfx___might_resched+0x10/0x10
[  324.998857][T14909]  should_fail_ex+0x414/0x560
[  324.998880][T14909]  should_failslab+0xa8/0x100
[  324.998901][T14909]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  324.998919][T14909]  ? __alloc_skb+0x112/0x2d0
[  324.998943][T14909]  __alloc_skb+0x112/0x2d0
[  324.998967][T14909]  netlink_sendmsg+0x5c6/0xb30
[  324.998996][T14909]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.999019][T14909]  ? aa_sock_msg_perm+0xf1/0x1d0
[  324.999041][T14909]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  324.999062][T14909]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.999082][T14909]  __sock_sendmsg+0x21c/0x270
[  324.999233][T14909]  ____sys_sendmsg+0x52d/0x830
[  324.999263][T14909]  ? __pfx_____sys_sendmsg+0x10/0x10
[  324.999295][T14909]  ? import_iovec+0x74/0xa0
[  324.999328][T14909]  ___sys_sendmsg+0x21f/0x2a0
[  324.999353][T14909]  ? __pfx____sys_sendmsg+0x10/0x10
[  324.999412][T14909]  ? __fget_files+0x2a/0x420
[  324.999432][T14909]  ? __fget_files+0x3a0/0x420
[  324.999462][T14909]  __sys_sendmmsg+0x227/0x430
[  324.999491][T14909]  ? __pfx___sys_sendmmsg+0x10/0x10
[  324.999523][T14909]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  324.999559][T14909]  ? ksys_write+0x22a/0x250
[  324.999580][T14909]  ? __pfx_ksys_write+0x10/0x10
[  324.999601][T14909]  __x64_sys_sendmmsg+0xa0/0xc0
[  324.999627][T14909]  do_syscall_64+0xfa/0xfa0
[  324.999648][T14909]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.999670][T14909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.999686][T14909]  ? clear_bhb_loop+0x60/0xb0
[  324.999706][T14909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.999721][T14909] RIP: 0033:0x7f61ad78eec9
[  324.999738][T14909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.999753][T14909] RSP: 002b:00007f61ae572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  324.999773][T14909] RAX: ffffffffffffffda RBX: 00007f61ad9e5fa0 RCX: 00007f61ad78eec9
[  324.999786][T14909] RDX: 0000000000000001 RSI: 0000200000007080 RDI: 0000000000000006
[  324.999797][T14909] RBP: 00007f61ae572090 R08: 0000000000000000 R09: 0000000000000000
[  324.999807][T14909] R10: 000000000000c0d0 R11: 0000000000000246 R12: 0000000000000001
[  324.999819][T14909] R13: 00007f61ad9e6038 R14: 00007f61ad9e5fa0 R15: 00007ffffcb89128
[  324.999851][T14909]  </TASK>
[  325.629777][T14914] __nla_validate_parse: 6 callbacks suppressed
[  325.629796][T14914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2298'.
[  325.646093][T14914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2298'.
[  326.387422][T14928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.404598][T14928] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  326.412337][T14928] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  326.582439][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'.
[  326.592361][T14932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2302'.
[  326.606068][T14932] netlink: 'syz.2.2302': attribute type 20 has an invalid length.
[  326.660183][T14934] nbd: couldn't find device at index 0
[  327.264463][T14952] wg1 speed is unknown, defaulting to 1000
[  327.523545][ T5909] tipc: Node number set to 3030221177
[  327.890407][T14980] FAULT_INJECTION: forcing a failure.
[  327.890407][T14980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  327.936998][T14980] CPU: 1 UID: 0 PID: 14980 Comm: syz.1.2321 Not tainted syzkaller #0 PREEMPT(full) 
[  327.937026][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  327.937037][T14980] Call Trace:
[  327.937045][T14980]  <TASK>
[  327.937060][T14980]  dump_stack_lvl+0x189/0x250
[  327.937084][T14980]  ? __pfx____ratelimit+0x10/0x10
[  327.937109][T14980]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.937126][T14980]  ? __pfx__printk+0x10/0x10
[  327.937145][T14980]  ? __might_fault+0xb0/0x130
[  327.937176][T14980]  should_fail_ex+0x414/0x560
[  327.937200][T14980]  _copy_from_iter+0x1de/0x1790
[  327.937231][T14980]  ? rcu_is_watching+0x15/0xb0
[  327.937249][T14980]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  327.937270][T14980]  ? __pfx__copy_from_iter+0x10/0x10
[  327.937293][T14980]  ? __build_skb_around+0x257/0x3e0
[  327.937319][T14980]  ? netlink_sendmsg+0x642/0xb30
[  327.937339][T14980]  ? skb_put+0x11b/0x210
[  327.937365][T14980]  netlink_sendmsg+0x6b2/0xb30
[  327.937398][T14980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.937423][T14980]  ? aa_sock_msg_perm+0xf1/0x1d0
[  327.937447][T14980]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  327.937469][T14980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.937492][T14980]  __sock_sendmsg+0x21c/0x270
[  327.937514][T14980]  ____sys_sendmsg+0x52d/0x830
[  327.937545][T14980]  ? __pfx_____sys_sendmsg+0x10/0x10
[  327.937578][T14980]  ? import_iovec+0x74/0xa0
[  327.937605][T14980]  ___sys_sendmsg+0x21f/0x2a0
[  327.937631][T14980]  ? __pfx____sys_sendmsg+0x10/0x10
[  327.937711][T14980]  ? __fget_files+0x2a/0x420
[  327.937731][T14980]  ? __fget_files+0x3a0/0x420
[  327.937762][T14980]  __sys_sendmmsg+0x227/0x430
[  327.937792][T14980]  ? __pfx___sys_sendmmsg+0x10/0x10
[  327.937825][T14980]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  327.937879][T14980]  ? ksys_write+0x22a/0x250
[  327.937900][T14980]  ? __pfx_ksys_write+0x10/0x10
[  327.937924][T14980]  __x64_sys_sendmmsg+0xa0/0xc0
[  327.937949][T14980]  do_syscall_64+0xfa/0xfa0
[  327.937971][T14980]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.937993][T14980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.938010][T14980]  ? clear_bhb_loop+0x60/0xb0
[  327.938031][T14980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.938048][T14980] RIP: 0033:0x7f2f8058eec9
[  327.938070][T14980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.938085][T14980] RSP: 002b:00007f2f8148c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  327.938105][T14980] RAX: ffffffffffffffda RBX: 00007f2f807e5fa0 RCX: 00007f2f8058eec9
[  327.938118][T14980] RDX: 0000000000000001 RSI: 0000200000007080 RDI: 0000000000000006
[  327.938129][T14980] RBP: 00007f2f8148c090 R08: 0000000000000000 R09: 0000000000000000
[  327.938140][T14980] R10: 000000000000c0d0 R11: 0000000000000246 R12: 0000000000000001
[  327.938151][T14980] R13: 00007f2f807e6038 R14: 00007f2f807e5fa0 R15: 00007ffeb10a6ad8
[  327.938184][T14980]  </TASK>
[  328.536700][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'.
[  328.567668][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'.
[  328.852093][T14998] netlink: 'syz.3.2324': attribute type 1 has an invalid length.
[  329.208547][T15025] netlink: 'syz.2.2330': attribute type 1 has an invalid length.
[  329.268971][T15012] wg1 speed is unknown, defaulting to 1000
[  329.454238][T15017] wg1 speed is unknown, defaulting to 1000
[  329.668913][T15019] wg1 speed is unknown, defaulting to 1000
[  329.677042][T15029] wg1 speed is unknown, defaulting to 1000
[  329.803252][T15046] netlink: 'syz.4.2337': attribute type 1 has an invalid length.
[  329.951256][T15049] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  329.964259][T15049] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  330.032338][T15053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2331'.
[  330.049502][T15046] vlan2: entered allmulticast mode
[  330.063286][T15046] bridge0: entered allmulticast mode
[  330.079377][T15046] bond7: (slave vlan2): Opening slave failed
[  330.216528][T15060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2340'.
[  330.226742][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'.
[  330.596030][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2345'.
[  330.705901][T15066] team0 (unregistering): Port device geneve0 removed
[  330.748797][T15073] netlink: 'syz.3.2345': attribute type 10 has an invalid length.
[  330.820279][T15073] bond0: (slave wlan1): Opening slave failed
[  330.946585][T15077] netlink: zone id is out of range
[  330.952357][T15077] netlink: zone id is out of range
[  330.974622][T15077] netlink: zone id is out of range
[  330.979887][T15077] netlink: zone id is out of range
[  330.986349][T15077] netlink: zone id is out of range
[  331.002190][T15077] netlink: zone id is out of range
[  331.005131][T15082] netlink: 'syz.3.2348': attribute type 25 has an invalid length.
[  331.009204][T15084] netlink: zone id is out of range
[  331.022381][T15077] netlink: zone id is out of range
[  331.028658][T15077] netlink: zone id is out of range
[  331.034914][T15084] netlink: zone id is out of range
[  331.290925][T15094] FAULT_INJECTION: forcing a failure.
[  331.290925][T15094] name failslab, interval 1, probability 0, space 0, times 0
[  331.304832][T15094] CPU: 1 UID: 0 PID: 15094 Comm: syz.4.2351 Not tainted syzkaller #0 PREEMPT(full) 
[  331.304857][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  331.304868][T15094] Call Trace:
[  331.304875][T15094]  <TASK>
[  331.304884][T15094]  dump_stack_lvl+0x189/0x250
[  331.304908][T15094]  ? __pfx____ratelimit+0x10/0x10
[  331.304931][T15094]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.304947][T15094]  ? __pfx__printk+0x10/0x10
[  331.304963][T15094]  ? skb_network_protocol+0x508/0x760
[  331.304984][T15094]  ? __lock_acquire+0xab9/0xd20
[  331.305008][T15094]  should_fail_ex+0x414/0x560
[  331.305028][T15094]  should_failslab+0xa8/0x100
[  331.305050][T15094]  kmem_cache_alloc_noprof+0x73/0x3c0
[  331.305068][T15094]  ? skb_clone+0x212/0x3a0
[  331.305094][T15094]  skb_clone+0x212/0x3a0
[  331.305116][T15094]  ? dev_queue_xmit_nit+0x25a/0xcc0
[  331.305139][T15094]  dev_queue_xmit_nit+0x416/0xcc0
[  331.305159][T15094]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  331.305193][T15094]  dev_hard_start_xmit+0x1be/0x830
[  331.305237][T15094]  __dev_queue_xmit+0x1b8d/0x3b50
[  331.305266][T15094]  ? __dev_queue_xmit+0x27b/0x3b50
[  331.305301][T15094]  ? __pfx___dev_queue_xmit+0x10/0x10
[  331.305334][T15094]  ? __copy_skb_header+0xa7/0x550
[  331.305358][T15094]  ? __asan_memcpy+0x40/0x70
[  331.305404][T15094]  ? skb_clone+0x246/0x3a0
[  331.305431][T15094]  __netlink_deliver_tap+0x5ad/0x850
[  331.305468][T15094]  ? netlink_deliver_tap+0x2e/0x1b0
[  331.305492][T15094]  netlink_deliver_tap+0x19c/0x1b0
[  331.305515][T15094]  netlink_unicast+0x7fa/0x9e0
[  331.305543][T15094]  ? __pfx_netlink_unicast+0x10/0x10
[  331.305562][T15094]  ? netlink_sendmsg+0x642/0xb30
[  331.305580][T15094]  ? skb_put+0x11b/0x210
[  331.305613][T15094]  netlink_sendmsg+0x805/0xb30
[  331.305646][T15094]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.305672][T15094]  ? aa_sock_msg_perm+0xf1/0x1d0
[  331.305697][T15094]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  331.305717][T15094]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.305739][T15094]  __sock_sendmsg+0x21c/0x270
[  331.305762][T15094]  ____sys_sendmsg+0x52d/0x830
[  331.305794][T15094]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.305828][T15094]  ? import_iovec+0x74/0xa0
[  331.305855][T15094]  ___sys_sendmsg+0x21f/0x2a0
[  331.305881][T15094]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.305959][T15094]  ? __fget_files+0x2a/0x420
[  331.305978][T15094]  ? __fget_files+0x3a0/0x420
[  331.306011][T15094]  __sys_sendmmsg+0x227/0x430
[  331.306041][T15094]  ? __pfx___sys_sendmmsg+0x10/0x10
[  331.306076][T15094]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  331.306115][T15094]  ? ksys_write+0x22a/0x250
[  331.306137][T15094]  ? __pfx_ksys_write+0x10/0x10
[  331.306161][T15094]  __x64_sys_sendmmsg+0xa0/0xc0
[  331.306193][T15094]  do_syscall_64+0xfa/0xfa0
[  331.306218][T15094]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.306245][T15094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.306262][T15094]  ? clear_bhb_loop+0x60/0xb0
[  331.306284][T15094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.306300][T15094] RIP: 0033:0x7f2eab58eec9
[  331.306318][T15094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.306338][T15094] RSP: 002b:00007f2eac418038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  331.306358][T15094] RAX: ffffffffffffffda RBX: 00007f2eab7e5fa0 RCX: 00007f2eab58eec9
[  331.306371][T15094] RDX: 0000000000000001 RSI: 0000200000007080 RDI: 0000000000000006
[  331.306382][T15094] RBP: 00007f2eac418090 R08: 0000000000000000 R09: 0000000000000000
[  331.306396][T15094] R10: 000000000000c0d0 R11: 0000000000000246 R12: 0000000000000001
[  331.306407][T15094] R13: 00007f2eab7e6038 R14: 00007f2eab7e5fa0 R15: 00007ffe8e91b298
[  331.306442][T15094]  </TASK>
[  331.831667][T15098] __nla_validate_parse: 2 callbacks suppressed
[  331.831688][T15098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2352'.
[  332.001981][T15102] siw: device registration error -23
[  332.618181][T15113] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
[  332.985295][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'.
[  333.004578][T15116] wg1 speed is unknown, defaulting to 1000
[  333.139854][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2358'.
[  334.401835][T15153] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2367'.
[  334.411276][T15151] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  334.414556][T15153] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2367'.
[  334.429448][T15151] bond7: (slave macvlan2): making interface the new active one
[  334.441094][T15151] bond7: (slave macvlan2): Enslaving as an active interface with an up link
[  334.791076][T15174] wg1 speed is unknown, defaulting to 1000
[  334.858716][T15179] wg1: left allmulticast mode
[  334.881113][T15179] bridge1: left allmulticast mode
[  334.903824][T15179] ip6gre1: left allmulticast mode
[  334.921861][T15179] vlan0: left allmulticast mode
[  334.946853][T15179] geneve1: left allmulticast mode
[  334.998814][T15187] netlink: 'syz.2.2376': attribute type 13 has an invalid length.
[  335.017112][T15187] netlink: 'syz.2.2376': attribute type 17 has an invalid length.
[  335.048804][T15189] sch_tbf: peakrate 7 is lower than or equals to rate 9675163233977606466 !
[  335.122268][T15189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2377'.
[  335.263460][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'.
[  335.275081][T15201] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2377'.
[  335.329155][T15204] netlink: 'syz.0.2379': attribute type 1 has an invalid length.
[  335.544230][T15206] gretap1: entered allmulticast mode
[  335.554664][T15206] bond8: (slave gretap1): making interface the new active one
[  335.565607][T15206] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  335.593615][T15210] veth0_to_bond: entered allmulticast mode
[  335.680696][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.701401][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.782573][T15213] hsr0: entered allmulticast mode
[  335.827876][T15213] hsr_slave_0: entered allmulticast mode
[  336.253119][T15224] netlink: 'syz.1.2384': attribute type 1 has an invalid length.
[  336.283931][T15174] netlink: 'syz.3.2371': attribute type 6 has an invalid length.
[  336.312788][T15224] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2384'.
[  336.589196][T15237] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  336.616157][T15240] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2389'.
[  336.719346][T15242] FAULT_INJECTION: forcing a failure.
[  336.719346][T15242] name failslab, interval 1, probability 0, space 0, times 0
[  336.734600][T15242] CPU: 1 UID: 0 PID: 15242 Comm: syz.2.2390 Not tainted syzkaller #0 PREEMPT(full) 
[  336.734627][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  336.734638][T15242] Call Trace:
[  336.734645][T15242]  <TASK>
[  336.734653][T15242]  dump_stack_lvl+0x189/0x250
[  336.734678][T15242]  ? __pfx____ratelimit+0x10/0x10
[  336.734703][T15242]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.734721][T15242]  ? __pfx__printk+0x10/0x10
[  336.734746][T15242]  ? __pfx___might_resched+0x10/0x10
[  336.734767][T15242]  ? fs_reclaim_acquire+0x7d/0x100
[  336.734799][T15242]  should_fail_ex+0x414/0x560
[  336.734823][T15242]  should_failslab+0xa8/0x100
[  336.734848][T15242]  __kmalloc_cache_noprof+0x70/0x3d0
[  336.734870][T15242]  ? alloc_mnt_ns+0xb0/0x310
[  336.734892][T15242]  alloc_mnt_ns+0xb0/0x310
[  336.734912][T15242]  copy_mnt_ns+0xd0/0x820
[  336.734929][T15242]  ? rcu_is_watching+0x15/0xb0
[  336.734947][T15242]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  336.734962][T15242]  ? kmem_cache_alloc_noprof+0x21a/0x3c0
[  336.734979][T15242]  ? create_new_namespaces+0x31/0x720
[  336.735007][T15242]  create_new_namespaces+0xd1/0x720
[  336.735033][T15242]  ? bpf_lsm_capable+0x9/0x20
[  336.735058][T15242]  ? security_capable+0x7e/0x2e0
[  336.735086][T15242]  unshare_nsproxy_namespaces+0x11c/0x170
[  336.735114][T15242]  ksys_unshare+0x4c8/0x8c0
[  336.735140][T15242]  ? __pfx_ksys_unshare+0x10/0x10
[  336.735156][T15242]  ? ksys_write+0x1e1/0x250
[  336.735177][T15242]  ? __pfx_ksys_write+0x10/0x10
[  336.735204][T15242]  __x64_sys_unshare+0x38/0x50
[  336.735280][T15242]  do_syscall_64+0xfa/0xfa0
[  336.735311][T15242]  ? lockdep_hardirqs_on+0x9c/0x150
[  336.735334][T15242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.735348][T15242]  ? clear_bhb_loop+0x60/0xb0
[  336.735368][T15242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.735385][T15242] RIP: 0033:0x7ff4b6d8eec9
[  336.735403][T15242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.735418][T15242] RSP: 002b:00007ff4b4ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  336.735438][T15242] RAX: ffffffffffffffda RBX: 00007ff4b6fe5fa0 RCX: 00007ff4b6d8eec9
[  336.735451][T15242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480
[  336.735463][T15242] RBP: 00007ff4b4ff6090 R08: 0000000000000000 R09: 0000000000000000
[  336.735473][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.735483][T15242] R13: 00007ff4b6fe6038 R14: 00007ff4b6fe5fa0 R15: 00007ffd0c7ebb48
[  336.735518][T15242]  </TASK>
[  337.138179][T15256] netlink: 'syz.0.2392': attribute type 2 has an invalid length.
[  337.198063][T15256] __nla_validate_parse: 2 callbacks suppressed
[  337.198152][T15256] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.2392'.
[  337.481868][ T6198] nci: nci_ntf_packet: unknown ntf opcode 0x21
[  338.989678][T15277] veth0_to_batadv: left allmulticast mode
[  339.051205][T15277] veth1_to_hsr: left allmulticast mode
[  339.064824][T15277] macvtap2: left promiscuous mode
[  339.078713][T15277] macvtap2: left allmulticast mode
[  339.210888][T15282] xfrm1: entered allmulticast mode
[  339.389874][T15292] netlink: 'syz.2.2400': attribute type 1 has an invalid length.
[  339.470423][T15292] bond4: entered promiscuous mode
[  339.488138][T15292] 8021q: adding VLAN 0 to HW filter on device bond4
[  339.619475][T15309] FAULT_INJECTION: forcing a failure.
[  339.619475][T15309] name failslab, interval 1, probability 0, space 0, times 0
[  339.634261][T15309] CPU: 0 UID: 0 PID: 15309 Comm: syz.2.2404 Not tainted syzkaller #0 PREEMPT(full) 
[  339.634287][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  339.634298][T15309] Call Trace:
[  339.634305][T15309]  <TASK>
[  339.634313][T15309]  dump_stack_lvl+0x189/0x250
[  339.634337][T15309]  ? __pfx____ratelimit+0x10/0x10
[  339.634362][T15309]  ? __pfx_dump_stack_lvl+0x10/0x10
[  339.634379][T15309]  ? __pfx__printk+0x10/0x10
[  339.634404][T15309]  ? __pfx___might_resched+0x10/0x10
[  339.634428][T15309]  ? fs_reclaim_acquire+0x7d/0x100
[  339.634454][T15309]  should_fail_ex+0x414/0x560
[  339.634479][T15309]  should_failslab+0xa8/0x100
[  339.634501][T15309]  kmem_cache_alloc_noprof+0x73/0x3c0
[  339.634519][T15309]  ? alloc_vfsmnt+0x23/0x430
[  339.634540][T15309]  alloc_vfsmnt+0x23/0x430
[  339.634559][T15309]  clone_mnt+0x67/0xae0
[  339.634584][T15309]  copy_tree+0xde/0x930
[  339.634599][T15309]  ? down_write+0x162/0x1f0
[  339.634617][T15309]  ? __pfx_down_write+0x10/0x10
[  339.634639][T15309]  ? alloc_mnt_ns+0x24e/0x310
[  339.634661][T15309]  copy_mnt_ns+0x178/0x820
[  339.634678][T15309]  ? rcu_is_watching+0x15/0xb0
[  339.634696][T15309]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  339.634713][T15309]  ? create_new_namespaces+0x31/0x720
[  339.634741][T15309]  create_new_namespaces+0xd1/0x720
[  339.634768][T15309]  ? bpf_lsm_capable+0x9/0x20
[  339.634785][T15309]  ? security_capable+0x7e/0x2e0
[  339.634823][T15309]  unshare_nsproxy_namespaces+0x11c/0x170
[  339.634850][T15309]  ksys_unshare+0x4c8/0x8c0
[  339.634876][T15309]  ? __pfx_ksys_unshare+0x10/0x10
[  339.634893][T15309]  ? ksys_write+0x1e1/0x250
[  339.634914][T15309]  ? __pfx_ksys_write+0x10/0x10
[  339.634941][T15309]  __x64_sys_unshare+0x38/0x50
[  339.634959][T15309]  do_syscall_64+0xfa/0xfa0
[  339.634981][T15309]  ? lockdep_hardirqs_on+0x9c/0x150
[  339.635004][T15309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.635021][T15309]  ? clear_bhb_loop+0x60/0xb0
[  339.635042][T15309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.635058][T15309] RIP: 0033:0x7ff4b6d8eec9
[  339.635075][T15309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.635089][T15309] RSP: 002b:00007ff4b4ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  339.635110][T15309] RAX: ffffffffffffffda RBX: 00007ff4b6fe5fa0 RCX: 00007ff4b6d8eec9
[  339.635123][T15309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480
[  339.635133][T15309] RBP: 00007ff4b4ff6090 R08: 0000000000000000 R09: 0000000000000000
[  339.635144][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.635154][T15309] R13: 00007ff4b6fe6038 R14: 00007ff4b6fe5fa0 R15: 00007ffd0c7ebb48
[  339.635188][T15309]  </TASK>
[  339.990055][T15313] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.010229][T15311] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  340.035520][T15311] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.052167][T15313] team_slave_1: entered promiscuous mode
[  340.061135][T15313] team_slave_1: entered allmulticast mode
[  340.083055][T15311] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  340.100327][T15311] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.137477][T15319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2408'.
[  340.235619][T15311] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  340.252811][T15311] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.405800][T15324] net_ratelimit: 705 callbacks suppressed
[  340.405819][T15324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  340.448865][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'.
[  340.460874][T15311] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  340.491450][T15311] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.551380][T15330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2411'.
[  340.567070][T15331] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2409'.
[  340.578098][T15330] IPVS: Unknown mcast interface: batadv0
[  340.650730][ T6189] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  340.662901][ T6189] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.700339][ T6189] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  340.711404][ T6189] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.739082][ T6189] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.747882][ T6189] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.757537][T15333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.787329][ T6198] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  340.796122][ T6198] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.804973][T15333] syzkaller0: entered promiscuous mode
[  340.810656][T15333] syzkaller0: entered allmulticast mode
[  340.839404][T15334] tipc: Resetting bearer <eth:syzkaller0>
[  340.854856][T15332] tipc: Resetting bearer <eth:syzkaller0>
[  340.903816][T15332] tipc: Disabling bearer <eth:syzkaller0>
[  340.959404][T15338] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  341.049371][T15340] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  341.195276][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  341.580705][T15362] netlink: 'syz.1.2421': attribute type 1 has an invalid length.
[  341.731610][T15362] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.900195][T15379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.911324][T15379] syzkaller0: entered promiscuous mode
[  341.915558][T15378] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  341.918199][T15379] syzkaller0: entered allmulticast mode
[  341.944106][T15379] tipc: Resetting bearer <eth:syzkaller0>
[  341.957794][T15377] tipc: Resetting bearer <eth:syzkaller0>
[  341.984220][T15377] tipc: Disabling bearer <eth:syzkaller0>
[  342.114213][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2426'.
[  342.421427][T15386] wg1 speed is unknown, defaulting to 1000
[  342.748334][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2430'.
[  342.828653][T15375] delete_channel: no stack
[  343.128506][T15410] wg1 speed is unknown, defaulting to 1000
[  343.139009][T15408] netlink: 'syz.2.2433': attribute type 1 has an invalid length.
[  343.273271][T15412] gretap1: entered allmulticast mode
[  343.320343][T15412] bond5: (slave gretap1): making interface the new active one
[  343.411149][T15412] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  343.463369][T15421] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2436'.
[  343.505267][T15421] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2436'.
[  344.282290][T15435] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.373880][T15439] lo: entered promiscuous mode
[  344.379284][T15439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.490005][T15433] wg1 speed is unknown, defaulting to 1000
[  345.074731][T15474] tipc: Resetting bearer <eth:syzkaller0>
[  345.944066][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'.
[  345.982426][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'.
[  346.115724][T15498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2452'.
[  346.152273][T15502] veth1_to_bond: entered allmulticast mode
[  346.160762][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'.
[  346.256353][T15502] veth1_to_bond (unregistering): left allmulticast mode
[  346.725792][T15515] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2457'.
[  346.823912][T15513] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.2456'.
[  347.062409][T15527] wg1 speed is unknown, defaulting to 1000
[  347.180897][T15540] netlink: 'syz.3.2463': attribute type 2 has an invalid length.
[  347.195806][T15540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2463'.
[  348.239050][T15578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'.
[  348.323894][T15579] smc: net device geneve0 applied user defined pnetid SYZ0
[  348.334425][T15579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2470'.
[  348.439242][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2473'.
[  348.471200][T15587] netlink: 'syz.3.2473': attribute type 1 has an invalid length.
[  348.683847][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  348.706393][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  348.748288][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  348.760127][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  348.777041][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  348.796154][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  348.811037][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'.
[  348.844958][T15601] bridge0: left promiscuous mode
[  348.856441][T15601] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.871423][T15601] 8021q: adding VLAN 0 to HW filter on device `
[  348.901839][T15601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.935754][T15590] wg1 speed is unknown, defaulting to 1000
[  348.948271][  T982] syz1: Port: 1 Link ACTIVE
[  349.223807][T15638] wg1 speed is unknown, defaulting to 1000
[  349.382530][T15647] netlink: 'syz.3.2486': attribute type 7 has an invalid length.
[  350.349858][T15673] wg1 speed is unknown, defaulting to 1000
[  350.737774][T15705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.756080][T15705] syzkaller0: entered promiscuous mode
[  350.761675][T15705] syzkaller0: entered allmulticast mode
[  351.385531][T15704] tipc: Resetting bearer <eth:syzkaller0>
[  351.417873][T15704] tipc: Disabling bearer <eth:syzkaller0>
[  351.521882][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  351.577790][T15732] wg1 speed is unknown, defaulting to 1000
[  352.420419][T15773] wg1 speed is unknown, defaulting to 1000
[  352.991924][T15791] : entered promiscuous mode
[  353.721613][T15821] ip6gretap1: entered promiscuous mode
[  354.083599][T15847] __nla_validate_parse: 20 callbacks suppressed
[  354.083619][T15847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2530'.
[  354.389385][T15854] wg1 speed is unknown, defaulting to 1000
[  354.716366][T15864] wg1 speed is unknown, defaulting to 1000
[  354.766362][T15868] pimreg: entered allmulticast mode
[  355.141929][T15881] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  355.230093][T15882] wg1 speed is unknown, defaulting to 1000
[  355.760031][T15891] wg1 speed is unknown, defaulting to 1000
[  355.776377][T15893] wg1 speed is unknown, defaulting to 1000
[  355.786445][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'.
[  355.795910][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  355.843502][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'.
[  356.008269][T15899] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2544'.
[  356.389649][T15895] wg1 speed is unknown, defaulting to 1000
[  356.909318][T15916] wg1 speed is unknown, defaulting to 1000
[  357.019318][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'.
[  357.216903][T15927] netlink: 'syz.1.2550': attribute type 1 has an invalid length.
[  357.268451][T15927] bond5: entered promiscuous mode
[  357.276675][T15927] 8021q: adding VLAN 0 to HW filter on device bond5
[  358.746471][T15950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.850375][T15952] gre0: entered allmulticast mode
[  359.058561][T15974] netlink: 'syz.4.2563': attribute type 1 has an invalid length.
[  359.183870][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'.
[  359.948245][T16012] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2570'.
[  360.070314][T16019] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2570'.
[  360.128697][T16021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2573'.
[  360.921568][T16038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2577'.
[  360.935828][T16038] netlink: 'syz.2.2577': attribute type 2 has an invalid length.
[  360.945188][T16038] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2577'.
[  362.659229][  T982] wg1 speed is unknown, defaulting to 1000
[  362.686743][T16051] wg1 speed is unknown, defaulting to 1000
[  362.693547][  T982] syz0: Port: 1 Link ACTIVE
[  362.887012][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'.
[  362.943818][T16065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2586'.
[  362.956674][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'.
[  362.977358][T16065] netlink: 'syz.4.2586': attribute type 32 has an invalid length.
[  362.993325][T16065] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  363.338617][T16082] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2590'.
[  363.714765][T16097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.722362][T16097] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  363.743269][T16097] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  363.780097][T16097] tipc: Resetting bearer <eth:syzkaller0>
[  364.241206][T16122] __nla_validate_parse: 5 callbacks suppressed
[  364.241224][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'.
[  364.241229][T16121] netlink: 'syz.4.2603': attribute type 1 has an invalid length.
[  364.353991][T16122] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2603'.
[  364.388577][T16121] 8021q: adding VLAN 0 to HW filter on device bond8
[  364.408603][T16126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'.
[  364.432815][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  364.735014][T16137] 8021q: adding VLAN 0 to HW filter on device bond9
[  364.754769][T16137] bridge0: port 2(bond9) entered blocking state
[  364.775056][T16137] bridge0: port 2(bond9) entered disabled state
[  364.798682][T16137] bond9: entered allmulticast mode
[  364.826449][T16137] bond9: entered promiscuous mode
[  364.897031][T16149] netlink: 'syz.2.2610': attribute type 5 has an invalid length.
[  364.906532][T16140] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  365.180834][T16164] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002
[  365.321198][T16171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2616'.
[  365.330013][T16169] wg1 speed is unknown, defaulting to 1000
[  365.331359][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2616'.
[  365.480839][T16185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2621'.
[  365.535995][T16185] Set syz1 is full, maxelem 65536 reached
[  365.674123][T16185] wg1 speed is unknown, defaulting to 1000
[  365.748926][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'.
[  366.240458][T16208] wg1 speed is unknown, defaulting to 1000
[  366.301753][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'.
[  366.319897][T16209] wg1 speed is unknown, defaulting to 1000
[  366.838429][T16232] syzkaller0: entered promiscuous mode
[  366.844506][T16232] syzkaller0: entered allmulticast mode
[  367.613719][   T30] audit: type=1107 audit(1759911145.430:7): pid=16246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  369.832334][T16280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2645'.
[  369.940111][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'.
[  370.310668][T16298] xt_SECMARK: invalid mode: 0
[  370.400350][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'.
[  370.410591][T16301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2652'.
[  370.598978][T16317] wg1 speed is unknown, defaulting to 1000
[  370.694960][T16319] netlink: 'syz.4.2655': attribute type 1 has an invalid length.
[  370.714847][T16319] sctp: [Deprecated]: syz.4.2655 (pid 16319) Use of struct sctp_assoc_value in delayed_ack socket option.
[  370.714847][T16319] Use struct sctp_sack_info instead
[  370.775457][T16319] netlink: 'syz.4.2655': attribute type 1 has an invalid length.
[  372.125481][T16361] bond0: (slave dummy0): Releasing backup interface
[  372.135327][T16361] dummy0: left promiscuous mode
[  372.163476][T16361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  372.347734][T16361] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  372.374543][ T5830] Bluetooth: hci3: command 0x0405 tx timeout
[  372.980027][T16401] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.988564][T16401] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  373.017856][T16404] vlan3: entered allmulticast mode
[  373.025706][T16404] bridge_slave_0: entered allmulticast mode
[  373.256109][T16420] wg1 speed is unknown, defaulting to 1000
[  373.471359][T16441] tun0: tun_chr_ioctl cmd 2148045848
[  373.486345][T16441] tun0: tun_chr_ioctl cmd 21731
[  373.699621][T16447] netlink: 'syz.0.2686': attribute type 1 has an invalid length.
[  373.755081][T16447] 8021q: adding VLAN 0 to HW filter on device bond9
[  373.778868][T16453] bond9: (slave wlan0): Opening slave failed
[  373.822114][T16447] netlink: 'syz.0.2686': attribute type 10 has an invalid length.
[  373.842053][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'.
[  374.065977][T16452] bond0 (unregistering): Released all slaves
[  374.102445][T16457] wg1 speed is unknown, defaulting to 1000
[  374.118267][T16465] netlink: 'syz.4.2691': attribute type 5 has an invalid length.
[  374.392375][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2695'.
[  374.400950][T16474] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  374.426269][T16474] bond6 (unregistering): Released all slaves
[  374.660647][T16479] wg1 speed is unknown, defaulting to 1000
[  374.688851][T16491] netlink: 'syz.4.2699': attribute type 1 has an invalid length.
[  374.720793][T16491] openvswitch: netlink: Actions may not be safe on all matching packets
[  374.860807][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'.
[  375.413436][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.461052][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.502540][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.547073][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.597846][T16519] erspan0: left allmulticast mode
[  375.619546][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.647606][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.678975][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.714488][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.744476][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'.
[  375.787524][T16519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.904825][T16523] bond10: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  375.938529][T16523] bond10 (unregistering): Released all slaves
[  376.582246][T16546] netlink: 'syz.4.2711': attribute type 2 has an invalid length.
[  376.628073][T16546] @: entered promiscuous mode
[  377.195985][T16569] wg1 speed is unknown, defaulting to 1000
[  377.209328][T16587] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  378.185957][T16644] macsec1: entered promiscuous mode
[  378.191659][T16644] macsec1: entered allmulticast mode
[  378.199698][T16644] team0: entered allmulticast mode
[  378.205244][T16644] macvlan2: entered allmulticast mode
[  378.210719][T16644] syz_tun: entered allmulticast mode
[  378.218840][T16644] bond4: entered allmulticast mode
[  378.225287][T16644] team0: Device macsec1 is already an upper device of the team interface
[  378.235232][T16644] team0: left allmulticast mode
[  378.240113][T16644] macvlan2: left allmulticast mode
[  378.245880][T16644] syz_tun: left allmulticast mode
[  378.250915][T16644] bond4: left allmulticast mode
[  378.314553][T16651] bond4: left promiscuous mode
[  378.366583][T16651] ip6gretap1: left promiscuous mode
[  378.865294][T16678] bond6: entered promiscuous mode
[  378.870854][T16678] 8021q: adding VLAN 0 to HW filter on device bond6
[  378.899173][T16682] 8021q: adding VLAN 0 to HW filter on device bond6
[  378.914252][T16682] bond6: (slave vcan0): The slave device specified does not support setting the MAC address
[  378.925993][T16682] bond6: (slave vcan0): Error -95 calling set_mac_address
[  378.956673][T16693] netlink: 'syz.4.2746': attribute type 5 has an invalid length.
[  379.089472][T16686] wg1 speed is unknown, defaulting to 1000
[  379.475998][T16719] FAULT_INJECTION: forcing a failure.
[  379.475998][T16719] name failslab, interval 1, probability 0, space 0, times 0
[  379.514128][T16719] CPU: 1 UID: 0 PID: 16719 Comm: syz.0.2752 Not tainted syzkaller #0 PREEMPT(full) 
[  379.514168][T16719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  379.514189][T16719] Call Trace:
[  379.514197][T16719]  <TASK>
[  379.514205][T16719]  dump_stack_lvl+0x189/0x250
[  379.514229][T16719]  ? __pfx____ratelimit+0x10/0x10
[  379.514253][T16719]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.514271][T16719]  ? __pfx__printk+0x10/0x10
[  379.514290][T16719]  ? __pfx___might_resched+0x10/0x10
[  379.514312][T16719]  ? fs_reclaim_acquire+0x7d/0x100
[  379.514336][T16719]  should_fail_ex+0x414/0x560
[  379.514358][T16719]  should_failslab+0xa8/0x100
[  379.514378][T16719]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[  379.514395][T16719]  ? alloc_vfsmnt+0xeb/0x430
[  379.514416][T16719]  kstrdup+0x42/0x100
[  379.514440][T16719]  alloc_vfsmnt+0xeb/0x430
[  379.514460][T16719]  clone_mnt+0x67/0xae0
[  379.514491][T16719]  copy_tree+0x3d4/0x930
[  379.514524][T16719]  copy_mnt_ns+0x178/0x820
[  379.514541][T16719]  ? rcu_is_watching+0x15/0xb0
[  379.514559][T16719]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  379.514577][T16719]  ? create_new_namespaces+0x31/0x720
[  379.514605][T16719]  create_new_namespaces+0xd1/0x720
[  379.514632][T16719]  ? bpf_lsm_capable+0x9/0x20
[  379.514649][T16719]  ? security_capable+0x7e/0x2e0
[  379.514678][T16719]  unshare_nsproxy_namespaces+0x11c/0x170
[  379.514705][T16719]  ksys_unshare+0x4c8/0x8c0
[  379.514732][T16719]  ? __pfx_ksys_unshare+0x10/0x10
[  379.514749][T16719]  ? ksys_write+0x1e1/0x250
[  379.514769][T16719]  ? __pfx_ksys_write+0x10/0x10
[  379.514798][T16719]  __x64_sys_unshare+0x38/0x50
[  379.514816][T16719]  do_syscall_64+0xfa/0xfa0
[  379.514838][T16719]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.514861][T16719]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.514878][T16719]  ? clear_bhb_loop+0x60/0xb0
[  379.514900][T16719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.514919][T16719] RIP: 0033:0x7f61ad78eec9
[  379.514937][T16719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.514952][T16719] RSP: 002b:00007f61ae572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  379.514972][T16719] RAX: ffffffffffffffda RBX: 00007f61ad9e5fa0 RCX: 00007f61ad78eec9
[  379.514986][T16719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480
[  379.514996][T16719] RBP: 00007f61ae572090 R08: 0000000000000000 R09: 0000000000000000
[  379.515007][T16719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  379.515017][T16719] R13: 00007f61ad9e6038 R14: 00007f61ad9e5fa0 R15: 00007ffffcb89128
[  379.515052][T16719]  </TASK>
[  380.317987][T16742] __nla_validate_parse: 23 callbacks suppressed
[  380.318007][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2757'.
[  380.350372][T16755] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2761'.
[  380.394001][T16742] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  380.755214][T16772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  380.762524][T16772] IPv6: NLM_F_CREATE should be set when creating new route
[  380.769826][T16772] IPv6: NLM_F_CREATE should be set when creating new route
[  380.777288][T16772] IPv6: NLM_F_CREATE should be set when creating new route
[  380.795018][T16773] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  380.850035][T16772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  381.068881][T16786] FAULT_INJECTION: forcing a failure.
[  381.068881][T16786] name failslab, interval 1, probability 0, space 0, times 0
[  381.082813][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  381.088920][T16786] CPU: 0 UID: 0 PID: 16786 Comm: syz.0.2769 Not tainted syzkaller #0 PREEMPT(full) 
[  381.088947][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  381.088958][T16786] Call Trace:
[  381.088965][T16786]  <TASK>
[  381.088972][T16786]  dump_stack_lvl+0x189/0x250
[  381.088996][T16786]  ? __pfx____ratelimit+0x10/0x10
[  381.089019][T16786]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.089037][T16786]  ? __pfx__printk+0x10/0x10
[  381.089064][T16786]  ? __pfx___might_resched+0x10/0x10
[  381.089095][T16786]  ? fs_reclaim_acquire+0x7d/0x100
[  381.089121][T16786]  should_fail_ex+0x414/0x560
[  381.089145][T16786]  should_failslab+0xa8/0x100
[  381.089167][T16786]  kmem_cache_alloc_noprof+0x73/0x3c0
[  381.089184][T16786]  ? alloc_vfsmnt+0x23/0x430
[  381.089204][T16786]  alloc_vfsmnt+0x23/0x430
[  381.089223][T16786]  clone_mnt+0x67/0xae0
[  381.089238][T16786]  ? do_raw_spin_unlock+0x122/0x240
[  381.089262][T16786]  copy_tree+0x3d4/0x930
[  381.089292][T16786]  copy_mnt_ns+0x178/0x820
[  381.089309][T16786]  ? rcu_is_watching+0x15/0xb0
[  381.089326][T16786]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  381.089342][T16786]  ? create_new_namespaces+0x31/0x720
[  381.089369][T16786]  create_new_namespaces+0xd1/0x720
[  381.089395][T16786]  ? bpf_lsm_capable+0x9/0x20
[  381.089411][T16786]  ? security_capable+0x7e/0x2e0
[  381.089439][T16786]  unshare_nsproxy_namespaces+0x11c/0x170
[  381.089465][T16786]  ksys_unshare+0x4c8/0x8c0
[  381.089491][T16786]  ? __pfx_ksys_unshare+0x10/0x10
[  381.089507][T16786]  ? ksys_write+0x1e1/0x250
[  381.089526][T16786]  ? __pfx_ksys_write+0x10/0x10
[  381.089553][T16786]  __x64_sys_unshare+0x38/0x50
[  381.089570][T16786]  do_syscall_64+0xfa/0xfa0
[  381.089592][T16786]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.089614][T16786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.089630][T16786]  ? clear_bhb_loop+0x60/0xb0
[  381.089650][T16786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.089666][T16786] RIP: 0033:0x7f61ad78eec9
[  381.089682][T16786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.089696][T16786] RSP: 002b:00007f61ae572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  381.089716][T16786] RAX: ffffffffffffffda RBX: 00007f61ad9e5fa0 RCX: 00007f61ad78eec9
[  381.089728][T16786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480
[  381.089739][T16786] RBP: 00007f61ae572090 R08: 0000000000000000 R09: 0000000000000000
[  381.089749][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.089759][T16786] R13: 00007f61ad9e6038 R14: 00007f61ad9e5fa0 R15: 00007ffffcb89128
[  381.089792][T16786]  </TASK>
[  381.247202][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2768'.
[  381.427001][T16789] wg1 speed is unknown, defaulting to 1000
[  381.528284][T16810] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  381.664974][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'.
[  381.874833][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'.
[  381.892459][T16830] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2778'.
[  382.593236][T16857] FAULT_INJECTION: forcing a failure.
[  382.593236][T16857] name failslab, interval 1, probability 0, space 0, times 0
[  382.636269][T16857] CPU: 1 UID: 0 PID: 16857 Comm: syz.0.2785 Not tainted syzkaller #0 PREEMPT(full) 
[  382.636298][T16857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  382.636308][T16857] Call Trace:
[  382.636316][T16857]  <TASK>
[  382.636323][T16857]  dump_stack_lvl+0x189/0x250
[  382.636346][T16857]  ? __pfx____ratelimit+0x10/0x10
[  382.636369][T16857]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.636386][T16857]  ? __pfx__printk+0x10/0x10
[  382.636408][T16857]  ? __pfx___might_resched+0x10/0x10
[  382.636431][T16857]  ? fs_reclaim_acquire+0x7d/0x100
[  382.636455][T16857]  should_fail_ex+0x414/0x560
[  382.636478][T16857]  should_failslab+0xa8/0x100
[  382.636519][T16857]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[  382.636538][T16857]  ? alloc_vfsmnt+0xeb/0x430
[  382.636559][T16857]  kstrdup+0x42/0x100
[  382.636587][T16857]  alloc_vfsmnt+0xeb/0x430
[  382.636605][T16857]  clone_mnt+0x67/0xae0
[  382.636620][T16857]  ? do_raw_spin_unlock+0x122/0x240
[  382.636644][T16857]  copy_tree+0x3d4/0x930
[  382.636676][T16857]  copy_mnt_ns+0x178/0x820
[  382.636694][T16857]  ? rcu_is_watching+0x15/0xb0
[  382.636711][T16857]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  382.636729][T16857]  ? create_new_namespaces+0x31/0x720
[  382.636757][T16857]  create_new_namespaces+0xd1/0x720
[  382.636789][T16857]  ? bpf_lsm_capable+0x9/0x20
[  382.636811][T16857]  ? security_capable+0x7e/0x2e0
[  382.636848][T16857]  unshare_nsproxy_namespaces+0x11c/0x170
[  382.636886][T16857]  ksys_unshare+0x4c8/0x8c0
[  382.636922][T16857]  ? __pfx_ksys_unshare+0x10/0x10
[  382.636944][T16857]  ? ksys_write+0x1e1/0x250
[  382.636972][T16857]  ? __pfx_ksys_write+0x10/0x10
[  382.637005][T16857]  __x64_sys_unshare+0x38/0x50
[  382.637126][T16857]  do_syscall_64+0xfa/0xfa0
[  382.637150][T16857]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.637172][T16857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.637189][T16857]  ? clear_bhb_loop+0x60/0xb0
[  382.637210][T16857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.637224][T16857] RIP: 0033:0x7f61ad78eec9
[  382.637241][T16857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.637256][T16857] RSP: 002b:00007f61ae572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  382.637283][T16857] RAX: ffffffffffffffda RBX: 00007f61ad9e5fa0 RCX: 00007f61ad78eec9
[  382.637296][T16857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480
[  382.637307][T16857] RBP: 00007f61ae572090 R08: 0000000000000000 R09: 0000000000000000
[  382.637317][T16857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.637327][T16857] R13: 00007f61ad9e6038 R14: 00007f61ad9e5fa0 R15: 00007ffffcb89128
[  382.637357][T16857]  </TASK>
[  383.217629][T16859] wg1 speed is unknown, defaulting to 1000
[  383.311801][T16879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2792'.
[  383.608296][T16892] ip6t_srh: unknown srh match flags  4000
[  383.763556][T16906] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2798'.
[  384.067899][T16913] netlink: 'syz.0.2802': attribute type 2 has an invalid length.
[  384.094368][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2802'.
[  384.215910][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'.
[  384.391800][T16919] wg1 speed is unknown, defaulting to 1000
[  384.625550][T16936] wg1 speed is unknown, defaulting to 1000
[  384.989307][T16947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.076148][T16947] syzkaller0: entered promiscuous mode
[  385.087225][T16947] syzkaller0: entered allmulticast mode
[  385.144587][T16947] tipc: Resetting bearer <eth:syzkaller0>
[  385.158902][T16946] tipc: Resetting bearer <eth:syzkaller0>
[  385.194096][T16946] tipc: Disabling bearer <eth:syzkaller0>
[  385.600163][T16963] __nla_validate_parse: 3 callbacks suppressed
[  385.600182][T16963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2816'.
[  385.618947][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2816'.
[  385.634371][T16968] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2818'.
[  385.648796][T16969] sctp: [Deprecated]: syz.1.2817 (pid 16969) Use of struct sctp_assoc_value in delayed_ack socket option.
[  385.648796][T16969] Use struct sctp_sack_info instead
[  385.961381][ T5896] ------------[ cut here ]------------
[  385.968308][ T5896] ida_free called for id=959 which is not allocated.
[  385.977683][ T5896] WARNING: CPU: 0 PID: 5896 at lib/idr.c:592 ida_free+0x280/0x310
[  385.986134][ T5896] Modules linked in:
[  385.990360][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) 
[  386.000518][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  386.011101][ T5896] Workqueue: events free_ipc
[  386.016717][ T5896] RIP: 0010:ida_free+0x280/0x310
[  386.021687][ T5896] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 21 50 0c 00 90 48 c7 c7 40 ce 94 8c 44 89 fe e8 11 30 47 f6 90 <0f> 0b 90 90 eb 34 e8 65 13 84 f6 49 bd 00 00 00 00 00 fc ff df eb
[  386.042306][ T5896] RSP: 0018:ffffc9000545f920 EFLAGS: 00010246
[  386.050667][ T5896] RAX: 6f2fec972966d200 RBX: 0000000000000a02 RCX: ffff88807a413c80
[  386.059560][ T5896] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  386.067988][ T5896] RBP: ffffc9000545fa18 R08: 0000000000000003 R09: 0000000000000004
[  386.076800][ T5896] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: 1ffff92000a8bf28
[  386.085734][ T5896] R13: dffffc0000000000 R14: ffff888140e8c000 R15: 00000000000003bf
[  386.094323][ T5896] FS:  0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000
[  386.103914][ T5896] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  386.110521][ T5896] CR2: 000000110c2e6cba CR3: 000000004c30c000 CR4: 00000000003526f0
[  386.119419][ T5896] Call Trace:
[  386.123575][ T5896]  <TASK>
[  386.126523][ T5896]  ? __pfx_ida_free+0x10/0x10
[  386.131207][ T5896]  ? put_ucounts+0x3ab/0x400
[  386.136695][ T5896]  ? dec_ucount+0x15c/0x180
[  386.141222][ T5896]  free_ipc+0x1e9/0x250
[  386.146140][ T5896]  ? process_scheduled_works+0x9ef/0x17b0
[  386.151886][ T5896]  process_scheduled_works+0xade/0x17b0
[  386.157788][ T5896]  ? __pfx_process_scheduled_works+0x10/0x10
[  386.164347][ T5896]  worker_thread+0x8a0/0xda0
[  386.168956][ T5896]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  386.175679][ T5896]  ? __kthread_parkme+0x7b/0x200
[  386.180630][ T5896]  kthread+0x711/0x8a0
[  386.185267][ T5896]  ? __pfx_worker_thread+0x10/0x10
[  386.190405][ T5896]  ? __pfx_kthread+0x10/0x10
[  386.195904][ T5896]  ? _raw_spin_unlock_irq+0x23/0x50
[  386.201218][ T5896]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.207028][ T5896]  ? __pfx_kthread+0x10/0x10
[  386.211668][ T5896]  ret_from_fork+0x4b9/0x870
[  386.216780][ T5896]  ? __pfx_ret_from_fork+0x10/0x10
[  386.221957][ T5896]  ? __switch_to_asm+0x39/0x70
[  386.227531][ T5896]  ? __switch_to_asm+0x33/0x70
[  386.232308][ T5896]  ? __pfx_kthread+0x10/0x10
[  386.237175][ T5896]  ret_from_fork_asm+0x1a/0x30
[  386.241960][ T5896]  </TASK>
[  386.245263][ T5896] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  386.252534][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) 
[  386.261916][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  386.271985][ T5896] Workqueue: events free_ipc
[  386.276614][ T5896] Call Trace:
[  386.279896][ T5896]  <TASK>
[  386.282827][ T5896]  dump_stack_lvl+0x99/0x250
[  386.287404][ T5896]  ? __asan_memcpy+0x40/0x70
[  386.291986][ T5896]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.297170][ T5896]  ? __pfx__printk+0x10/0x10
[  386.301758][ T5896]  vpanic+0x281/0x750
[  386.305751][ T5896]  ? __pfx__printk+0x10/0x10
[  386.310351][ T5896]  ? __pfx_vpanic+0x10/0x10
[  386.314849][ T5896]  ? is_bpf_text_address+0x26/0x2b0
[  386.320063][ T5896]  panic+0xb9/0xc0
[  386.323777][ T5896]  ? __pfx_panic+0x10/0x10
[  386.328207][ T5896]  __warn+0x31b/0x4b0
[  386.332180][ T5896]  ? ida_free+0x280/0x310
[  386.336504][ T5896]  ? ida_free+0x280/0x310
[  386.340830][ T5896]  report_bug+0x2be/0x4f0
[  386.345156][ T5896]  ? ida_free+0x280/0x310
[  386.349478][ T5896]  ? ida_free+0x280/0x310
[  386.353799][ T5896]  ? ida_free+0x282/0x310
[  386.358127][ T5896]  handle_bug+0x84/0x160
[  386.362355][ T5896]  exc_invalid_op+0x1a/0x50
[  386.366844][ T5896]  asm_exc_invalid_op+0x1a/0x20
[  386.371681][ T5896] RIP: 0010:ida_free+0x280/0x310
[  386.376616][ T5896] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 21 50 0c 00 90 48 c7 c7 40 ce 94 8c 44 89 fe e8 11 30 47 f6 90 <0f> 0b 90 90 eb 34 e8 65 13 84 f6 49 bd 00 00 00 00 00 fc ff df eb
[  386.396205][ T5896] RSP: 0018:ffffc9000545f920 EFLAGS: 00010246
[  386.402263][ T5896] RAX: 6f2fec972966d200 RBX: 0000000000000a02 RCX: ffff88807a413c80
[  386.410221][ T5896] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  386.418179][ T5896] RBP: ffffc9000545fa18 R08: 0000000000000003 R09: 0000000000000004
[  386.426132][ T5896] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: 1ffff92000a8bf28
[  386.434099][ T5896] R13: dffffc0000000000 R14: ffff888140e8c000 R15: 00000000000003bf
[  386.442339][ T5896]  ? __pfx_ida_free+0x10/0x10
[  386.447005][ T5896]  ? put_ucounts+0x3ab/0x400
[  386.451588][ T5896]  ? dec_ucount+0x15c/0x180
[  386.456080][ T5896]  free_ipc+0x1e9/0x250
[  386.460225][ T5896]  ? process_scheduled_works+0x9ef/0x17b0
[  386.465943][ T5896]  process_scheduled_works+0xade/0x17b0
[  386.471504][ T5896]  ? __pfx_process_scheduled_works+0x10/0x10
[  386.477488][ T5896]  worker_thread+0x8a0/0xda0
[  386.482071][ T5896]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  386.488395][ T5896]  ? __kthread_parkme+0x7b/0x200
[  386.493325][ T5896]  kthread+0x711/0x8a0
[  386.497389][ T5896]  ? __pfx_worker_thread+0x10/0x10
[  386.502498][ T5896]  ? __pfx_kthread+0x10/0x10
[  386.507081][ T5896]  ? _raw_spin_unlock_irq+0x23/0x50
[  386.512278][ T5896]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.517472][ T5896]  ? __pfx_kthread+0x10/0x10
[  386.522057][ T5896]  ret_from_fork+0x4b9/0x870
[  386.526653][ T5896]  ? __pfx_ret_from_fork+0x10/0x10
[  386.531759][ T5896]  ? __switch_to_asm+0x39/0x70
[  386.536507][ T5896]  ? __switch_to_asm+0x33/0x70
[  386.541268][ T5896]  ? __pfx_kthread+0x10/0x10
[  386.545849][ T5896]  ret_from_fork_asm+0x1a/0x30
[  386.550670][ T5896]  </TASK>
[  386.554004][ T5896] Kernel Offset: disabled
[  386.558320][ T5896] Rebooting in 86400 seconds..