last executing test programs:

4.926734416s ago: executing program 2 (id=5735):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) (async, rerun: 64)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000180)=0x9, 0x4) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb030018f8ffffffffffff2600000027000000030000000b00000002c85f28b50000000100000007000000f980870a02000000ff12001fdfffff04000000f20e5c00000000"], &(0x7f00000001c0)=""/47, 0x43, 0x2f, 0x1, 0xb8c}, 0x28) (async)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x325}, 0x14}}, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000ca7065d5ed8ed2000000001801000020200000000000000000a71003f8b719c4abd000e300007b1af8ffe3340550b04600000000bfa10000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000000)={0xb7, 0xa}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='rcu_utilization\x00', r3}, 0x18)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async)
r6 = accept$alg(r5, 0x0, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0}) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="14005e8008000100ffffffff0800020000000000"], 0x30}}, 0x0) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async)
recvmmsg(r6, &(0x7f0000006100), 0x49f, 0x0, 0x0) (async)
unshare(0x62060680) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (rerun: 32)

4.554515201s ago: executing program 4 (id=5742):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffa0, 0x2, {0xf, "00000000000f00000001000f0e00"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x4}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000020000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x20, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

3.962014482s ago: executing program 2 (id=5754):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3f39730976f1ddee002cb5d30ba518f5209d473fc8182e71a9531c1fec4a5caddef4734d49a16380f8a375c7cd4bced3999cb43da0b8d87ad5ab9f2d39fb4fc761ecfaaa9c0520a57f3c5fe25fea7df7bba7640f0aeb5e5901bee7f69b10a5485dc57ffa9c5328346a282cad3576d6b815e012865edfd25660ca63f7b67f029e31b8e601640983b5cdbb62616b9285f8054982a56ac5618c321b87234b66b10f827e6a1d3094093b75f73dff52cbe4b86e49f19266416804defe3d5488d5d7a1ec2f0276c57944c8064b1243df01c50f3225e87b7cf474becea28f905dd298e793fee5b996b86395c2cec08a1d85df43d855784502797e9de7d8f2fcd9745b9bd7aab3d4cd46d9e1ad3f6c137e9e78316fe0b8474146b27b3e857de06b3a64aa48bcbd185ea51eb83dece2e374be75167c915191a68", 0x999}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

3.395561768s ago: executing program 4 (id=5751):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff80000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0)

3.071646188s ago: executing program 4 (id=5753):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="796129bd70000000feff7e0000000c0099006d910000150000006a941b5e1089278c0d1c9ab378b1"], 0x20}}, 0x4000054)

2.990857475s ago: executing program 2 (id=5755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b00010065787468647200002400028008000140000000020800034000000000080004400000002205000200890000002c0001800c00010062697477697365001c0002800800014000000014080002400000801708000340000000040900010073797a30"], 0x1a0}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)

2.978207946s ago: executing program 4 (id=5756):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x74, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x44, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xe, 0x0, @random="2c0a4108acde95d0ca09"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2400c084}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

2.850518889s ago: executing program 2 (id=5757):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x74, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x44, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xe, 0x0, @random="2c0a4108acde95d0ca09"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2400c084}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.095951533s ago: executing program 0 (id=5770):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001002dbd7000fc020000e0000002000000000000ff8000e6ffffffffffffff0000000000000000000000000000004e2000000a"], 0xb8}}, 0x0)

2.057278725s ago: executing program 4 (id=5773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f354461"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
poll(0x0, 0x0, 0x7)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040005)
r3 = socket$inet6(0xa, 0x3, 0x1)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r4, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0xba, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x8, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0xc93b7bc0, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r1, 0x1ad72f7)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)

1.999810071s ago: executing program 0 (id=5774):
mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000008, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
r1 = socket$packet(0x11, 0x2, 0x300)
unshare(0x20000400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
r4 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x100000000000000)
sendmsg(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a9", 0x1}], 0x1}, 0x4001)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', r6, 0x0, 0x9}, 0x18)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r8, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x21d, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x5, 0x2, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0xfffffffc}}, 0xe8)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0)
shutdown(r8, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x9}, &(0x7f0000000340)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0)

1.992966631s ago: executing program 2 (id=5775):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r1, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c)
connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @null}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], 0x0}, 0x94)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x4040010)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24040014)
syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=0x0], 0x0, 0x3}, 0x94)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)

1.931000412s ago: executing program 3 (id=5776):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e23}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r5, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0x9, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @random="e96129f55ef5883b02680e9fc8c18449d2b9ffb97766b4b6cde6aacd3955d06aa44088284449a5e937a2480b005f78cf6103cf416a81bbb60193a6d301c01fbfca5b429aa4a9ee0f49fcff8686ac467612c83f63580e17d527df51a6c8507e4dc3f25059932c6babb2f737713b3efbdf7770dff8ed5403d111eeaece109a37306ee6efc03cb08e656379e0"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac00", @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00c0000000080001007063690011000200303030303a30303a31302e300000000008000b0007000000"], 0xac}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

1.6832628s ago: executing program 3 (id=5778):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffa0, 0x2, {0xf, "00000000000f00000001000f0e00"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x4}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000020000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x20, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

1.570413243s ago: executing program 0 (id=5779):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a0101"], 0x2c}}, 0x0)
recvmmsg(r2, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}, 0x82}], 0x1, 0x100, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0)

1.458031183s ago: executing program 0 (id=5780):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

735.050467ms ago: executing program 1 (id=5783):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000073113400000000008510002002000000850000007600000095000000000000009500a50500000000d9663e03905df1096107fdd92c30e9183e82047fdcd61f3154478e6b5b632e441e23729ad6236ac8934bd4de6845a24b3992b884"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

681.165528ms ago: executing program 4 (id=5784):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x74, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x44, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xe, 0x0, @random="2c0a4108acde95d0ca09"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2400c084}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

609.905924ms ago: executing program 2 (id=5785):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x74, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x44, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xe, 0x0, @random="2c0a4108acde95d0ca09"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2400c084}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

608.859772ms ago: executing program 3 (id=5786):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001002dbd7000fc020000e000000200000000000000e600e6ffffffffffffff0000000000000000000000000000004e2000000a"], 0xb8}}, 0x0)

534.160012ms ago: executing program 0 (id=5787):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
epoll_pwait(r5, 0x0, 0x0, 0x10001, &(0x7f0000000180)={[0xffffffffe277652b]}, 0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000009000000800b0001006272696467650000100002800c0021000000eaa10004"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
recvmsg(r6, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000380)=""/57, 0x39}, 0x10042)

335.453593ms ago: executing program 1 (id=5788):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44040) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES8=r1], 0x30}}, 0x94)

286.355426ms ago: executing program 3 (id=5789):
mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000008, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
r1 = socket$packet(0x11, 0x2, 0x300)
unshare(0x20000400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
r4 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x200000000000000)
sendmsg(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a9", 0x1}], 0x1}, 0x4001)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', r6, 0x0, 0x9}, 0x18)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r8, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x21d, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x5, 0x2, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0xfffffffc}}, 0xe8)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0)
shutdown(r8, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x9}, &(0x7f0000000340)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0)

269.21881ms ago: executing program 1 (id=5790):
r0 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r2, 0x0, 0x0) (async)
connect$unix(r2, 0x0, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045c436e0bf7b5e0001ac1414aa03059078030000004600000000000000005e0009ac141400ac1414bb444400010000000000000000ac1414bb0004000000141400000000000000000000000000e0000002000000007f00000100000005ac1414aa00000004e000000100000006"], 0x0) (async)
syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045c436e0bf7b5e0001ac1414aa03059078030000004600000000000000005e0009ac141400ac1414bb444400010000000000000000ac1414bb0004000000141400000000000000000000000000e0000002000000007f00000100000005ac1414aa00000004e000000100000006"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x38, r4, 0x1, 0x1, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x33, 0x9}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x20004090)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@broadcast, @loopback, 0x0, "9c7ddf53f78ff930661a54c70bb9f94113f3814d2dcc579615b0eead30dcde7a", 0x1, 0x9, 0x8, 0x4}, 0x3c)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004008afe957c96c09102669000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004008afe957c96c09102669000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xd0, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdb}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40041) (async)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xd0, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdb}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40041)

255.155962ms ago: executing program 0 (id=5791):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x4f)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x4659, 0x62d, 0xac2, 0x4, 0xfffffffffffffff7, 0x40], 0x7, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40008860}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x44, 0x65, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x2, 0x6}, {0xffe0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xa4, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x4840)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

159.984943ms ago: executing program 3 (id=5792):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000afd020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe8000"/151], 0xec}}, 0x20000000)

148.186931ms ago: executing program 1 (id=5793):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79613bbd7000000000007e0000000c0099006d910000150000006a941b5e1089278c0d1c9ab378b1"], 0x20}}, 0x4000054)

137.433568ms ago: executing program 3 (id=5794):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000001d711867000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0xfe743000)

108.765249ms ago: executing program 1 (id=5795):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x5, 0x3, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r6, 0x40}, 0x8)
r7 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r7, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x123, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x88, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0xffffff82)
unshare(0x2040400)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x14})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='inode_switch_wbs\x00', 0xffffffffffffffff, 0x0, 0x3ec}, 0x18)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x9b6, 0x12)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="486079431c3ab763ab217942c1a6d7ffc8f94c50c31bfd"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x2000010, 0x110, 0xffffffffffffffff, 0x71a33000)

0s ago: executing program 1 (id=5796):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b00010065787468647200002400028008000140000000020800034000000000080004400000002205000200890000002c0001800c00010062697477697365001c0002800800014000000014080002400000801708000340000000040900010073797a30"], 0x1f0}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)

kernel console output (not intermixed with test programs):

1.130223][T18610] lo speed is unknown, defaulting to 1000
[  341.238877][T18615] pim6reg: entered allmulticast mode
[  341.256453][T18610] lo speed is unknown, defaulting to 1000
[  341.263182][T18615] pim6reg: left allmulticast mode
[  341.809006][T18630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.879532][T18630] syzkaller0: entered promiscuous mode
[  341.885176][T18630] syzkaller0: entered allmulticast mode
[  342.230376][   T55] lo speed is unknown, defaulting to 1000
[  342.236518][   T55] syz0: Port: 1 Link DOWN
[  342.242838][T18643] tipc: Resetting bearer <eth:syzkaller0>
[  342.261982][T18629] tipc: Resetting bearer <eth:syzkaller0>
[  342.270396][T18629] tipc: Disabling bearer <eth:syzkaller0>
[  342.278813][ T8608] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.289421][ T8608] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.299155][ T8608] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.308580][ T8608] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.322636][   T55] lo speed is unknown, defaulting to 1000
[  342.340476][ T8608] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.368455][ T8608] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.389614][ T8608] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.399868][ T8608] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.773241][T18714] lo speed is unknown, defaulting to 1000
[  342.875834][T18728] ksmbd: Unknown IPC event: 3, ignore.
[  343.037618][T18715] lo speed is unknown, defaulting to 1000
[  343.058014][T18714] lo speed is unknown, defaulting to 1000
[  343.318099][T18715] lo speed is unknown, defaulting to 1000
[  343.336666][T18765] netlink: 'syz.2.3989': attribute type 39 has an invalid length.
[  343.413176][ T5974] IPVS: starting estimator thread 0...
[  343.439290][T18771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.454583][T18773] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  343.467679][T18773] bond0: left promiscuous mode
[  343.472568][T18773] macvlan2: left promiscuous mode
[  343.481958][T18773] vlan0: left promiscuous mode
[  343.487396][T18773] bond4: left promiscuous mode
[  343.492253][T18773] gretap1: left promiscuous mode
[  343.498815][T18773] vlan0: left allmulticast mode
[  343.503812][T18773] bond4: left allmulticast mode
[  343.509331][T18772] IPVS: using max 41 ests per chain, 98400 per kthread
[  343.510499][T18773] gretap1: left allmulticast mode
[  343.523634][T18773] vlan2: left allmulticast mode
[  343.528753][T18773] bond0: left allmulticast mode
[  343.541178][ T8608] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.566458][ T8608] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.580313][ T8608] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.589707][ T8608] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.632527][T18779] bond4: (slave gretap1): Releasing active interface
[  344.000412][T18797] tap0: tun_chr_ioctl cmd 1074025677
[  344.031094][T18797] tap0: linktype set to 0
[  344.217982][T18811] __nla_validate_parse: 7 callbacks suppressed
[  344.218001][T18811] netlink: 704 bytes leftover after parsing attributes in process `syz.2.4006'.
[  344.406454][T18820] ip6tnl0: entered promiscuous mode
[  344.425589][T18820] ip6tnl0: entered allmulticast mode
[  344.471634][T18822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4009'.
[  344.498308][ T5183] Bluetooth: hci3: link tx timeout
[  344.504599][ T5183] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  344.688591][T18831] netlink: 'syz.1.4012': attribute type 1 has an invalid length.
[  344.755433][T18831] 8021q: adding VLAN 0 to HW filter on device bond3
[  345.159818][T18854] batadv_slave_0: entered promiscuous mode
[  345.251713][T18863] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4021'.
[  345.262996][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4021'.
[  345.365689][T18871] netlink: 'syz.2.4023': attribute type 1 has an invalid length.
[  345.374424][T18873] netlink: 'syz.2.4023': attribute type 1 has an invalid length.
[  345.401310][T18871] gretap1: entered promiscuous mode
[  345.409232][T18871] bond1: (slave gretap1): making interface the new active one
[  345.417546][T18871] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  345.427927][T18871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4023'.
[  345.438326][T18871] 8021q: adding VLAN 0 to HW filter on device bond1
[  345.448107][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  345.649401][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4028'.
[  345.753425][T18891] lo speed is unknown, defaulting to 1000
[  345.856869][T18891] lo speed is unknown, defaulting to 1000
[  345.915925][   T36] wlan0: Trigger new scan to find an IBSS to join
[  345.942015][T18854] batadv_slave_0: left promiscuous mode
[  346.159743][T18900] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  346.182059][T18902] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  346.240569][T18904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4034'.
[  346.266337][T18904] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4034'.
[  346.271844][T18906] netlink: 'syz.0.4033': attribute type 10 has an invalid length.
[  346.290393][T18906] tipc: Resetting bearer <eth:team0>
[  346.297700][T18906] 8021q: adding VLAN 0 to HW filter on device team0
[  346.309770][T18906] bond0: (slave team0): Enslaving as an active interface with an up link
[  346.399968][T18908] syzkaller1: entered promiscuous mode
[  346.407549][T18908] syzkaller1: entered allmulticast mode
[  346.523402][T18922] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4041'.
[  346.565354][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  346.907711][T18945] FAULT_INJECTION: forcing a failure.
[  346.907711][T18945] name failslab, interval 1, probability 0, space 0, times 0
[  346.920831][T18945] CPU: 0 UID: 0 PID: 18945 Comm: syz.3.4046 Not tainted syzkaller #0 PREEMPT(full) 
[  346.920857][T18945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  346.920868][T18945] Call Trace:
[  346.920876][T18945]  <TASK>
[  346.920884][T18945]  dump_stack_lvl+0x189/0x250
[  346.920913][T18945]  ? __pfx____ratelimit+0x10/0x10
[  346.920937][T18945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.920957][T18945]  ? __pfx__printk+0x10/0x10
[  346.920979][T18945]  ? fs_reclaim_acquire+0x7d/0x100
[  346.921001][T18945]  ? rcu_is_watching+0x15/0xb0
[  346.921017][T18945]  ? __pfx___might_resched+0x10/0x10
[  346.921031][T18945]  ? lock_acquire+0x5f/0x360
[  346.921053][T18945]  should_fail_ex+0x414/0x560
[  346.921078][T18945]  should_failslab+0xa8/0x100
[  346.921101][T18945]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  346.921122][T18945]  ? __alloc_skb+0x112/0x2d0
[  346.921140][T18945]  __alloc_skb+0x112/0x2d0
[  346.921157][T18945]  netlink_sendmsg+0x5c6/0xb30
[  346.921177][T18945]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.921194][T18945]  ? aa_sock_msg_perm+0xf1/0x1d0
[  346.921210][T18945]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  346.921225][T18945]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.921239][T18945]  __sock_sendmsg+0x21c/0x270
[  346.921259][T18945]  ____sys_sendmsg+0x505/0x830
[  346.921280][T18945]  ? __pfx_____sys_sendmsg+0x10/0x10
[  346.921301][T18945]  ? import_iovec+0x74/0xa0
[  346.921322][T18945]  ___sys_sendmsg+0x21f/0x2a0
[  346.921339][T18945]  ? __pfx____sys_sendmsg+0x10/0x10
[  346.921368][T18945]  ? __fget_files+0x2a/0x420
[  346.921381][T18945]  ? __fget_files+0x3a0/0x420
[  346.921398][T18945]  __x64_sys_sendmsg+0x19b/0x260
[  346.921417][T18945]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  346.921437][T18945]  ? __pfx_ksys_write+0x10/0x10
[  346.921458][T18945]  ? rcu_is_watching+0x15/0xb0
[  346.921477][T18945]  ? rcu_is_watching+0x15/0xb0
[  346.921494][T18945]  do_syscall_64+0xfa/0x3b0
[  346.921512][T18945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.921529][T18945]  ? clear_bhb_loop+0x60/0xb0
[  346.921547][T18945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.921565][T18945] RIP: 0033:0x7fdcab98ebe9
[  346.921581][T18945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.921597][T18945] RSP: 002b:00007fdcac8d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.921617][T18945] RAX: ffffffffffffffda RBX: 00007fdcabbb5fa0 RCX: 00007fdcab98ebe9
[  346.921629][T18945] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000009
[  346.921640][T18945] RBP: 00007fdcac8d2090 R08: 0000000000000000 R09: 0000000000000000
[  346.921651][T18945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.921662][T18945] R13: 00007fdcabbb6038 R14: 00007fdcabbb5fa0 R15: 00007fff50142008
[  346.921707][T18945]  </TASK>
[  347.239401][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4047'.
[  347.339997][T18951] netlink: 'syz.2.4048': attribute type 1 has an invalid length.
[  347.348069][T18951] netlink: 'syz.2.4048': attribute type 4 has an invalid length.
[  348.011774][T18986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.024838][T18986] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode
[  348.032653][T18986] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode
[  348.071131][T18986] tipc: Resetting bearer <eth:syzkaller0>
[  348.079376][T18985] lo speed is unknown, defaulting to 1000
[  348.219462][T18985] lo speed is unknown, defaulting to 1000
[  348.364182][T18999] lo speed is unknown, defaulting to 1000
[  348.427595][T19007] netlink: 'syz.4.4064': attribute type 1 has an invalid length.
[  348.550715][T18999] lo speed is unknown, defaulting to 1000
[  348.960744][   T36] wlan0: Trigger new scan to find an IBSS to join
[  349.064911][   T55] tipc: Node number set to 4040014428
[  349.481355][T19069] __nla_validate_parse: 5 callbacks suppressed
[  349.481375][T19069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4077'.
[  349.534895][T19069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4077'.
[  349.884652][T19097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4088'.
[  350.390032][T19144] tap0: tun_chr_ioctl cmd 2148553947
[  350.400256][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4102'.
[  350.472691][T19144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.483066][T19144] syzkaller0: entered promiscuous mode
[  350.488686][T19144] syzkaller0: entered allmulticast mode
[  350.503787][T19144] tipc: Resetting bearer <eth:syzkaller0>
[  350.547847][T19143] tipc: Resetting bearer <eth:syzkaller0>
[  350.559074][T19143] tipc: Disabling bearer <eth:syzkaller0>
[  350.627509][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4108'.
[  350.651449][T19157] macvlan2: entered promiscuous mode
[  350.656925][T19157] macvlan2: entered allmulticast mode
[  350.663640][T19157] bond2: (slave macvlan2): Opening slave failed
[  350.722996][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4110'.
[  350.736421][T19162] openvswitch: netlink: Message has 4 unknown bytes.
[  350.743420][T19162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.074201][   T30] audit: type=1800 audit(1756157995.086:11): pid=19178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4116" name="memory.events" dev="tmpfs" ino=1058 res=0 errno=0
[  351.247372][T19184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4118'.
[  351.347794][T19188] bond0: (slave wlan1): Releasing backup interface
[  351.390307][T19190] lo speed is unknown, defaulting to 1000
[  351.397993][T19188] netlink: 'syz.1.4119': attribute type 10 has an invalid length.
[  351.411266][T19188] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  351.508318][T19193] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4121'.
[  351.634213][T19190] lo speed is unknown, defaulting to 1000
[  351.915330][   T13] wlan0: Trigger new scan to find an IBSS to join
[  351.932147][T19208] netlink: 'syz.1.4128': attribute type 7 has an invalid length.
[  352.097324][T19218] !
: renamed from dummy0
[  352.115743][T19220] netlink: 'syz.4.4131': attribute type 8 has an invalid length.
[  352.218583][T19229] lo speed is unknown, defaulting to 1000
[  352.226612][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'.
[  352.444261][T19229] lo speed is unknown, defaulting to 1000
[  352.463756][T19228] lo speed is unknown, defaulting to 1000
[  352.927766][T19228] lo speed is unknown, defaulting to 1000
[  353.095036][T19246] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4140'.
[  353.121284][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.867052][T19293] gtp0: entered promiscuous mode
[  353.874885][T19293] gtp0: entered allmulticast mode
[  353.902282][T19295] erspan0: left allmulticast mode
[  353.934125][T19295] veth3: left promiscuous mode
[  353.945451][T19295] tipc: Resetting bearer <eth:syzkaller0>
[  353.960649][T19295] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode
[  353.968291][T19295] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode
[  354.144585][T19310] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12
[  354.201654][T19320] netlink: 'syz.4.4157': attribute type 4 has an invalid length.
[  354.219898][T19324] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  354.683037][T19346] bridge4: entered promiscuous mode
[  354.688427][T19346] bridge4: entered allmulticast mode
[  354.707631][T19352] netlink: 'syz.2.4169': attribute type 16 has an invalid length.
[  354.717945][T19352] netlink: 'syz.2.4169': attribute type 17 has an invalid length.
[  354.783778][T19358] __nla_validate_parse: 6 callbacks suppressed
[  354.783795][T19358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'.
[  354.808229][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'.
[  354.932171][T19361] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  355.682707][T19386] siw: device registration error -23
[  356.020088][T19407] netlink: 'syz.3.4188': attribute type 3 has an invalid length.
[  356.028414][T19407] netlink: 'syz.3.4188': attribute type 1 has an invalid length.
[  356.036377][T19407] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4188'.
[  356.080946][T19417] netlink: 'syz.3.4190': attribute type 21 has an invalid length.
[  356.117660][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4189'.
[  356.359652][T19428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4193'.
[  356.370352][T19428] unsupported nlmsg_type 40
[  356.587525][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4195'.
[  356.694728][T19436] bridge_slave_1: left allmulticast mode
[  356.700799][T19436] bridge_slave_1: left promiscuous mode
[  356.712270][T19436] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.721873][T19436] bridge_slave_0: left allmulticast mode
[  356.728058][T19436] bridge_slave_0: left promiscuous mode
[  356.738375][T19436] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.020854][T19454] lo speed is unknown, defaulting to 1000
[  357.056933][T19458] ip6erspan0: entered allmulticast mode
[  357.076097][T19458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4204'.
[  357.178501][T19465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4206'.
[  357.239576][T19454] lo speed is unknown, defaulting to 1000
[  357.345521][T19461] lo speed is unknown, defaulting to 1000
[  357.734484][T19461] lo speed is unknown, defaulting to 1000
[  357.784027][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4216'.
[  357.791631][T19493] lo speed is unknown, defaulting to 1000
[  357.842724][T19496] openvswitch: netlink: Flow actions attr not present in new flow.
[  357.987109][T19493] lo speed is unknown, defaulting to 1000
[  358.044397][T19502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4218'.
[  358.300379][T19515] netlink: 'syz.4.4223': attribute type 1 has an invalid length.
[  358.736158][T19525] hsr_slave_1 (unregistering): left promiscuous mode
[  358.802543][T19527] lo speed is unknown, defaulting to 1000
[  358.819896][T19530] syzkaller1: entered promiscuous mode
[  358.835226][T19530] syzkaller1: entered allmulticast mode
[  358.979958][T19527] lo speed is unknown, defaulting to 1000
[  359.084317][T19552] bond1: (slave erspan0): Releasing active interface
[  359.117736][T19552] Ã: (slave dummy0): Releasing backup interface
[  359.133632][T19552] Ã: (slave batadv0): Releasing backup interface
[  359.165792][T19552] bridge_slave_0: left allmulticast mode
[  359.187155][T19552] bridge_slave_0: left promiscuous mode
[  359.209973][T19552] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.237620][T19552] bridge_slave_1: left allmulticast mode
[  359.250340][T19552] bridge_slave_1: left promiscuous mode
[  359.264134][T19552] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.286481][T19552] Ã: (slave bond_slave_0): Releasing backup interface
[  359.296932][T19552] Ã: (slave bond_slave_1): Releasing backup interface
[  359.310716][T19552] team0: Port device team_slave_0 removed
[  359.319781][T19552] team0: Port device team_slave_1 removed
[  359.326936][T19552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.339063][T19552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.347618][T19552] batman_adv: batadv0: Removing interface: ip6gretap1
[  359.358038][T19552] bond1: (slave veth3): Releasing active interface
[  359.833998][T19605] netlink: 'syz.1.4244': attribute type 1 has an invalid length.
[  359.973439][T19604] lo speed is unknown, defaulting to 1000
[  360.120552][T19604] lo speed is unknown, defaulting to 1000
[  360.332494][T19616] __nla_validate_parse: 4 callbacks suppressed
[  360.332515][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'.
[  360.380559][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4249'.
[  360.428458][T19616] netlink: 540 bytes leftover after parsing attributes in process `syz.0.4249'.
[  360.450025][T19622] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.4251'.
[  360.495998][T19620] netlink: 'syz.0.4249': attribute type 1 has an invalid length.
[  360.534716][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'.
[  360.570817][T19620] netlink: 'syz.0.4249': attribute type 1 has an invalid length.
[  360.605515][T19625] lo speed is unknown, defaulting to 1000
[  360.666389][T19631] netlink: 'syz.3.4253': attribute type 4 has an invalid length.
[  360.691521][T19631] netlink: 'syz.3.4253': attribute type 4 has an invalid length.
[  360.734371][ T5927] lo speed is unknown, defaulting to 1000
[  360.740349][ T5927] syz0: Port: 1 Link ACTIVE
[  360.745702][T15442] lo speed is unknown, defaulting to 1000
[  360.808888][T19625] lo speed is unknown, defaulting to 1000
[  360.904353][T19649] lo speed is unknown, defaulting to 1000
[  360.969467][T19647] batadv2: entered promiscuous mode
[  361.007203][T19652] netlink: 'syz.3.4260': attribute type 5 has an invalid length.
[  361.048685][T19649] lo speed is unknown, defaulting to 1000
[  361.462393][T19666] netlink: 'syz.3.4264': attribute type 10 has an invalid length.
[  361.475036][T19666] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  361.488465][T19662] lo speed is unknown, defaulting to 1000
[  361.540398][T19668] netlink: 'syz.3.4264': attribute type 10 has an invalid length.
[  361.549519][T19668] veth0_vlan: left promiscuous mode
[  361.556487][T19668] veth0_vlan: entered promiscuous mode
[  361.562790][T19668] team0: Device veth0_vlan failed to register rx_handler
[  361.573101][T19662] lo speed is unknown, defaulting to 1000
[  361.807966][T19674] netlink: 'syz.2.4265': attribute type 1 has an invalid length.
[  361.826066][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4267'.
[  362.545089][T19691] mac80211_hwsim hwsim32 ªªªªª": renamed from wlan0
[  362.850935][T19700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.862154][T19700] syzkaller0: entered promiscuous mode
[  362.872931][T19700] syzkaller0: entered allmulticast mode
[  362.901002][T19700] netlink: 'syz.1.4273': attribute type 14 has an invalid length.
[  362.916405][T19700] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4273'.
[  362.941236][T19699] tipc: Resetting bearer <eth:syzkaller0>
[  362.962628][T19699] tipc: Disabling bearer <eth:syzkaller0>
[  363.150189][T19707] lo speed is unknown, defaulting to 1000
[  363.167977][T19708] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4275'.
[  363.283220][T19708] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4275'.
[  363.457375][T19707] lo speed is unknown, defaulting to 1000
[  363.464175][T19705] lo speed is unknown, defaulting to 1000
[  363.499540][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.502574][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4278'.
[  363.527723][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.671388][T19705] lo speed is unknown, defaulting to 1000
[  363.841442][T19727] FAULT_INJECTION: forcing a failure.
[  363.841442][T19727] name failslab, interval 1, probability 0, space 0, times 0
[  363.869050][T19727] CPU: 1 UID: 0 PID: 19727 Comm: syz.0.4282 Not tainted syzkaller #0 PREEMPT(full) 
[  363.869083][T19727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  363.869095][T19727] Call Trace:
[  363.869103][T19727]  <TASK>
[  363.869113][T19727]  dump_stack_lvl+0x189/0x250
[  363.869141][T19727]  ? __pfx____ratelimit+0x10/0x10
[  363.869168][T19727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.869187][T19727]  ? __pfx__printk+0x10/0x10
[  363.869212][T19727]  ? fs_reclaim_acquire+0x7d/0x100
[  363.869239][T19727]  ? rcu_is_watching+0x15/0xb0
[  363.869262][T19727]  ? __pfx___might_resched+0x10/0x10
[  363.869287][T19727]  ? lock_acquire+0x5f/0x360
[  363.869313][T19727]  should_fail_ex+0x414/0x560
[  363.869338][T19727]  should_failslab+0xa8/0x100
[  363.869364][T19727]  __kmalloc_noprof+0xcb/0x4f0
[  363.869387][T19727]  ? offload_action_alloc+0x2d/0x180
[  363.869412][T19727]  offload_action_alloc+0x2d/0x180
[  363.869435][T19727]  tcf_action_offload_add_ex+0x388/0x870
[  363.869467][T19727]  ? __pfx_tcf_action_offload_add_ex+0x10/0x10
[  363.869500][T19727]  ? lock_release+0x4b/0x3e0
[  363.869526][T19727]  ? tcf_action_fill_size+0x1c/0x2e0
[  363.869548][T19727]  tcf_action_init+0x341/0xab0
[  363.869573][T19727]  ? __pfx_tcf_action_init+0x10/0x10
[  363.869607][T19727]  ? __pfx___nla_validate_parse+0x10/0x10
[  363.869632][T19727]  ? lock_release+0x4b/0x3e0
[  363.869671][T19727]  tc_ctl_action+0x430/0xbd0
[  363.869697][T19727]  ? __pfx_tc_ctl_action+0x10/0x10
[  363.869721][T19727]  ? rcu_is_watching+0x15/0xb0
[  363.869739][T19727]  ? trace_contention_end+0x39/0x120
[  363.869778][T19727]  ? __pfx_tc_ctl_action+0x10/0x10
[  363.869799][T19727]  rtnetlink_rcv_msg+0x779/0xb70
[  363.869827][T19727]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  363.869850][T19727]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  363.869875][T19727]  ? __netlink_lookup+0xbd/0x810
[  363.869892][T19727]  ? rcu_is_watching+0x15/0xb0
[  363.869910][T19727]  ? rcu_is_watching+0x15/0xb0
[  363.869931][T19727]  netlink_rcv_skb+0x205/0x470
[  363.869962][T19727]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  363.869987][T19727]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  363.870022][T19727]  netlink_unicast+0x82c/0x9e0
[  363.870049][T19727]  ? __pfx_netlink_unicast+0x10/0x10
[  363.870071][T19727]  ? netlink_sendmsg+0x642/0xb30
[  363.870087][T19727]  ? skb_put+0x11b/0x210
[  363.870105][T19727]  netlink_sendmsg+0x805/0xb30
[  363.870126][T19727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.870144][T19727]  ? aa_sock_msg_perm+0xf1/0x1d0
[  363.870162][T19727]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  363.870181][T19727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.870197][T19727]  __sock_sendmsg+0x21c/0x270
[  363.870221][T19727]  ____sys_sendmsg+0x505/0x830
[  363.870243][T19727]  ? __pfx_____sys_sendmsg+0x10/0x10
[  363.870265][T19727]  ? import_iovec+0x74/0xa0
[  363.870293][T19727]  ___sys_sendmsg+0x21f/0x2a0
[  363.870313][T19727]  ? __pfx____sys_sendmsg+0x10/0x10
[  363.870349][T19727]  ? __fget_files+0x2a/0x420
[  363.870364][T19727]  ? __fget_files+0x3a0/0x420
[  363.870384][T19727]  __x64_sys_sendmsg+0x19b/0x260
[  363.870405][T19727]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  363.870428][T19727]  ? __pfx_ksys_write+0x10/0x10
[  363.870449][T19727]  ? rcu_is_watching+0x15/0xb0
[  363.870468][T19727]  ? rcu_is_watching+0x15/0xb0
[  363.870487][T19727]  do_syscall_64+0xfa/0x3b0
[  363.870505][T19727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.870527][T19727]  ? clear_bhb_loop+0x60/0xb0
[  363.870547][T19727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.870564][T19727] RIP: 0033:0x7fa070f8ebe9
[  363.870582][T19727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.870598][T19727] RSP: 002b:00007fa071e4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.870620][T19727] RAX: ffffffffffffffda RBX: 00007fa0711b5fa0 RCX: 00007fa070f8ebe9
[  363.870634][T19727] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000009
[  363.870647][T19727] RBP: 00007fa071e4b090 R08: 0000000000000000 R09: 0000000000000000
[  363.870659][T19727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  363.870670][T19727] R13: 00007fa0711b6038 R14: 00007fa0711b5fa0 R15: 00007fffe1086a48
[  363.870692][T19727]  </TASK>
[  364.700049][T19739] lo speed is unknown, defaulting to 1000
[  365.059810][T19765] lo speed is unknown, defaulting to 1000
[  365.069882][T19776] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004
[  365.079119][T19777] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004
[  365.087921][T19739] lo speed is unknown, defaulting to 1000
[  365.420202][T19765] lo speed is unknown, defaulting to 1000
[  365.614353][T19784] __nla_validate_parse: 4 callbacks suppressed
[  365.614371][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4297'.
[  365.666937][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4297'.
[  365.676275][T19784] netlink: 58 bytes leftover after parsing attributes in process `syz.2.4297'.
[  366.149450][T19801] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4305'.
[  366.175049][T19802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4305'.
[  366.409826][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  366.425480][T19815] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4309'.
[  366.485501][T19817] lo speed is unknown, defaulting to 1000
[  366.505556][   T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  366.524207][   T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  366.682483][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4311'.
[  366.720205][T19824] netlink: 'syz.1.4311': attribute type 12 has an invalid length.
[  366.748725][T19824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4311'.
[  366.763169][   T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  366.795468][T19817] lo speed is unknown, defaulting to 1000
[  366.873961][T19838] can: request_module (can-proto-0) failed.
[  366.904398][    T9] IPVS: starting estimator thread 0...
[  366.995350][T19850] IPVS: using max 47 ests per chain, 112800 per kthread
[  367.072884][T19845] lo speed is unknown, defaulting to 1000
[  367.101028][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4322'.
[  367.207300][T19845] lo speed is unknown, defaulting to 1000
[  367.544168][T19889] lo speed is unknown, defaulting to 1000
[  367.775600][T19889] lo speed is unknown, defaulting to 1000
[  367.839056][T19894] netlink: 'syz.1.4328': attribute type 13 has an invalid length.
[  368.082195][T19903] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4330'.
[  368.088118][T19898] netlink: 'syz.3.4329': attribute type 21 has an invalid length.
[  368.132430][T19898] netlink: 'syz.3.4329': attribute type 6 has an invalid length.
[  368.391943][T19915] team1: entered promiscuous mode
[  368.407561][T19915] team1: entered allmulticast mode
[  368.422166][T19915] 8021q: adding VLAN 0 to HW filter on device team1
[  368.492507][T19928] lo speed is unknown, defaulting to 1000
[  368.548746][T19936] netlink: 'syz.2.4338': attribute type 4 has an invalid length.
[  368.774480][T19928] lo speed is unknown, defaulting to 1000
[  368.998900][T19955] sctp: [Deprecated]: syz.4.4347 (pid 19955) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.998900][T19955] Use struct sctp_sack_info instead
[  369.081904][T19954] sctp: [Deprecated]: syz.4.4347 (pid 19954) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.081904][T19954] Use struct sctp_sack_info instead
[  369.497451][T19986] batadv1: entered promiscuous mode
[  369.742529][T19996] lo speed is unknown, defaulting to 1000
[  369.858730][T20000] tipc: Enabled bearer <udp:syz0>, priority 10
[  370.112860][T20000] lo speed is unknown, defaulting to 1000
[  370.132318][T19996] lo speed is unknown, defaulting to 1000
[  370.561937][T20026] batadv2: entered promiscuous mode
[  370.587357][T20033] netlink: 'syz.2.4367': attribute type 21 has an invalid length.
[  370.610347][T20033] netlink: 'syz.2.4367': attribute type 6 has an invalid length.
[  370.619303][T20033] __nla_validate_parse: 9 callbacks suppressed
[  370.619325][T20033] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4367'.
[  370.651924][T20000] lo speed is unknown, defaulting to 1000
[  370.651933][T20021] lo speed is unknown, defaulting to 1000
[  370.820971][T20021] lo speed is unknown, defaulting to 1000
[  370.975077][ T5974] tipc: Node number set to 426544853
[  371.829652][T20067] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[  371.930258][T20067] bond0: (slave bond_slave_0): Releasing backup interface
[  371.942537][T20067] bond0: (slave bond_slave_1): Releasing backup interface
[  371.952879][T20067] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.961092][T20067] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.969820][T20067] bond0: (slave wlan1): Releasing backup interface
[  371.978285][T20067] bond1: (slave gretap1): Releasing active interface
[  372.054617][T20067] netlink: 'syz.2.4378': attribute type 10 has an invalid length.
[  372.063743][T20067] mac80211_hwsim hwsim33 wlan1: left allmulticast mode
[  372.074182][T20067] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  372.773331][T20090] syzkaller1: entered promiscuous mode
[  372.802856][T20090] syzkaller1: entered allmulticast mode
[  372.849554][T20084] lo speed is unknown, defaulting to 1000
[  373.012234][T20102] macsec0: entered promiscuous mode
[  373.031336][T20102] macsec0: entered allmulticast mode
[  373.073904][T20084] lo speed is unknown, defaulting to 1000
[  373.080483][T20105] veth1_macvtap: entered allmulticast mode
[  373.096915][T20105] macsec0: left promiscuous mode
[  373.102174][T20105] macsec0: left allmulticast mode
[  373.108117][T20105] veth1_macvtap: left allmulticast mode
[  373.290696][T20117] lo speed is unknown, defaulting to 1000
[  373.342844][T20127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4391'.
[  373.389711][T20129] macsec0: entered promiscuous mode
[  373.395464][T20129] macsec0: entered allmulticast mode
[  373.402294][T20129] veth1_macvtap: entered allmulticast mode
[  373.410436][T20129] macsec0: left promiscuous mode
[  373.415634][T20129] macsec0: left allmulticast mode
[  373.420865][T20129] veth1_macvtap: left allmulticast mode
[  373.515746][T20117] lo speed is unknown, defaulting to 1000
[  373.699868][T20138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.718982][T20138] syzkaller0: entered promiscuous mode
[  373.727409][T20138] syzkaller0: entered allmulticast mode
[  373.737305][T20140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4397'.
[  373.753138][T20138] tipc: Resetting bearer <eth:syzkaller0>
[  373.768302][T20137] tipc: Resetting bearer <eth:syzkaller0>
[  373.781991][T20137] tipc: Disabling bearer <eth:syzkaller0>
[  374.197373][T20174] netlink: 'syz.1.4409': attribute type 2 has an invalid length.
[  374.245399][T20176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  374.252674][T20176] syzkaller0: entered promiscuous mode
[  374.258199][T20176] syzkaller0: entered allmulticast mode
[  374.321537][T20179] tipc: Resetting bearer <eth:syzkaller0>
[  374.378375][T20182] FAULT_INJECTION: forcing a failure.
[  374.378375][T20182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  374.394928][T20182] CPU: 0 UID: 0 PID: 20182 Comm: syz.1.4410 Not tainted syzkaller #0 PREEMPT(full) 
[  374.394956][T20182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  374.394971][T20182] Call Trace:
[  374.394979][T20182]  <TASK>
[  374.394987][T20182]  dump_stack_lvl+0x189/0x250
[  374.395017][T20182]  ? __pfx____ratelimit+0x10/0x10
[  374.395044][T20182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.395064][T20182]  ? __pfx__printk+0x10/0x10
[  374.395086][T20182]  ? __might_fault+0xb0/0x130
[  374.395118][T20182]  ? __pfx_inet6_ioctl+0x10/0x10
[  374.395136][T20182]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  374.395163][T20182]  ? rcu_is_watching+0x15/0xb0
[  374.395183][T20182]  should_fail_ex+0x414/0x560
[  374.395210][T20182]  _copy_from_user+0x2d/0xb0
[  374.395230][T20182]  sock_do_ioctl+0x182/0x300
[  374.395255][T20182]  ? __pfx_sock_do_ioctl+0x10/0x10
[  374.395275][T20182]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  374.395308][T20182]  sock_ioctl+0x576/0x790
[  374.395327][T20182]  ? lock_release+0x4b/0x3e0
[  374.395351][T20182]  ? __pfx_sock_ioctl+0x10/0x10
[  374.395371][T20182]  ? __fget_files+0x2a/0x420
[  374.395386][T20182]  ? __fget_files+0x3a0/0x420
[  374.395401][T20182]  ? __fget_files+0x2a/0x420
[  374.395416][T20182]  ? bpf_lsm_file_ioctl+0x9/0x20
[  374.395438][T20182]  ? __pfx_sock_ioctl+0x10/0x10
[  374.395457][T20182]  __se_sys_ioctl+0xf9/0x170
[  374.395478][T20182]  do_syscall_64+0xfa/0x3b0
[  374.395495][T20182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.395512][T20182]  ? clear_bhb_loop+0x60/0xb0
[  374.395532][T20182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.395553][T20182] RIP: 0033:0x7fab26f8ebe9
[  374.395570][T20182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.395586][T20182] RSP: 002b:00007fab27e4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  374.395606][T20182] RAX: ffffffffffffffda RBX: 00007fab271b6090 RCX: 00007fab26f8ebe9
[  374.395620][T20182] RDX: 0000200000000240 RSI: 0000000000008914 RDI: 0000000000000006
[  374.395632][T20182] RBP: 00007fab27e4d090 R08: 0000000000000000 R09: 0000000000000000
[  374.395644][T20182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.395656][T20182] R13: 00007fab271b6128 R14: 00007fab271b6090 R15: 00007fffc7e703e8
[  374.395677][T20182]  </TASK>
[  375.019083][T20199] lo speed is unknown, defaulting to 1000
[  375.081850][T20170] tipc: Resetting bearer <eth:syzkaller0>
[  375.091936][T20170] tipc: Disabling bearer <eth:syzkaller0>
[  375.103638][T20208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4417'.
[  375.123039][T20208] netlink: 'syz.2.4417': attribute type 2 has an invalid length.
[  375.143491][T20207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4418'.
[  375.251928][T20221] macsec0: entered promiscuous mode
[  375.258064][T20221] macsec0: entered allmulticast mode
[  375.265540][T20221] veth1_macvtap: entered allmulticast mode
[  375.271576][T20221] macsec0: left promiscuous mode
[  375.277687][T20221] macsec0: left allmulticast mode
[  375.288993][T20221] veth1_macvtap: left allmulticast mode
[  375.305673][T20221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4421'.
[  375.411619][T20228] FAULT_INJECTION: forcing a failure.
[  375.411619][T20228] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.425485][T20228] CPU: 1 UID: 0 PID: 20228 Comm: syz.4.4423 Not tainted syzkaller #0 PREEMPT(full) 
[  375.425510][T20228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  375.425521][T20228] Call Trace:
[  375.425529][T20228]  <TASK>
[  375.425537][T20228]  dump_stack_lvl+0x189/0x250
[  375.425563][T20228]  ? __pfx____ratelimit+0x10/0x10
[  375.425587][T20228]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.425607][T20228]  ? __pfx__printk+0x10/0x10
[  375.425633][T20228]  ? rcu_is_watching+0x15/0xb0
[  375.425651][T20228]  should_fail_ex+0x414/0x560
[  375.425675][T20228]  _copy_to_user+0x31/0xb0
[  375.425696][T20228]  simple_read_from_buffer+0xe1/0x170
[  375.425724][T20228]  proc_fail_nth_read+0x1b3/0x220
[  375.425745][T20228]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  375.425766][T20228]  ? rw_verify_area+0x2a6/0x4d0
[  375.425789][T20228]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  375.425809][T20228]  vfs_read+0x1fd/0xa30
[  375.425829][T20228]  ? fdget_pos+0x247/0x320
[  375.425847][T20228]  ? __pfx___mutex_lock+0x10/0x10
[  375.425864][T20228]  ? __pfx_vfs_read+0x10/0x10
[  375.425888][T20228]  ? __fget_files+0x3a0/0x420
[  375.425903][T20228]  ? __fget_files+0x2a/0x420
[  375.425922][T20228]  ksys_read+0x145/0x250
[  375.425944][T20228]  ? __pfx_ksys_read+0x10/0x10
[  375.425964][T20228]  ? rcu_is_watching+0x15/0xb0
[  375.425982][T20228]  ? rcu_is_watching+0x15/0xb0
[  375.426001][T20228]  do_syscall_64+0xfa/0x3b0
[  375.426018][T20228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.426036][T20228]  ? clear_bhb_loop+0x60/0xb0
[  375.426056][T20228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.426073][T20228] RIP: 0033:0x7fb1cab8d5fc
[  375.426127][T20228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  375.426143][T20228] RSP: 002b:00007fb1cb95f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  375.426162][T20228] RAX: ffffffffffffffda RBX: 00007fb1cadb5fa0 RCX: 00007fb1cab8d5fc
[  375.426176][T20228] RDX: 000000000000000f RSI: 00007fb1cb95f0a0 RDI: 000000000000000a
[  375.426193][T20228] RBP: 00007fb1cb95f090 R08: 0000000000000000 R09: 0000000000000000
[  375.426205][T20228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  375.426216][T20228] R13: 00007fb1cadb6038 R14: 00007fb1cadb5fa0 R15: 00007ffc578fbd48
[  375.426238][T20228]  </TASK>
[  375.475670][T20219] lo speed is unknown, defaulting to 1000
[  375.693643][T20232] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4424'.
[  375.736365][T20199] lo speed is unknown, defaulting to 1000
[  375.750566][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4425'.
[  376.015800][T20219] lo speed is unknown, defaulting to 1000
[  376.108387][T20238] lo speed is unknown, defaulting to 1000
[  376.336282][T20243] lo speed is unknown, defaulting to 1000
[  376.459620][T20238] lo speed is unknown, defaulting to 1000
[  376.491427][T20243] lo speed is unknown, defaulting to 1000
[  376.923415][T20284] macsec0: entered promiscuous mode
[  376.934260][T20284] macsec0: entered allmulticast mode
[  377.034321][T20292] raw_sendmsg: syz.2.4439 forgot to set AF_INET. Fix it!
[  377.214545][T20305] lo speed is unknown, defaulting to 1000
[  377.226458][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4443'.
[  377.338349][   T55] lo speed is unknown, defaulting to 1000
[  377.344164][ T2136] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  377.352723][   T55] syz0: Port: 1 Link DOWN
[  377.393167][ T2136] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  377.425998][   T55] lo speed is unknown, defaulting to 1000
[  377.431813][ T2136] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  377.452228][ T2136] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  377.471824][T20305] lo speed is unknown, defaulting to 1000
[  378.089244][T20342] netlink: 'syz.3.4454': attribute type 2 has an invalid length.
[  378.521316][T20365] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4461'.
[  378.536040][T20360] lo speed is unknown, defaulting to 1000
[  378.671250][T20360] lo speed is unknown, defaulting to 1000
[  379.083259][T20396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4470'.
[  379.109814][T20398] macsec0: entered promiscuous mode
[  379.117237][T20398] macsec0: entered allmulticast mode
[  379.313204][T20403] lo speed is unknown, defaulting to 1000
[  379.421396][T20419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4475'.
[  379.445851][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4472'.
[  379.502141][T20410] netlink: 'syz.0.4472': attribute type 13 has an invalid length.
[  379.538274][T20410] netlink: 'syz.0.4472': attribute type 17 has an invalid length.
[  379.927456][T20410] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.957301][T20410] tipc: Resetting bearer <eth:team0>
[  379.985428][T20410] tipc: Resetting bearer <eth:team0>
[  379.998992][T20410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  380.116032][T20403] lo speed is unknown, defaulting to 1000
[  380.128417][T20444] lo speed is unknown, defaulting to 1000
[  380.365264][T20454] netlink: 'syz.1.4485': attribute type 10 has an invalid length.
[  380.373183][T20454] macvlan0: entered promiscuous mode
[  380.421044][T20444] lo speed is unknown, defaulting to 1000
[  380.492809][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'.
[  380.512804][T20461] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  380.550516][T20461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.607754][T20463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4486'.
[  380.718915][ T5183] Bluetooth: hci2: command 0x0406 tx timeout
[  380.826519][T20470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.833927][T20470] syzkaller0: entered promiscuous mode
[  380.847017][T20470] syzkaller0: entered allmulticast mode
[  381.071012][T20470] tipc: Resetting bearer <eth:syzkaller0>
[  381.121506][T20470] tipc: Disabling bearer <eth:syzkaller0>
[  381.139398][T20494] veth1_macvtap: entered allmulticast mode
[  381.150333][T20494] macsec0: left promiscuous mode
[  381.156404][T20494] macsec0: left allmulticast mode
[  381.161489][T20494] veth1_macvtap: left allmulticast mode
[  381.191281][T20504] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  381.406025][T20516] lo speed is unknown, defaulting to 1000
[  381.625738][T20516] lo speed is unknown, defaulting to 1000
[  381.727927][T20539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4506'.
[  382.016641][T20548] lo speed is unknown, defaulting to 1000
[  382.242847][T20548] lo speed is unknown, defaulting to 1000
[  382.260063][T20552] lo speed is unknown, defaulting to 1000
[  382.315952][T20557] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.327960][T20557] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode
[  382.339149][T20557] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode
[  382.511693][T20563] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4512'.
[  382.562735][T20567] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  382.633827][T20569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.641939][T20552] lo speed is unknown, defaulting to 1000
[  383.249596][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4525'.
[  383.273326][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4525'.
[  383.489449][T20618] lo speed is unknown, defaulting to 1000
[  383.861021][T20618] lo speed is unknown, defaulting to 1000
[  384.164630][T20644] nbd: must specify at least one socket
[  384.233336][T20645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4538'.
[  384.305258][T20645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4538'.
[  384.355664][T20645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4538'.
[  384.469974][T20652] macsec0: entered promiscuous mode
[  384.476265][T20652] macsec0: entered allmulticast mode
[  384.484210][T20653] veth1_macvtap: entered allmulticast mode
[  384.502130][T20653] macsec0: left promiscuous mode
[  384.521987][T20653] macsec0: left allmulticast mode
[  384.535819][T20653] veth1_macvtap: left allmulticast mode
[  384.612305][T20660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4544'.
[  384.826889][T20670] netlink: 'syz.2.4546': attribute type 5 has an invalid length.
[  384.875642][T20672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4548'.
[  384.974056][T20684] netlink: 'syz.2.4551': attribute type 4 has an invalid length.
[  385.005975][T20684] netlink: 'syz.2.4551': attribute type 4 has an invalid length.
[  385.234606][T20701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.263850][T20701] syzkaller0: entered promiscuous mode
[  385.305653][T20701] syzkaller0: entered allmulticast mode
[  385.359806][T20711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4561'.
[  385.394442][T20701] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  385.420360][T20701] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  385.440672][T20701] tipc: Resetting bearer <eth:syzkaller0>
[  385.485068][T20700] tipc: Resetting bearer <eth:syzkaller0>
[  385.497127][T20700] tipc: Disabling bearer <eth:syzkaller0>
[  385.656194][T20725] vlan2: entered promiscuous mode
[  385.662221][T20725] vlan2: entered allmulticast mode
[  385.680816][T20725] hsr_slave_1: entered allmulticast mode
[  385.753986][T20724] lo speed is unknown, defaulting to 1000
[  385.792423][T20736] openvswitch: netlink: Message has 4 unknown bytes.
[  385.976162][T20744] lo speed is unknown, defaulting to 1000
[  385.976175][T20724] lo speed is unknown, defaulting to 1000
[  386.135817][T20744] lo speed is unknown, defaulting to 1000
[  386.381489][T20756] netlink: 'syz.1.4573': attribute type 4 has an invalid length.
[  386.731163][T20775] lo speed is unknown, defaulting to 1000
[  386.860057][T20783] macsec0: entered promiscuous mode
[  386.869441][T20783] macsec0: entered allmulticast mode
[  386.890196][T20783] veth1_macvtap: entered allmulticast mode
[  386.902310][T20783] macsec0: left promiscuous mode
[  386.923041][T20783] macsec0: left allmulticast mode
[  386.943937][T20783] veth1_macvtap: left allmulticast mode
[  386.962988][T20775] lo speed is unknown, defaulting to 1000
[  387.003259][T20789] __nla_validate_parse: 6 callbacks suppressed
[  387.003282][T20789] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4582'.
[  387.173231][T20798] netlink: 308 bytes leftover after parsing attributes in process `syz.1.4586'.
[  387.182651][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4586'.
[  387.191562][T20798] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  387.303723][T20810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4588'.
[  387.500344][T20824] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4593'.
[  387.717045][T20820] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4591'.
[  387.800927][T20828] ip6gretap1: entered promiscuous mode
[  387.919871][T20820] team0: Mode changed to "broadcast"
[  387.927842][T20827] vlan0: entered promiscuous mode
[  388.148268][T20845] macsec0: entered promiscuous mode
[  388.153529][T20845] macsec0: entered allmulticast mode
[  388.234152][T20845] veth1_macvtap: entered allmulticast mode
[  388.259262][T20845] macsec0: left promiscuous mode
[  388.264410][T20845] macsec0: left allmulticast mode
[  388.292910][T20845] veth1_macvtap: left allmulticast mode
[  389.049769][T20879] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4604'.
[  389.264580][T20898] lo speed is unknown, defaulting to 1000
[  389.530143][T20899] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  389.868003][T20891] lo speed is unknown, defaulting to 1000
[  389.911382][T20898] lo speed is unknown, defaulting to 1000
[  390.131759][T20891] lo speed is unknown, defaulting to 1000
[  390.258336][T20919] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4612'.
[  390.271719][T20919] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4612'.
[  390.317270][T20925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4615'.
[  390.443205][T20919] syz_tun: left allmulticast mode
[  390.487933][T20919] rdma_rxe: rxe_newlink: failed to add lo
[  390.527464][T20919] tipc: Resetting bearer <eth:team0>
[  390.533323][T20919] tipc: Resetting bearer <eth:team0>
[  390.541295][T20919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.957254][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  391.829857][T20964] macvlan1: entered promiscuous mode
[  391.839694][T20964] ipvlan0: entered promiscuous mode
[  391.902210][T20964] ipvlan0: left promiscuous mode
[  391.935541][T20964] macvlan1: left promiscuous mode
[  392.002150][T20966] bridge5: entered allmulticast mode
[  392.015847][T20972] __nla_validate_parse: 3 callbacks suppressed
[  392.015871][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4627'.
[  392.051974][T20972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4627'.
[  392.076747][T20968] netlink: 'syz.1.4627': attribute type 16 has an invalid length.
[  392.084605][T20968] netlink: 'syz.1.4627': attribute type 17 has an invalid length.
[  392.091663][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4627'.
[  392.105349][T20972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4627'.
[  392.116533][T20972] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4627'.
[  392.158580][T20972] IPv6: NLM_F_REPLACE set, but no existing node found!
[  392.174752][T20981] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4632'.
[  392.276575][T20986] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4632'.
[  392.586655][T21009] netlink: 'syz.4.4641': attribute type 1 has an invalid length.
[  392.598664][T21009] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4641'.
[  392.616779][T21015] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4641'.
[  392.640809][T21009] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4641'.
[  392.904519][T21028] lo speed is unknown, defaulting to 1000
[  393.073129][T21035] lo speed is unknown, defaulting to 1000
[  393.084072][T21028] lo speed is unknown, defaulting to 1000
[  393.281873][T21035] lo speed is unknown, defaulting to 1000
[  393.900875][T21061] syzkaller1: entered promiscuous mode
[  393.907039][T21061] syzkaller1: entered allmulticast mode
[  394.384482][T21074] syzkaller0: entered promiscuous mode
[  394.392603][T21074] syzkaller0: entered allmulticast mode
[  394.459168][T21086] lo speed is unknown, defaulting to 1000
[  394.749469][T21086] lo speed is unknown, defaulting to 1000
[  395.024300][T21101] syzkaller1: entered promiscuous mode
[  395.030412][T21101] syzkaller1: entered allmulticast mode
[  395.349394][T21117] pim6reg: entered allmulticast mode
[  395.361364][T21117] pim6reg: left allmulticast mode
[  395.380724][T21113] lo speed is unknown, defaulting to 1000
[  395.669198][T21113] lo speed is unknown, defaulting to 1000
[  395.825528][T21119] lo speed is unknown, defaulting to 1000
[  396.074967][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  396.220510][T21119] lo speed is unknown, defaulting to 1000
[  396.594290][T21142] lo speed is unknown, defaulting to 1000
[  396.962466][T21171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.973525][T21174] pim6reg: entered allmulticast mode
[  396.981527][T21142] lo speed is unknown, defaulting to 1000
[  397.001996][T21151] tipc: Disabling bearer <eth:syzkaller0>
[  397.026991][T21174] pim6reg: left allmulticast mode
[  397.189076][T21190] unsupported nla_type 52263
[  397.226710][T21188] lo speed is unknown, defaulting to 1000
[  397.238103][T21194] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20004
[  397.562158][T21188] lo speed is unknown, defaulting to 1000
[  397.570153][T21220] __nla_validate_parse: 4 callbacks suppressed
[  397.570170][T21220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4703'.
[  397.622974][T21222] pim6reg: entered allmulticast mode
[  397.640453][T21224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4705'.
[  397.680020][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4705'.
[  397.692372][T21222] pim6reg: left allmulticast mode
[  398.052520][T21236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'.
[  398.209688][T21235] dvmrp1: entered allmulticast mode
[  398.223484][T21237] dvmrp1: left allmulticast mode
[  398.394566][T21233] lo speed is unknown, defaulting to 1000
[  398.570640][T21233] lo speed is unknown, defaulting to 1000
[  398.810251][T21255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4713'.
[  398.983356][T21273] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4720'.
[  399.194437][T21294] delete_channel: no stack
[  399.485660][T21313] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4731'.
[  399.508897][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4732'.
[  399.543318][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4732'.
[  399.695928][T21334] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4737'.
[  400.043141][T21353] netlink: 'syz.0.4741': attribute type 1 has an invalid length.
[  400.087713][T21365] tipc: Enabled bearer <udp:syz0>, priority 10
[  400.185866][T21380] xt_policy: too many policy elements
[  400.233704][ T2136] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  401.195397][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  401.199955][T21411] pim6reg1: entered promiscuous mode
[  401.207514][T21411] pim6reg1: entered allmulticast mode
[  401.213941][ T5974] tipc: Node number set to 4090305397
[  401.248388][T21415] netlink: 'syz.0.4763': attribute type 10 has an invalid length.
[  401.329917][T21427] netlink: 'syz.0.4763': attribute type 10 has an invalid length.
[  401.951052][T21426] netlink: 'syz.4.4764': attribute type 1 has an invalid length.
[  401.980672][T21426] netlink: 'syz.4.4764': attribute type 1 has an invalid length.
[  402.270034][T21442] 8021q: adding VLAN 0 to HW filter on device bond4
[  402.499908][T21455] syz.4.4773: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  402.579585][T21455] CPU: 0 UID: 0 PID: 21455 Comm: syz.4.4773 Not tainted syzkaller #0 PREEMPT(full) 
[  402.579636][T21455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  402.579660][T21455] Call Trace:
[  402.579668][T21455]  <TASK>
[  402.579677][T21455]  dump_stack_lvl+0x189/0x250
[  402.579708][T21455]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.579729][T21455]  ? __pfx__printk+0x10/0x10
[  402.579751][T21455]  ? lock_release+0x4b/0x3e0
[  402.579778][T21455]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  402.579800][T21455]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  402.579820][T21455]  warn_alloc+0x214/0x310
[  402.579845][T21455]  ? stack_depot_save_flags+0x40/0x860
[  402.579867][T21455]  ? __pfx_warn_alloc+0x10/0x10
[  402.579891][T21455]  ? kasan_save_track+0x4f/0x80
[  402.579910][T21455]  ? xskq_create+0x56/0x170
[  402.579932][T21455]  ? xsk_init_queue+0xb0/0x110
[  402.579951][T21455]  ? xsk_setsockopt+0x4dc/0x8d0
[  402.579968][T21455]  ? do_sock_setsockopt+0x179/0x1b0
[  402.579984][T21455]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  402.580000][T21455]  ? do_syscall_64+0xfa/0x3b0
[  402.580014][T21455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.580033][T21455]  __vmalloc_node_range_noprof+0x125/0x12f0
[  402.580067][T21455]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  402.580090][T21455]  ? xsk_setsockopt+0x462/0x8d0
[  402.580110][T21455]  ? __kasan_kmalloc+0x93/0xb0
[  402.580133][T21455]  vmalloc_user_noprof+0xad/0xf0
[  402.580156][T21455]  ? xskq_create+0xbf/0x170
[  402.580179][T21455]  xskq_create+0xbf/0x170
[  402.580201][T21455]  xsk_init_queue+0xb0/0x110
[  402.580231][T21455]  xsk_setsockopt+0x4dc/0x8d0
[  402.580250][T21455]  ? __pfx_xsk_setsockopt+0x10/0x10
[  402.580267][T21455]  ? __pfx_aa_sk_perm+0x10/0x10
[  402.580287][T21455]  ? lock_release+0x4b/0x3e0
[  402.580306][T21455]  ? aa_sock_opt_perm+0xff/0x1b0
[  402.580320][T21455]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  402.580335][T21455]  ? __pfx_xsk_setsockopt+0x10/0x10
[  402.580353][T21455]  do_sock_setsockopt+0x179/0x1b0
[  402.580368][T21455]  __x64_sys_setsockopt+0x13f/0x1b0
[  402.580383][T21455]  do_syscall_64+0xfa/0x3b0
[  402.580395][T21455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.580409][T21455]  ? clear_bhb_loop+0x60/0xb0
[  402.580425][T21455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.580439][T21455] RIP: 0033:0x7fb1cab8ebe9
[  402.580458][T21455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.580471][T21455] RSP: 002b:00007fb1cb95f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  402.580489][T21455] RAX: ffffffffffffffda RBX: 00007fb1cadb5fa0 RCX: 00007fb1cab8ebe9
[  402.580500][T21455] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000019
[  402.580510][T21455] RBP: 00007fb1cac11e19 R08: 0000000000000004 R09: 0000000000000000
[  402.580520][T21455] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.580531][T21455] R13: 00007fb1cadb6038 R14: 00007fb1cadb5fa0 R15: 00007ffc578fbd48
[  402.580547][T21455]  </TASK>
[  402.580572][T21455] Mem-Info:
[  402.883736][T21467] __nla_validate_parse: 14 callbacks suppressed
[  402.883758][T21467] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.4776'.
[  402.906408][T21455] active_anon:3646 inactive_anon:0 isolated_anon:0
[  402.906408][T21455]  active_file:5375 inactive_file:39979 isolated_file:0
[  402.906408][T21455]  unevictable:768 dirty:293 writeback:0
[  402.906408][T21455]  slab_reclaimable:12922 slab_unreclaimable:216524
[  402.906408][T21455]  mapped:31192 shmem:1356 pagetables:1161
[  402.906408][T21455]  sec_pagetables:0 bounce:0
[  402.906408][T21455]  kernel_misc_reclaimable:0
[  402.906408][T21455]  free:1162964 free_pcp:48641 free_cma:0
[  402.952451][T21455] Node 0 active_anon:14584kB inactive_anon:0kB active_file:21500kB inactive_file:159712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124768kB dirty:1172kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14684kB pagetables:4540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  403.000206][T21455] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  403.038698][T21455] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  403.129038][T21476] lo speed is unknown, defaulting to 1000
[  403.166024][T21455] lowmem_reserve[]: 0 2497 2499 2499 2499
[  403.171842][T21455] Node 0 DMA32 free:773076kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14192kB inactive_anon:0kB active_file:21500kB inactive_file:158152kB unevictable:1536kB writepending:1196kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:171420kB local_pcp:67492kB free_cma:0kB
[  403.253550][T21484] netlink: 952 bytes leftover after parsing attributes in process `syz.1.4782'.
[  403.280315][T15442] IPVS: starting estimator thread 0...
[  403.293244][T21484] openvswitch: netlink: Flow key attr not present in new flow.
[  403.356059][T21455] lowmem_reserve[]: 0 0 1 1 1
[  403.362900][T21455] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  403.385667][T21476] lo speed is unknown, defaulting to 1000
[  403.398633][T21485] IPVS: using max 38 ests per chain, 91200 per kthread
[  403.417906][T21494] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4783'.
[  403.446626][T21455] lowmem_reserve[]: 0 0 0 0 0
[  403.451500][T21455] Node 1 Normal free:3887772kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17296kB local_pcp:7424kB free_cma:0kB
[  403.505392][T21455] lowmem_reserve[]: 0 0 0 0 0
[  403.510503][T21455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  403.526526][T21455] Node 0 DMA32: 2299*4kB (UM) 757*8kB (UE) 464*16kB (U) 1166*32kB (UE) 453*64kB (UME) 122*128kB (UME) 43*256kB (UM) 16*512kB (UM) 14*1024kB (UME) 2*2048kB (ME) 155*4096kB (M) = 777108kB
[  403.582049][T21455] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  403.628264][T21455] Node 1 Normal: 207*4kB (UE) 56*8kB (UME) 48*16kB (UME) 69*32kB (UME) 24*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3887772kB
[  403.674991][T21455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.715216][T21455] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  403.758007][T21511] netlink: 'syz.1.4792': attribute type 8 has an invalid length.
[  403.761673][T21455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.777651][T21455] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  403.787899][T21455] 46707 total pagecache pages
[  403.792600][T21455] 0 pages in swap cache
[  403.797515][T21455] Free swap  = 124996kB
[  403.801930][T21455] Total swap = 124996kB
[  403.806816][T21455] 2097051 pages RAM
[  403.810637][T21455] 0 pages HighMem/MovableOnly
[  403.814926][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4792'.
[  403.816216][T21455] 425663 pages reserved
[  403.829291][T21455] 0 pages cma reserved
[  404.023201][T21522] netlink: 'syz.4.4795': attribute type 4 has an invalid length.
[  404.034060][T21520] lo speed is unknown, defaulting to 1000
[  404.376031][T21520] lo speed is unknown, defaulting to 1000
[  404.406242][T21530] syzkaller1: entered promiscuous mode
[  404.411776][T21530] syzkaller1: entered allmulticast mode
[  404.743640][T21555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4804'.
[  404.759711][T21559] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4806'.
[  405.166328][T21589] lo speed is unknown, defaulting to 1000
[  405.300834][T21597] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4818'.
[  405.439408][T21607] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  405.534339][T21609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4823'.
[  405.535028][T21589] lo speed is unknown, defaulting to 1000
[  405.966629][T21630] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4830'.
[  405.978802][T21624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.987174][T21624] syzkaller0: entered promiscuous mode
[  405.992666][T21624] syzkaller0: entered allmulticast mode
[  406.299248][T21633] syz_tun: entered promiscuous mode
[  406.315743][T21633] batadv_slave_0: entered promiscuous mode
[  406.322362][T21633] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  406.367255][T21637] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4832'.
[  406.386908][T21633] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  406.429100][T21633] hsr1: entered allmulticast mode
[  406.441490][T21633] syz_tun: entered allmulticast mode
[  406.457294][T21633] batadv_slave_0: entered allmulticast mode
[  406.479635][T21624] tipc: Resetting bearer <eth:syzkaller0>
[  406.555634][T21623] tipc: Resetting bearer <eth:syzkaller0>
[  406.618603][T21623] tipc: Disabling bearer <eth:syzkaller0>
[  406.987283][T21674] IPv6: addrconf: prefix option has invalid lifetime
[  407.011316][T21674] netlink: 'syz.0.4842': attribute type 1 has an invalid length.
[  407.371731][T21683] delete_channel: no stack
[  407.683515][T21703] netlink: 'syz.3.4851': attribute type 12 has an invalid length.
[  408.209137][T21713] syzkaller1: entered promiscuous mode
[  408.217465][T21713] syzkaller1: entered allmulticast mode
[  408.227661][T21712] __nla_validate_parse: 4 callbacks suppressed
[  408.227678][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4853'.
[  408.300810][T21708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.455605][T21722] netlink: 'syz.0.4852': attribute type 1 has an invalid length.
[  409.487402][T21753] lo speed is unknown, defaulting to 1000
[  409.797757][T21756] netlink: 'syz.4.4865': attribute type 9 has an invalid length.
[  409.840196][T21756] netlink: 'syz.4.4865': attribute type 7 has an invalid length.
[  409.840229][T21753] lo speed is unknown, defaulting to 1000
[  409.872027][T21756] netlink: 'syz.4.4865': attribute type 8 has an invalid length.
[  410.118745][T21767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4870'.
[  410.232993][T21763] lo speed is unknown, defaulting to 1000
[  410.421027][T21763] lo speed is unknown, defaulting to 1000
[  410.662132][T21763] netlink: 'syz.4.4868': attribute type 6 has an invalid length.
[  410.726467][T21804] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4882'.
[  411.698052][T21819] lo speed is unknown, defaulting to 1000
[  411.816676][T21819] lo speed is unknown, defaulting to 1000
[  413.670629][T21837] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4893'.
[  413.712993][T21840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4894'.
[  413.729815][T21843] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4896'.
[  413.780694][T21845] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4896'.
[  413.812225][T21843] gretap0: entered promiscuous mode
[  413.821945][T21845] 0ªî{X¹¦: renamed from gretap0
[  413.832306][T21845] 0ªî{X¹¦: left promiscuous mode
[  413.838425][T21845] 0ªî{X¹¦: entered allmulticast mode
[  413.845518][T21845] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  413.912614][T21851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4899'.
[  413.948027][T21855] netlink: 'syz.4.4901': attribute type 2 has an invalid length.
[  413.961617][T21855] k›*·]‘: entered promiscuous mode
[  414.023452][T21862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4904'.
[  414.242009][T21862] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  414.649602][T21882] lo speed is unknown, defaulting to 1000
[  414.928455][T21898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4914'.
[  414.954452][T21898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4914'.
[  415.023735][T21882] lo speed is unknown, defaulting to 1000
[  415.359319][T21901] 0ªî{X¹¦: left allmulticast mode
[  415.413107][T21903] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4915'.
[  415.434678][T21903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4915'.
[  415.510117][T21903] netlink: 'syz.2.4915': attribute type 10 has an invalid length.
[  415.523409][T21903] netlink: 'syz.2.4915': attribute type 10 has an invalid length.
[  415.560215][T21903] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[  415.631369][T21919] pim6reg: entered allmulticast mode
[  415.676427][T21912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  415.683747][T21912] IPv6: NLM_F_CREATE should be set when creating new route
[  415.694525][T21919] pim6reg: left allmulticast mode
[  415.932135][T21940] lo speed is unknown, defaulting to 1000
[  415.964116][T21945] ÿ: renamed from bond_slave_0
[  416.102292][T21940] lo speed is unknown, defaulting to 1000
[  416.273614][T21962] netlink: 'syz.2.4933': attribute type 1 has an invalid length.
[  416.301721][T21962] 8021q: adding VLAN 0 to HW filter on device bond5
[  416.324110][T21962] bond5: (slave gretap2): making interface the new active one
[  416.336169][T21962] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  416.453435][T21973] netlink: 'syz.2.4938': attribute type 14 has an invalid length.
[  416.652769][T21991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  417.000208][T22001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.012144][T22001] syzkaller0: entered promiscuous mode
[  417.018334][T22001] syzkaller0: entered allmulticast mode
[  417.478885][T22021] lo speed is unknown, defaulting to 1000
[  417.677356][T22042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  417.763018][T22040] ÿÿÿÿÿÿ: renamed from vlan1
[  417.851969][T22001] tipc: Resetting bearer <eth:syzkaller0>
[  417.882557][T22001] tipc: Disabling bearer <eth:syzkaller0>
[  417.893052][T22050] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  417.909149][T22021] lo speed is unknown, defaulting to 1000
[  418.042739][T22066] netlink: 'syz.1.4965': attribute type 1 has an invalid length.
[  418.050948][T22066] netlink: 'syz.1.4965': attribute type 1 has an invalid length.
[  418.060119][T22066] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  418.071516][T22066] sctp: [Deprecated]: syz.1.4965 (pid 22066) Use of int in maxseg socket option.
[  418.071516][T22066] Use struct sctp_assoc_value instead
[  418.183082][T22077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  418.204123][T22077] netlink: 'syz.1.4969': attribute type 1 has an invalid length.
[  418.214673][T22077] netlink: 'syz.1.4969': attribute type 11 has an invalid length.
[  418.257723][T22084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.396428][T22093] sctp: [Deprecated]: syz.1.4974 (pid 22093) Use of struct sctp_assoc_value in delayed_ack socket option.
[  418.396428][T22093] Use struct sctp_sack_info instead
[  418.729783][T22109] __nla_validate_parse: 23 callbacks suppressed
[  418.729801][T22109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4981'.
[  418.962781][T22119] netlink: 'syz.2.4984': attribute type 1 has an invalid length.
[  419.038763][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'.
[  419.072498][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4984'.
[  419.218306][T22133] netlink: 'syz.4.4989': attribute type 4 has an invalid length.
[  419.237063][T22133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4989'.
[  419.263026][T22132] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  419.383695][T22146] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4990'.
[  419.408339][T22139] netlink: 'syz.3.4990': attribute type 1 has an invalid length.
[  419.442014][T22139] 8021q: adding VLAN 0 to HW filter on device bond4
[  419.459947][T22139] 8021q: adding VLAN 0 to HW filter on device bond4
[  419.469694][T22139] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  419.482065][T22139] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  419.510351][ T2136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.524072][T22155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4994'.
[  419.533461][ T2136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.749372][T22165] pim6reg: entered allmulticast mode
[  419.789091][T22166] pim6reg: left allmulticast mode
[  419.825272][T22153] lo speed is unknown, defaulting to 1000
[  419.858895][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4998'.
[  420.214370][T22153] lo speed is unknown, defaulting to 1000
[  421.110857][T22207] syz_tun: entered allmulticast mode
[  421.131691][T22207] dvmrp8: entered allmulticast mode
[  421.182599][T22207] lo speed is unknown, defaulting to 1000
[  421.259618][T22218] tipc: Failed to remove unknown binding: 66,1,1/426544853:585317324/585317326
[  421.287330][T22219] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5010'.
[  421.336476][T22218] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5010'.
[  421.619536][T22244] netlink: 34 bytes leftover after parsing attributes in process `syz.1.5015'.
[  421.641989][T22207] lo speed is unknown, defaulting to 1000
[  422.004537][T22253] tipc: Resetting bearer <eth:team0>
[  422.054553][T22205] syz_tun: left allmulticast mode
[  422.074637][T22205] dvmrp8: left allmulticast mode
[  422.268781][T22266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.292501][T22266] syzkaller0: entered promiscuous mode
[  422.310063][T22266] syzkaller0: entered allmulticast mode
[  422.352087][T22266] tipc: Resetting bearer <eth:syzkaller0>
[  422.382960][T22265] tipc: Resetting bearer <eth:syzkaller0>
[  422.421147][T22265] tipc: Disabling bearer <eth:syzkaller0>
[  423.087246][T22316] lo speed is unknown, defaulting to 1000
[  423.194049][T22307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.219332][T22327] ip6gre1: entered allmulticast mode
[  423.764522][T22316] lo speed is unknown, defaulting to 1000
[  423.827993][T22349] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  424.007020][T22353] lo speed is unknown, defaulting to 1000
[  424.316082][T22353] lo speed is unknown, defaulting to 1000
[  425.180838][T22381] lo speed is unknown, defaulting to 1000
[  425.641274][   T13] dvmrp1 (unregistering): left allmulticast mode
[  425.922646][   T13] bond5 (unregistering): (slave bridge4): Releasing backup interface
[  425.935366][   T13] bridge4 (unregistering): left promiscuous mode
[  425.969488][   T13] bond1 (unregistering): Released all slaves
[  425.981192][   T13] bond2 (unregistering): Released all slaves
[  426.002435][   T13] bond3 (unregistering): Released all slaves
[  426.042268][   T13] bond0 (unregistering): Released all slaves
[  426.062320][   T13] bond4 (unregistering): Released all slaves
[  426.086726][   T13] bond5 (unregistering): Released all slaves
[  426.102425][   T13] bond6 (unregistering): Released all slaves
[  426.111689][   T13] bond7 (unregistering): Released all slaves
[  426.121578][T22381] lo speed is unknown, defaulting to 1000
[  426.232064][   T13] tipc: Disabling bearer <udp:s>
[  426.242895][   T13] tipc: Left network mode
[  426.542637][T22418] gretap2: entered promiscuous mode
[  426.548840][T22418] gretap2: entered allmulticast mode
[  426.610863][T22424] __nla_validate_parse: 3 callbacks suppressed
[  426.610877][T22424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5067'.
[  426.631938][T22424] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5067'.
[  427.737487][T22451] pim6reg: entered allmulticast mode
[  427.743832][T22454] pim6reg: left allmulticast mode
[  427.760824][T22457] batadv_slave_1: entered promiscuous mode
[  427.797464][T22457] batadv_slave_1: left promiscuous mode
[  427.945805][T22485] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20003
[  428.057171][   T13] IPVS: stop unused estimator thread 0...
[  428.112137][T22495] netlink: 'syz.0.5086': attribute type 1 has an invalid length.
[  428.154524][T22492] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  428.194642][T22492] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  428.227528][T22503] lo speed is unknown, defaulting to 1000
[  428.237155][T22492] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  428.254044][T22495] bond5: (slave bridge7): making interface the new active one
[  428.300453][T22495] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  428.559448][T22503] lo speed is unknown, defaulting to 1000
[  428.620116][T22532] syzkaller1: entered promiscuous mode
[  428.631790][T22532] syzkaller1: entered allmulticast mode
[  428.859375][T22545] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5101'.
[  428.933791][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5101'.
[  429.039414][T22545] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5101'.
[  429.076837][T22553] lo speed is unknown, defaulting to 1000
[  429.279149][T22553] lo speed is unknown, defaulting to 1000
[  429.364001][T22568] lo speed is unknown, defaulting to 1000
[  429.469479][T22581] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5107'.
[  429.516312][T22574] netlink: 'syz.4.5110': attribute type 1 has an invalid length.
[  429.557636][T22583] 8021q: adding VLAN 0 to HW filter on device bond5
[  429.613203][T22568] lo speed is unknown, defaulting to 1000
[  429.823384][T22588] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5114'.
[  429.840322][T22588] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5114'.
[  430.507112][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5123'.
[  430.533755][T22622] ip6tnl1: entered promiscuous mode
[  430.539492][T22622] ip6tnl1: entered allmulticast mode
[  430.552432][T22622] team0: Refused to change device type
[  430.711891][T22630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5125'.
[  430.813717][T22638] netlink: 'syz.4.5128': attribute type 3 has an invalid length.
[  430.869921][T22643] netlink: 'syz.1.5130': attribute type 83 has an invalid length.
[  431.139428][ T5183] Bluetooth: hci3: link tx timeout
[  431.144640][ T5183] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  431.212865][   T30] audit: type=1800 audit(1756158075.226:12): pid=22635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5127" name="cgroup.controllers" dev="tmpfs" ino=1867 res=0 errno=0
[  431.641542][   T30] audit: type=1800 audit(1756158075.656:13): pid=22668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5136" name="memory.events" dev="tmpfs" ino=2148 res=0 errno=0
[  431.670759][T22675] __nla_validate_parse: 4 callbacks suppressed
[  431.670783][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.717806][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.751111][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.774293][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.881680][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.930301][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.941483][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.952298][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.962079][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  431.977077][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5138'.
[  433.098170][T22744] netlink: 'syz.3.5157': attribute type 4 has an invalid length.
[  433.128291][T22744] netlink: 'syz.3.5157': attribute type 4 has an invalid length.
[  433.181331][ T5974] lo speed is unknown, defaulting to 1000
[  433.187880][ T5974] syz0: Port: 1 Link ACTIVE
[  433.192470][ T5974] lo speed is unknown, defaulting to 1000
[  433.205089][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  433.716575][T22773] syzkaller0: entered promiscuous mode
[  433.722092][T22773] syzkaller0: entered allmulticast mode
[  433.830403][T22788] syzkaller1: entered allmulticast mode
[  434.018593][T22807] syzkaller1: entered promiscuous mode
[  434.024275][T22807] syzkaller1: entered allmulticast mode
[  435.323873][T22864] netlink: 'syz.1.5193': attribute type 3 has an invalid length.
[  435.440410][T22871] netlink: 'syz.1.5195': attribute type 4 has an invalid length.
[  435.458718][T22871] netlink: 'syz.1.5195': attribute type 4 has an invalid length.
[  435.499291][ T5974] lo speed is unknown, defaulting to 1000
[  435.505742][ T5974] syz2: Port: 1 Link ACTIVE
[  435.529376][T22876] netlink: 'syz.3.5197': attribute type 1 has an invalid length.
[  435.639487][T22885] tap0: tun_chr_ioctl cmd 1074025677
[  435.655626][T22885] tap0: linktype set to 805
[  435.717062][T22894] netlink: 'syz.4.5203': attribute type 4 has an invalid length.
[  435.818162][T22901] batadv_slave_1: entered promiscuous mode
[  435.822822][T22897] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  435.824594][ T5927] IPVS: starting estimator thread 0...
[  435.913457][T22899] lo speed is unknown, defaulting to 1000
[  435.925599][T22902] IPVS: using max 56 ests per chain, 134400 per kthread
[  435.950354][T22908] netlink: 'syz.0.5209': attribute type 5 has an invalid length.
[  436.044503][T22899] lo speed is unknown, defaulting to 1000
[  436.091560][T22911] 8021q: adding VLAN 0 to HW filter on device bond6
[  436.100791][T22911] team0: Port device bond6 added
[  436.282364][T22930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.290161][T22930] syzkaller0: entered promiscuous mode
[  436.297698][T22930] syzkaller0: entered allmulticast mode
[  436.334351][T22930] tipc: Resetting bearer <eth:syzkaller0>
[  436.377761][T22929] tipc: Resetting bearer <eth:syzkaller0>
[  436.442343][T22929] tipc: Disabling bearer <eth:syzkaller0>
[  436.983808][T22952] __nla_validate_parse: 28 callbacks suppressed
[  436.983844][T22952] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.5218'.
[  437.062051][T22952] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5218'.
[  437.210178][T22973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5226'.
[  437.249118][T22972] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5224'.
[  437.276365][T22972] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5224'.
[  437.357592][T22952] bond0 (unregistering): (slave team0): Releasing backup interface
[  437.379689][T22952] tipc: Resetting bearer <eth:team0>
[  437.391826][T22952] bond0 (unregistering): Released all slaves
[  437.430846][T22968] syzkaller1: entered promiscuous mode
[  437.436833][T22968] syzkaller1: entered allmulticast mode
[  437.560847][T23000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5236'.
[  437.689995][T23007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5238'.
[  438.237863][T23014] netlink: 'syz.1.5240': attribute type 39 has an invalid length.
[  438.370750][T23014] IPv6: sit3: Disabled Multicast RS
[  438.401973][T23014] netlink: 'syz.1.5240': attribute type 11 has an invalid length.
[  438.420531][T23014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5240'.
[  438.685481][T23036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5250'.
[  439.707858][T23062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5253'.
[  440.793274][T23092] pim6reg1: entered promiscuous mode
[  440.812008][T23092] pim6reg1: entered allmulticast mode
[  440.850476][T23093] pim6reg: entered allmulticast mode
[  440.872097][T23092] pim6reg: left allmulticast mode
[  441.462213][T23103] batman_adv: batadv0: Adding interface: dummy0
[  441.475671][T23103] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.534431][T23103] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  441.549128][T23106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.705489][T23118] netlink: 'syz.0.5271': attribute type 1 has an invalid length.
[  441.749247][T23118] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.767724][T23125] bond0: (slave geneve2): making interface the new active one
[  441.780616][T23125] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  441.797599][   T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.831002][   T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.889470][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.931721][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.964760][T23127] sit0: entered promiscuous mode
[  441.970791][T23127] netlink: 'syz.3.5274': attribute type 1 has an invalid length.
[  442.023913][T23138] __nla_validate_parse: 7 callbacks suppressed
[  442.023932][T23138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5275'.
[  442.024116][T23127] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5274'.
[  442.286316][T23151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5280'.
[  442.299804][T23148] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  442.314473][T23148] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  442.336426][T23148] (unnamed net_device) (uninitialized): peer notification delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  442.400963][T23155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5280'.
[  442.529747][T23173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5284'.
[  442.636507][T23177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5288'.
[  442.734002][T23177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.742437][T23177] syzkaller0: entered promiscuous mode
[  442.748342][T23177] syzkaller0: entered allmulticast mode
[  442.789700][T23177] tipc: Resetting bearer <eth:syzkaller0>
[  442.817971][T23176] tipc: Resetting bearer <eth:syzkaller0>
[  442.837017][T23176] tipc: Disabling bearer <eth:syzkaller0>
[  442.951254][T23205] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5293'.
[  442.988790][T23209] netlink: 'syz.0.5295': attribute type 13 has an invalid length.
[  443.004673][T23214] netlink: 'syz.0.5295': attribute type 13 has an invalid length.
[  443.013484][T23209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5295'.
[  443.023900][T23214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5295'.
[  443.033885][T23209] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  443.045384][T23214] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  443.194748][T23222] syz_tun: entered allmulticast mode
[  443.212253][T23222] dvmrp8: entered allmulticast mode
[  443.237878][T23220] syz_tun: left allmulticast mode
[  443.251202][T23220] dvmrp8: left allmulticast mode
[  443.330722][T18120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.346715][T18120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.407010][T23231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5302'.
[  443.423783][T23231] netlink: 'syz.0.5302': attribute type 1 has an invalid length.
[  443.700375][T23240] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  444.140459][T23281] netlink: 'syz.0.5314': attribute type 21 has an invalid length.
[  444.168441][T23278] lo speed is unknown, defaulting to 1000
[  444.174399][T23281] netlink: 'syz.0.5314': attribute type 1 has an invalid length.
[  444.529629][T23278] lo speed is unknown, defaulting to 1000
[  444.997704][T23319] netlink: 'syz.3.5324': attribute type 1 has an invalid length.
[  447.356195][T23433] lo speed is unknown, defaulting to 1000
[  447.503590][T23433] lo speed is unknown, defaulting to 1000
[  447.931746][T23464] rdma_rxe: rxe_newlink: failed to add bond0
[  447.993747][T23468] __nla_validate_parse: 9 callbacks suppressed
[  447.993850][T23468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5366'.
[  448.057090][T23470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.071047][T23470] syzkaller0: entered promiscuous mode
[  448.076642][T23470] syzkaller0: entered allmulticast mode
[  448.089803][T23469] tipc: Resetting bearer <eth:syzkaller0>
[  448.111346][T23469] tipc: Disabling bearer <eth:syzkaller0>
[  448.694998][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'.
[  449.232437][T23504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5380'.
[  449.304559][T23501] syz.1.5380: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  449.331672][T23501] CPU: 1 UID: 0 PID: 23501 Comm: syz.1.5380 Not tainted syzkaller #0 PREEMPT(full) 
[  449.331699][T23501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  449.331710][T23501] Call Trace:
[  449.331717][T23501]  <TASK>
[  449.331726][T23501]  dump_stack_lvl+0x189/0x250
[  449.331756][T23501]  ? __pfx_dump_stack_lvl+0x10/0x10
[  449.331777][T23501]  ? __pfx__printk+0x10/0x10
[  449.331798][T23501]  ? lock_release+0x4b/0x3e0
[  449.331824][T23501]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  449.331846][T23501]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  449.331866][T23501]  warn_alloc+0x214/0x310
[  449.331893][T23501]  ? __pfx_warn_alloc+0x10/0x10
[  449.331920][T23501]  ? __get_vm_area_node+0x28f/0x300
[  449.331953][T23501]  ? xskq_create+0xbf/0x170
[  449.331979][T23501]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  449.332017][T23501]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  449.332041][T23501]  ? xsk_setsockopt+0x502/0x8d0
[  449.332063][T23501]  ? __kasan_kmalloc+0x93/0xb0
[  449.332089][T23501]  vmalloc_user_noprof+0xad/0xf0
[  449.332112][T23501]  ? xskq_create+0xbf/0x170
[  449.332134][T23501]  xskq_create+0xbf/0x170
[  449.332159][T23501]  xsk_init_queue+0xb0/0x110
[  449.332181][T23501]  xsk_setsockopt+0x57b/0x8d0
[  449.332204][T23501]  ? __pfx_xsk_setsockopt+0x10/0x10
[  449.332225][T23501]  ? __pfx_aa_sk_perm+0x10/0x10
[  449.332249][T23501]  ? lock_release+0x4b/0x3e0
[  449.332272][T23501]  ? __se_sys_futex+0x36f/0x400
[  449.332292][T23501]  ? aa_sock_opt_perm+0xff/0x1b0
[  449.332310][T23501]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  449.332331][T23501]  ? __pfx_xsk_setsockopt+0x10/0x10
[  449.332352][T23501]  do_sock_setsockopt+0x179/0x1b0
[  449.332374][T23501]  __x64_sys_setsockopt+0x13f/0x1b0
[  449.332394][T23501]  do_syscall_64+0xfa/0x3b0
[  449.332411][T23501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.332428][T23501]  ? clear_bhb_loop+0x60/0xb0
[  449.332447][T23501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.332464][T23501] RIP: 0033:0x7fab26f8ebe9
[  449.332480][T23501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  449.332496][T23501] RSP: 002b:00007fab27e6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  449.332516][T23501] RAX: ffffffffffffffda RBX: 00007fab271b5fa0 RCX: 00007fab26f8ebe9
[  449.332529][T23501] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006
[  449.332540][T23501] RBP: 00007fab27011e19 R08: 0000000000000004 R09: 0000000000000000
[  449.332552][T23501] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  449.332563][T23501] R13: 00007fab271b6038 R14: 00007fab271b5fa0 R15: 00007fffc7e703e8
[  449.332582][T23501]  </TASK>
[  449.332589][T23501] Mem-Info:
[  449.618922][T23501] active_anon:3651 inactive_anon:0 isolated_anon:0
[  449.618922][T23501]  active_file:5375 inactive_file:39997 isolated_file:0
[  449.618922][T23501]  unevictable:768 dirty:299 writeback:0
[  449.618922][T23501]  slab_reclaimable:13102 slab_unreclaimable:153372
[  449.618922][T23501]  mapped:32195 shmem:1356 pagetables:1146
[  449.618922][T23501]  sec_pagetables:0 bounce:0
[  449.618922][T23501]  kernel_misc_reclaimable:0
[  449.618922][T23501]  free:1234017 free_pcp:42275 free_cma:0
[  449.664581][T23501] Node 0 active_anon:14604kB inactive_anon:0kB active_file:21500kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128880kB dirty:1196kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14168kB pagetables:4480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  449.697288][T23501] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  449.728328][T23501] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  449.759250][T23501] lowmem_reserve[]: 0 2497 2499 2499 2499
[  449.768320][T23501] Node 0 DMA32 free:1032640kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14652kB inactive_anon:0kB active_file:21500kB inactive_file:158224kB unevictable:1536kB writepending:1196kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:151952kB local_pcp:28288kB free_cma:0kB
[  449.801947][T23501] lowmem_reserve[]: 0 0 1 1 1
[  449.807543][T23501] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  449.810052][T23514] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  449.854946][T23514] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5382'.
[  449.865834][T23501] lowmem_reserve[]: 0 0 0 0 0
[  449.868515][T23530] lo speed is unknown, defaulting to 1000
[  449.870779][T23501] Node 1 Normal free:3888044kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:9888kB free_cma:0kB
[  449.910863][T23501] lowmem_reserve[]: 0 0 0 0 0
[  449.918523][T23501] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  449.933406][T23501] Node 0 DMA32: 2200*4kB (UM) 2840*8kB (UE) 1927*16kB (U) 1505*32kB (UME) 782*64kB (UME) 217*128kB (UME) 66*256kB (UME) 25*512kB (UM) 21*1024kB (UME) 3*2048kB (M) 194*4096kB (UM) = 1040304kB
[  449.972395][T23514] Ã (unregistering): Released all slaves
[  449.998756][T23501] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  450.011620][T23501] Node 1 Normal: 207*4kB (UE) 56*8kB (UME) 47*16kB (UME) 74*32kB (UME) 26*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3888044kB
[  450.030420][T23501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  450.034022][T23530] lo speed is unknown, defaulting to 1000
[  450.049276][T23501] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  450.059456][T23501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  450.069382][T23501] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  450.079281][T23501] 46727 total pagecache pages
[  450.084022][T23501] 0 pages in swap cache
[  450.091810][T23501] Free swap  = 124996kB
[  450.098464][T23501] Total swap = 124996kB
[  450.102882][T23501] 2097051 pages RAM
[  450.107013][T23501] 0 pages HighMem/MovableOnly
[  450.112030][T23501] 425663 pages reserved
[  450.118494][T23501] 0 pages cma reserved
[  450.244370][T23539] lo speed is unknown, defaulting to 1000
[  450.329775][T23551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5390'.
[  450.384125][T23539] lo speed is unknown, defaulting to 1000
[  451.311831][T23570] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  451.626876][T23573] lo speed is unknown, defaulting to 1000
[  451.643805][T23580] netlink: 'syz.1.5399': attribute type 2 has an invalid length.
[  451.669382][T23580] k›*·]‘: entered promiscuous mode
[  451.706266][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5399'.
[  451.731733][T23591] bond0: (slave rose0): Error: Device can not be enslaved while up
[  451.742127][T23591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5401'.
[  451.788712][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5399'.
[  451.880207][T23573] lo speed is unknown, defaulting to 1000
[  451.943354][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5404'.
[  452.030559][T23614] pim6reg: entered allmulticast mode
[  452.052412][T23615] pim6reg: left allmulticast mode
[  452.108795][T23617] pim6reg: entered allmulticast mode
[  452.147346][T23617] pim6reg: left allmulticast mode
[  452.184139][T23622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5411'.
[  452.286267][T23633] dvmrp0: entered allmulticast mode
[  452.340693][T23635] tipc: Enabled bearer <ib:virt_wifi0>, priority 10
[  452.361002][T23635] bond0: entered promiscuous mode
[  452.369034][T23635] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  452.395460][T23635] !
: entered promiscuous mode
[  452.411760][T23635] bond0: left promiscuous mode
[  452.417247][T23635] mac80211_hwsim hwsim33 wlan1: left promiscuous mode
[  452.424299][T23635] !
: left promiscuous mode
[  453.040350][T23658] __nla_validate_parse: 3 callbacks suppressed
[  453.040376][T23658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5422'.
[  453.093640][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5422'.
[  453.116808][T23670] pim6reg: entered allmulticast mode
[  453.251256][T23684] delete_channel: no stack
[  453.350123][T23697] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5436'.
[  453.377411][T23695] team0: entered promiscuous mode
[  453.438406][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5435'.
[  453.455539][ T5974] tipc: Node number set to 4068884801
[  453.520211][T23695] team0 (unregistering): left promiscuous mode
[  453.578612][T23713] pim6reg: entered allmulticast mode
[  453.867981][T23738] pim6reg: entered allmulticast mode
[  453.882729][T23738] pim6reg: left allmulticast mode
[  453.929980][   T30] audit: type=1800 audit(1756158097.946:14): pid=23742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5450" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=2671 res=0 errno=0
[  453.977514][   T30] audit: type=1804 audit(1756158097.946:15): pid=23742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5450" name="/newroot/513/x000000000000000500000000000000000000005" dev="tmpfs" ino=2671 res=1 errno=0
[  454.131694][T23755] pim6reg: entered allmulticast mode
[  454.254022][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5459'.
[  454.278833][T23767] pim6reg: left allmulticast mode
[  454.291924][T23767] FAULT_INJECTION: forcing a failure.
[  454.291924][T23767] name failslab, interval 1, probability 0, space 0, times 0
[  454.325510][T23767] CPU: 1 UID: 0 PID: 23767 Comm: syz.1.5458 Not tainted syzkaller #0 PREEMPT(full) 
[  454.325536][T23767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  454.325548][T23767] Call Trace:
[  454.325555][T23767]  <TASK>
[  454.325563][T23767]  dump_stack_lvl+0x189/0x250
[  454.325589][T23767]  ? __pfx____ratelimit+0x10/0x10
[  454.325614][T23767]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.325634][T23767]  ? __pfx__printk+0x10/0x10
[  454.325656][T23767]  ? __pfx___might_resched+0x10/0x10
[  454.325673][T23767]  ? lock_acquire+0x5f/0x360
[  454.325697][T23767]  should_fail_ex+0x414/0x560
[  454.325721][T23767]  should_failslab+0xa8/0x100
[  454.325746][T23767]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  454.325769][T23767]  ? rtnl_prop_list_size+0x1ba/0x1e0
[  454.325794][T23767]  ? __alloc_skb+0x112/0x2d0
[  454.325812][T23767]  __alloc_skb+0x112/0x2d0
[  454.325829][T23767]  rtmsg_ifinfo_build_skb+0x84/0x260
[  454.325855][T23767]  rtmsg_ifinfo+0x8c/0x1a0
[  454.325879][T23767]  netif_close_many+0x27f/0x410
[  454.325906][T23767]  ? __pfx_netif_close_many+0x10/0x10
[  454.325928][T23767]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  454.325951][T23767]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  454.325976][T23767]  unregister_netdevice_many_notify+0x7b9/0x1ff0
[  454.325999][T23767]  ? __wake_up_common_lock+0x190/0x1f0
[  454.326025][T23767]  ? netlink_broadcast_filtered+0x1216/0x12c0
[  454.326051][T23767]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  454.326074][T23767]  ? inet6_netconf_fill_devconf+0x3f3/0x720
[  454.326108][T23767]  unregister_netdevice_queue+0x33c/0x380
[  454.326130][T23767]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  454.326153][T23767]  ? nlmsg_notify+0xf0/0x1a0
[  454.326174][T23767]  ? nlmsg_notify+0x14a/0x1a0
[  454.326198][T23767]  mif6_delete+0x63e/0x910
[  454.326226][T23767]  ? __pfx_mif6_delete+0x10/0x10
[  454.326250][T23767]  ? _copy_from_user+0x94/0xb0
[  454.326271][T23767]  ip6_mroute_setsockopt+0xaba/0xf00
[  454.326293][T23767]  ? is_bpf_text_address+0x26/0x2b0
[  454.326317][T23767]  ? rcu_is_watching+0x15/0xb0
[  454.326338][T23767]  ? __pfx_ip6_mroute_setsockopt+0x10/0x10
[  454.326366][T23767]  ? rcu_is_watching+0x15/0xb0
[  454.326382][T23767]  ? lock_release+0x4b/0x3e0
[  454.326405][T23767]  ? __might_fault+0xb0/0x130
[  454.326433][T23767]  ? __might_fault+0xcc/0x130
[  454.326458][T23767]  do_ipv6_setsockopt+0x35a/0x2eb0
[  454.326486][T23767]  ? kstrtoull+0x12f/0x1d0
[  454.326509][T23767]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  454.326532][T23767]  ? kstrtouint+0x6e/0xe0
[  454.326555][T23767]  ? get_pid_task+0x20/0x1f0
[  454.326576][T23767]  ? rcu_is_watching+0x15/0xb0
[  454.326592][T23767]  ? aa_label_sk_perm+0x4cd/0x630
[  454.326615][T23767]  ? get_pid_task+0x20/0x1f0
[  454.326636][T23767]  ? lock_release+0x4b/0x3e0
[  454.326659][T23767]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  454.326682][T23767]  ? get_pid_task+0x20/0x1f0
[  454.326701][T23767]  ? get_pid_task+0x20/0x1f0
[  454.326721][T23767]  ? rcu_is_watching+0x15/0xb0
[  454.326738][T23767]  ? lock_release+0x4b/0x3e0
[  454.326759][T23767]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  454.326778][T23767]  ? security_file_permission+0x75/0x290
[  454.326801][T23767]  ? __pfx___might_resched+0x10/0x10
[  454.326817][T23767]  ? lock_release+0x4b/0x3e0
[  454.326838][T23767]  ? vfs_write+0x956/0xb30
[  454.326863][T23767]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  454.326891][T23767]  ipv6_setsockopt+0x59/0x170
[  454.326917][T23767]  rawv6_setsockopt+0x23b/0x5b0
[  454.326944][T23767]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  454.326966][T23767]  ? aa_sock_opt_perm+0xff/0x1b0
[  454.326983][T23767]  ? sock_common_setsockopt+0x36/0xc0
[  454.327006][T23767]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  454.327030][T23767]  do_sock_setsockopt+0x179/0x1b0
[  454.327050][T23767]  __x64_sys_setsockopt+0x13f/0x1b0
[  454.327070][T23767]  do_syscall_64+0xfa/0x3b0
[  454.327088][T23767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.327106][T23767]  ? clear_bhb_loop+0x60/0xb0
[  454.327125][T23767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.327150][T23767] RIP: 0033:0x7fab26f8ebe9
[  454.327167][T23767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.327183][T23767] RSP: 002b:00007fab27e6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  454.327203][T23767] RAX: ffffffffffffffda RBX: 00007fab271b5fa0 RCX: 00007fab26f8ebe9
[  454.327217][T23767] RDX: 00000000000000cb RSI: 0000000000000029 RDI: 0000000000000003
[  454.327229][T23767] RBP: 00007fab27e6e090 R08: 000000000000000c R09: 0000000000000000
[  454.327240][T23767] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  454.327252][T23767] R13: 00007fab271b6038 R14: 00007fab271b5fa0 R15: 00007fffc7e703e8
[  454.327274][T23767]  </TASK>
[  454.931773][T23756] netlink: 'syz.3.5455': attribute type 17 has an invalid length.
[  454.948433][T23756] sit0: left promiscuous mode
[  454.957357][T23756] ip6tnl0: left promiscuous mode
[  454.962336][T23756] ip6tnl0: left allmulticast mode
[  454.975938][T23756] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.986888][T23756] batman_adv: batadv0: Interface activated: dummy0
[  455.035848][T23756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  455.072259][T23786] pim6reg: entered allmulticast mode
[  455.090249][T23791] pim6reg: left allmulticast mode
[  455.189291][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5467'.
[  455.381575][T23813] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5475'.
[  455.456342][T23807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5473'.
[  455.474323][T23822] pim6reg: entered allmulticast mode
[  455.480449][T23807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5473'.
[  455.490973][T23807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5473'.
[  455.503209][T23822] pim6reg: left allmulticast mode
[  455.774132][T23840] pim6reg: entered allmulticast mode
[  455.933500][T23851] pim6reg: left allmulticast mode
[  456.089457][T23865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.107771][T23865] syzkaller0: entered promiscuous mode
[  456.115829][T23865] syzkaller0: entered allmulticast mode
[  456.131987][T23865] tipc: Resetting bearer <eth:syzkaller0>
[  456.162002][T23864] tipc: Resetting bearer <eth:syzkaller0>
[  456.195846][T23864] tipc: Disabling bearer <eth:syzkaller0>
[  456.682954][T23894] pim6reg: entered allmulticast mode
[  456.696215][T23894] pim6reg: left allmulticast mode
[  456.933169][T23906] batman_adv: batadv0: Interface deactivated: dummy0
[  456.942850][T23906] batman_adv: batadv0: Removing interface: dummy0
[  456.951715][T23906] bond0: (slave wlan1): Releasing backup interface
[  456.977343][T23906] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  457.178599][T23922] pim6reg: entered allmulticast mode
[  457.669752][T23938] pim6reg: left allmulticast mode
[  457.902168][T23955] pim6reg: entered allmulticast mode
[  457.995393][T23956] lo speed is unknown, defaulting to 1000
[  458.098561][T23956] lo speed is unknown, defaulting to 1000
[  458.125033][T23960] netlink: 'syz.1.5521': attribute type 16 has an invalid length.
[  458.134238][T23960] netlink: 'syz.1.5521': attribute type 3 has an invalid length.
[  458.154924][T23960] __nla_validate_parse: 71 callbacks suppressed
[  458.154942][T23960] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.5521'.
[  458.498464][T23963] netlink: 'syz.1.5521': attribute type 12 has an invalid length.
[  458.511725][T23969] netlink: 'syz.3.5523': attribute type 1 has an invalid length.
[  458.529982][T23967] lo speed is unknown, defaulting to 1000
[  458.674980][T23971] lo speed is unknown, defaulting to 1000
[  458.681252][T23967] lo speed is unknown, defaulting to 1000
[  458.698909][T23982] pim6reg: entered allmulticast mode
[  458.755778][T23982] pim6reg: left allmulticast mode
[  458.762666][T23984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5526'.
[  458.823374][T23984] syz_tun (unregistering): left allmulticast mode
[  459.209764][T23971] lo speed is unknown, defaulting to 1000
[  459.226457][T23978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5524'.
[  459.245768][T23978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5524'.
[  459.290323][T23978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5524'.
[  459.321557][T23978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5524'.
[  459.331357][T23978] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5524'.
[  459.514037][T24007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5534'.
[  459.821675][T24018] netlink: 'syz.0.5536': attribute type 10 has an invalid length.
[  459.864667][T24018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5536'.
[  459.926361][T24021] netlink: 'syz.3.5538': attribute type 11 has an invalid length.
[  459.980737][T24023] netlink: 'syz.1.5539': attribute type 9 has an invalid length.
[  459.999053][T24023] netlink: 'syz.1.5539': attribute type 6 has an invalid length.
[  460.198223][T24031] sctp: [Deprecated]: syz.3.5542 (pid 24031) Use of int in maxseg socket option.
[  460.198223][T24031] Use struct sctp_assoc_value instead
[  460.320792][T24037] 8021q: adding VLAN 0 to HW filter on device bond6
[  460.359301][T24041] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  460.435361][T18117] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  460.566259][ T8611] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  460.570304][T24049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5543'.
[  461.183282][T24084] lo speed is unknown, defaulting to 1000
[  461.389360][T24084] lo speed is unknown, defaulting to 1000
[  461.882991][T24120] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  462.145573][T24126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.165419][T24126] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  462.181120][T24111] lo speed is unknown, defaulting to 1000
[  462.188415][T24127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.358481][T24137] pim6reg: left allmulticast mode
[  462.373441][T24111] lo speed is unknown, defaulting to 1000
[  463.001109][T24158] netlink: 'syz.0.5581': attribute type 21 has an invalid length.
[  463.380317][T24168] __nla_validate_parse: 7 callbacks suppressed
[  463.380340][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5585'.
[  463.426943][T24173] pim6reg: entered allmulticast mode
[  463.459410][T24177] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.5586'.
[  463.473560][T24173] pim6reg: left allmulticast mode
[  463.944369][T24202] FAULT_INJECTION: forcing a failure.
[  463.944369][T24202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  463.960040][T24202] CPU: 0 UID: 0 PID: 24202 Comm: syz.4.5592 Not tainted syzkaller #0 PREEMPT(full) 
[  463.960070][T24202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  463.960082][T24202] Call Trace:
[  463.960090][T24202]  <TASK>
[  463.960098][T24202]  dump_stack_lvl+0x189/0x250
[  463.960129][T24202]  ? __pfx____ratelimit+0x10/0x10
[  463.960155][T24202]  ? __pfx_dump_stack_lvl+0x10/0x10
[  463.960175][T24202]  ? __pfx__printk+0x10/0x10
[  463.960196][T24202]  ? __might_fault+0xb0/0x130
[  463.960223][T24202]  ? rcu_is_watching+0x15/0xb0
[  463.960244][T24202]  should_fail_ex+0x414/0x560
[  463.960270][T24202]  _copy_from_user+0x2d/0xb0
[  463.960290][T24202]  ___sys_recvmsg+0x12e/0x510
[  463.960313][T24202]  ? __pfx____sys_recvmsg+0x10/0x10
[  463.960335][T24202]  ? __fget_files+0x2a/0x420
[  463.960349][T24202]  ? rcu_is_watching+0x15/0xb0
[  463.960374][T24202]  ? __fget_files+0x3a0/0x420
[  463.960395][T24202]  do_recvmmsg+0x307/0x770
[  463.960418][T24202]  ? __pfx_do_recvmmsg+0x10/0x10
[  463.960449][T24202]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  463.960484][T24202]  __x64_sys_recvmmsg+0x190/0x240
[  463.960505][T24202]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  463.960527][T24202]  ? rcu_is_watching+0x15/0xb0
[  463.960546][T24202]  do_syscall_64+0xfa/0x3b0
[  463.960563][T24202]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.960582][T24202]  ? clear_bhb_loop+0x60/0xb0
[  463.960601][T24202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.960618][T24202] RIP: 0033:0x7fb1cab8ebe9
[  463.960635][T24202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.960651][T24202] RSP: 002b:00007fb1cb93e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  463.960672][T24202] RAX: ffffffffffffffda RBX: 00007fb1cadb6090 RCX: 00007fb1cab8ebe9
[  463.960686][T24202] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003
[  463.960698][T24202] RBP: 00007fb1cb93e090 R08: 0000000000000000 R09: 0000000000000000
[  463.960710][T24202] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  463.960721][T24202] R13: 00007fb1cadb6128 R14: 00007fb1cadb6090 R15: 00007ffc578fbd48
[  463.960743][T24202]  </TASK>
[  464.521682][T24221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.950873][T24253] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5609'.
[  465.011732][T24256] lo speed is unknown, defaulting to 1000
[  465.208210][T24256] lo speed is unknown, defaulting to 1000
[  465.209852][T24260] lo speed is unknown, defaulting to 1000
[  465.443570][T24265] openvswitch: netlink: Flow key attr not present in new flow.
[  465.579265][T24260] lo speed is unknown, defaulting to 1000
[  465.934961][T24299] lo speed is unknown, defaulting to 1000
[  466.168479][T24299] lo speed is unknown, defaulting to 1000
[  466.396274][T24310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5626'.
[  466.576398][T24325] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5629'.
[  466.685624][T24327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5630'.
[  466.717542][T24327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  466.772861][T24333] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5633'.
[  467.031171][T24329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5630'.
[  467.046394][T24329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  467.320916][T24354] lo speed is unknown, defaulting to 1000
[  467.397015][T24366] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  467.434531][T24354] lo speed is unknown, defaulting to 1000
[  467.682007][T24377] pim6reg: entered allmulticast mode
[  467.704771][T24377] pim6reg: left allmulticast mode
[  467.718170][T24382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5647'.
[  468.454152][T24417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5655'.
[  468.538988][T24419] bond0: (slave wlan1): Releasing backup interface
[  468.578481][T24419] bond6: (slave ip6gretap2): Removing an active aggregator
[  468.595086][T24419] bond6: (slave ip6gretap2): Releasing backup interface
[  468.627155][T24423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5654'.
[  468.781690][T24423] team0: Failed to send options change via netlink (err -105)
[  468.795240][T24423] team0: Mode changed to "loadbalance"
[  468.884007][T24433] pim6reg: entered allmulticast mode
[  468.892593][T24433] pim6reg: left allmulticast mode
[  468.910442][T24437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  468.920948][T24435] syzkaller0: entered promiscuous mode
[  468.926976][T24435] syzkaller0: entered allmulticast mode
[  468.969877][T24438] lo speed is unknown, defaulting to 1000
[  468.976837][T24439] tipc: Resetting bearer <eth:syzkaller0>
[  468.999396][T24439] tipc: Disabling bearer <eth:syzkaller0>
[  469.102400][T24438] lo speed is unknown, defaulting to 1000
[  469.210623][T24448] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  469.322116][T24454] !
: entered promiscuous mode
[  469.327450][T24454] vlan3: entered promiscuous mode
[  469.362189][T24452] IPv6: Can't replace route, no match found
[  469.532635][T24461] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  469.577683][T24461] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  469.586512][T24461] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  469.661733][T24461] lo speed is unknown, defaulting to 1000
[  469.674248][T24470] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5672'.
[  469.837589][T24461] lo speed is unknown, defaulting to 1000
[  469.921801][T24483] lo speed is unknown, defaulting to 1000
[  470.141481][T24483] lo speed is unknown, defaulting to 1000
[  470.263657][T24491] pim6reg: entered allmulticast mode
[  470.295287][T24491] pim6reg: left allmulticast mode
[  470.558584][T24508] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5682'.
[  470.800473][T24522] pim6reg: entered allmulticast mode
[  470.816929][T24522] pim6reg: left allmulticast mode
[  471.241250][T24539] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  471.321522][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5693'.
[  471.340404][T24544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5692'.
[  471.707179][T24558] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5696'.
[  472.126682][T24566] lo speed is unknown, defaulting to 1000
[  472.432149][T24562] lo speed is unknown, defaulting to 1000
[  472.456411][T24566] lo speed is unknown, defaulting to 1000
[  472.644575][T24571] netlink: 'syz.2.5700': attribute type 13 has an invalid length.
[  472.652589][T24571] netlink: 'syz.2.5700': attribute type 17 has an invalid length.
[  472.759055][T24562] lo speed is unknown, defaulting to 1000
[  472.954364][T24571] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.118071][T24571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  473.147073][T24586] pim6reg: left allmulticast mode
[  473.160271][T24592] netlink: 'syz.4.5705': attribute type 49 has an invalid length.
[  473.441816][T24603] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  473.538586][T24611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5712'.
[  473.757179][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5713'.
[  473.816745][T24616] macvtap1: entered promiscuous mode
[  473.822075][T24616] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode
[  473.990332][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5713'.
[  474.459057][T24628] netlink: 'syz.0.5717': attribute type 1 has an invalid length.
[  474.510557][T24629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5717'.
[  474.880621][T24628] 8021q: adding VLAN 0 to HW filter on device bond7
[  474.923230][T24630] gretap0: entered promiscuous mode
[  474.934452][T24630] bond7: (slave gretap0): making interface the new active one
[  474.946020][T24630] bond7: (slave gretap0): Enslaving as an active interface with an up link
[  474.961070][T24645] pim6reg: left allmulticast mode
[  475.116989][T24650] lo speed is unknown, defaulting to 1000
[  475.148051][T24660] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  475.326660][T24655] lo speed is unknown, defaulting to 1000
[  475.335802][T24650] lo speed is unknown, defaulting to 1000
[  475.454574][T24655] lo speed is unknown, defaulting to 1000
[  475.639324][T24668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5728'.
[  476.071267][T24675] nbd: must specify at least one socket
[  476.301737][T24682] pim6reg: entered allmulticast mode
[  476.395197][T24685] pim6reg: left allmulticast mode
[  476.668090][T24703] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5737'.
[  476.691329][T24705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.700093][T24705] syzkaller0: entered promiscuous mode
[  476.711959][T24705] syzkaller0: entered allmulticast mode
[  476.731265][T24697] lo speed is unknown, defaulting to 1000
[  476.915496][T24697] lo speed is unknown, defaulting to 1000
[  476.931724][T24705] tipc: Resetting bearer <eth:syzkaller0>
[  476.948684][T24705] tipc: Disabling bearer <eth:syzkaller0>
[  476.962470][T24716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5742'.
[  477.019959][T24719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5743'.
[  477.574681][T24727] lo speed is unknown, defaulting to 1000
[  477.763649][T24732] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5746'.
[  477.801531][T24734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5747'.
[  477.907458][T24727] lo speed is unknown, defaulting to 1000
[  478.337771][T24747] lo speed is unknown, defaulting to 1000
[  478.558076][T24747] lo speed is unknown, defaulting to 1000
[  479.141151][T24786] openvswitch: netlink: Missing valid actions attribute.
[  479.148328][T24786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.164078][T24788] 8021q: VLANs not supported on bond0
[  479.329414][T24805] __nla_validate_parse: 1 callbacks suppressed
[  479.329436][T24805] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5770'.
[  479.437441][T24809] macsec0: entered promiscuous mode
[  479.453742][T24809] !
: entered promiscuous mode
[  479.473964][T24809] macsec0: entered allmulticast mode
[  479.520998][T24809] !
: entered allmulticast mode
[  479.530942][T24809] !
: left allmulticast mode
[  479.537666][T24809] !
: left promiscuous mode
[  479.558695][T24814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5775'.
[  479.590274][T24819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5776'.
[  479.648371][    C0] vcan0: j1939_session_tx_dat: 0xffff88805641cc00: queue data error: -100
[  479.780370][T24828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5778'.
[  479.800155][T24829] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5777'.
[  479.924894][T24834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5779'.
[  479.939963][T24834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5779'.
[  480.093692][T24837] lo speed is unknown, defaulting to 1000
[  480.510991][T24837] lo speed is unknown, defaulting to 1000
[  481.043080][T24854] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5786'.
[  481.055306][T24855] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[  481.102091][T24860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5788'.
[  481.362276][T24880] netlink: 'syz.1.5795': attribute type 21 has an invalid length.
[  481.375480][T24880] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5795'.
[  481.795620][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  481.803114][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  481.811108][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  481.819857][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  481.827401][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  481.870542][T24896] lo speed is unknown, defaulting to 1000
[  481.981455][T24896] lo speed is unknown, defaulting to 1000
[  482.025297][T18122] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.041625][T18122] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.083746][T18122] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.145057][T18103] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  482.156995][T18103] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  482.166536][T18103] CPU: 1 UID: 0 PID: 18103 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) 
[  482.176210][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  482.186275][T18103] Workqueue: netns cleanup_net
[  482.191028][T18103] RIP: 0010:mld_clear_delrec+0x3a5/0x660
[  482.196653][T18103] Code: ff ff ff e8 ed 2b 41 01 89 c5 31 ff 89 c6 e8 62 00 87 f7 85 ed 74 40 e8 19 fc 86 f7 eb 05 e8 12 fc 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 cc 67 ea f7 4d 8b 27 49 8d 7f 30
[  482.216272][T18103] RSP: 0018:ffffc90004d6f4b0 EFLAGS: 00010206
[  482.222334][T18103] RAX: 000000001fffe000 RBX: ffff888068e01538 RCX: ffff8880248b3c00
[  482.230304][T18103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  482.238278][T18103] RBP: 0000000000000000 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6
[  482.246359][T18103] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffff8880334b0428
[  482.254321][T18103] R13: dffffc0000000000 R14: ffff8880334b0400 R15: 00000000ffff0000
[  482.262369][T18103] FS:  0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000
[  482.271285][T18103] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  482.277855][T18103] CR2: 000000110c31e6ee CR3: 000000007e306000 CR4: 00000000003526f0
[  482.285814][T18103] Call Trace:
[  482.289079][T18103]  <TASK>
[  482.291997][T18103]  ipv6_mc_destroy_dev+0x45/0x5a0
[  482.297016][T18103]  addrconf_ifdown+0x139e/0x1880
[  482.301941][T18103]  ? tls_dev_event+0x717/0xec0
[  482.306773][T18103]  ? __pfx_addrconf_ifdown+0x10/0x10
[  482.312101][T18103]  ? lock_release+0x4b/0x3e0
[  482.316768][T18103]  ? net_generic+0x1e/0x240
[  482.321259][T18103]  ? __pfx_tls_dev_event+0x10/0x10
[  482.326379][T18103]  addrconf_notify+0x1bc/0x1010
[  482.331221][T18103]  notifier_call_chain+0x1b3/0x3e0
[  482.336316][T18103]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  482.342810][T18103]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  482.349558][T18103]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  482.355796][T18103]  ? sysfs_remove_group+0x236/0x2c0
[  482.360994][T18103]  ? net_generic+0x1e/0x240
[  482.365498][T18103]  ops_undo_list+0x3dc/0x990
[  482.370081][T18103]  ? __pfx_ops_undo_list+0x10/0x10
[  482.375190][T18103]  ? do_raw_spin_unlock+0x122/0x240
[  482.380378][T18103]  cleanup_net+0x4c5/0x800
[  482.384781][T18103]  ? __pfx_cleanup_net+0x10/0x10
[  482.389707][T18103]  ? rcu_is_watching+0x15/0xb0
[  482.394455][T18103]  ? process_scheduled_works+0x9ef/0x17b0
[  482.400182][T18103]  ? process_scheduled_works+0x9ef/0x17b0
[  482.405973][T18103]  process_scheduled_works+0xae1/0x17b0
[  482.411513][T18103]  ? __pfx_process_scheduled_works+0x10/0x10
[  482.417694][T18103]  worker_thread+0x8a0/0xda0
[  482.422306][T18103]  kthread+0x70e/0x8a0
[  482.426384][T18103]  ? __pfx_worker_thread+0x10/0x10
[  482.431493][T18103]  ? __pfx_kthread+0x10/0x10
[  482.436078][T18103]  ? rcu_is_watching+0x15/0xb0
[  482.440849][T18103]  ? __pfx_kthread+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  482.445435][T18103]  ret_from_fork+0x3f9/0x770
[  482.450011][T18103]  ? __pfx_ret_from_fork+0x10/0x10
[  482.455104][T18103]  ? __switch_to_asm+0x39/0x70
[  482.459857][T18103]  ? __switch_to_asm+0x33/0x70
[  482.464604][T18103]  ? __pfx_kthread+0x10/0x10
[  482.469186][T18103]  ret_from_fork_asm+0x1a/0x30
[  482.473948][T18103]  </TASK>
[  482.477050][T18103] Modules linked in:
[  482.481907][T18103] ---[ end trace 0000000000000000 ]---
[  482.502419][T18103] RIP: 0010:mld_clear_delrec+0x3a5/0x660
[  482.526258][T18103] Code: ff ff ff e8 ed 2b 41 01 89 c5 31 ff 89 c6 e8 62 00 87 f7 85 ed 74 40 e8 19 fc 86 f7 eb 05 e8 12 fc 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 cc 67 ea f7 4d 8b 27 49 8d 7f 30
[  482.557178][T18103] RSP: 0018:ffffc90004d6f4b0 EFLAGS: 00010206
[  482.563488][T18103] RAX: 000000001fffe000 RBX: ffff888068e01538 RCX: ffff8880248b3c00
[  482.620440][T18103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  482.664864][T18103] RBP: 0000000000000000 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6
[  482.673005][T18103] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffff8880334b0428
[  482.695019][T18103] R13: dffffc0000000000 R14: ffff8880334b0400 R15: 00000000ffff0000
[  482.703033][T18103] FS:  0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000
[  482.731554][T18103] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  482.738381][T18103] CR2: 00005648247c8000 CR3: 000000000df36000 CR4: 00000000003526f0
[  482.748897][T18103] Kernel panic - not syncing: Fatal exception
[  482.755381][T18103] Kernel Offset: disabled
[  482.759714][T18103] Rebooting in 86400 seconds..