last executing test programs:

2.882206867s ago: executing program 1 (id=8579):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000600)={0x1b, "553536876577f631514b23371343eed3309911a7f0565e10da1625f340041ca89b86c6c55c266c5593ee3dd236dfd4c5940ed00176d24c6b8a75ef5f42d4d78a2233372dd0946a9e26a5926974b51cef5aa8acedf45d2b516cc557b17176992c832abeebd2341a93d64be28a6b89ca49c3f3eb20a8fc1de69313ac3f54535da6"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e470e03f8e6f26255b72044124bafb57cc2269453cd65d849278e7c2137be7c4d4f277eb375149cd158e7a0d5894da5fad30819f"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000300000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f00000001c0)="b700001811005a", 0x7}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f6ffa", 0x1b}], 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

2.086315294s ago: executing program 0 (id=8584):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x1, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r4, 0x104, 0x6, 0x0, &(0x7f0000000140))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r3, 0x325, 0x2, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005}, 0x40000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000000ac4297a747d976b1077e4f39da000000000000850000000f00000018110000de7cda7b55b474d58db4484df33d7714b5d7b62c3da94595810c7af019b0c00f4bd5328c30d40cbf8c739099e604c0a9188cce8622cb897658f1b5b828a592762631ce91475f91aa91022aea9bc80d06d35f60fc1736eb8fe3b5ffe812ab539c24ab0a2fd4f27ca0f719f0bb35f0de82fc4c18969aaa42fdc3533b63c06b82c48c91dcf2179819b8a35545623466d846c7cad245f97462f20c6c7e6660a3d1e72859491175c5237597f42e98b403cf4da9689ded31d11cf76434d27b48d3bc89b3497af0bc400b7d24d43d01806b198cbc84fe8dad30967ac47866d7880a281ac9bfcbb5784f4e774ac085fdcc3e4178ed2a523e7e38f8dd8a33c669cee62240bad6d84296f0599bf196c6f691ee82939c8fc0f6d63c3288b037f5336075ef4c0925a3784a448f3ef7b9e98571c4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')

1.205061711s ago: executing program 1 (id=8590):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x70bd29, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}]}]}]}, 0x3c}}, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x84000000)

1.125145354s ago: executing program 4 (id=8592):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd605f1060004a2f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000ca000300000800000086dd080088be"], 0x0)

1.1239245s ago: executing program 0 (id=8593):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

1.009035796s ago: executing program 0 (id=8594):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff03010000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)

1.008786143s ago: executing program 3 (id=8595):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d2075a5625827d853a8b3f9d5fd4c6324518c9f9d93b9ced5500aeb511a2247"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008240)=[{{&(0x7f0000001200)={0xa, 0x4e21, 0x4, @private2, 0x6}, 0x1c, &(0x7f0000002600)=[{&(0x7f0000001240)="bdb82195", 0x4}], 0x1}}], 0x1, 0xc0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000)
sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c53", 0x1d}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b", 0x2d}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000)
r3 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b00010065789368647200000c00028008000640000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xbc}}, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.005735193s ago: executing program 4 (id=8597):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x328, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x99}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7b3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8275}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff262}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xed}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa9}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf33}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40}, 0x4008001)

976.760335ms ago: executing program 0 (id=8598):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r4, 0x0, 0xffffffff004)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0xa}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x7, &(0x7f0000000000)=0x22, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090027bd70001f0000000400000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
writev(r11, &(0x7f0000000240)=[{&(0x7f0000000100)="d2ae", 0x2}], 0x1)
writev(r11, &(0x7f0000000080)=[{&(0x7f0000000440)="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", 0x1be}, {&(0x7f0000001800)="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", 0xe43}], 0x2)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)

926.999803ms ago: executing program 3 (id=8599):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000fa000000000000ac1e0001821501f63ed02a170000000000000000000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r5 = socket$caif_stream(0x25, 0x1, 0x0)
recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2140, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0)
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000040)=0x9)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r7)
sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xb2ad9fb1bfbfce0b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b800000014", @ANYRESDEC=r0], 0xb8}}, 0x0)

904.152776ms ago: executing program 1 (id=8600):
r0 = socket(0x23, 0x80000, 0x80000000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000400)={0x6, 0xffffffff, 0xd7c7, 0x6}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b0000000000000008000ac0b3c60000", 0x24)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r5=>0x0, @multicast2, @local}, &(0x7f0000000380)=0xc)
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@multicast2, @local, r5}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0}) (async)
write$nbd(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="4744669800000000030001000300000005c6935ac6d299491858ca2dd23c32206e797bb4c8a65f7636e62d763c8601fecc1b1a6b59639ea190ade33febc58a6c921604bf52dbc48f21af38b9e11992587a81fbf3d2b69ad1e0255f751822307b5d500e0bc6e42bed9b3ff5c9f6c20c2b7aa0f02b33faf5be1d5cd48b4942ba20728db623bd4831c0a7433eeb754372d19152deda5dac39149a580575917a19463dd6b9aa54a4a4d00aff0f00007b79ee369cbfc9b46aa7f1fd05fc6d25fdb5d538051630fcffb71944e88232c2c23b4644433d8cd88691d70be63b5dc3d5420241368a"], 0x40)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x64010810) (async)
r8 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x0)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x404ce90}, 0x20048040) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0x3}, {}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)

903.330589ms ago: executing program 4 (id=8601):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000600)={0x1b, "553536876577f631514b23371343eed3309911a7f0565e10da1625f340041ca89b86c6c55c266c5593ee3dd236dfd4c5940ed00176d24c6b8a75ef5f42d4d78a2233372dd0946a9e26a5926974b51cef5aa8acedf45d2b516cc557b17176992c832abeebd2341a93d64be28a6b89ca49c3f3eb20a8fc1de69313ac3f54535da6"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e470e03f8e6f26255b72044124bafb57cc2269453cd65d849278e7c2137be7c4d4f277eb375149cd158e7a0d5894da5fad30819f"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000ffde00000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f00000001c0)="b700001811005a", 0x7}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f6ffa", 0x1b}], 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

821.517884ms ago: executing program 2 (id=8602):
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x14, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000800)=[{0x2, 0x3, 0xf, 0xa}, {0x1, 0x4, 0xe, 0x7}, {0x3, 0x5, 0x1, 0x3}, {0x2, 0x1, 0xd, 0x9}], 0x10, 0x40}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc00000000000000ff80000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

743.247497ms ago: executing program 2 (id=8603):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000009e", @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000280012800a00010063616e"], 0x48}}, 0x0)

725.35608ms ago: executing program 1 (id=8604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000220e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c0010800800024000000007080001"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)

642.574431ms ago: executing program 3 (id=8605):
unshare(0x400)
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f00000002c0)="d8706585affc5a3f457c5a03a1d65722acb9f52d492f9aab4fd68fc9f2c0ec77c82bdd4a120a25a0b2d7c78f47637425cd117a6eecf77f32aac65adc79f11d591b4b7ba59ed130c1e53be943b6409a4d3dc51045a9d16819a5f4991f0609a89a6a5b5e18e9ce9b6f0f6a1eb83cd831a7463ccc0d59f5d4b902ecce75d8593471f26cce5d0b09b0f94e8d7123d136c1f97efa1ca63e640cae423ce3d765592462c8e365b7906cb3178c6f11e7d5a9747d8e13e28145371265f77acc82256e54dcefa9ecacb65743154ce02a7d7e840deeae1c3f1344cdfc13", 0xd8}, 0x1, 0x0, 0x0, 0x4080}, 0x40) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd7001fedbdf251200000018000180140002006272696467655f736c6176655f31000008000700020000000800060002000000"], 0x3c}, 0x1, 0x0, 0x0, 0xe0307dcb63f81144}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="0100000000000000000039000000", @ANYRES32, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES8=r4], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="892a00000000000064b4dd424c1f5028beff9df8495111d3ae0de7b908bfb28b26c69eb5fc5e333414d9650df5f003e2742d85271437d1f580afba4ceda3737f2eff804f622d3df8007711421e505cb2b363b2c430f083053ce84ca18abcda9b01074701061aba25057d0e52a65ac6b8e9e7637b36eadb0207adfe6e246bcf7a9c70d04cee26b9a58231e61753285dbf065bda369b1c7b3453889e91bf74e9eb6f5ccca2e3e96092e1d3dc0d866a8c589c75a55811dae33e1a06b12146750599a65613e98db51a12bad49f72cce67c77c25811004833eff8156d76b009c882c784ccdfb2b32f107a4e792f95ea02a603da42ae59061be7d64dff5fb4d72b4b35144d353d7c8c03fa920361308fa17c640a0d8afd51349ace3d9a380b821784471b8cc405cf81ae1723665eed20062455f6713f16cce2a91cbcfefa95ee99505d315da58717ad39c4e0272f55c0c75f386b551f602d845a7940000000000000005384eb25f06a6f4b83d3be5c010a82dd1de7c9e4e6"], 0x160) (async)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="038002000000bbbbbbbbbbbb0800450000380100000000019078ac1e0001ac141422030490781200183f2500000000640000003200007f0000017f00000100186371ae9b1c0326f8"], 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) (async)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000001401"], 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x804) (async, rerun: 64)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r9, 0x84, 0x82, &(0x7f00000001c0), 0x0) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r10, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_QUOTA={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x24040040)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) (async)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="210f28bd7000fcdbdf259c000000080300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840)

541.519158ms ago: executing program 2 (id=8606):
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
unshare(0x24040400) (async, rerun: 32)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value=r2}, 0x28) (rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x70bd2a, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r4=>0x0})
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @multicast2, 0x1, "e5a193eb28e9213a15462d1b1660eeb000f5797f309c7185c99e9c6921b9f30c", 0x9, 0x6, 0xb773, 0x3}, 0x3c) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400b5954000f9fffedbdf25de5c2a2a2e7bb3974ae040f1e50d0a3fdf00cde1c6cfc12d48c31ada9c92ae84a4c2635578ab77944c1fb0ec22cbdb40723e8bdf40c9ef248c23e90c49ed11d288ffbf44e506d1569652126a2fd57cfd3fc73dc9e6badc0e8485ff7c24622ee74d8517dbce60310e4e7050e857a12811721f70e7b40bbee880847f266312a6b52f6e573d9578dfcb8542572f7ac450f382aa56dc448c61", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000004001f0ffff0600000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x34, 0x0, 0xffffffffffffffff, 0xfffffae9, '\x00', r4, r3, 0x1, 0x5, 0x1}, 0x50) (async)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0xf8, &(0x7f0000000480)=""/248, 0x100, 0x10, '\x00', r4, 0x0, r3, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x1, r7], &(0x7f0000000600)=[{0x3, 0x4, 0xe, 0xa}, {0x4, 0x3, 0x0, 0xa}], 0x10, 0x1}, 0x94) (rerun: 64)

515.9822ms ago: executing program 1 (id=8607):
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket(0x1f, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket(0x10, 0x80002, 0x0)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000ffe000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

422.550639ms ago: executing program 4 (id=8608):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, 0x0, &(0x7f00000003c0))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000001000ffff00000000"], 0x2c}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8014)

369.514405ms ago: executing program 2 (id=8609):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d2075a5625827d853a8b3f9d5fd4c6324518c9f9d93b9ced5500aeb511a2247"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008240)=[{{&(0x7f0000001200)={0xa, 0x4e21, 0x4, @private2, 0x6}, 0x1c, &(0x7f0000002600)=[{&(0x7f0000001240)="bdb82195", 0x4}], 0x1}}], 0x1, 0xc0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000)
sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c53", 0x1d}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b", 0x2d}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000)
r3 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b00010065789368647200000c00028008000640000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xbc}}, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

368.354863ms ago: executing program 3 (id=8610):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d2075a5625827d853a8b3f9d5fd4c6324518c9f9d93b9ced5500aeb511a2247"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3e"], 0x20}}, 0xc000)
sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c53", 0x1d}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b", 0x2d}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000)
r3 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b00010065789368647200000c00028008000640000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xbc}}, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

364.145604ms ago: executing program 0 (id=8611):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d2075a5625827d853a8b3f9d5fd4c6324518c9f9d93b9ced5500aeb511a2247"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000)
sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c53", 0x1d}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b00010065789368647200000c00028008000640000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xbc}}, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

293.86471ms ago: executing program 1 (id=8612):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
shutdown(r2, 0x2)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r7}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)={r7, 0x70, "fffe9629655a03bfbde374e317c878f23f06d5e05dea814505f55bb2122661e8645ec59863ccebc011fe29d215913352057c520c359b07312d135849eb695ab6390c44cf1919f6c94caed96c3115ec4e6f189c6314ae3db721e65b0ea025ca9514951bc80cea6df6efe4534f89af2b17"}, &(0x7f00000005c0)=0x78)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000)
select(0x40, &(0x7f0000000000)={0x3, 0x8000000000000000, 0x8001, 0x8000000000000000, 0x4, 0x1000, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x77359400})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r8=>0x0, 0x2f, 0x2, 0xe3, 0x46d, 0xe, @mcast1, @mcast1, 0x0, 0x40, 0xf4, 0x7}})
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@delqdisc={0x90, 0x25, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffe0, 0xe}, {0x0, 0x6}, {0xb, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x59, 0x7f, 0x2, 0x3284, 0x1, 0x6, 0x7, 0x9}}, {0x16, 0x2, [0x74, 0x2, 0x6, 0x8, 0x4, 0x6, 0x3, 0x3, 0x7]}}, {{0x1c, 0x1, {0xf6, 0x7, 0xb, 0xfffffffa, 0x1, 0x5, 0x8, 0x2}}, {0x8, 0x2, [0x5, 0x8009]}}]}, @TCA_EGRESS_BLOCK={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x804}, 0x20000001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) (async)
shutdown(r2, 0x2) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
sendmmsg$inet(r5, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r7}, 0x20) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)={r7, 0x70, "fffe9629655a03bfbde374e317c878f23f06d5e05dea814505f55bb2122661e8645ec59863ccebc011fe29d215913352057c520c359b07312d135849eb695ab6390c44cf1919f6c94caed96c3115ec4e6f189c6314ae3db721e65b0ea025ca9514951bc80cea6df6efe4534f89af2b17"}, &(0x7f00000005c0)=0x78) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) (async)
select(0x40, &(0x7f0000000000)={0x3, 0x8000000000000000, 0x8001, 0x8000000000000000, 0x4, 0x1000, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0xe3, 0x46d, 0xe, @mcast1, @mcast1, 0x0, 0x40, 0xf4, 0x7}}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@delqdisc={0x90, 0x25, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffe0, 0xe}, {0x0, 0x6}, {0xb, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x59, 0x7f, 0x2, 0x3284, 0x1, 0x6, 0x7, 0x9}}, {0x16, 0x2, [0x74, 0x2, 0x6, 0x8, 0x4, 0x6, 0x3, 0x3, 0x7]}}, {{0x1c, 0x1, {0xf6, 0x7, 0xb, 0xfffffffa, 0x1, 0x5, 0x8, 0x2}}, {0x8, 0x2, [0x5, 0x8009]}}]}, @TCA_EGRESS_BLOCK={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async)

283.841342ms ago: executing program 4 (id=8613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x62f}]}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000f0000711060000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000079105c000000000005000000000000009500000000000000045deb497403e574cbc2452a08546d06f98c930d8e572b73415d11c0717dbb9620625647e8a04f951e768a659cbc1451eee1c437e0d5440a4994b4742c33358d626e74c92eca7b0ec92b0c5f6a1dae3c6c0071b2b5d7e188daca43cee12b6581d6a7b1691e9e5c35bb0352ef52f367f01c31bbe26d4228c6f3bf372099eba19fd12fbf718e4ae5ab7d6af0cc3445634d99c2461ea0ac21ca579f75af9a8b45b0ca5f91121c569919e991bc00f9c53b5239baa54df300c663229c6a22d1bf6533"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88e5}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'ipvlan0\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4d, 0x6aafc85c, 0x5, 0x7d, 0x6, 0x9f, 0x1, 0x1, 0xdf, 0xe, [0xd694, 0x0, 0x5, 0xb99, 0x8, 0x7, 0x6, 0x4], [0x1, 0x5, 0x8, 0x4]}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xc0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10, 0x79}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fc7db364935ff76b9da2696c26"}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x12, 0x4, "b1004f1e5a9a1ddc079d45faf514"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "393889228b"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "871e04db444bbc1c7cc714d6f7"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ac0af47941"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x4000001)

237.517144ms ago: executing program 3 (id=8614):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', <r2=>0x0, 0x1, 0x7800, 0xbd3b, 0xffa, {{0x10, 0x4, 0x3, 0x33, 0x40, 0x66, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x1c, 0x24, 0x1, 0xc, [{@broadcast, 0x38}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x40}]}, @generic={0x86, 0x10, "a0e808144abaf16c5c089a9e41e0"}]}}}}})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @multicast}, 0x10)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000300)=0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
sendmsg$can_raw(r6, &(0x7f00000001c0)={&(0x7f0000000180)={0x1d, r7}, 0x43, &(0x7f0000000140)={&(0x7f0000000340)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xe, 0x3, 0x0, 0x0, "555390508bff2b9e63477a98784ca217bae7ae597ea6ea5b806fcd257ce7cb9e0346b0e1ec5064937df2a6f9dd768ae61274d13f2ddf486eaacfb6af356771b9"}, 0x10}, 0x2, 0x0, 0x0, 0x844}, 0x4000855)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@private1, <r8=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x80, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c080)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94)

231.16795ms ago: executing program 2 (id=8615):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000fa000000000000ac1e0001821501f63ed02a170000000000000000000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r5 = socket$caif_stream(0x25, 0x1, 0x0)
recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2140, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0)
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000040)=0x9)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r7)
sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xb2ad9fb1bfbfce0b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b800000014", @ANYRESDEC=r0], 0xb8}}, 0x0)

116.378135ms ago: executing program 3 (id=8616):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e038798346e6d08baef", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf092000000000000d090100001c00009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

55.331155ms ago: executing program 2 (id=8617):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000a16ff000000030005000000200002"], 0x70}, 0x1, 0x7}, 0x0)

578.511µs ago: executing program 4 (id=8618):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff})
r2 = accept(r0, &(0x7f0000000180)=@in6, &(0x7f0000000200)=0x80)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000007c0)={&(0x7f0000000300), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xbc, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = accept4(r5, 0x0, 0x0, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000900)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b00)=@mpls_delroute={0x14c, 0x19, 0x800, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0xfb, 0x0, 0x2, 0x0, 0x9, 0x200}, [@RTA_NEWDST={0x84, 0x13, [{0xfff2c, 0x0, 0x1}, {0x5}, {0x3}, {0x1000, 0x0, 0x1}, {0x5}, {0x3e0}, {0x101, 0x0, 0x1}, {0xa00}, {0x6}, {0x9cd5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0xf317}, {0x4, 0x0, 0x1}, {0x3}, {0x5, 0x0, 0x1}, {0x9, 0x0, 0x1}, {}, {0x3000}, {0x40, 0x0, 0x1}, {0xfb45, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x1}, {0x7, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8001}, {0x9, 0x0, 0x1}, {0x40}, {0xe, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_OIF={0x8, 0x4, r10}, @RTA_DST={0x8, 0x1, {0x7}}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x2}, {0x2}, {0x0, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xffd86, 0x0, 0x1}, {0x9}, {0xf9e0}, {0x2}, {0x45}, {0x8}, {0x5}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x800}, {0x96}, {0x2}, {0x3, 0x0, 0x1}, {0xa0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xa714}, {0x9, 0x0, 0x1}, {0xff801, 0x0, 0x1}, {0x4}, {0x80}, {0x8}, {0x18c}, {0x800, 0x0, 0x1}, {0xe7d}, {0x5, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x10000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280200001900010028bd7000fbdbdf251d010900500012804900d58033ac20d9db2597515873def3351bf11d66e8632c"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0)
sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r11, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e", 0xad}], 0x3}], 0x1, 0x40800)
recvmmsg$unix(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f00000005c0)=""/235, 0xeb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/244, 0xf4}], 0x1}}], 0x2, 0x0, 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000800), &(0x7f0000000840)=0x4)
recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=""/51, 0x33}, 0x202)

0s ago: executing program 0 (id=8619):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0x2a, 0x2, 0x0, 0xd20}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x2, 0x7, 0x0, 0x0, 0x10000000}, {{@in6=@local, 0x4d4, 0x33}, 0x20, @in6=@private1, 0x0, 0x4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffffffffffff, 0xffffffffffffffff, 0x7}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) (async, rerun: 64)
r3 = socket(0x27, 0x80000, 0x2) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) (async, rerun: 64)
close(0x4) (async, rerun: 64)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) (async)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
connect$bt_rfcomm(r13, &(0x7f0000000300)={0x1f, @none, 0xa}, 0xa) (async)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000040040000140012800900010076657468000000000400028008000a00", @ANYRES32=r14], 0x3c}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

RBX: 00007f0e61615fa0 RCX: 00007f0e6139c799
[  592.541129][T26757] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  592.541141][T26757] RBP: 00007f0e6217d090 R08: 0000000000000000 R09: 0000000000000000
[  592.541153][T26757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.541165][T26757] R13: 00007f0e61616038 R14: 00007f0e61615fa0 R15: 00007ffc613cef98
[  592.541195][T26757]  </TASK>
[  592.917006][T26766] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  593.092551][T26781] FAULT_INJECTION: forcing a failure.
[  593.092551][T26781] name failslab, interval 1, probability 0, space 0, times 0
[  593.142441][T26781] CPU: 0 UID: 0 PID: 26781 Comm: syz.2.6817 Not tainted syzkaller #0 PREEMPT(full) 
[  593.142468][T26781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  593.142480][T26781] Call Trace:
[  593.142487][T26781]  <TASK>
[  593.142496][T26781]  dump_stack_lvl+0xe8/0x150
[  593.142527][T26781]  should_fail_ex+0x412/0x560
[  593.142556][T26781]  should_failslab+0xa8/0x100
[  593.142581][T26781]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  593.142602][T26781]  ? __alloc_skb+0x186/0x7d0
[  593.142627][T26781]  ? __alloc_skb+0x1d0/0x7d0
[  593.142649][T26781]  ? __local_bh_enable_ip+0xd0/0x130
[  593.142676][T26781]  __alloc_skb+0x1d0/0x7d0
[  593.142699][T26781]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  593.142715][T26781]  ? do_syscall_64+0x14d/0xf80
[  593.142742][T26781]  alloc_skb_with_frags+0xca/0x890
[  593.142779][T26781]  sock_alloc_send_pskb+0x878/0x990
[  593.142814][T26781]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  593.142833][T26781]  ? kasan_quarantine_put+0xbb/0x1f0
[  593.142852][T26781]  ? lockdep_hardirqs_on+0x7a/0x110
[  593.142880][T26781]  ? kmem_cache_free+0x187/0x630
[  593.142901][T26781]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  593.142927][T26781]  unix_dgram_sendmsg+0x460/0x18e0
[  593.142972][T26781]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  593.142993][T26781]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  593.143027][T26781]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  593.143053][T26781]  ____sys_sendmsg+0x972/0x9f0
[  593.143080][T26781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  593.143107][T26781]  ? import_iovec+0x73/0xa0
[  593.143138][T26781]  ___sys_sendmsg+0x2a5/0x360
[  593.143162][T26781]  ? __pfx____sys_sendmsg+0x10/0x10
[  593.143219][T26781]  __sys_sendmmsg+0x27c/0x4e0
[  593.143251][T26781]  ? __pfx___sys_sendmmsg+0x10/0x10
[  593.143268][T26781]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  593.143316][T26781]  ? ksys_write+0x242/0x270
[  593.143337][T26781]  ? __pfx_ksys_write+0x10/0x10
[  593.143364][T26781]  __x64_sys_sendmmsg+0xa0/0xc0
[  593.143385][T26781]  do_syscall_64+0x14d/0xf80
[  593.143408][T26781]  ? trace_irq_disable+0x3b/0x150
[  593.143433][T26781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.143451][T26781]  ? clear_bhb_loop+0x40/0x90
[  593.143471][T26781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.143488][T26781] RIP: 0033:0x7f99dd99c799
[  593.143504][T26781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  593.143520][T26781] RSP: 002b:00007f99de855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  593.143540][T26781] RAX: ffffffffffffffda RBX: 00007f99ddc15fa0 RCX: 00007f99dd99c799
[  593.143554][T26781] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  593.143566][T26781] RBP: 00007f99de855090 R08: 0000000000000000 R09: 0000000000000000
[  593.143577][T26781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  593.143588][T26781] R13: 00007f99ddc16038 R14: 00007f99ddc15fa0 R15: 00007ffdd1904a58
[  593.143617][T26781]  </TASK>
[  593.656974][T26800] sctp: [Deprecated]: syz.4.6822 (pid 26800) Use of struct sctp_assoc_value in delayed_ack socket option.
[  593.656974][T26800] Use struct sctp_sack_info instead
[  593.850540][T26806] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  593.992323][T26816] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  594.005438][T26816] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  594.202194][T26833] IPVS: rr: FWM 3 0x00000003 - no destination available
[  594.217346][T26833] syzkaller0: entered promiscuous mode
[  594.224461][T26833] syzkaller0: entered allmulticast mode
[  594.248514][T26833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  594.257033][T26832] tipc: Resetting bearer <eth:syzkaller0>
[  594.270917][T26832] tipc: Disabling bearer <eth:syzkaller0>
[  594.446217][T26843] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  594.546016][T26851] __nla_validate_parse: 14 callbacks suppressed
[  594.546037][T26851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6844'.
[  594.596625][T26847] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6844'.
[  594.924869][T26871] FAULT_INJECTION: forcing a failure.
[  594.924869][T26871] name failslab, interval 1, probability 0, space 0, times 0
[  594.952571][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6850'.
[  594.986408][T26871] CPU: 0 UID: 0 PID: 26871 Comm: syz.2.6851 Not tainted syzkaller #0 PREEMPT(full) 
[  594.986433][T26871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  594.986444][T26871] Call Trace:
[  594.986452][T26871]  <TASK>
[  594.986460][T26871]  dump_stack_lvl+0xe8/0x150
[  594.986490][T26871]  should_fail_ex+0x412/0x560
[  594.986518][T26871]  should_failslab+0xa8/0x100
[  594.986551][T26871]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  594.986573][T26871]  ? __alloc_skb+0x186/0x7d0
[  594.986598][T26871]  ? __alloc_skb+0x1d0/0x7d0
[  594.986620][T26871]  ? __local_bh_enable_ip+0xd0/0x130
[  594.986648][T26871]  __alloc_skb+0x1d0/0x7d0
[  594.986673][T26871]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  594.986690][T26871]  ? do_syscall_64+0x14d/0xf80
[  594.986719][T26871]  alloc_skb_with_frags+0xca/0x890
[  594.986758][T26871]  sock_alloc_send_pskb+0x878/0x990
[  594.986794][T26871]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  594.986813][T26871]  ? kasan_quarantine_put+0xbb/0x1f0
[  594.986831][T26871]  ? lockdep_hardirqs_on+0x7a/0x110
[  594.986860][T26871]  ? kmem_cache_free+0x187/0x630
[  594.986880][T26871]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  594.986906][T26871]  unix_dgram_sendmsg+0x460/0x18e0
[  594.986949][T26871]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  594.986969][T26871]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  594.987004][T26871]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  594.987028][T26871]  ____sys_sendmsg+0x972/0x9f0
[  594.987054][T26871]  ? __pfx_____sys_sendmsg+0x10/0x10
[  594.987080][T26871]  ? import_iovec+0x73/0xa0
[  594.987110][T26871]  ___sys_sendmsg+0x2a5/0x360
[  594.987134][T26871]  ? __pfx____sys_sendmsg+0x10/0x10
[  594.987197][T26871]  __sys_sendmmsg+0x27c/0x4e0
[  594.987220][T26871]  ? __pfx___sys_sendmmsg+0x10/0x10
[  594.987236][T26871]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  594.987280][T26871]  ? ksys_write+0x242/0x270
[  594.987300][T26871]  ? __pfx_ksys_write+0x10/0x10
[  594.987323][T26871]  __x64_sys_sendmmsg+0xa0/0xc0
[  594.987342][T26871]  do_syscall_64+0x14d/0xf80
[  594.987365][T26871]  ? trace_irq_disable+0x3b/0x150
[  594.987388][T26871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.987405][T26871]  ? clear_bhb_loop+0x40/0x90
[  594.987425][T26871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.987445][T26871] RIP: 0033:0x7f99dd99c799
[  594.987462][T26871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.987477][T26871] RSP: 002b:00007f99de855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  594.987496][T26871] RAX: ffffffffffffffda RBX: 00007f99ddc15fa0 RCX: 00007f99dd99c799
[  594.987510][T26871] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  594.987521][T26871] RBP: 00007f99de855090 R08: 0000000000000000 R09: 0000000000000000
[  594.987533][T26871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  594.987551][T26871] R13: 00007f99ddc16038 R14: 00007f99ddc15fa0 R15: 00007ffdd1904a58
[  594.987579][T26871]  </TASK>
[  595.385852][T26882] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  595.926699][T26903] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.6862'.
[  595.950146][T26904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6861'.
[  596.023276][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6863'.
[  596.136133][T26910] vlan2: entered promiscuous mode
[  596.273376][T26914] FAULT_INJECTION: forcing a failure.
[  596.273376][T26914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  596.287084][T26914] CPU: 1 UID: 0 PID: 26914 Comm: syz.2.6867 Not tainted syzkaller #0 PREEMPT(full) 
[  596.287108][T26914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  596.287119][T26914] Call Trace:
[  596.287128][T26914]  <TASK>
[  596.287136][T26914]  dump_stack_lvl+0xe8/0x150
[  596.287165][T26914]  should_fail_ex+0x412/0x560
[  596.287194][T26914]  _copy_from_user+0x2d/0xb0
[  596.287221][T26914]  ___sys_sendmsg+0x1c6/0x360
[  596.287246][T26914]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.287309][T26914]  __sys_sendmmsg+0x27c/0x4e0
[  596.287333][T26914]  ? __pfx___sys_sendmmsg+0x10/0x10
[  596.287350][T26914]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  596.287399][T26914]  ? ksys_write+0x242/0x270
[  596.287422][T26914]  ? __pfx_ksys_write+0x10/0x10
[  596.287447][T26914]  __x64_sys_sendmmsg+0xa0/0xc0
[  596.287467][T26914]  do_syscall_64+0x14d/0xf80
[  596.287490][T26914]  ? trace_irq_disable+0x3b/0x150
[  596.287515][T26914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.287533][T26914]  ? clear_bhb_loop+0x40/0x90
[  596.287555][T26914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.287573][T26914] RIP: 0033:0x7f99dd99c799
[  596.287590][T26914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.287606][T26914] RSP: 002b:00007f99de855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  596.287625][T26914] RAX: ffffffffffffffda RBX: 00007f99ddc15fa0 RCX: 00007f99dd99c799
[  596.287638][T26914] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  596.287650][T26914] RBP: 00007f99de855090 R08: 0000000000000000 R09: 0000000000000000
[  596.287659][T26914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  596.287670][T26914] R13: 00007f99ddc16038 R14: 00007f99ddc15fa0 R15: 00007ffdd1904a58
[  596.287695][T26914]  </TASK>
[  596.437715][T26926] openvswitch: netlink: Message has 572 unknown bytes.
[  596.508433][T26926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.557334][T26927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6870'.
[  596.616649][T26927] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.635136][T26932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6871'.
[  596.672616][T26927] bridge_slave_0 (unregistering): left allmulticast mode
[  596.692764][T26927] bridge_slave_0 (unregistering): left promiscuous mode
[  596.704466][T26927] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.916371][T26952] team_slave_0: entered promiscuous mode
[  596.922142][T26952] team_slave_1: entered promiscuous mode
[  596.935248][T26952] vlan3: entered promiscuous mode
[  596.945527][T26952] team0: entered promiscuous mode
[  597.101282][T26955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6878'.
[  597.159548][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6881'.
[  597.502274][T26975] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  597.766055][T26994] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  597.975197][T27012] nbd: must specify a size in bytes for the device
[  597.994706][T27012] syzkaller0: entered promiscuous mode
[  598.007127][T27014] xt_HMARK: spi-set and port-set can't be combined
[  598.021458][T27012] syzkaller0: entered allmulticast mode
[  599.278453][T27075] IPVS: rr: FWM 3 0x00000003 - no destination available
[  599.309348][T27077] vlan3: entered promiscuous mode
[  599.314754][T27077] team0: entered promiscuous mode
[  599.340246][T27077] team_slave_0: entered promiscuous mode
[  599.355855][T27077] team_slave_1: entered promiscuous mode
[  599.398447][T27082] syzkaller0: entered promiscuous mode
[  599.421336][T27082] syzkaller0: entered allmulticast mode
[  599.790859][T27090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.856721][T27074] tipc: Resetting bearer <eth:syzkaller0>
[  599.949040][T27074] tipc: Disabling bearer <eth:syzkaller0>
[  600.018622][T27108] netlink: 'syz.4.6933': attribute type 2 has an invalid length.
[  600.088165][T27108] netlink: 'syz.4.6933': attribute type 1 has an invalid length.
[  600.098307][T27108] __nla_validate_parse: 11 callbacks suppressed
[  600.098328][T27108] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6933'.
[  600.377773][T27127] FAULT_INJECTION: forcing a failure.
[  600.377773][T27127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  600.421303][T27127] CPU: 0 UID: 0 PID: 27127 Comm: syz.1.6939 Not tainted syzkaller #0 PREEMPT(full) 
[  600.421331][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  600.421343][T27127] Call Trace:
[  600.421350][T27127]  <TASK>
[  600.421358][T27127]  dump_stack_lvl+0xe8/0x150
[  600.421390][T27127]  should_fail_ex+0x412/0x560
[  600.421418][T27127]  _copy_from_user+0x2d/0xb0
[  600.421446][T27127]  ___sys_sendmsg+0x1c6/0x360
[  600.421471][T27127]  ? __pfx____sys_sendmsg+0x10/0x10
[  600.421535][T27127]  __sys_sendmmsg+0x27c/0x4e0
[  600.421559][T27127]  ? __pfx___sys_sendmmsg+0x10/0x10
[  600.421576][T27127]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  600.421623][T27127]  ? ksys_write+0x242/0x270
[  600.421643][T27127]  ? __pfx_ksys_write+0x10/0x10
[  600.421665][T27127]  __x64_sys_sendmmsg+0xa0/0xc0
[  600.421683][T27127]  do_syscall_64+0x14d/0xf80
[  600.421704][T27127]  ? trace_irq_disable+0x3b/0x150
[  600.421728][T27127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.421744][T27127]  ? clear_bhb_loop+0x40/0x90
[  600.421765][T27127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.421782][T27127] RIP: 0033:0x7f98c539c799
[  600.421798][T27127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.421812][T27127] RSP: 002b:00007f98c62d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  600.421830][T27127] RAX: ffffffffffffffda RBX: 00007f98c5615fa0 RCX: 00007f98c539c799
[  600.421842][T27127] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  600.421854][T27127] RBP: 00007f98c62d8090 R08: 0000000000000000 R09: 0000000000000000
[  600.421864][T27127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  600.421874][T27127] R13: 00007f98c5616038 R14: 00007f98c5615fa0 R15: 00007ffc4897c4e8
[  600.421901][T27127]  </TASK>
[  600.622257][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6942'.
[  600.799543][T27133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6943'.
[  600.858274][T27133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6943'.
[  600.920145][T27140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6945'.
[  600.961132][T27137] IPVS: rr: FWM 3 0x00000003 - no destination available
[  600.986674][T27145] FAULT_INJECTION: forcing a failure.
[  600.986674][T27145] name failslab, interval 1, probability 0, space 0, times 0
[  601.003865][T27147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6945'.
[  601.030323][T27137] syzkaller0: entered promiscuous mode
[  601.037220][T27137] syzkaller0: entered allmulticast mode
[  601.058638][T27145] CPU: 0 UID: 0 PID: 27145 Comm: syz.1.6946 Not tainted syzkaller #0 PREEMPT(full) 
[  601.058664][T27145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  601.058677][T27145] Call Trace:
[  601.058685][T27145]  <TASK>
[  601.058694][T27145]  dump_stack_lvl+0xe8/0x150
[  601.058725][T27145]  should_fail_ex+0x412/0x560
[  601.058754][T27145]  should_failslab+0xa8/0x100
[  601.058780][T27145]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  601.058802][T27145]  ? __alloc_skb+0x186/0x7d0
[  601.058827][T27145]  ? __alloc_skb+0x1d0/0x7d0
[  601.058850][T27145]  ? __local_bh_enable_ip+0xd0/0x130
[  601.058879][T27145]  __alloc_skb+0x1d0/0x7d0
[  601.058909][T27145]  netlink_sendmsg+0x5d4/0xb40
[  601.058945][T27145]  ? __pfx_netlink_sendmsg+0x10/0x10
[  601.058973][T27145]  ? aa_sock_msg_perm+0xf1/0x1b0
[  601.058999][T27145]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  601.059023][T27145]  ____sys_sendmsg+0x972/0x9f0
[  601.059050][T27145]  ? __pfx_____sys_sendmsg+0x10/0x10
[  601.059085][T27145]  ? import_iovec+0x73/0xa0
[  601.059116][T27145]  ___sys_sendmsg+0x2a5/0x360
[  601.059140][T27145]  ? __pfx____sys_sendmsg+0x10/0x10
[  601.059193][T27145]  ? __fget_files+0x2a/0x420
[  601.059218][T27145]  ? __fget_files+0x3a0/0x420
[  601.059253][T27145]  __x64_sys_sendmsg+0x1bd/0x2a0
[  601.059275][T27145]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  601.059304][T27145]  ? __pfx_ksys_write+0x10/0x10
[  601.059335][T27145]  do_syscall_64+0x14d/0xf80
[  601.059360][T27145]  ? trace_irq_disable+0x3b/0x150
[  601.059385][T27145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.059404][T27145]  ? clear_bhb_loop+0x40/0x90
[  601.059427][T27145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.059446][T27145] RIP: 0033:0x7f98c539c799
[  601.059468][T27145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.059484][T27145] RSP: 002b:00007f98c62b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  601.059504][T27145] RAX: ffffffffffffffda RBX: 00007f98c5616090 RCX: 00007f98c539c799
[  601.059518][T27145] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  601.059531][T27145] RBP: 00007f98c62b7090 R08: 0000000000000000 R09: 0000000000000000
[  601.059543][T27145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  601.059555][T27145] R13: 00007f98c5616128 R14: 00007f98c5616090 R15: 00007ffc4897c4e8
[  601.059584][T27145]  </TASK>
[  601.374515][T27137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.396347][T27153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.455308][T27136] tipc: Resetting bearer <eth:syzkaller0>
[  601.501335][T27136] tipc: Disabling bearer <eth:syzkaller0>
[  601.527624][T27155] vlan2: entered promiscuous mode
[  601.575749][T27153] tipc: Resetting bearer <eth:syzkaller0>
[  601.740037][T27151] tipc: Disabling bearer <eth:syzkaller0>
[  601.813059][T27164] wg1 speed is unknown, defaulting to 1000
[  601.921674][T27177] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6958'.
[  602.131867][T27183] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  602.140527][T27183] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  602.153771][T27189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'.
[  602.212757][T27192] IPVS: rr: FWM 3 0x00000003 - no destination available
[  602.273047][T27192] syzkaller0: entered promiscuous mode
[  602.292326][T27192] syzkaller0: entered allmulticast mode
[  602.341140][T27192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  602.367903][T27191] tipc: Resetting bearer <eth:syzkaller0>
[  602.383281][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6965'.
[  602.410883][T27191] tipc: Disabling bearer <eth:syzkaller0>
[  602.541801][T27210] openvswitch: netlink: Unknown key attributes 2
[  602.550869][T27209] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  602.581167][T27216] FAULT_INJECTION: forcing a failure.
[  602.581167][T27216] name failslab, interval 1, probability 0, space 0, times 0
[  602.595434][T27216] CPU: 1 UID: 0 PID: 27216 Comm: syz.4.6971 Not tainted syzkaller #0 PREEMPT(full) 
[  602.595459][T27216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  602.595470][T27216] Call Trace:
[  602.595478][T27216]  <TASK>
[  602.595494][T27216]  dump_stack_lvl+0xe8/0x150
[  602.595524][T27216]  should_fail_ex+0x412/0x560
[  602.595557][T27216]  should_failslab+0xa8/0x100
[  602.595581][T27216]  __kmalloc_node_noprof+0xf0/0x7c0
[  602.595602][T27216]  ? alloc_slab_obj_exts+0x4b/0x1a0
[  602.595624][T27216]  alloc_slab_obj_exts+0x4b/0x1a0
[  602.595643][T27216]  __memcg_slab_post_alloc_hook+0x53c/0xa80
[  602.595685][T27216]  kmem_cache_alloc_node_noprof+0x40e/0x690
[  602.595706][T27216]  ? __alloc_skb+0x1d0/0x7d0
[  602.595730][T27216]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  602.595751][T27216]  __alloc_skb+0x1d0/0x7d0
[  602.595774][T27216]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  602.595790][T27216]  ? do_syscall_64+0x14d/0xf80
[  602.595816][T27216]  alloc_skb_with_frags+0xca/0x890
[  602.595854][T27216]  sock_alloc_send_pskb+0x878/0x990
[  602.595889][T27216]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  602.595907][T27216]  ? kasan_quarantine_put+0xbb/0x1f0
[  602.595925][T27216]  ? lockdep_hardirqs_on+0x7a/0x110
[  602.595952][T27216]  ? kmem_cache_free+0x187/0x630
[  602.595974][T27216]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  602.595999][T27216]  unix_dgram_sendmsg+0x460/0x18e0
[  602.596043][T27216]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  602.596063][T27216]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  602.596098][T27216]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  602.596123][T27216]  ____sys_sendmsg+0x972/0x9f0
[  602.596150][T27216]  ? __pfx_____sys_sendmsg+0x10/0x10
[  602.596178][T27216]  ? import_iovec+0x73/0xa0
[  602.596207][T27216]  ___sys_sendmsg+0x2a5/0x360
[  602.596231][T27216]  ? __pfx____sys_sendmsg+0x10/0x10
[  602.596295][T27216]  __sys_sendmmsg+0x27c/0x4e0
[  602.596319][T27216]  ? __pfx___sys_sendmmsg+0x10/0x10
[  602.596336][T27216]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  602.596385][T27216]  ? ksys_write+0x242/0x270
[  602.596411][T27216]  ? __pfx_ksys_write+0x10/0x10
[  602.596437][T27216]  __x64_sys_sendmmsg+0xa0/0xc0
[  602.596458][T27216]  do_syscall_64+0x14d/0xf80
[  602.596487][T27216]  ? trace_irq_disable+0x3b/0x150
[  602.596512][T27216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.596531][T27216]  ? clear_bhb_loop+0x40/0x90
[  602.596554][T27216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.596572][T27216] RIP: 0033:0x7f0e6139c799
[  602.596590][T27216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.596605][T27216] RSP: 002b:00007f0e6217d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  602.596625][T27216] RAX: ffffffffffffffda RBX: 00007f0e61615fa0 RCX: 00007f0e6139c799
[  602.596639][T27216] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  602.596651][T27216] RBP: 00007f0e6217d090 R08: 0000000000000000 R09: 0000000000000000
[  602.596662][T27216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  602.596674][T27216] R13: 00007f0e61616038 R14: 00007f0e61615fa0 R15: 00007ffc613cef98
[  602.596703][T27216]  </TASK>
[  602.979417][T27219] FAULT_INJECTION: forcing a failure.
[  602.979417][T27219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  603.001695][T27219] CPU: 0 UID: 0 PID: 27219 Comm: syz.0.6973 Not tainted syzkaller #0 PREEMPT(full) 
[  603.001720][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  603.001731][T27219] Call Trace:
[  603.001739][T27219]  <TASK>
[  603.001747][T27219]  dump_stack_lvl+0xe8/0x150
[  603.001779][T27219]  should_fail_ex+0x412/0x560
[  603.001808][T27219]  _copy_from_iter+0x1d3/0x1670
[  603.001834][T27219]  ? rcu_is_watching+0x15/0xb0
[  603.001864][T27219]  ? __pfx__copy_from_iter+0x10/0x10
[  603.001896][T27219]  ? netlink_sendmsg+0x650/0xb40
[  603.001918][T27219]  ? skb_put+0x11b/0x210
[  603.001947][T27219]  netlink_sendmsg+0x6c0/0xb40
[  603.001989][T27219]  ? __pfx_netlink_sendmsg+0x10/0x10
[  603.002017][T27219]  ? aa_sock_msg_perm+0xf1/0x1b0
[  603.002040][T27219]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  603.002063][T27219]  ____sys_sendmsg+0x972/0x9f0
[  603.002090][T27219]  ? __pfx_____sys_sendmsg+0x10/0x10
[  603.002117][T27219]  ? import_iovec+0x73/0xa0
[  603.002144][T27219]  ___sys_sendmsg+0x2a5/0x360
[  603.002166][T27219]  ? __pfx____sys_sendmsg+0x10/0x10
[  603.002214][T27219]  ? __fget_files+0x2a/0x420
[  603.002239][T27219]  ? __fget_files+0x3a0/0x420
[  603.002272][T27219]  __x64_sys_sendmsg+0x1bd/0x2a0
[  603.002293][T27219]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  603.002318][T27219]  ? __pfx_ksys_write+0x10/0x10
[  603.002348][T27219]  do_syscall_64+0x14d/0xf80
[  603.002372][T27219]  ? trace_irq_disable+0x3b/0x150
[  603.002396][T27219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.002415][T27219]  ? clear_bhb_loop+0x40/0x90
[  603.002438][T27219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.002456][T27219] RIP: 0033:0x7f08c139c799
[  603.002473][T27219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  603.002489][T27219] RSP: 002b:00007f08c21b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  603.002509][T27219] RAX: ffffffffffffffda RBX: 00007f08c1615fa0 RCX: 00007f08c139c799
[  603.002523][T27219] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  603.002535][T27219] RBP: 00007f08c21b9090 R08: 0000000000000000 R09: 0000000000000000
[  603.002547][T27219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  603.002557][T27219] R13: 00007f08c1616038 R14: 00007f08c1615fa0 R15: 00007fff77e05c98
[  603.002586][T27219]  </TASK>
[  603.391503][T27232] vlan3: entered promiscuous mode
[  603.501282][T27235] netlink: 876 bytes leftover after parsing attributes in process `syz.4.6975'.
[  603.830256][T27263] sctp: [Deprecated]: syz.2.6985 (pid 27263) Use of struct sctp_assoc_value in delayed_ack socket option.
[  603.830256][T27263] Use struct sctp_sack_info instead
[  604.289717][T27293] team_slave_0: entered promiscuous mode
[  604.295483][T27293] team_slave_1: entered promiscuous mode
[  604.310024][T27293] vlan2: entered promiscuous mode
[  604.316409][T27293] team0: entered promiscuous mode
[  604.566145][T27170] udevd[27170]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory
[  604.658168][T27314] netlink: 'syz.0.7001': attribute type 23 has an invalid length.
[  604.853419][T27333] FAULT_INJECTION: forcing a failure.
[  604.853419][T27333] name failslab, interval 1, probability 0, space 0, times 0
[  604.887308][T27333] CPU: 0 UID: 0 PID: 27333 Comm: syz.0.7011 Not tainted syzkaller #0 PREEMPT(full) 
[  604.887336][T27333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  604.887347][T27333] Call Trace:
[  604.887355][T27333]  <TASK>
[  604.887363][T27333]  dump_stack_lvl+0xe8/0x150
[  604.887394][T27333]  should_fail_ex+0x412/0x560
[  604.887422][T27333]  should_failslab+0xa8/0x100
[  604.887447][T27333]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  604.887467][T27333]  ? __alloc_skb+0x186/0x7d0
[  604.887492][T27333]  ? __alloc_skb+0x1d0/0x7d0
[  604.887514][T27333]  ? __local_bh_enable_ip+0xd0/0x130
[  604.887541][T27333]  __alloc_skb+0x1d0/0x7d0
[  604.887564][T27333]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  604.887581][T27333]  ? do_syscall_64+0x14d/0xf80
[  604.887609][T27333]  alloc_skb_with_frags+0xca/0x890
[  604.887649][T27333]  sock_alloc_send_pskb+0x878/0x990
[  604.887686][T27333]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  604.887704][T27333]  ? kasan_quarantine_put+0xbb/0x1f0
[  604.887723][T27333]  ? lockdep_hardirqs_on+0x7a/0x110
[  604.887751][T27333]  ? kmem_cache_free+0x187/0x630
[  604.887773][T27333]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  604.887798][T27333]  unix_dgram_sendmsg+0x460/0x18e0
[  604.887843][T27333]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  604.887862][T27333]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  604.887904][T27333]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  604.887929][T27333]  ____sys_sendmsg+0x972/0x9f0
[  604.887955][T27333]  ? __pfx_____sys_sendmsg+0x10/0x10
[  604.887982][T27333]  ? import_iovec+0x73/0xa0
[  604.888013][T27333]  ___sys_sendmsg+0x2a5/0x360
[  604.888034][T27333]  ? __pfx____sys_sendmsg+0x10/0x10
[  604.888092][T27333]  __sys_sendmmsg+0x27c/0x4e0
[  604.888113][T27333]  ? __pfx___sys_sendmmsg+0x10/0x10
[  604.888128][T27333]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  604.888171][T27333]  ? ksys_write+0x242/0x270
[  604.888192][T27333]  ? __pfx_ksys_write+0x10/0x10
[  604.888216][T27333]  __x64_sys_sendmmsg+0xa0/0xc0
[  604.888236][T27333]  do_syscall_64+0x14d/0xf80
[  604.888259][T27333]  ? trace_irq_disable+0x3b/0x150
[  604.888283][T27333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.888302][T27333]  ? clear_bhb_loop+0x40/0x90
[  604.888324][T27333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.888343][T27333] RIP: 0033:0x7f08c139c799
[  604.888361][T27333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  604.888377][T27333] RSP: 002b:00007f08c21b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  604.888397][T27333] RAX: ffffffffffffffda RBX: 00007f08c1615fa0 RCX: 00007f08c139c799
[  604.888411][T27333] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  604.888423][T27333] RBP: 00007f08c21b9090 R08: 0000000000000000 R09: 0000000000000000
[  604.888435][T27333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  604.888447][T27333] R13: 00007f08c1616038 R14: 00007f08c1615fa0 R15: 00007fff77e05c98
[  604.888476][T27333]  </TASK>
[  604.906166][T27335] veth0_to_bridge: entered promiscuous mode
[  605.157968][T27350] __nla_validate_parse: 7 callbacks suppressed
[  605.157986][T27350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7017'.
[  605.199336][T27344] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  605.227827][T27337] vlan3: entered promiscuous mode
[  605.255188][T27345] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  605.272161][T27345] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  605.279824][T27338] veth0_to_bridge: left promiscuous mode
[  605.383667][T27356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7020'.
[  605.392048][T27354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7019'.
[  605.421413][T27354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7019'.
[  605.490788][T27365] netlink: 'syz.0.7023': attribute type 64 has an invalid length.
[  605.545230][T27369] FAULT_INJECTION: forcing a failure.
[  605.545230][T27369] name failslab, interval 1, probability 0, space 0, times 0
[  605.562276][T27369] CPU: 0 UID: 0 PID: 27369 Comm: syz.3.7025 Not tainted syzkaller #0 PREEMPT(full) 
[  605.562300][T27369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  605.562311][T27369] Call Trace:
[  605.562319][T27369]  <TASK>
[  605.562327][T27369]  dump_stack_lvl+0xe8/0x150
[  605.562356][T27369]  should_fail_ex+0x412/0x560
[  605.562383][T27369]  should_failslab+0xa8/0x100
[  605.562407][T27369]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  605.562427][T27369]  ? __alloc_skb+0x186/0x7d0
[  605.562452][T27369]  ? __alloc_skb+0x1d0/0x7d0
[  605.562474][T27369]  ? __local_bh_enable_ip+0xd0/0x130
[  605.562501][T27369]  __alloc_skb+0x1d0/0x7d0
[  605.562525][T27369]  ? netlink_ack_tlv_len+0x6c/0x210
[  605.562551][T27369]  netlink_ack+0x146/0xa50
[  605.562573][T27369]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  605.562596][T27369]  ? ref_tracker_free+0x693/0x840
[  605.562618][T27369]  ? __copy_skb_header+0xa3/0x4a0
[  605.562637][T27369]  ? __pfx_ref_tracker_free+0x10/0x10
[  605.562660][T27369]  ? __skb_clone+0x63/0x7a0
[  605.562685][T27369]  netlink_rcv_skb+0x2b6/0x4b0
[  605.562709][T27369]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  605.562733][T27369]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  605.562767][T27369]  ? netlink_deliver_tap+0x2e/0x1b0
[  605.562798][T27369]  netlink_unicast+0x80f/0x9b0
[  605.562827][T27369]  ? __pfx_netlink_unicast+0x10/0x10
[  605.562852][T27369]  ? netlink_sendmsg+0x650/0xb40
[  605.562874][T27369]  ? skb_put+0x11b/0x210
[  605.562902][T27369]  netlink_sendmsg+0x813/0xb40
[  605.562935][T27369]  ? __pfx_netlink_sendmsg+0x10/0x10
[  605.562961][T27369]  ? aa_sock_msg_perm+0xf1/0x1b0
[  605.562987][T27369]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  605.563011][T27369]  ____sys_sendmsg+0x972/0x9f0
[  605.563038][T27369]  ? __pfx_____sys_sendmsg+0x10/0x10
[  605.563064][T27369]  ? import_iovec+0x73/0xa0
[  605.563095][T27369]  ___sys_sendmsg+0x2a5/0x360
[  605.563126][T27369]  ? __pfx____sys_sendmsg+0x10/0x10
[  605.563177][T27369]  ? __fget_files+0x2a/0x420
[  605.563201][T27369]  ? __fget_files+0x3a0/0x420
[  605.563236][T27369]  __x64_sys_sendmsg+0x1bd/0x2a0
[  605.563258][T27369]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  605.563291][T27369]  ? __pfx_ksys_write+0x10/0x10
[  605.563322][T27369]  do_syscall_64+0x14d/0xf80
[  605.563347][T27369]  ? trace_irq_disable+0x3b/0x150
[  605.563373][T27369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.563391][T27369]  ? clear_bhb_loop+0x40/0x90
[  605.563414][T27369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.563433][T27369] RIP: 0033:0x7fcfadf9c799
[  605.563450][T27369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  605.563467][T27369] RSP: 002b:00007fcfaee74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  605.563487][T27369] RAX: ffffffffffffffda RBX: 00007fcfae215fa0 RCX: 00007fcfadf9c799
[  605.563501][T27369] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  605.563513][T27369] RBP: 00007fcfaee74090 R08: 0000000000000000 R09: 0000000000000000
[  605.563525][T27369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.563536][T27369] R13: 00007fcfae216038 R14: 00007fcfae215fa0 R15: 00007ffd2f74ccc8
[  605.563566][T27369]  </TASK>
[  606.000553][T27380] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7030'.
[  606.063922][T27380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.086463][T27380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.098230][T27380] bond0 (unregistering): Released all slaves
[  606.127209][T27386] vlan2: entered promiscuous mode
[  606.181389][T27394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7035'.
[  606.289647][T27400] FAULT_INJECTION: forcing a failure.
[  606.289647][T27400] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.317950][T27400] CPU: 1 UID: 0 PID: 27400 Comm: syz.4.7038 Not tainted syzkaller #0 PREEMPT(full) 
[  606.317976][T27400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  606.317987][T27400] Call Trace:
[  606.317997][T27400]  <TASK>
[  606.318006][T27400]  dump_stack_lvl+0xe8/0x150
[  606.318036][T27400]  should_fail_ex+0x412/0x560
[  606.318065][T27400]  _copy_to_user+0x31/0xb0
[  606.318094][T27400]  simple_read_from_buffer+0xe1/0x170
[  606.318124][T27400]  proc_fail_nth_read+0x1bb/0x230
[  606.318152][T27400]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  606.318179][T27400]  ? rw_verify_area+0x2a6/0x4d0
[  606.318197][T27400]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  606.318223][T27400]  vfs_read+0x20c/0xa70
[  606.318239][T27400]  ? fdget_pos+0x246/0x320
[  606.318263][T27400]  ? __pfx___mutex_lock+0x10/0x10
[  606.318289][T27400]  ? __pfx_vfs_read+0x10/0x10
[  606.318308][T27400]  ? __fget_files+0x2a/0x420
[  606.318336][T27400]  ? __fget_files+0x3a0/0x420
[  606.318359][T27400]  ? __fget_files+0x2a/0x420
[  606.318391][T27400]  ksys_read+0x150/0x270
[  606.318413][T27400]  ? __pfx_ksys_read+0x10/0x10
[  606.318442][T27400]  do_syscall_64+0x14d/0xf80
[  606.318466][T27400]  ? trace_irq_disable+0x3b/0x150
[  606.318491][T27400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.318509][T27400]  ? clear_bhb_loop+0x40/0x90
[  606.318532][T27400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.318549][T27400] RIP: 0033:0x7f0e6135cfce
[  606.318565][T27400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  606.318580][T27400] RSP: 002b:00007f0e6217cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  606.318601][T27400] RAX: ffffffffffffffda RBX: 00007f0e6217d6c0 RCX: 00007f0e6135cfce
[  606.318615][T27400] RDX: 000000000000000f RSI: 00007f0e6217d0a0 RDI: 0000000000000006
[  606.318627][T27400] RBP: 00007f0e6217d090 R08: 0000000000000000 R09: 0000000000000000
[  606.318638][T27400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  606.318649][T27400] R13: 00007f0e61616038 R14: 00007f0e61615fa0 R15: 00007ffc613cef98
[  606.318678][T27400]  </TASK>
[  606.692115][T27413] netdevsim netdevsim3: Direct firmware load for . failed with error -2
[  606.701593][T27413] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  606.789001][T27418] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.7045'.
[  606.973277][T27431] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7048'.
[  606.988582][T27435] netlink: 'syz.0.7052': attribute type 21 has an invalid length.
[  606.999664][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7052'.
[  607.011878][T27433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7050'.
[  607.258388][T27450] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  607.514942][T27463] vlan2: entered promiscuous mode
[  607.755893][T27480] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  608.165607][T27492] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  608.289526][T27496] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  608.595614][T27509] vlan2: entered promiscuous mode
[  608.849703][T27518] FAULT_INJECTION: forcing a failure.
[  608.849703][T27518] name failslab, interval 1, probability 0, space 0, times 0
[  608.878183][T27518] CPU: 0 UID: 0 PID: 27518 Comm: syz.4.7081 Not tainted syzkaller #0 PREEMPT(full) 
[  608.878217][T27518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  608.878229][T27518] Call Trace:
[  608.878237][T27518]  <TASK>
[  608.878245][T27518]  dump_stack_lvl+0xe8/0x150
[  608.878276][T27518]  should_fail_ex+0x412/0x560
[  608.878305][T27518]  should_failslab+0xa8/0x100
[  608.878329][T27518]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  608.878350][T27518]  ? __alloc_skb+0x186/0x7d0
[  608.878374][T27518]  ? __alloc_skb+0x1d0/0x7d0
[  608.878396][T27518]  ? __local_bh_enable_ip+0xd0/0x130
[  608.878424][T27518]  __alloc_skb+0x1d0/0x7d0
[  608.878454][T27518]  alloc_skb_with_frags+0xca/0x890
[  608.878495][T27518]  sock_alloc_send_pskb+0x878/0x990
[  608.878532][T27518]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  608.878557][T27518]  ? kasan_quarantine_put+0xbb/0x1f0
[  608.878577][T27518]  ? lockdep_hardirqs_on+0x7a/0x110
[  608.878607][T27518]  ? kmem_cache_free+0x187/0x630
[  608.878628][T27518]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  608.878653][T27518]  unix_dgram_sendmsg+0x460/0x18e0
[  608.878698][T27518]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  608.878718][T27518]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  608.878753][T27518]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  608.878779][T27518]  ____sys_sendmsg+0x972/0x9f0
[  608.878806][T27518]  ? __pfx_____sys_sendmsg+0x10/0x10
[  608.878834][T27518]  ? import_iovec+0x73/0xa0
[  608.878864][T27518]  ___sys_sendmsg+0x2a5/0x360
[  608.878888][T27518]  ? __pfx____sys_sendmsg+0x10/0x10
[  608.878952][T27518]  __sys_sendmmsg+0x27c/0x4e0
[  608.878976][T27518]  ? __pfx___sys_sendmmsg+0x10/0x10
[  608.878993][T27518]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  608.879042][T27518]  ? ksys_write+0x242/0x270
[  608.879064][T27518]  ? __pfx_ksys_write+0x10/0x10
[  608.879089][T27518]  __x64_sys_sendmmsg+0xa0/0xc0
[  608.879110][T27518]  do_syscall_64+0x14d/0xf80
[  608.879135][T27518]  ? trace_irq_disable+0x3b/0x150
[  608.879159][T27518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.879178][T27518]  ? clear_bhb_loop+0x40/0x90
[  608.879202][T27518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.879220][T27518] RIP: 0033:0x7f0e6139c799
[  608.879239][T27518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.879255][T27518] RSP: 002b:00007f0e6217d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  608.879276][T27518] RAX: ffffffffffffffda RBX: 00007f0e61615fa0 RCX: 00007f0e6139c799
[  608.879290][T27518] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  608.879302][T27518] RBP: 00007f0e6217d090 R08: 0000000000000000 R09: 0000000000000000
[  608.879314][T27518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  608.879326][T27518] R13: 00007f0e61616038 R14: 00007f0e61615fa0 R15: 00007ffc613cef98
[  608.879356][T27518]  </TASK>
[  609.594109][T27548] netlink: 'syz.4.7092': attribute type 15 has an invalid length.
[  609.607475][T27549] netlink: 'syz.4.7092': attribute type 15 has an invalid length.
[  610.733970][T27558] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  611.068451][T27583] __nla_validate_parse: 12 callbacks suppressed
[  611.068472][T27583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7104'.
[  611.191892][T27588] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  611.415672][T27574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.427014][T27574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.537136][T27597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7108'.
[  611.554225][T27574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.564701][T27574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.640115][T27602] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  611.677739][T27574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.688583][T27574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.795228][T27620] IPVS: rr: FWM 3 0x00000003 - no destination available
[  611.814177][T27574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.819226][T27618] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7115'.
[  611.835728][T27574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.862334][T27618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7115'.
[  611.871947][T27618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7115'.
[  611.881134][T27618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7115'.
[  611.896093][T27623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7118'.
[  611.915705][T27620] syzkaller0: entered promiscuous mode
[  611.928535][T27620] syzkaller0: entered allmulticast mode
[  611.982082][T27620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  612.008306][T27615] tipc: Resetting bearer <eth:syzkaller0>
[  612.052506][T27615] tipc: Disabling bearer <eth:syzkaller0>
[  612.098245][T19746] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  612.120300][T19746] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.162596][T19746] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  612.170999][T19746] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.214423][T19746] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  612.234244][T19746] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.289028][T19746] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  612.297230][T19746] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.309201][T27644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7123'.
[  612.372842][T27641] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7123'.
[  612.478253][T27652] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  612.543302][T27651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7125'.
[  613.857098][   T63] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  613.869501][   T63] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  613.898083][   T63] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  613.908855][   T63] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  613.991325][T27713] vlan2: entered promiscuous mode
[  614.240657][T27733] ipvlan3: entered promiscuous mode
[  614.456871][T27751] vlan2: entered promiscuous mode
[  614.653311][T27762] IPVS: rr: FWM 3 0x00000003 - no destination available
[  614.689026][T27762] syzkaller0: entered promiscuous mode
[  614.694527][T27762] syzkaller0: entered allmulticast mode
[  614.769055][T27769] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  614.781518][T27762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  614.796169][T27760] tipc: Resetting bearer <eth:syzkaller0>
[  614.818280][T11590] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  614.840891][T27760] tipc: Disabling bearer <eth:syzkaller0>
[  614.868585][T27767] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  614.947948][T27778] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  614.970095][T11590] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  615.128708][T19746] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  615.175864][T27787] vlan2: entered promiscuous mode
[  615.357124][T27803] netlink: 'syz.4.7182': attribute type 1 has an invalid length.
[  615.387721][T27803] bond2: entered promiscuous mode
[  615.394012][T27803] 8021q: adding VLAN 0 to HW filter on device bond2
[  615.406639][T27803] macsec0: entered allmulticast mode
[  615.412178][T27803] veth1_macvtap: entered allmulticast mode
[  615.434888][T27803] 8021q: adding VLAN 0 to HW filter on device bond2
[  615.442078][T27803] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  615.449247][T27810] IPVS: rr: FWM 3 0x00000003 - no destination available
[  615.459073][T27803] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  615.468482][T27803] bond2: (slave vti0): making interface the new active one
[  615.476630][T27803] vti0: entered promiscuous mode
[  615.483592][T27803] bond2: (slave vti0): Enslaving as an active interface with an up link
[  615.513597][T27810] syzkaller0: entered promiscuous mode
[  615.519294][T27810] syzkaller0: entered allmulticast mode
[  615.549208][T27810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  615.567113][T27809] tipc: Resetting bearer <eth:syzkaller0>
[  615.596009][T27809] tipc: Disabling bearer <eth:syzkaller0>
[  615.710909][T27819] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  615.871162][T27830] vlan2: entered promiscuous mode
[  616.135085][T27848] __nla_validate_parse: 22 callbacks suppressed
[  616.135105][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7198'.
[  616.168445][T27849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7199'.
[  616.225811][T19740] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  616.244110][T19740] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  616.461001][T27869] vlan2: entered promiscuous mode
[  616.533139][T27868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7206'.
[  616.627047][T27878] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7211'.
[  616.636670][T27879] openvswitch: netlink: Key type 30 is not supported
[  616.654034][T27878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7211'.
[  616.665658][T27878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7211'.
[  616.798574][T27894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7216'.
[  617.000501][T27901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7219'.
[  617.068534][T27907] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  617.114164][T27906] vlan2: entered promiscuous mode
[  617.128780][   T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  617.198447][T27918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7225'.
[  617.306404][T27911] wg1 speed is unknown, defaulting to 1000
[  617.332267][T27925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7228'.
[  617.570220][   T29] audit: type=1804 audit(1773514568.161:4): pid=27940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7232" name="/newroot/131/memory.events" dev="tmpfs" ino=687 res=1 errno=0
[  617.734026][T27947] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  618.071216][T27966] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  618.230460][T27977] vlan2: entered promiscuous mode
[  618.593240][T28001] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  618.849326][T28015] netlink: 'syz.4.7263': attribute type 3 has an invalid length.
[  619.067782][T28035] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  619.295249][T28053] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20002
[  619.371947][T28049] wg1 speed is unknown, defaulting to 1000
[  619.769650][T28076] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  619.956912][T28088] wg1 speed is unknown, defaulting to 1000
[  620.488222][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  620.525037][T28116] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  620.752802][T28127] netlink: 'syz.2.7304': attribute type 4 has an invalid length.
[  620.953474][T28140] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  621.173101][T28163] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  621.472862][T28184] __nla_validate_parse: 21 callbacks suppressed
[  621.472883][T28184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7319'.
[  621.501052][T28185] IPVS: rr: FWM 3 0x00000003 - no destination available
[  621.584733][T28185] syzkaller0: entered promiscuous mode
[  621.600413][T28185] syzkaller0: entered allmulticast mode
[  621.649892][T28191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7324'.
[  621.712181][T28185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  621.763498][T28182] tipc: Resetting bearer <eth:syzkaller0>
[  621.771732][T28199] netlink: 'syz.1.7325': attribute type 30 has an invalid length.
[  621.831900][T28203] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7327'.
[  621.842058][T28203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7327'.
[  621.853303][T28203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7327'.
[  621.873536][T28182] tipc: Disabling bearer <eth:syzkaller0>
[  621.899135][T28199] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  622.001846][T28217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7333'.
[  622.178146][T28229] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  622.243495][T28234] vxcan2: entered allmulticast mode
[  622.252229][T28233] netlink: 'syz.3.7334': attribute type 1 has an invalid length.
[  622.320364][T28233] 8021q: adding VLAN 0 to HW filter on device bond1
[  622.359345][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7334'.
[  622.366544][T28245] pimreg: entered allmulticast mode
[  622.368333][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7334'.
[  622.460408][T28252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7344'.
[  622.949652][T28267] gretap1: entered promiscuous mode
[  622.955628][T28267] batman_adv: batadv0: Adding interface: gretap1
[  622.962294][T28267] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  622.989867][T28267] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  623.062429][T28280] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  623.156935][T28285] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7354'.
[  623.946303][T28319] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  623.958964][T28319] bond3 (unregistering): Released all slaves
[  624.254710][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  624.286537][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  625.170568][T28380] vlan3: entered promiscuous mode
[  625.467738][T28390] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  625.734878][T28385] netlink: 'syz.0.7386': attribute type 5 has an invalid length.
[  627.553867][T28416] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  627.696908][T28447] __nla_validate_parse: 17 callbacks suppressed
[  627.696930][T28447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7401'.
[  627.713578][T28444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  627.729628][T28434] netem: incorrect gi model size
[  627.734748][T28434] netem: change failed
[  627.759390][T28427] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  627.864434][T28442] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  627.976658][T28462] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  627.980706][T28463] xt_cgroup: invalid path, errno=-2
[  627.999890][T28462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7405'.
[  628.004039][T28463] openvswitch: netlink: IPv4 tun info is not correct
[  628.022199][T28465] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  628.329864][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7418'.
[  628.380139][T28494] IPVS: rr: FWM 3 0x00000003 - no destination available
[  628.462629][T28489] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.470304][T28489] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.558084][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7421'.
[  628.603518][T28507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7418'.
[  628.698266][T28511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7422'.
[  628.896520][T28489] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.933412][T28489] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.272782][T28491] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  629.323016][T28507] team_slave_0 (unregistering): left promiscuous mode
[  629.342677][T28507] team0: Port device team_slave_0 removed
[  629.354226][T28504] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  629.363151][ T5890] wg1 speed is unknown, defaulting to 1000
[  629.371609][ T5890] syz0: Port: 1 Link DOWN
[  629.378849][   T63] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  629.388601][   T63] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.429274][   T63] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  629.458112][   T63] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.480327][T28521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7423'.
[  629.506684][T28520] bond0: Removing last arp target with arp_interval on
[  629.517354][   T63] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  629.526464][   T63] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.541603][   T63] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  629.572400][   T63] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.635212][T28531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7424'.
[  629.943118][T28546] netlink: 'syz.4.7433': attribute type 29 has an invalid length.
[  629.980918][T28546] netlink: 'syz.4.7433': attribute type 29 has an invalid length.
[  630.005575][T28544] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  630.380675][T28559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7436'.
[  630.615546][T28568] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  630.705811][T28571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7444'.
[  630.838751][T28579] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  631.184828][T28607] FAULT_INJECTION: forcing a failure.
[  631.184828][T28607] name failslab, interval 1, probability 0, space 0, times 0
[  631.232899][T28607] CPU: 0 UID: 0 PID: 28607 Comm: syz.2.7452 Not tainted syzkaller #0 PREEMPT(full) 
[  631.232928][T28607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  631.232941][T28607] Call Trace:
[  631.232949][T28607]  <TASK>
[  631.232957][T28607]  dump_stack_lvl+0xe8/0x150
[  631.232988][T28607]  should_fail_ex+0x412/0x560
[  631.233017][T28607]  should_failslab+0xa8/0x100
[  631.233042][T28607]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  631.233062][T28607]  ? __alloc_skb+0x186/0x7d0
[  631.233088][T28607]  ? __alloc_skb+0x1d0/0x7d0
[  631.233110][T28607]  ? __local_bh_enable_ip+0xd0/0x130
[  631.233138][T28607]  __alloc_skb+0x1d0/0x7d0
[  631.233162][T28607]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  631.233179][T28607]  ? do_syscall_64+0x14d/0xf80
[  631.233208][T28607]  alloc_skb_with_frags+0xca/0x890
[  631.233249][T28607]  sock_alloc_send_pskb+0x878/0x990
[  631.233286][T28607]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  631.233304][T28607]  ? kasan_quarantine_put+0xbb/0x1f0
[  631.233323][T28607]  ? lockdep_hardirqs_on+0x7a/0x110
[  631.233352][T28607]  ? kmem_cache_free+0x187/0x630
[  631.233374][T28607]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  631.233400][T28607]  unix_dgram_sendmsg+0x460/0x18e0
[  631.233446][T28607]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  631.233466][T28607]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  631.233501][T28607]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  631.233527][T28607]  ____sys_sendmsg+0x972/0x9f0
[  631.233559][T28607]  ? __pfx_____sys_sendmsg+0x10/0x10
[  631.233586][T28607]  ? import_iovec+0x73/0xa0
[  631.233617][T28607]  ___sys_sendmsg+0x2a5/0x360
[  631.233641][T28607]  ? __pfx____sys_sendmsg+0x10/0x10
[  631.233705][T28607]  __sys_sendmmsg+0x27c/0x4e0
[  631.233730][T28607]  ? __pfx___sys_sendmmsg+0x10/0x10
[  631.233747][T28607]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  631.233796][T28607]  ? ksys_write+0x242/0x270
[  631.233819][T28607]  ? __pfx_ksys_write+0x10/0x10
[  631.233844][T28607]  __x64_sys_sendmmsg+0xa0/0xc0
[  631.233865][T28607]  do_syscall_64+0x14d/0xf80
[  631.233889][T28607]  ? trace_irq_disable+0x3b/0x150
[  631.233914][T28607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.233933][T28607]  ? clear_bhb_loop+0x40/0x90
[  631.233955][T28607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.233973][T28607] RIP: 0033:0x7f99dd99c799
[  631.233991][T28607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.234007][T28607] RSP: 002b:00007f99de855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  631.234028][T28607] RAX: ffffffffffffffda RBX: 00007f99ddc15fa0 RCX: 00007f99dd99c799
[  631.234042][T28607] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  631.234053][T28607] RBP: 00007f99de855090 R08: 0000000000000000 R09: 0000000000000000
[  631.234065][T28607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  631.234077][T28607] R13: 00007f99ddc16038 R14: 00007f99ddc15fa0 R15: 00007ffdd1904a58
[  631.234106][T28607]  </TASK>
[  631.581191][T28616] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  632.172401][T28643] bond2 (unregistering): Released all slaves
[  632.333911][T28661] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  632.572591][T28682] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  632.849767][T28691] __nla_validate_parse: 8 callbacks suppressed
[  632.849795][T28691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7479'.
[  632.855659][T28699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7481'.
[  633.060397][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7486'.
[  633.173452][T28721] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  633.206730][T28721] netlink: 'syz.1.7489': attribute type 4 has an invalid length.
[  633.252374][T28710] wg1 speed is unknown, defaulting to 1000
[  633.292273][T28728] netlink: 'syz.0.7492': attribute type 2 has an invalid length.
[  633.323273][T28728] netlink: 1696 bytes leftover after parsing attributes in process `syz.0.7492'.
[  633.454203][T28737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7495'.
[  633.468193][T28737] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7495'.
[  633.552043][T28745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7498'.
[  633.632411][T28753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7500'.
[  633.717315][T28757] netlink: 34 bytes leftover after parsing attributes in process `syz.2.7504'.
[  633.737817][T28757] netlink: 'syz.2.7504': attribute type 61 has an invalid length.
[  633.741497][T28759] FAULT_INJECTION: forcing a failure.
[  633.741497][T28759] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  633.749488][T28757] netlink: 'syz.2.7504': attribute type 62 has an invalid length.
[  633.778179][T28759] CPU: 0 UID: 0 PID: 28759 Comm: syz.0.7505 Not tainted syzkaller #0 PREEMPT(full) 
[  633.778204][T28759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  633.778215][T28759] Call Trace:
[  633.778224][T28759]  <TASK>
[  633.778232][T28759]  dump_stack_lvl+0xe8/0x150
[  633.778263][T28759]  should_fail_ex+0x412/0x560
[  633.778292][T28759]  _copy_from_user+0x2d/0xb0
[  633.778320][T28759]  ___sys_sendmsg+0x1c6/0x360
[  633.778345][T28759]  ? __pfx____sys_sendmsg+0x10/0x10
[  633.778416][T28759]  __sys_sendmmsg+0x27c/0x4e0
[  633.778441][T28759]  ? __pfx___sys_sendmmsg+0x10/0x10
[  633.778457][T28759]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  633.778507][T28759]  ? ksys_write+0x242/0x270
[  633.778529][T28759]  ? __pfx_ksys_write+0x10/0x10
[  633.778554][T28759]  __x64_sys_sendmmsg+0xa0/0xc0
[  633.778575][T28759]  do_syscall_64+0x14d/0xf80
[  633.778599][T28759]  ? trace_irq_disable+0x3b/0x150
[  633.778624][T28759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.778641][T28759]  ? clear_bhb_loop+0x40/0x90
[  633.778663][T28759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.778681][T28759] RIP: 0033:0x7f08c139c799
[  633.778699][T28759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.778714][T28759] RSP: 002b:00007f08c21b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  633.778735][T28759] RAX: ffffffffffffffda RBX: 00007f08c1615fa0 RCX: 00007f08c139c799
[  633.778748][T28759] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  633.778760][T28759] RBP: 00007f08c21b9090 R08: 0000000000000000 R09: 0000000000000000
[  633.778772][T28759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  633.778784][T28759] R13: 00007f08c1616038 R14: 00007f08c1615fa0 R15: 00007fff77e05c98
[  633.778812][T28759]  </TASK>
[  633.811824][T28755] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  633.909782][T28752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7502'.
[  633.971002][T28768] x_tables: duplicate underflow at hook 2
[  634.217649][T28778] wg1 speed is unknown, defaulting to 1000
[  634.281485][T28785] pim6reg99999999: entered allmulticast mode
[  634.492918][T28795] vlan2: entered promiscuous mode
[  634.545511][T28800] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  634.788719][T28814] wg1 speed is unknown, defaulting to 1000
[  634.998206][T28822] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  635.090993][T28835] batadv_slave_1: entered promiscuous mode
[  635.114709][T28835] netlink: 'syz.1.7532': attribute type 1 has an invalid length.
[  635.165203][T28834] batadv_slave_1: left promiscuous mode
[  635.328232][T28848] vlan2: entered promiscuous mode
[  635.367276][T28846] raw_sendmsg: syz.4.7536 forgot to set AF_INET. Fix it!
[  635.681381][T28870] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  635.714092][T28877] netlink: 'syz.2.7548': attribute type 7 has an invalid length.
[  635.731114][T19746] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  635.740127][T19746] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  635.751466][T19746] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  635.760484][T28877] netlink: 'syz.2.7548': attribute type 7 has an invalid length.
[  635.774444][T19746] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  636.182759][T28896] bridge0: entered promiscuous mode
[  636.196829][T28898] IPv6: addrconf: prefix option has invalid lifetime
[  636.208409][T28896] vlan2: entered promiscuous mode
[  636.521553][T28916] syzkaller0: entered promiscuous mode
[  636.531687][T28916] syzkaller0: entered allmulticast mode
[  637.021334][T28944] vlan2: entered promiscuous mode
[  637.481543][T28963] xt_hashlimit: overflow, try lower: 18446744073709551607/511
[  637.499784][T28961] bond2 (unregistering): Released all slaves
[  637.857097][T28986] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  637.923225][T28989] __nla_validate_parse: 17 callbacks suppressed
[  637.923244][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7590'.
[  638.139367][T29001] bond3 (unregistering): Released all slaves
[  638.178459][T29005] netlink: 'syz.3.7598': attribute type 4 has an invalid length.
[  638.273625][T29017] netlink: 'syz.3.7598': attribute type 11 has an invalid length.
[  638.296853][T29016] bridge0: entered promiscuous mode
[  638.304334][T29016] vlan2: entered promiscuous mode
[  638.329069][T29022] netlink: 'syz.3.7598': attribute type 4 has an invalid length.
[  638.346577][T29021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7603'.
[  638.423498][T29025] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  638.466419][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7605'.
[  638.481967][T29029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7606'.
[  638.733060][T29044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7614'.
[  638.935216][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7618'.
[  639.100816][T29071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7623'.
[  639.395360][T29087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7630'.
[  639.559611][T29094] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  639.623395][T29099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7635'.
[  639.786376][T29103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7636'.
[  639.837635][T29105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  640.120703][T29121] IPVS: set_ctl: invalid protocol: 102 172.30.1.2:20002
[  640.157178][T29124] bridge10: entered promiscuous mode
[  640.162724][T29124] bridge10: entered allmulticast mode
[  640.171873][T29124] team0: Port device bridge10 added
[  640.190640][T29124] bridge0: port 3(team0) entered blocking state
[  640.197132][T29124] bridge0: port 3(team0) entered disabled state
[  640.219728][T29124] team0: entered allmulticast mode
[  640.239657][T29124] team_slave_1: entered allmulticast mode
[  640.302002][T29140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  640.413583][   T10] wg1 speed is unknown, defaulting to 1000
[  640.426615][T29132] tipc: Disabling bearer <eth:syzkaller0>
[  640.470551][T29142] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  640.701020][T29152] vlan3: entered promiscuous mode
[  640.765861][T29158] vlan2: entered promiscuous mode
[  641.100244][T29178] IPVS: rr: FWM 3 0x00000003 - no destination available
[  641.142645][T29178] syzkaller0: entered promiscuous mode
[  641.159329][T29178] syzkaller0: entered allmulticast mode
[  641.230491][T29178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  641.280984][T29184] wg1 speed is unknown, defaulting to 1000
[  641.289973][T29176] tipc: Resetting bearer <eth:syzkaller0>
[  641.325148][T29176] tipc: Disabling bearer <eth:syzkaller0>
[  641.377087][T29198] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  641.390498][T29195] syzkaller0: entered promiscuous mode
[  641.398763][T29195] syzkaller0: entered allmulticast mode
[  641.445527][T29180] wg1 speed is unknown, defaulting to 1000
[  641.522772][T29203] netlink: 'syz.3.7667': attribute type 1 has an invalid length.
[  641.723340][T29210] vlan2: entered promiscuous mode
[  642.034479][T29219] syzkaller1: entered promiscuous mode
[  642.065742][T29219] syzkaller1: entered allmulticast mode
[  642.341442][T29233] IPVS: rr: FWM 3 0x00000003 - no destination available
[  642.439794][T29233] syzkaller0: entered promiscuous mode
[  642.445783][T29233] syzkaller0: entered allmulticast mode
[  642.476734][T29246] FAULT_INJECTION: forcing a failure.
[  642.476734][T29246] name failslab, interval 1, probability 0, space 0, times 0
[  642.510591][T29246] CPU: 1 UID: 0 PID: 29246 Comm: syz.1.7681 Not tainted syzkaller #0 PREEMPT(full) 
[  642.510627][T29246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  642.510638][T29246] Call Trace:
[  642.510647][T29246]  <TASK>
[  642.510655][T29246]  dump_stack_lvl+0xe8/0x150
[  642.510685][T29246]  should_fail_ex+0x412/0x560
[  642.510714][T29246]  should_failslab+0xa8/0x100
[  642.510738][T29246]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  642.510759][T29246]  ? __alloc_skb+0x186/0x7d0
[  642.510784][T29246]  ? __alloc_skb+0x1d0/0x7d0
[  642.510806][T29246]  ? __local_bh_enable_ip+0xd0/0x130
[  642.510838][T29246]  __alloc_skb+0x1d0/0x7d0
[  642.510862][T29246]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  642.510880][T29246]  ? do_syscall_64+0x14d/0xf80
[  642.510908][T29246]  alloc_skb_with_frags+0xca/0x890
[  642.510948][T29246]  sock_alloc_send_pskb+0x878/0x990
[  642.510985][T29246]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  642.511004][T29246]  ? kasan_quarantine_put+0xbb/0x1f0
[  642.511022][T29246]  ? lockdep_hardirqs_on+0x7a/0x110
[  642.511050][T29246]  ? kmem_cache_free+0x187/0x630
[  642.511070][T29246]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  642.511096][T29246]  unix_dgram_sendmsg+0x460/0x18e0
[  642.511127][T29246]  ? irqentry_exit+0x59e/0x620
[  642.511151][T29246]  ? lockdep_hardirqs_on+0x7a/0x110
[  642.511174][T29246]  ? irqentry_exit+0x59e/0x620
[  642.511202][T29246]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  642.511222][T29246]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  642.511256][T29246]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  642.511280][T29246]  ____sys_sendmsg+0x972/0x9f0
[  642.511307][T29246]  ? __pfx_____sys_sendmsg+0x10/0x10
[  642.511332][T29246]  ? import_iovec+0x73/0xa0
[  642.511362][T29246]  ___sys_sendmsg+0x2a5/0x360
[  642.511386][T29246]  ? __pfx____sys_sendmsg+0x10/0x10
[  642.511449][T29246]  __sys_sendmmsg+0x27c/0x4e0
[  642.511472][T29246]  ? __pfx___sys_sendmmsg+0x10/0x10
[  642.511489][T29246]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  642.511537][T29246]  ? ksys_write+0x242/0x270
[  642.511559][T29246]  ? __pfx_ksys_write+0x10/0x10
[  642.511584][T29246]  __x64_sys_sendmmsg+0xa0/0xc0
[  642.511605][T29246]  do_syscall_64+0x14d/0xf80
[  642.511635][T29246]  ? trace_irq_disable+0x3b/0x150
[  642.511660][T29246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.511678][T29246]  ? clear_bhb_loop+0x40/0x90
[  642.511701][T29246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.511719][T29246] RIP: 0033:0x7f98c539c799
[  642.511737][T29246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.511754][T29246] RSP: 002b:00007f98c62d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  642.511774][T29246] RAX: ffffffffffffffda RBX: 00007f98c5615fa0 RCX: 00007f98c539c799
[  642.511788][T29246] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  642.511800][T29246] RBP: 00007f98c62d8090 R08: 0000000000000000 R09: 0000000000000000
[  642.511812][T29246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  642.511824][T29246] R13: 00007f98c5616038 R14: 00007f98c5615fa0 R15: 00007ffc4897c4e8
[  642.511852][T29246]  </TASK>
[  643.132072][T29248] wg1 speed is unknown, defaulting to 1000
[  643.261214][T29267] syzkaller0: entered promiscuous mode
[  643.266724][T29267] syzkaller0: entered allmulticast mode
[  643.274328][T29251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.304139][T29232] tipc: Resetting bearer <eth:syzkaller0>
[  643.315735][T29264] __nla_validate_parse: 12 callbacks suppressed
[  643.315783][T29264] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7685'.
[  643.342565][T29232] tipc: Disabling bearer <eth:syzkaller0>
[  643.372692][T29243] wg1 speed is unknown, defaulting to 1000
[  643.491104][T29284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7690'.
[  644.840980][T29282] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  645.031842][T29309] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7696'.
[  645.092793][T29309] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7696'.
[  645.118070][T29309] netlink: 'syz.3.7696': attribute type 2 has an invalid length.
[  645.265574][T29318] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  645.368090][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7704'.
[  645.385599][T29331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7705'.
[  645.418409][T29331] bpq0: left promiscuous mode
[  645.681225][T29351] FAULT_INJECTION: forcing a failure.
[  645.681225][T29351] name failslab, interval 1, probability 0, space 0, times 0
[  645.708225][T29351] CPU: 1 UID: 0 PID: 29351 Comm: syz.2.7712 Not tainted syzkaller #0 PREEMPT(full) 
[  645.708251][T29351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  645.708261][T29351] Call Trace:
[  645.708269][T29351]  <TASK>
[  645.708278][T29351]  dump_stack_lvl+0xe8/0x150
[  645.708309][T29351]  should_fail_ex+0x412/0x560
[  645.708342][T29351]  should_failslab+0xa8/0x100
[  645.708369][T29351]  __kmalloc_noprof+0xe8/0x760
[  645.708394][T29351]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  645.708426][T29351]  tomoyo_realpath_from_path+0xe3/0x5d0
[  645.708461][T29351]  ? tomoyo_path_number_perm+0x219/0x630
[  645.708491][T29351]  tomoyo_path_number_perm+0x246/0x630
[  645.708516][T29351]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  645.708540][T29351]  ? __lock_acquire+0x6b5/0x2cf0
[  645.708575][T29351]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  645.708621][T29351]  ? __fget_files+0x2a/0x420
[  645.708650][T29351]  ? __fget_files+0x2a/0x420
[  645.708675][T29351]  ? __fget_files+0x3a0/0x420
[  645.708699][T29351]  ? __fget_files+0x2a/0x420
[  645.708729][T29351]  security_file_ioctl+0xc3/0x2a0
[  645.708751][T29351]  __se_sys_ioctl+0x47/0x170
[  645.708776][T29351]  do_syscall_64+0x14d/0xf80
[  645.708800][T29351]  ? trace_irq_disable+0x3b/0x150
[  645.708827][T29351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.708847][T29351]  ? clear_bhb_loop+0x40/0x90
[  645.708870][T29351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.708889][T29351] RIP: 0033:0x7f99dd99c799
[  645.708907][T29351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.708924][T29351] RSP: 002b:00007f99de855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  645.708944][T29351] RAX: ffffffffffffffda RBX: 00007f99ddc15fa0 RCX: 00007f99dd99c799
[  645.708959][T29351] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003
[  645.708972][T29351] RBP: 00007f99de855090 R08: 0000000000000000 R09: 0000000000000000
[  645.708984][T29351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  645.708996][T29351] R13: 00007f99ddc16038 R14: 00007f99ddc15fa0 R15: 00007ffdd1904a58
[  645.709027][T29351]  </TASK>
[  645.709463][T29351] ERROR: Out of memory at tomoyo_realpath_from_path.
[  645.880873][T29361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7716'.
[  645.974237][T29358] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  645.987157][T29358] bond3 (unregistering): Released all slaves
[  645.989271][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7716'.
[  646.083177][T29362] wg1 speed is unknown, defaulting to 1000
[  646.089779][T29358] netlink: 'syz.4.7716': attribute type 27 has an invalid length.
[  646.332237][T29384] sctp: [Deprecated]: syz.0.7722 (pid 29384) Use of int in max_burst socket option.
[  646.332237][T29384] Use struct sctp_assoc_value instead
[  646.354620][T29358] veth1_macvtap: left allmulticast mode
[  646.354640][T29384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  646.422210][T29358] ip6tnl2: left allmulticast mode
[  646.434073][T29358] geneve2: left allmulticast mode
[  646.441798][T29358] bond1: left promiscuous mode
[  646.446695][T29358] bridge5: left promiscuous mode
[  646.454025][T29358] ipvlan2: left allmulticast mode
[  646.459406][T29358] bond1: left allmulticast mode
[  646.464541][T29358] bridge5: left allmulticast mode
[  646.471889][T29358] bond2: left promiscuous mode
[  646.476737][T29358] vti0: left promiscuous mode
[  646.500953][T29358] gretap1: left promiscuous mode
[  646.549001][T19746] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  646.557430][T19746] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  646.574291][T29393] macsec1: entered promiscuous mode
[  646.597682][T19746] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  646.619467][T19746] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  646.642952][T29375] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  646.858465][T29407] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7729'.
[  646.869607][T29407] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7729'.
[  646.879509][T29407] netlink: 'syz.4.7729': attribute type 2 has an invalid length.
[  646.897179][T29409] FAULT_INJECTION: forcing a failure.
[  646.897179][T29409] name failslab, interval 1, probability 0, space 0, times 0
[  646.911016][T29409] CPU: 0 UID: 0 PID: 29409 Comm: syz.3.7728 Not tainted syzkaller #0 PREEMPT(full) 
[  646.911043][T29409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  646.911055][T29409] Call Trace:
[  646.911062][T29409]  <TASK>
[  646.911070][T29409]  dump_stack_lvl+0xe8/0x150
[  646.911102][T29409]  should_fail_ex+0x412/0x560
[  646.911132][T29409]  should_failslab+0xa8/0x100
[  646.911157][T29409]  __kmalloc_noprof+0xe8/0x760
[  646.911178][T29409]  ? tomoyo_encode+0x28b/0x550
[  646.911209][T29409]  tomoyo_encode+0x28b/0x550
[  646.911238][T29409]  tomoyo_realpath_from_path+0x58d/0x5d0
[  646.911273][T29409]  ? tomoyo_path_number_perm+0x219/0x630
[  646.911294][T29409]  tomoyo_path_number_perm+0x246/0x630
[  646.911318][T29409]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  646.911342][T29409]  ? __lock_acquire+0x6b5/0x2cf0
[  646.911376][T29409]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  646.911421][T29409]  ? __fget_files+0x2a/0x420
[  646.911452][T29409]  ? __fget_files+0x2a/0x420
[  646.911476][T29409]  ? __fget_files+0x3a0/0x420
[  646.911500][T29409]  ? __fget_files+0x2a/0x420
[  646.911529][T29409]  security_file_ioctl+0xc3/0x2a0
[  646.911552][T29409]  __se_sys_ioctl+0x47/0x170
[  646.911576][T29409]  do_syscall_64+0x14d/0xf80
[  646.911598][T29409]  ? trace_irq_disable+0x3b/0x150
[  646.911622][T29409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.911641][T29409]  ? clear_bhb_loop+0x40/0x90
[  646.911664][T29409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.911683][T29409] RIP: 0033:0x7fcfadf9c799
[  646.911701][T29409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.911717][T29409] RSP: 002b:00007fcfaee74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  646.911738][T29409] RAX: ffffffffffffffda RBX: 00007fcfae215fa0 RCX: 00007fcfadf9c799
[  646.911751][T29409] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003
[  646.911764][T29409] RBP: 00007fcfaee74090 R08: 0000000000000000 R09: 0000000000000000
[  646.911777][T29409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.911788][T29409] R13: 00007fcfae216038 R14: 00007fcfae215fa0 R15: 00007ffd2f74ccc8
[  646.911825][T29409]  </TASK>
[  646.911905][T29409] ERROR: Out of memory at tomoyo_realpath_from_path.
[  646.990133][T29413] IPVS: rr: FWM 3 0x00000003 - no destination available
[  647.003434][T29413] syzkaller0: entered promiscuous mode
[  647.155653][T29413] syzkaller0: entered allmulticast mode
[  647.225769][T29413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  647.241767][T29412] tipc: Resetting bearer <eth:syzkaller0>
[  647.276729][T29412] tipc: Disabling bearer <eth:syzkaller0>
[  647.641382][T29448] netlink: 'syz.1.7743': attribute type 10 has an invalid length.
[  647.712522][T29448] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  648.414131][T29462] bpq0: entered promiscuous mode
[  648.883275][T29505] __nla_validate_parse: 4 callbacks suppressed
[  648.883294][T29505] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7756'.
[  648.948333][T29505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7756'.
[  649.061947][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7760'.
[  649.183227][T29515] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7762'.
[  649.211578][T29515] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7762'.
[  649.236575][T29515] netlink: 'syz.2.7762': attribute type 2 has an invalid length.
[  649.742650][T29539] wg1 speed is unknown, defaulting to 1000
[  649.798718][T29541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7773'.
[  649.912415][T29532] wg1 speed is unknown, defaulting to 1000
[  649.972911][T29547] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.990508][T29547] 8021q: adding VLAN 0 to HW filter on device team0
[  650.011854][T29547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  650.563873][T29571] IPVS: rr: FWM 3 0x00000003 - no destination available
[  650.582031][T29571] syzkaller0: entered promiscuous mode
[  650.587673][T29571] syzkaller0: entered allmulticast mode
[  650.620453][T29571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.647019][T29570] tipc: Resetting bearer <eth:syzkaller0>
[  650.687231][T29570] tipc: Disabling bearer <eth:syzkaller0>
[  650.838134][T29578] geneve3: entered promiscuous mode
[  650.843419][T29578] geneve3: entered allmulticast mode
[  650.873305][T29585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7788'.
[  650.930146][T29580] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  650.969311][T29585] ip6gretap1: entered promiscuous mode
[  650.974933][T29585] ip6gretap1: entered allmulticast mode
[  651.365231][T29603] 8021q: adding VLAN 0 to HW filter on device bond3
[  651.372143][T29604] xt_CT: No such helper "netbios-ns"
[  651.459110][T29611] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  651.473254][T19745] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  651.483377][T19745] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  651.504127][T19745] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  651.533467][T19745] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  651.685368][T29624] netlink: 'syz.4.7801': attribute type 21 has an invalid length.
[  651.694874][T29624] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7801'.
[  651.707360][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7801'.
[  651.930978][T29642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7805'.
[  651.947709][T29640] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  651.961813][T29642] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe
[  652.136107][T29647] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  652.338701][T29661] syzkaller0: entered promiscuous mode
[  652.351023][T29661] syzkaller0: entered allmulticast mode
[  652.367591][T29661] netlink: 'syz.0.7815': attribute type 16 has an invalid length.
[  652.382692][T29661] veth1_macvtap: entered allmulticast mode
[  652.437372][T29669] syzkaller0: entered promiscuous mode
[  652.443123][T29669] syzkaller0: entered allmulticast mode
[  652.540245][T29673] geneve2: entered allmulticast mode
[  652.650725][T29676] wg1 speed is unknown, defaulting to 1000
[  653.238877][T29710] nbd64: detected capacity change from 0 to 127
[  653.253398][ T5839] block nbd64: Receive control failed (result -32)
[  653.264436][T28596] block nbd64: Dead connection, failed to find a fallback
[  653.279660][T29716] vlan3: entered promiscuous mode
[  653.281713][T28596] block nbd64: shutting down sockets
[  653.296190][T28596] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.309162][T28596] Buffer I/O error on dev nbd64, logical block 0, async page read
[  653.317139][T28596] I/O error, dev nbd64, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.326856][T28596] Buffer I/O error on dev nbd64, logical block 1, async page read
[  653.334875][T28596] I/O error, dev nbd64, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.344663][T28596] Buffer I/O error on dev nbd64, logical block 2, async page read
[  653.352676][T28596] I/O error, dev nbd64, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.378973][T28596] Buffer I/O error on dev nbd64, logical block 3, async page read
[  653.386957][T28596] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.413375][T28596] Buffer I/O error on dev nbd64, logical block 0, async page read
[  653.424108][T29720] SET target dimension over the limit!
[  653.426316][T28596] I/O error, dev nbd64, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.442209][T28596] Buffer I/O error on dev nbd64, logical block 1, async page read
[  653.457390][T28596] I/O error, dev nbd64, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.488187][T29719] geneve1: entered promiscuous mode
[  653.513847][T28596] Buffer I/O error on dev nbd64, logical block 2, async page read
[  653.528359][T28596] I/O error, dev nbd64, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.547795][T28596] Buffer I/O error on dev nbd64, logical block 3, async page read
[  653.574933][T28596] I/O error, dev nbd64, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.594871][T28596] Buffer I/O error on dev nbd64, logical block 0, async page read
[  653.619127][T28596] I/O error, dev nbd64, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  653.643697][T28596] Buffer I/O error on dev nbd64, logical block 1, async page read
[  653.693338][T28596] ldm_validate_partition_table(): Disk read failed.
[  653.719975][T28596] Dev nbd64: unable to read RDB block 0
[  653.737078][T28596]  nbd64: unable to read partition table
[  653.791680][T28596] ldm_validate_partition_table(): Disk read failed.
[  653.811197][T28596] Dev nbd64: unable to read RDB block 0
[  653.817355][T28596]  nbd64: unable to read partition table
[  654.012871][T29751] vlan2: entered promiscuous mode
[  654.148177][T29760] __nla_validate_parse: 6 callbacks suppressed
[  654.148198][T29760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7852'.
[  654.252757][T29763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7853'.
[  654.329643][T29773] ip6erspan0: entered promiscuous mode
[  654.694338][T29806] delete_channel: no stack
[  654.875881][T29794] netlink: 'syz.0.7865': attribute type 39 has an invalid length.
[  654.889962][T29814] netlink: 576 bytes leftover after parsing attributes in process `syz.1.7868'.
[  655.013770][T29817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7869'.
[  655.276739][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7872'.
[  655.585150][T29840] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7878'.
[  655.614765][T29842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7880'.
[  655.692945][T29851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7882'.
[  655.758789][T29842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7880'.
[  655.953982][T29867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7888'.
[  656.235649][T29884] TCP: TCP_TX_DELAY enabled
[  656.323796][T29888] bridge16: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  656.367675][T29883] wg1 speed is unknown, defaulting to 1000
[  656.528358][T29896] syzkaller0: entered promiscuous mode
[  656.538132][T29896] syzkaller0: entered allmulticast mode
[  656.590872][T29896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  656.612757][T29898] syzkaller0: entered promiscuous mode
[  656.618524][T29898] syzkaller0: entered allmulticast mode
[  656.635377][T29895] tipc: Resetting bearer <eth:syzkaller0>
[  656.655179][T29895] tipc: Disabling bearer <eth:syzkaller0>
[  656.826711][T29907] syzkaller0: entered promiscuous mode
[  656.834156][T29907] syzkaller0: entered allmulticast mode
[  657.344976][T29932] syzkaller0: entered promiscuous mode
[  657.350701][T29932] syzkaller0: entered allmulticast mode
[  657.533807][T29943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  657.568372][T29931] tipc: Resetting bearer <eth:syzkaller0>
[  657.616445][T29931] tipc: Disabling bearer <eth:syzkaller0>
[  657.668321][T29948] bridge_slave_1: default FDB implementation only supports local addresses
[  657.795834][T29955] vlan2: entered promiscuous mode
[  657.916628][T29965] netlink: 'syz.4.7922': attribute type 4 has an invalid length.
[  657.985400][T29966] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  658.216626][T29983] syzkaller0: entered promiscuous mode
[  658.226419][T29983] syzkaller0: entered allmulticast mode
[  658.263925][T29983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  658.279212][T29982] tipc: Resetting bearer <eth:syzkaller0>
[  658.312608][T29982] tipc: Disabling bearer <eth:syzkaller0>
[  658.350997][T29996] vlan2: entered promiscuous mode
[  658.672391][T30022] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  658.854535][T30034] syzkaller0: entered promiscuous mode
[  658.860346][T30034] syzkaller0: entered allmulticast mode
[  658.876729][T30038] vlan2: entered promiscuous mode
[  658.913119][T30034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  658.923784][T30033] tipc: Resetting bearer <eth:syzkaller0>
[  658.974403][T30043] netlink: 'syz.3.7952': attribute type 2 has an invalid length.
[  658.992458][T30043] netlink: 'syz.3.7952': attribute type 1 has an invalid length.
[  659.001248][T30043] netlink: 'syz.3.7952': attribute type 1 has an invalid length.
[  659.010000][T30033] tipc: Disabling bearer <eth:syzkaller0>
[  659.020776][T30040] bridge0: entered allmulticast mode
[  659.243872][T30057] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  659.294552][T30059] __nla_validate_parse: 7 callbacks suppressed
[  659.294573][T30059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7958'.
[  659.314758][T30059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7958'.
[  659.345712][T30065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7961'.
[  659.345781][T30067] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7963'.
[  659.380585][T30067] netlink: 'syz.3.7963': attribute type 10 has an invalid length.
[  659.416094][T30067] dummy0: entered promiscuous mode
[  659.430483][T30067] team0: Port device dummy0 added
[  659.459145][T30067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7963'.
[  659.561852][T30074] syzkaller0: entered promiscuous mode
[  659.567371][T30074] syzkaller0: entered allmulticast mode
[  659.597258][T30074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  659.607231][T30073] tipc: Resetting bearer <eth:syzkaller0>
[  659.682673][T30086] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7971'.
[  659.709288][T30073] tipc: Disabling bearer <eth:syzkaller0>
[  659.748368][T30086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7971'.
[  659.825120][T30091] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  659.932808][T30095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7974'.
[  660.000815][T30095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7974'.
[  660.018928][T30095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7974'.
[  662.655139][T30102] wg1 speed is unknown, defaulting to 1000
[  662.822705][T30114] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  663.004836][T30132] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  663.106740][T30134] syzkaller0: entered promiscuous mode
[  663.115436][T30134] syzkaller0: entered allmulticast mode
[  663.163360][T30134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  663.174181][T30133] tipc: Resetting bearer <eth:syzkaller0>
[  663.191628][T30133] tipc: Disabling bearer <eth:syzkaller0>
[  663.217672][T30140] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  663.828986][   T63] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.838325][   T63] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.862297][T30161] wg1 speed is unknown, defaulting to 1000
[  663.883014][   T63] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.894735][   T63] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  664.041678][T30180] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  664.214002][T30187] syzkaller0: entered promiscuous mode
[  664.228113][T30187] syzkaller0: entered allmulticast mode
[  664.280292][T30187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  664.310205][T30186] tipc: Resetting bearer <eth:syzkaller0>
[  664.429787][T30186] tipc: Disabling bearer <eth:syzkaller0>
[  664.459059][T30192] __nla_validate_parse: 201 callbacks suppressed
[  664.459079][T30192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8007'.
[  664.600691][T30202] wg1 speed is unknown, defaulting to 1000
[  664.760338][T30215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8012'.
[  665.126191][T30226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8017'.
[  665.330729][T30243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8023'.
[  665.446373][T30251] sysfs: cannot create duplicate filename '/class/ieee80211/

π�,���x���b�)%�	]�3D�L̥�!'
[  665.488273][T30251] CPU: 1 UID: 0 PID: 30251 Comm: syz.4.8027 Not tainted syzkaller #0 PREEMPT(full) 
[  665.488303][T30251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  665.488317][T30251] Call Trace:
[  665.488326][T30251]  <TASK>
[  665.488336][T30251]  dump_stack_lvl+0xe8/0x150
[  665.488372][T30251]  sysfs_warn_dup+0x8e/0xa0
[  665.488403][T30251]  sysfs_do_create_link_sd+0xc0/0x110
[  665.488435][T30251]  device_add_class_symlinks+0x1cf/0x240
[  665.488464][T30251]  device_add+0x475/0xb70
[  665.488489][T30251]  wiphy_register+0x1d73/0x2d50
[  665.488529][T30251]  ? __pfx_wiphy_register+0x10/0x10
[  665.488552][T30251]  ? __pfx_netdev_run_todo+0x10/0x10
[  665.488578][T30251]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  665.488607][T30251]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  665.488643][T30251]  ieee80211_register_hw+0x35f0/0x42c0
[  665.488688][T30251]  ? ieee80211_register_hw+0x1451/0x42c0
[  665.488729][T30251]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  665.488778][T30251]  ? __hrtimer_setup+0x181/0x200
[  665.488806][T30251]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  665.488837][T30251]  mac80211_hwsim_new_radio+0x3334/0x5b60
[  665.488890][T30251]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  665.488911][T30251]  ? kstrndup+0xbf/0x160
[  665.488947][T30251]  hwsim_new_radio_nl+0xf6a/0x1c00
[  665.488991][T30251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  665.489023][T30251]  ? rcu_is_watching+0x15/0xb0
[  665.489051][T30251]  ? trace_kmalloc+0x2a/0x110
[  665.489078][T30251]  ? __nla_parse+0x40/0x60
[  665.489113][T30251]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  665.489136][T30251]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  665.489165][T30251]  genl_family_rcv_msg_doit+0x22a/0x330
[  665.489204][T30251]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  665.489243][T30251]  ? bpf_lsm_capable+0x9/0x20
[  665.489271][T30251]  ? security_capable+0x7e/0x2c0
[  665.489305][T30251]  genl_rcv_msg+0x61c/0x7a0
[  665.489335][T30251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  665.489357][T30251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  665.489380][T30251]  ? __lock_acquire+0x6b5/0x2cf0
[  665.489419][T30251]  netlink_rcv_skb+0x232/0x4b0
[  665.489450][T30251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  665.489474][T30251]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  665.489522][T30251]  ? down_read+0x272/0x2e0
[  665.489542][T30251]  ? genl_rcv+0xd/0x40
[  665.489563][T30251]  genl_rcv+0x28/0x40
[  665.489584][T30251]  netlink_unicast+0x80f/0x9b0
[  665.489620][T30251]  ? __pfx_netlink_unicast+0x10/0x10
[  665.489648][T30251]  ? netlink_sendmsg+0x650/0xb40
[  665.489676][T30251]  ? skb_put+0x11b/0x210
[  665.489712][T30251]  netlink_sendmsg+0x813/0xb40
[  665.489751][T30251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.489785][T30251]  ? aa_sock_msg_perm+0xf1/0x1b0
[  665.489815][T30251]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  665.489842][T30251]  ____sys_sendmsg+0x972/0x9f0
[  665.489862][T30251]  ? futex_unqueue+0x211/0x240
[  665.489895][T30251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  665.489931][T30251]  ? import_iovec+0x73/0xa0
[  665.489970][T30251]  ___sys_sendmsg+0x2a5/0x360
[  665.489998][T30251]  ? __pfx____sys_sendmsg+0x10/0x10
[  665.490028][T30251]  ? futex_wait+0x29a/0x380
[  665.490087][T30251]  ? __fget_files+0x2a/0x420
[  665.490117][T30251]  ? __fget_files+0x3a0/0x420
[  665.490159][T30251]  __x64_sys_sendmsg+0x1bd/0x2a0
[  665.490190][T30251]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  665.490222][T30251]  ? rcu_is_watching+0x15/0xb0
[  665.490266][T30251]  do_syscall_64+0x14d/0xf80
[  665.490296][T30251]  ? trace_irq_disable+0x3b/0x150
[  665.490325][T30251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.490347][T30251]  ? clear_bhb_loop+0x40/0x90
[  665.490378][T30251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.490400][T30251] RIP: 0033:0x7f0e6139c799
[  665.490421][T30251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.490440][T30251] RSP: 002b:00007f0e6217d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  665.490464][T30251] RAX: ffffffffffffffda RBX: 00007f0e61615fa0 RCX: 00007f0e6139c799
[  665.490480][T30251] RDX: 0000000000000300 RSI: 0000200000000140 RDI: 0000000000000004
[  665.490494][T30251] RBP: 00007f0e61432c99 R08: 0000000000000000 R09: 0000000000000000
[  665.490509][T30251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  665.490522][T30251] R13: 00007f0e61616038 R14: 00007f0e61615fa0 R15: 00007ffc613cef98
[  665.490557][T30251]  </TASK>
[  665.519791][T30258] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  665.535570][T30251] "syz.4.8027" (30251) uses obsolete ecb(arc4) skcipher
[  665.625466][T30264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8031'.
[  666.016861][T30268] bridge18: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  666.057942][T30274] vlan2: entered promiscuous mode
[  666.241768][T30278] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.8035'.
[  666.242894][T30280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8036'.
[  666.311924][T30282] netlink: 'syz.1.8037': attribute type 1 has an invalid length.
[  666.324843][T30282] netlink: 476 bytes leftover after parsing attributes in process `syz.1.8037'.
[  666.337030][T30282] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.8037'.
[  666.440065][T30287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8038'.
[  666.608588][T30302] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  666.660337][T30304] syzkaller0: entered promiscuous mode
[  666.676673][T30304] syzkaller0: entered allmulticast mode
[  666.727104][T30307] openvswitch: netlink: IP tunnel TTL not specified.
[  666.728847][T30304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  666.744641][T30303] tipc: Resetting bearer <eth:syzkaller0>
[  666.767634][T30303] tipc: Disabling bearer <eth:syzkaller0>
[  666.790362][T30311] sch_fq: defrate 4294967293 ignored.
[  667.340422][T30328] syzkaller0: entered promiscuous mode
[  667.345959][T30328] syzkaller0: entered allmulticast mode
[  667.652063][T30350] wg1 speed is unknown, defaulting to 1000
[  667.774767][T30353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.374401][T30391] wg1 speed is unknown, defaulting to 1000
[  668.484770][T30386] wg1 speed is unknown, defaulting to 1000
[  668.550804][T30362] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  668.827912][T30411] unsupported nla_type 142
[  668.930115][T30418] ip6gretap0: entered promiscuous mode
[  668.936819][T30418] macvtap1: entered promiscuous mode
[  668.945324][T30418] macvtap1: entered allmulticast mode
[  668.953891][T30418] ip6gretap0: entered allmulticast mode
[  668.967498][T30418] netlink: 'syz.1.8088': attribute type 1 has an invalid length.
[  668.975864][T30418] netlink: 'syz.1.8088': attribute type 2 has an invalid length.
[  669.666014][T30450] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  669.776502][T30456] __nla_validate_parse: 14 callbacks suppressed
[  669.776523][T30456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8101'.
[  669.962726][T30469] gre0: entered promiscuous mode
[  669.967719][T30469] gre0: entered allmulticast mode
[  670.022783][T30469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8104'.
[  670.227461][T30480] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  670.242100][T30480] bond2 (unregistering): Released all slaves
[  670.647538][T30504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8115'.
[  670.651757][T30500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8114'.
[  670.682663][T30504] ip6tnl2: entered allmulticast mode
[  670.708902][T30500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8114'.
[  670.773113][T30506] team0: left allmulticast mode
[  670.790810][T30506] team_slave_1: left allmulticast mode
[  670.796603][T30506] bridge0: port 3(team0) entered disabled state
[  670.863444][T30506] bridge_slave_0: left allmulticast mode
[  670.869262][T30506] bridge_slave_0: left promiscuous mode
[  670.875215][T30506] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.909053][T30506] bridge_slave_1: left allmulticast mode
[  670.918116][T30506] bridge_slave_1: left promiscuous mode
[  670.928548][T30506] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.945185][T30506] bond0: (slave bond_slave_0): Releasing backup interface
[  670.971659][T30506] bond0: (slave bond_slave_1): Releasing backup interface
[  670.994605][T30506] team_slave_1: left promiscuous mode
[  671.012012][T30506] team0: Port device team_slave_1 removed
[  671.018670][T30506] batman_adv: batadv0: Removing interface: batadv_slave_0
[  671.023604][T30496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8113'.
[  671.035601][T30506] batman_adv: batadv0: Removing interface: batadv_slave_1
[  671.043689][T30506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  671.081137][T30517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8113'.
[  671.092026][T30520] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  671.111768][T30520] bond3 (unregistering): Released all slaves
[  671.172033][T30496] macvtap1: entered promiscuous mode
[  671.177515][T30496] macvtap1: entered allmulticast mode
[  671.183366][T30496] bridge0: entered allmulticast mode
[  671.192363][T30517] bridge0: left allmulticast mode
[  671.197679][T30517] macvtap1: left promiscuous mode
[  671.211968][T30517] macvtap1: left allmulticast mode
[  671.229461][T30526] bridge0: entered allmulticast mode
[  671.524823][T30541] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8129'.
[  672.017936][T30568] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  672.029175][T30568] bond2 (unregistering): Released all slaves
[  672.130913][T30548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.263593][T30571] sctp: [Deprecated]: syz.3.8136 (pid 30571) Use of struct sctp_assoc_value in delayed_ack socket option.
[  672.263593][T30571] Use struct sctp_sack_info instead
[  672.265957][T30576] : renamed from veth0_to_bond
[  672.355402][T30574] sctp: [Deprecated]: syz.3.8136 (pid 30574) Use of struct sctp_assoc_value in delayed_ack socket option.
[  672.355402][T30574] Use struct sctp_sack_info instead
[  672.442881][T30585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8142'.
[  672.451870][T30585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8142'.
[  672.471387][T30587] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  672.873459][T30623] netlink: 'syz.1.8155': attribute type 142 has an invalid length.
[  672.967724][T30617] wg1 speed is unknown, defaulting to 1000
[  673.270795][T30640] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  673.446698][T30650] wg1 speed is unknown, defaulting to 1000
[  673.485926][T30646] wg1 speed is unknown, defaulting to 1000
[  673.508959][T30657] netlink: 'syz.0.8167': attribute type 2 has an invalid length.
[  673.606669][T30662] sit2: entered promiscuous mode
[  674.534599][T30704] netlink: 'syz.3.8181': attribute type 9 has an invalid length.
[  674.542754][T30704] netlink: 'syz.3.8181': attribute type 11 has an invalid length.
[  674.554365][T30704] netlink: 'syz.3.8181': attribute type 12 has an invalid length.
[  674.780431][T30721] __nla_validate_parse: 12 callbacks suppressed
[  674.780448][T30721] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8188'.
[  674.792223][T30723] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  674.869845][T30719] wg1 speed is unknown, defaulting to 1000
[  674.905734][T30714] wg1 speed is unknown, defaulting to 1000
[  675.035366][T30733] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8191'.
[  675.046291][T30733] netlink: 216 bytes leftover after parsing attributes in process `syz.2.8191'.
[  675.058719][T30733] netlink: 'syz.2.8191': attribute type 2 has an invalid length.
[  675.662670][T30761] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  676.006797][T30780] wg1 speed is unknown, defaulting to 1000
[  676.041785][T30778] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  676.075001][T30787] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8209'.
[  676.186113][T30795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8211'.
[  676.311856][T30774] wg1 speed is unknown, defaulting to 1000
[  676.478070][T30805] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  676.511542][T30805] bond2 (unregistering): Released all slaves
[  676.801083][T30824] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8218'.
[  676.840067][T30824] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8218'.
[  676.850091][T30825] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8217'.
[  676.882376][T30824] netlink: 'syz.0.8218': attribute type 2 has an invalid length.
[  677.002750][T30833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8221'.
[  677.254110][T30845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8223'.
[  677.286405][T30845] erspan0: entered promiscuous mode
[  677.295303][T30845] macvtap2: entered promiscuous mode
[  677.301255][T30845] macvtap2: entered allmulticast mode
[  677.307171][T30845] erspan0: entered allmulticast mode
[  677.320961][T30848] erspan0: left allmulticast mode
[  677.326289][T30848] erspan0: left promiscuous mode
[  677.335850][T30848] macvtap2: left promiscuous mode
[  677.345292][T30848] macvtap2: left allmulticast mode
[  677.385675][T30847] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  677.593229][T30862] netlink: 'syz.3.8230': attribute type 10 has an invalid length.
[  677.600134][T30857] wg1 speed is unknown, defaulting to 1000
[  677.834317][T30864] wg1 speed is unknown, defaulting to 1000
[  678.104498][T30881] bond2: left promiscuous mode
[  678.118515][T30881] bond2: left allmulticast mode
[  678.182376][T30881] bridge10: left allmulticast mode
[  678.305058][T30881] sit2: left promiscuous mode
[  678.390645][T19740] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.454508][T19740] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.475935][T19740] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.496687][T30901] bridge20: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  678.528089][T19740] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  679.087792][T30947] netlink: 'syz.0.8253': attribute type 10 has an invalid length.
[  679.111722][T30947] bridge0: port 3(netdevsim0) entered blocking state
[  679.134366][T30947] bridge0: port 3(netdevsim0) entered disabled state
[  679.142057][T30947] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  679.170285][T30947] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  679.542456][T30976] netlink: 'syz.3.8263': attribute type 6 has an invalid length.
[  679.550454][T30976] netlink: 'syz.3.8263': attribute type 5 has an invalid length.
[  679.981516][T31003] __nla_validate_parse: 8 callbacks suppressed
[  679.981536][T31003] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8273'.
[  680.049785][T31005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8274'.
[  680.059096][T31005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8274'.
[  680.152047][T31009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8276'.
[  680.181558][T31009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8276'.
[  680.197115][T31009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8276'.
[  680.476506][T31035] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  681.030686][T31063] syzkaller0: entered promiscuous mode
[  681.036345][T31063] syzkaller0: entered allmulticast mode
[  681.209163][T31074] netlink: 'syz.3.8300': attribute type 2 has an invalid length.
[  681.216950][T31074] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8300'.
[  682.608672][T31083] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.8302'.
[  682.916900][T31104] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8311'.
[  682.962028][T31104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8311'.
[  683.060293][T31121] netlink: 'syz.3.8317': attribute type 2 has an invalid length.
[  683.551589][T31149] only policy match revision 0 supported
[  683.551612][T31149] unable to load match
[  683.596142][T31153] nbd: must specify at least one socket
[  683.675870][T31159] xt_bpf: check failed: parse error
[  683.684785][T31159] lo speed is unknown, defaulting to 1000
[  683.691155][T31159] lo speed is unknown, defaulting to 1000
[  683.697747][T31159] lo speed is unknown, defaulting to 1000
[  683.720286][T31159] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  683.761009][T31159] lo speed is unknown, defaulting to 1000
[  683.776640][T31159] lo speed is unknown, defaulting to 1000
[  683.785054][T31159] lo speed is unknown, defaulting to 1000
[  683.820187][T31159] lo speed is unknown, defaulting to 1000
[  683.827653][T31159] lo speed is unknown, defaulting to 1000
[  683.843762][T31159] lo speed is unknown, defaulting to 1000
[  684.020816][T31184] netlink: 'syz.0.8338': attribute type 2 has an invalid length.
[  684.117045][T31193] IPv6: NLM_F_CREATE should be specified when creating new route
[  684.159358][T31190] wg1 speed is unknown, defaulting to 1000
[  684.182537][T31190] lo speed is unknown, defaulting to 1000
[  684.216975][T31199] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768
[  684.498341][T31216] netlink: 'syz.2.8347': attribute type 1 has an invalid length.
[  684.775102][T31233] wg1 speed is unknown, defaulting to 1000
[  684.784094][T31233] lo speed is unknown, defaulting to 1000
[  684.952617][T31238] wg1 speed is unknown, defaulting to 1000
[  685.027802][T31238] lo speed is unknown, defaulting to 1000
[  685.030236][T31252] syzkaller0: entered promiscuous mode
[  685.039342][T31252] syzkaller0: entered allmulticast mode
[  685.426323][T31257] ip6erspan0: entered allmulticast mode
[  685.541087][T31259] netlink: 'syz.1.8361': attribute type 1 has an invalid length.
[  685.683458][T31259] 8021q: adding VLAN 0 to HW filter on device bond3
[  685.693715][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  685.731625][T31263] bond3: (slave geneve2): making interface the new active one
[  685.783345][T31263] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  686.013440][T31289] __nla_validate_parse: 14 callbacks suppressed
[  686.013462][T31289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8373'.
[  686.196390][T31298] wg1 speed is unknown, defaulting to 1000
[  686.214840][T31300] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  686.230090][T31298] lo speed is unknown, defaulting to 1000
[  686.238096][T31300] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  686.545901][T31294] wg1 speed is unknown, defaulting to 1000
[  686.657128][T31294] lo speed is unknown, defaulting to 1000
[  687.070678][T31347] netlink: 'syz.0.8394': attribute type 1 has an invalid length.
[  687.407076][T31376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8404'.
[  687.437424][T31376] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  687.449385][T31374] netlink: 'syz.2.8402': attribute type 3 has an invalid length.
[  687.528849][T31374] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20000
[  687.595783][T31393] wg1 speed is unknown, defaulting to 1000
[  687.695805][T31393] lo speed is unknown, defaulting to 1000
[  687.734751][T31395] wg1 speed is unknown, defaulting to 1000
[  687.740817][T31388] pimreg: left allmulticast mode
[  687.781112][T31379] block nbd2: NBD_DISCONNECT
[  687.803021][T31402] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.8409'.
[  687.815904][T31395] lo speed is unknown, defaulting to 1000
[  688.183994][T31421] wg1 speed is unknown, defaulting to 1000
[  688.228654][T31421] lo speed is unknown, defaulting to 1000
[  688.229223][T31415] wg1 speed is unknown, defaulting to 1000
[  688.283468][T31432] macsec2: entered promiscuous mode
[  688.359579][T31415] lo speed is unknown, defaulting to 1000
[  688.559885][T31445] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  688.584399][T31448] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.8421'.
[  688.590712][T31445] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  688.903709][T31458] delete_channel: no stack
[  688.926469][T31458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8420'.
[  689.642884][T31483] wg1 speed is unknown, defaulting to 1000
[  689.648411][T31491] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.8432'.
[  689.650459][T31483] lo speed is unknown, defaulting to 1000
[  690.182511][T31516] netlink: 'syz.3.8443': attribute type 3 has an invalid length.
[  690.206899][T31516] netlink: 'syz.3.8443': attribute type 1 has an invalid length.
[  690.730329][T31547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8455'.
[  690.744949][T31562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8460'.
[  690.794228][T31547] geneve3: entered promiscuous mode
[  690.848047][T31567] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.8462'.
[  690.909251][T31570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8463'.
[  690.995972][T31568] bridge16: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  691.192064][T31590] __nla_validate_parse: 3 callbacks suppressed
[  691.192079][T31590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8466'.
[  691.223533][T31590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8466'.
[  691.283490][T31583] wg1 speed is unknown, defaulting to 1000
[  691.300746][T31595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8466'.
[  691.322993][T31583] lo speed is unknown, defaulting to 1000
[  691.437783][T31604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8472'.
[  691.539187][T31607] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.8474'.
[  691.847519][T31615] wg1 speed is unknown, defaulting to 1000
[  691.859962][T31615] lo speed is unknown, defaulting to 1000
[  692.116463][T31645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8484'.
[  692.201539][T31653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8484'.
[  692.305567][T31656] wg1 speed is unknown, defaulting to 1000
[  692.306038][T31657] ipt_ECN: cannot use operation on non-tcp rule
[  692.331577][T31659] "syz.2.8487" (31659) uses obsolete ecb(arc4) skcipher
[  692.350910][T31657] wg1 speed is unknown, defaulting to 1000
[  692.354263][T31656] lo speed is unknown, defaulting to 1000
[  692.412636][T31657] lo speed is unknown, defaulting to 1000
[  692.818195][T31678] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8494'.
[  692.829378][T31678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8494'.
[  692.838650][T31678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8494'.
[  692.992803][T31683] wg1: entered promiscuous mode
[  692.997788][T31683] wg1: entered allmulticast mode
[  693.020130][ T5807] wg1 speed is unknown, defaulting to 1000
[  693.026012][ T5807] syz0: Port: 1 Link ACTIVE
[  693.098297][T31691] No such timeout policy "syz1"
[  693.246303][T31703] xt_TCPMSS: Only works on TCP SYN packets
[  693.269734][T31698] netlink: 'syz.1.8501': attribute type 13 has an invalid length.
[  693.286263][T31704] netlink: 'syz.2.8503': attribute type 322 has an invalid length.
[  693.296322][T31698] netlink: 'syz.1.8501': attribute type 11 has an invalid length.
[  693.620644][T31730] netem: invalid attributes len -1
[  693.625917][T31730] netem: change failed
[  693.669829][T31730] xt_cgroup: xt_cgroup: no path or classid specified
[  694.338431][T31767] netlink: 'syz.1.8522': attribute type 5 has an invalid length.
[  694.989275][T31789] netlink: 'syz.2.8530': attribute type 72 has an invalid length.
[  695.454065][T31782] lec:lec_atm_close: lec0: Shut down!
[  696.044843][T31829] veth7: entered promiscuous mode
[  696.285801][T31846] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  696.430583][T11595] lec:lec_start_xmit: lec0:No lecd attached
[  696.452507][T31853] wg1 speed is unknown, defaulting to 1000
[  696.511016][T31855] bond4: option mode: invalid value (254)
[  696.531839][T31855] bond4 (unregistering): Released all slaves
[  696.588558][T31853] lo speed is unknown, defaulting to 1000
[  696.617744][T31847] wg1 speed is unknown, defaulting to 1000
[  696.657574][T31868] syz.4.8548 (31868) used obsolete PPPIOCDETACH ioctl
[  696.772983][T31871] vlan2: entered promiscuous mode
[  696.867584][T31847] lo speed is unknown, defaulting to 1000
[  697.439023][T31923] netlink: 'syz.4.8565': attribute type 1 has an invalid length.
[  697.513025][T31932] __nla_validate_parse: 8 callbacks suppressed
[  697.513044][T31932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8565'.
[  697.514152][T31931] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:0
[  697.584243][T31923] 8021q: adding VLAN 0 to HW filter on device bond4
[  697.609587][T31937] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8569'.
[  697.627476][T31937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8569'.
[  697.645520][T31937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8569'.
[  697.668475][T31932] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  697.734519][T31932] bond4: entered allmulticast mode
[  697.763813][T31923] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[  697.832891][T31940] netlink: 'syz.2.8570': attribute type 2 has an invalid length.
[  697.875867][T31940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  698.029163][T31951] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  698.180102][T31958] syzkaller0: entered promiscuous mode
[  698.194055][T31958] syzkaller0: entered allmulticast mode
[  698.202907][T31966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8580'.
[  698.299619][T31968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8579'.
[  699.218830][T31990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8584'.
[  699.244867][T31990] netlink: zone id is out of range
[  699.251619][T31990] netlink: zone id is out of range
[  699.256835][T31990] netlink: zone id is out of range
[  699.262479][T31990] netlink: zone id is out of range
[  699.267648][T31990] netlink: zone id is out of range
[  699.277723][T31990] netlink: zone id is out of range
[  699.283233][T31990] netlink: zone id is out of range
[  699.291440][T31990] netlink: zone id is out of range
[  699.825476][T32001] xt_CT: You must specify a L4 protocol and not use inversions on it
[  699.861822][T31997] vlan3: entered promiscuous mode
[  699.922331][T32002] geneve0: entered promiscuous mode
[  699.937922][T32002] geneve0: entered allmulticast mode
[  699.943693][T32006] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  700.085692][T32018] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.8595'.
[  700.373053][T32033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8601'.
[  700.375941][T32040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8603'.
[  700.564442][T32053] vlan2: entered promiscuous mode
[  700.891033][T32066] veth0: entered promiscuous mode
[  700.901153][T32065] veth0: left promiscuous mode
[  701.049560][    C0] ------------[ cut here ]------------
[  701.055431][    C0] ODEBUG: free active (active state 0) object: ffff88805821a490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560
[  701.068484][    C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz-executor/25128
[  701.079510][    C0] Modules linked in:
[  701.083711][    C0] CPU: 0 UID: 0 PID: 25128 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  701.093310][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  701.103416][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  701.109814][    C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  701.129481][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  701.135576][    C0] RAX: ffffffff8a964de0 RBX: ffffffff9a46a620 RCX: 0000000000000000
[  701.143697][    C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901beb60
[  701.151737][    C0] RBP: ffffffff8bcf3ce0 R08: ffff88805821a490 R09: ffffffff8bcf5000
[  701.159768][    C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff88805821a600
[  701.167760][    C0] R13: ffffffff901beb60 R14: ffff88805821a000 R15: ffff88805821a490
[  701.175806][    C0] FS:  000055558a8d5500(0000) GS:ffff888125467000(0000) knlGS:0000000000000000
[  701.184785][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  701.191437][    C0] CR2: 000055558a8f0a28 CR3: 000000003345e000 CR4: 00000000003526f0
[  701.199458][    C0] Call Trace:
[  701.202749][    C0]  <IRQ>
[  701.205603][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  701.211316][    C0]  kfree+0x13a/0x630
[  701.215227][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  701.220427][    C0]  rose_timer_expiry+0x4cb/0x600
[  701.225405][    C0]  call_timer_fn+0x192/0x640
[  701.230067][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  701.235556][    C0]  ? call_timer_fn+0xd4/0x640
[  701.240304][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  701.245452][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  701.250797][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  701.256289][    C0]  __run_timer_base+0x652/0x8b0
[  701.261214][    C0]  ? ktime_get+0x45/0x200
[  701.265572][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  701.271455][    C0]  ? sched_clock_cpu+0x74/0x440
[  701.276433][    C0]  run_timer_softirq+0xb7/0x170
[  701.281377][    C0]  handle_softirqs+0x22a/0x870
[  701.286167][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  701.291039][    C0]  __irq_exit_rcu+0x5f/0x150
[  701.295651][    C0]  irq_exit_rcu+0x9/0x30
[  701.299964][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  701.305620][    C0]  </IRQ>
[  701.308605][    C0]  <TASK>
[  701.311544][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  701.317544][    C0] RIP: 0010:format_decode+0x432/0xe10
[  701.323085][    C0] Code: b6 04 10 84 c0 0f 85 69 05 00 00 44 0f b6 75 00 46 8d 3c b5 00 00 00 00 49 8d 9f 81 1a 09 8d 48 89 d8 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 66 05 00 00 4d 8d af 80 1a 09 8d 0f b6 1b 31 ff 89 de
[  701.342843][    C0] RSP: 0018:ffffc90003de7610 EFLAGS: 00000a03
[  701.348942][    C0] RAX: 0000000000000000 RBX: ffffffff8d091c4d RCX: ffff88804b600000
[  701.356929][    C0] RDX: dffffc0000000000 RSI: 0000000000000073 RDI: 000000000000002e
[  701.364932][    C0] RBP: ffffffff8c1ff3a6 R08: ffff88804b600000 R09: 0000000000000002
[  701.372939][    C0] R10: 0000000000000025 R11: 0000000000000000 R12: ffffc90003de76b9
[  701.380961][    C0] R13: ffffc90003de76b8 R14: 0000000000000073 R15: 00000000000001cc
[  701.388990][    C0]  ? security_inode_getattr+0x12b/0x310
[  701.394545][    C0]  vsnprintf+0x102/0xee0
[  701.398846][    C0]  tomoyo_supervisor+0x155/0x1570
[  701.403902][    C0]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  701.409400][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[  701.414697][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  701.419944][    C0]  ? tomoyo_check_path_acl+0xec/0x1d0
[  701.425367][    C0]  ? tomoyo_check_acl+0x386/0x400
[  701.430420][    C0]  ? __pfx_tomoyo_check_path_acl+0x10/0x10
[  701.436247][    C0]  tomoyo_path_permission+0x25a/0x380
[  701.441672][    C0]  tomoyo_path_perm+0x3f3/0x560
[  701.446540][    C0]  ? tomoyo_path_perm+0x251/0x560
[  701.451597][    C0]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  701.457004][    C0]  security_inode_getattr+0x12b/0x310
[  701.462409][    C0]  vfs_getattr+0x23/0x70
[  701.466674][    C0]  vfs_statx_path+0x2b/0x230
[  701.471297][    C0]  ? vfs_statx+0x107/0x200
[  701.475728][    C0]  vfs_statx+0x12e/0x200
[  701.479999][    C0]  ? __pfx_vfs_statx+0x10/0x10
[  701.484775][    C0]  ? strncpy_from_user+0x150/0x2b0
[  701.489924][    C0]  ? do_getname+0x151/0x250
[  701.494481][    C0]  vfs_fstatat+0x11b/0x170
[  701.498926][    C0]  __x64_sys_newfstatat+0x151/0x200
[  701.504142][    C0]  ? __pfx___x64_sys_newfstatat+0x10/0x10
[  701.509913][    C0]  ? __pfx___x64_sys_umount+0x10/0x10
[  701.515303][    C0]  do_syscall_64+0x14d/0xf80
[  701.519947][    C0]  ? trace_irq_disable+0x3b/0x150
[  701.524988][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.531081][    C0]  ? clear_bhb_loop+0x40/0x90
[  701.535770][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.541710][    C0] RIP: 0033:0x7fcfadf9adda
[  701.546137][    C0] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7
[  701.565778][    C0] RSP: 002b:00007ffd2f74bf38 EFLAGS: 00000286 ORIG_RAX: 0000000000000106
[  701.574261][    C0] RAX: ffffffffffffffda RBX: 00007fcfae032050 RCX: 00007fcfadf9adda
[  701.582367][    C0] RDX: 00007ffd2f74bf60 RSI: 00007ffd2f74bff0 RDI: 00000000ffffff9c
[  701.590401][    C0] RBP: 00007ffd2f74bff0 R08: 00007ffd2f74cff0 R09: 00000000ffffffff
[  701.598402][    C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffd2f74d080
[  701.606385][    C0] R13: 00007fcfae032050 R14: 00000000000ab248 R15: 00007ffd2f74d0c0
[  701.614418][    C0]  </TASK>
[  701.617454][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  701.624819][    C0] CPU: 0 UID: 0 PID: 25128 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  701.634361][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  701.644430][    C0] Call Trace:
[  701.647735][    C0]  <IRQ>
[  701.650576][    C0]  vpanic+0x56c/0xa60
[  701.654596][    C0]  ? __pfx__printk+0x10/0x10
[  701.659194][    C0]  ? __pfx_vpanic+0x10/0x10
[  701.663697][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  701.668979][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  701.674185][    C0]  panic+0xc5/0xd0
[  701.677909][    C0]  ? __pfx_panic+0x10/0x10
[  701.682339][    C0]  __warn+0x315/0x4f0
[  701.686322][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  701.692040][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  701.697760][    C0]  __report_bug+0x29a/0x540
[  701.702374][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  701.707784][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  701.713509][    C0]  ? __pfx___report_bug+0x10/0x10
[  701.718547][    C0]  ? run_timer_softirq+0xb7/0x170
[  701.723574][    C0]  ? handle_softirqs+0x22a/0x870
[  701.728515][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  701.733283][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  701.739090][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  701.745235][    C0]  ? format_decode+0x432/0xe10
[  701.749993][    C0]  ? vsnprintf+0x102/0xee0
[  701.754397][    C0]  ? tomoyo_supervisor+0x155/0x1570
[  701.759603][    C0]  report_bug_entry+0x19a/0x290
[  701.764528][    C0]  ? debug_check_no_obj_freed+0x44a/0x550
[  701.770286][    C0]  ? debug_check_no_obj_freed+0x44f/0x550
[  701.776020][    C0]  handle_bug+0xce/0x200
[  701.780261][    C0]  exc_invalid_op+0x1a/0x50
[  701.784762][    C0]  asm_exc_invalid_op+0x1a/0x20
[  701.789616][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  701.795948][    C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  701.815555][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  701.821620][    C0] RAX: ffffffff8a964de0 RBX: ffffffff9a46a620 RCX: 0000000000000000
[  701.829585][    C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901beb60
[  701.837549][    C0] RBP: ffffffff8bcf3ce0 R08: ffff88805821a490 R09: ffffffff8bcf5000
[  701.845539][    C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff88805821a600
[  701.853505][    C0] R13: ffffffff901beb60 R14: ffff88805821a000 R15: ffff88805821a490
[  701.861475][    C0]  ? __pfx_timer_debug_hint+0x10/0x10
[  701.866850][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  701.872485][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  701.878127][    C0]  kfree+0x13a/0x630
[  701.882099][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  701.887215][    C0]  rose_timer_expiry+0x4cb/0x600
[  701.892157][    C0]  call_timer_fn+0x192/0x640
[  701.896743][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  701.902197][    C0]  ? call_timer_fn+0xd4/0x640
[  701.906867][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  701.911979][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  701.917174][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  701.922634][    C0]  __run_timer_base+0x652/0x8b0
[  701.927476][    C0]  ? ktime_get+0x45/0x200
[  701.931809][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  701.937177][    C0]  ? sched_clock_cpu+0x74/0x440
[  701.942026][    C0]  run_timer_softirq+0xb7/0x170
[  701.946871][    C0]  handle_softirqs+0x22a/0x870
[  701.951641][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  701.956409][    C0]  __irq_exit_rcu+0x5f/0x150
[  701.960994][    C0]  irq_exit_rcu+0x9/0x30
[  701.965230][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  701.970863][    C0]  </IRQ>
[  701.973785][    C0]  <TASK>
[  701.976709][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  701.982683][    C0] RIP: 0010:format_decode+0x432/0xe10
[  701.988068][    C0] Code: b6 04 10 84 c0 0f 85 69 05 00 00 44 0f b6 75 00 46 8d 3c b5 00 00 00 00 49 8d 9f 81 1a 09 8d 48 89 d8 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 66 05 00 00 4d 8d af 80 1a 09 8d 0f b6 1b 31 ff 89 de
[  702.007666][    C0] RSP: 0018:ffffc90003de7610 EFLAGS: 00000a03
[  702.013725][    C0] RAX: 0000000000000000 RBX: ffffffff8d091c4d RCX: ffff88804b600000
[  702.021697][    C0] RDX: dffffc0000000000 RSI: 0000000000000073 RDI: 000000000000002e
[  702.029662][    C0] RBP: ffffffff8c1ff3a6 R08: ffff88804b600000 R09: 0000000000000002
[  702.037800][    C0] R10: 0000000000000025 R11: 0000000000000000 R12: ffffc90003de76b9
[  702.045761][    C0] R13: ffffc90003de76b8 R14: 0000000000000073 R15: 00000000000001cc
[  702.053742][    C0]  ? security_inode_getattr+0x12b/0x310
[  702.059323][    C0]  vsnprintf+0x102/0xee0
[  702.063570][    C0]  tomoyo_supervisor+0x155/0x1570
[  702.068600][    C0]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  702.074066][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[  702.079345][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  702.084543][    C0]  ? tomoyo_check_path_acl+0xec/0x1d0
[  702.089912][    C0]  ? tomoyo_check_acl+0x386/0x400
[  702.094930][    C0]  ? __pfx_tomoyo_check_path_acl+0x10/0x10
[  702.100730][    C0]  tomoyo_path_permission+0x25a/0x380
[  702.106099][    C0]  tomoyo_path_perm+0x3f3/0x560
[  702.110941][    C0]  ? tomoyo_path_perm+0x251/0x560
[  702.115958][    C0]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  702.121356][    C0]  security_inode_getattr+0x12b/0x310
[  702.126728][    C0]  vfs_getattr+0x23/0x70
[  702.130968][    C0]  vfs_statx_path+0x2b/0x230
[  702.135556][    C0]  ? vfs_statx+0x107/0x200
[  702.139978][    C0]  vfs_statx+0x12e/0x200
[  702.144217][    C0]  ? __pfx_vfs_statx+0x10/0x10
[  702.148972][    C0]  ? strncpy_from_user+0x150/0x2b0
[  702.154079][    C0]  ? do_getname+0x151/0x250
[  702.158585][    C0]  vfs_fstatat+0x11b/0x170
[  702.163005][    C0]  __x64_sys_newfstatat+0x151/0x200
[  702.168219][    C0]  ? __pfx___x64_sys_newfstatat+0x10/0x10
[  702.174051][    C0]  ? __pfx___x64_sys_umount+0x10/0x10
[  702.179519][    C0]  do_syscall_64+0x14d/0xf80
[  702.184183][    C0]  ? trace_irq_disable+0x3b/0x150
[  702.189210][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.195271][    C0]  ? clear_bhb_loop+0x40/0x90
[  702.199946][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.205830][    C0] RIP: 0033:0x7fcfadf9adda
[  702.210250][    C0] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7
[  702.229947][    C0] RSP: 002b:00007ffd2f74bf38 EFLAGS: 00000286 ORIG_RAX: 0000000000000106
[  702.238368][    C0] RAX: ffffffffffffffda RBX: 00007fcfae032050 RCX: 00007fcfadf9adda
[  702.246508][    C0] RDX: 00007ffd2f74bf60 RSI: 00007ffd2f74bff0 RDI: 00000000ffffff9c
[  702.254467][    C0] RBP: 00007ffd2f74bff0 R08: 00007ffd2f74cff0 R09: 00000000ffffffff
[  702.262430][    C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffd2f74d080
[  702.270387][    C0] R13: 00007fcfae032050 R14: 00000000000ab248 R15: 00007ffd2f74d0c0
[  702.278364][    C0]  </TASK>
[  702.281648][    C0] Kernel Offset: disabled
[  702.285959][    C0] Rebooting in 86400 seconds..