last executing test programs:

5.089908855s ago: executing program 1 (id=1625):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept$alg(r6, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdb3}, 0x3}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000a80)=""/4087, 0x1031}], 0x1}, 0xa}], 0x2, 0x2101, 0x0)
bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @private2, 0x6}, 0x1c)
r8 = socket(0xa, 0x1, 0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}], 0x1, 0x14)
shutdown(r9, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x85, &(0x7f0000000340)={0x0, 0xd5, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a66420f35ffa4b1751952a4ab0675f01e8d14049d41fc52ab0ca78ebf8038b28e090f5424839e77b9738b01226ab31d2390fdb9ace097f5f0f7fcd722a947920aa528cde28c2d2eae23273d20861c8"}, &(0x7f0000000100)=0xdd)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r8, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000)
clock_gettime(0x0, &(0x7f0000000080)={<r10=>0x0, <r11=>0x0})
ppoll(&(0x7f0000000040)=[{r3, 0x2401}, {r2, 0x21}, {r2, 0x4208}, {r8, 0x8004}, {r2, 0x180}, {r2, 0x5040}, {r2, 0x8818}, {r2, 0x2000}], 0x8, &(0x7f00000000c0)={r10, r11+10000000}, &(0x7f0000000200)={[0x1]}, 0x8)
unshare(0x4040400)
r12 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r12, &(0x7f0000000000)={0x27}, 0x62)

4.73744661s ago: executing program 1 (id=1632):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

4.574696619s ago: executing program 1 (id=1635):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x100000, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x1592e566}], 0x2}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x2000)

4.187625285s ago: executing program 1 (id=1640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0xffffff77, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24000870}, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001042abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x200088c1}, 0x0)
pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000000180)="de", 0x1}], 0x1, 0x0, 0x7)
getsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan0\x00'})
ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000000)={@local, @empty})
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008090}, 0x3000c81c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0xffffff77, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24000870}, 0x0) (async)
socket(0x40000000015, 0x5, 0x0) (async)
setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001042abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x200088c1}, 0x0) (async)
pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000000180)="de", 0x1}], 0x1, 0x0, 0x7) (async)
getsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) (async)
ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000000)={@local, @empty}) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008090}, 0x3000c81c) (async)

3.938917275s ago: executing program 2 (id=1642):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4010)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002640b40900000800a0000700000008009f000f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5a0cd34885a0fa67877b5670eaeed6a5bdccd1d23dc9c94d57fec793ed7e651c241a6c4cf2a7cb9c6c4f2a0e368f69c36ce2cc75e3a2cd0987db6295b02aec52ab127103e551d74c541582ecfb0af8ba8bee53040d3fce02f8e50bedc42f59cb9b68cf76a6d491b4636655f304ba6abaeeb09ddb5d6dd9a6f0f64b0fecee5b012ecab7ce3d57432d05e4237cf25ff0e8bbf6e9cd9a969549f7304dddcc829d1348c1cfd1343311756578c3f023d59e57", @ANYRES16, @ANYBLOB="00042cbd7000fbdbdf257b0000001400fe00641e41dbd5278d82199420687d7fa53014000201d299601e0dc3cb8ff650980b1c1de370"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000062)
close(0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200006600000000000000ce00000085000000d000000085000000110000009500000000000000272b50273df76a8986b1de758c2421bb116a35001bb12f3c1ce434a8716891247d6ed29df36b2b837ae23696bc6f3fb5fd2e627f61d1a15c8b37b9be2dd49d1d8ce0fef57001437f8e6dc172af4ca4a3da83eb9e439b31525454d85fc9db074a0609b58fe0bd5886142ca16d6eb5a6beacda9ba09b57a0e62c467c58b08225fa18cd988a3c17801ae6136e46cf9f3a87aa66b450a5dd99eb5410c1c8e605825a30da2c5b27aaf61240a8b2ea312323e6be85a019a1d9bae244a5d88c002b08bc7424"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r6 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e)
connect$pptp(r6, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1)
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000400)="43447a7c52bdddda071049c7fb167492a56b07ab991472a43c8c2e0f19c0325da7c945509bf4a7feee89cc014794f84170ba4d9b4406a42f9a2e2206c81cb41c27af6ac57427c16db5815e3959f637811d5478085d9f99fd5ad0165b9c9167f1fa31709b9f387a9310a6457a0dd4e832067edfee54cd988b79d6d08f06", 0x7d}, {&(0x7f00000004c0)="c23b8f6ff7de1da2a7f6d941c4ed38fc3e", 0x11}], 0x2)
socket(0x0, 0x3, 0x2)

3.938607145s ago: executing program 3 (id=1643):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="e02742e8680d95ff9782762f86dd", 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.88510684s ago: executing program 3 (id=1644):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000009b79f3436297592ed389e6813717420462171beedc88a8f0c30ca3f18cd4e44289b85ba0b4b9dd1ffce4aaf01a3e285878c1bc754914812242f3fea544e941f0d095117e058ed3b5afbb8d7a342aebe6"], 0x50)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="eda55bcd35b6de17b36efc4229163ce28b38f8dcedd7616b02178c7aa815f84c20e894997cc4813a6e3334e1b724ed1c9c4d4d52926482b75c94d5d8f970282badbcd5710fcc58b4fee4e9f315f4f6d1e123c10c2c6b66557a666320700ac2ae9c491646f8e8e3abb3b3c954d799db165829a704b45164aceb418b57b6faee091f01beaf733a96eb4c", 0x89}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/211, 0xd3}], 0x1, &(0x7f0000000900)=""/211, 0xd3}, 0x9}], 0x1, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000feb000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.804023066s ago: executing program 0 (id=1645):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000000)=""/166, 0xa6}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0xd, 0x2120, 0x0) (fail_nth: 8)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$alg(r3, 0x0, 0x40000)
sendmsg$nl_generic(r3, 0x0, 0x40040)
recvmsg$can_raw(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x1021)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0xce, r2}, 0x38)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x20000000)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)

3.699124119s ago: executing program 3 (id=1646):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb702000008000000182200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="02df25000000"], 0x33fe0}}, 0x4000050)
syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400})
close(r5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}], 0x1, 0x40800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r6, 0x8b2a, &(0x7f0000000040))

3.322237637s ago: executing program 2 (id=1647):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xc4ff}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) (fail_nth: 11)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000850)
connect$bt_l2cap(r0, 0x0, 0x0)

3.313947191s ago: executing program 0 (id=1648):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000eaffffff0000000003000000850000002c00000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 11)

3.285874421s ago: executing program 3 (id=1649):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0xfde9bc7ab12bba78, 0xffffffffffffffff, 0xad9b9000)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f0000001040)=""/4071, 0xfffffffffffffdab, 0x10076, 0x0, 0x16)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/73, 0x49}], 0x1}, 0x7fffffff}], 0x2, 0x10002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000300)="cc874b00b5778cdbd7c5e7c6b977c3f69af11a2941491d069c5f56f71ffcd077c4e18e21172c43c5707cd48a24fecd24c8929de9deaa23bebbdab4f6162149192a70741b91f2471461a6788afefea77c4cea5ea80a7635f840bfaf74ed17b21ea3ce4114a0b2775e6ab9e4be1272168c4bbf894623bd8960acf8a33b144327fa1da2525286f5182e383eaa15e50a1d732aa06777cb1248ca6bb47e1a6089dec77aad", &(0x7f0000000000), 0x2}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000002c0))
r2 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x24030000, 0x0, 0x4050000}, 0x4008040)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

3.21622904s ago: executing program 4 (id=1650):
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000040)="b9a98b2b8df5b6898c3fe0927cdfee24ad5d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 12)

3.215619723s ago: executing program 1 (id=1651):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x84, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044000}, 0xc880)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

3.092283545s ago: executing program 0 (id=1652):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

3.04221897s ago: executing program 0 (id=1653):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x6}, {0x0, 0x20000000000, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48a41, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
r9 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r9, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r10, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r9}, 0x20)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
write$tun(r3, &(0x7f0000000540)={@val={0x0, 0x884c}, @void, @eth={@empty, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "b09d09", 0x18, 0x6, 0xff, @mcast1, @empty, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x2, 0x5, 0x0, 0x0, 0x3, 0x2, 0x0, 0x271, 0x8, 0x2, 0x4e21, 0x4e23}}}}}}}}}, 0x5a)

2.564349174s ago: executing program 3 (id=1654):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="8bb0129b", 0x4}, {&(0x7f0000000340)="c91e3bfe68", 0x5}], 0x2}, 0x44000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x7a}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c008}, 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a00)="213508144002e98ada78d61cf18af0a16522c88c303d9e8a3660ad856e298c57f16acd283abde2c35b7f10e2d7", 0x2d}], 0x1}}], 0x1, 0x40088c5)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) (async, rerun: 64)
r6 = socket$inet6(0xa, 0x3, 0x88) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010800000000000000000a0000062c00018006000340000000001400018008000100f0ed3600000208000200640101000c000280050001008800000024001980080002004000000008000100400000000800020000000000080001000e01"], 0x64}, 0x1, 0x0, 0x0, 0x94321cf438403784}, 0x4004000) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@remote, @in6=@remote, 0x4e1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x11}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000001, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) (async)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

2.470573819s ago: executing program 4 (id=1655):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0}) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4002000015e2881db6d63b4ce655203b2fbd", @ANYRES8=r1, @ANYRES64=r2, @ANYRES32=r1, @ANYRESOCT=0x0], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x48004)

2.470329807s ago: executing program 3 (id=1656):
socket$inet(0x2, 0x4, 0xfffffffe)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001c00e999"], 0xb8}}, 0x0)
shutdown(r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x7e801b5bf6984b45}, 0x40)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

2.436528208s ago: executing program 2 (id=1657):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0x8101, 0xe501, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0)

2.320079248s ago: executing program 4 (id=1658):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a080001"], 0x80}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000a06010100020073797a3100b7ffffffffffffff00000008000940000000050400088000"/52], 0x34}, 0x1, 0x0, 0x0, 0x4044891}, 0x48080)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000140)={&(0x7f0000000040)='sit0\x00', &(0x7f0000000080)='.\x00', 0x3})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000e81e37531dcd190e9beb3cfe58ed482e4cdf4f9836d2eaa01e7924bdd907f9fdd6459939394f29982767cb4857014eda96a995dd1d192a1742feaa277aaf473d8c7ae4632322c4f0d9200e86e6468f547138b79771797c7d0ec246f912f9dd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0000cc310210ecd2a97c4d7106a008fc16e48edb520d3dbd00008000"/45, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r5}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x642}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x8, 0x3, 0x8, 0xec20, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xe9a0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket(0x23, 0x80805, 0x0)
write(r7, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r4}, 0xc)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', <r10=>0x0})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10)

644.631477ms ago: executing program 2 (id=1659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 9)

458.56661ms ago: executing program 4 (id=1660):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x18, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x16, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x1240, &(0x7f0000000d00)={@random='\x00\x00\x00\x000O', @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x120a, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@srh={0x87, 0x10, 0x4, 0x4, 0x80, 0x0, 0xe36, [@empty, @empty, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, @loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}, @dstopts={0x3b, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x40}, @pad1, @generic={0x9, 0x7a, "bb9c5f2cb14ff9d6ce8d1f0b5e665af3f38d5b34384f60a6ac639283bd3dfc6737c2d61eab89bf44bb0f9d53d47617c4dc6c6fa9ede947dc913b9be67bb79f5fa3d1243bc43680281a442e6338320134171431a91a5ae8cc94b2e3bb966c709b60afe7a342d3ff36312ef3af51b0f6b9b17aa7c11fb27234583b"}, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x9719, [0x67, 0x0, 0x88a7, 0x2, 0x8, 0x1]}}, @enc_lim={0x4, 0x1, 0x4}, @padn]}, @routing={0x6c, 0x10, 0x2, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @local, @rand_addr=' \x01\x00', @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, @mcast1]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback, [{0x4, 0x200, "8a595df27ab117dc769cb4ccf04e6a5b2c1a8b8f34e0147480b4586faa3a9c911a9b0071a9146191b5cec924430d71a6757592b5a3b9c5f32aaab05f721aff89ebf238979f82379de673077f94c484bc102eb327973180c71f1a20b4f47637c3e3463d49ab8decbcae74400cc3a20ca02f9a03ccd5b591d57e480169ac76f2d9dca4f27fcc8e0f8c8b8afffbcce0e02e2e656dc7ca2b1e45a5a2770d8bc1f77ec41dd2f235e4e9717404e795cad3b59d5c19c8a387ce7c2b39b097b543b8efa339ec40357660ed0b0193ef9f8122bf2da33ab7398550dbedfcb6a4c0f168e3b3e420be0cb29d52d9acf2c8418397c98b34f71863ef54e226c713040c52683c4007945e1b7cf1e6da2396edc2dd72411c6448e45c2781b4ed3f98c2676b79fd6ca37327b4295d592678c6abde429e2cb4c6d48732ab4163f3dd3e27ac7654a593e8612969fb37eb9446a7a217ea466f1e3b591b13f75f4ff618589b06c5ef5029dccc595de2fef96d588cba2287b5d7fe3f9896296597ae6bd34641082cd0e858019109d8efab38299b31ff81d8adb19e90465c9be38885fbdd133be038eac32c3a4b17a56456658f4447e84d100df2e3dc5e4777f188bd9af4a862983632e781dba34883c9f1928a5c5c5d38c9718782c15f62eeab9013afbd830c5b0a4a5abf61e10e77f6967df80f4835361c403386bf231607d49b09b00e3dbc7ba79c61a240a6c23fee73fdd5ec61a907cf4ea048de1c895e103373c25c29ada39d8d7a6ad721a156ebc2a0f2619d9017e8e65ad701625014e53352e52b4d85b69c5bb2cceec7dfae4bb2e1cb97e70d5766d991629147e3a1650a4e6d56893553cf05f2f977984b96c50f3cc593cc258b54304b7c43685c8d3ef6737921b0fc655c2346f2993f09403ec629643a9d6a85169e765ece9346ac92b49e62d34b90719cd8379d91c8defb1e1b256c6ee592cfa4bca7d45bee72aed6e41e85a964fcdcc347d0d62a19a7f304de456b0f35b4253a43d3161bdf6f1d385bc611d25ec50aaebc4b6427b4de2e7dba1d9e3abd7fd93bea798825cfa8d8a315db239b8756c0f813bff8a391154becbe0c7db4f5d2864e5c3abdbb084a490e6a9f37858417edbfbff1d9351f5200befe3f75564bc92fc65cba1da48e5b26a6c7af9ca8055d827fcb9a3ff7bf6e02b2380cfed7f48f084e65e6e7c3072ace032ed9a8de9bf460c0a21a99f7f0635f934ce47104434b12c6112256425cf4731779fc7b5d55349005529deeef6b1d85eb971dec40cc8f3e0389d80dc62172b482a2b906a36149e1d9bc325fbff7fd41e37e48e50a75637bb70cf672f6acdcd65b6e113dc40aeb58bff4e583a0b44c55add0517611648683929b45106ec0430c8ab34918b1503ee1f6229cd5a725b85ec971856242d2e09eb8605bdbaa8350c2b703b5fab2769db7c3ff16b3d43c740d2f08a41f6b83d466ceebf79b56ea0807d4aa590126168d09b935dd1660038c133aa0f5fb93e3bce15f4741b338970efd91d2adfcf962a6d379201b1cfeb30652bc23bfbee5dd3c7ac2b35259620dc7439dbbe81b3c946f36a5b007268d854618410004c50987a2c3ae60ebf9b5814f7393070e409bb2e7e8a0407bfa78e3b2e035b76b5d19ee6d1c775f299f503f7f02b83e7d4839c5832b99b655c6d4a6cfbd66646d51edb0b9afbb6b1ec4a7a299624c31eb9f6f3fc93281aa056e0b4243a1e59733a40aea963f890a7129ebfc428b4b214972270dc9e3a7d88ddf50770182d3b31784b61cd6547f6c816a69eed14a1267d458aed3447c76effdeca4897f6edddc6f24df454542746ad372a247eb4af14d8d4e84676098ad9fc221b5fedd0de519166836da3cc84d8c4bf9f6cf20c46f01b1c85959ee6b9daaab686717c68bb7ae71e8b9783be2bdf3a940eba78ca96798465b463b9e358e81acf5eb7859b402aa399c110e1bbd92df6dc32fd7cf5483e1388a4a20756282a03a201807810e71d27c648c65e1ad455a5e2089d40a58a7e45414637670ece8119e205ebf42323bc53d553cc9ced291809d19cefe74d2ec3f0c4bede1117a52d60416b40a022caf30a3f0e2ba528f44a30148ca00b65a1be21391fa3e7b9b9126f9619409812e22690d8a3fb64bcd6d7fe65400c22c84248dbabae6fffeaf11b1cb4062662fb5c85b4ddece114efc896c62f4998060dadcef1a342eca9d053759ee7327ef9c991a43c49fb30bebf233f3b030e2f90b68c02f32c8b974bb32ebe962f31eae2eea35f464f49b39f7a6cbf98656ecb7d97e8f6da9245e5730ffe1d4a67e7d5fb4bbb20cb8b1de1aa26d20851d02e0f37f2e5e5bab5fb39e18d4f270f6cec6bbeb09f579dccc6e0601d4a9c45373b8260413e11fcf76c733385bce61775cd38f26c77c67a33af2a0f133a03a6a012e2602e0ee23e079e9acff738298a72b9f1417b6d3f00515d390a5bfda3dcfba97037e9533bd713fa3c9a3f2d0bf9d792c7de1eb1287402c7f675af2fbbac549a1140c3a6ca0b24750c2e2e584c246bafacf7f92e891dea86b9fafb91a307673e3fbc97ce7b4fabc1d9844cfa68fdb6d37dc2245721094241fc50a270fa883da70697ae8ba64b5ebac7cee92cbc1d200a8e47bde1cd8b4e8e48fc93b9f6c54cbe1f0f84151094d12c7dfb66d96c8e62adf6b26b75aff918969a499a46ab54749c568aaa609405b3c193fb34f0de2a7d200be01654874c4e23af06765613e6aec9de77f5a0ba64235265c719f7f542dbb8a7eb2bcc2520788ef0315f64e77a262045f398e5fc3c2ea7691d57fb54c2f567a87da048a27c0f18705699253f05bd6036e689b970b7a503648f22760155ee8c21812f068b022fea48577e84d2edf264e36d588d0679ca4a3f05442039ada2408e34647ffa9f5ef101e94746622dc14b96fa26cd2f4ddcc897c19028f1f462a7de52778ac8aa5dd7770278873a7d7a66ded373d2885a28f629a609c4e080a17e3f1979d51c7eff5a2f84a5c11b116d2c2d4689f6cd6929ae8e33fdaed6badb63111a5c19c9fe81c2415dc3fdaf8bd80ab3f4603a67533c05307a9d0fe58296e386102c4e9cedf0e480531e643bd138acb0c27c2957a3c7d56f622524ec331899bcbd1b54f6f9bdd6f1d033d9906ab197264fc42296c7766e01f03f7cbf5f61fc2b91bec9b1775a10518fef605d24f104af9b63960368773909fda5c034abe2292ee785d1574d7e856381d9cecb388160fc72cf3103726ea31dde04549c48bb3b675fd52f074a18e449423f57c6e9c094b0bc4356ae022df9b1092170c0d4d7b28d126755cd80ab05c2f3cf43f5fd9dd2efc7b5b361ec948a71a62f748102103234ed949c568b222f7bd8c5c571452ab2cef2b043d030f3fb785dece1e586b11a2426751314b7efd39979d590b63de90b2fa8d8c75975c06b469e482ceb665f45ccd85b9133b9953865e2eb979813299d7b24abc289fba8c8b3697fca815bdbc6e47ea439a4963210d1f31c2bea38f1279930d23bf9d8262bd258b99057f318b85991b5741bbf5e00a79c36dad123fbb886c5f252cf6548ee0b8680bd9ada450cf4b5ffead2418c163f7053b9a6e365b0a1249830457aafd45c8d89df1196e1295c183ee4618c015ed47d42fbdec278f13f0035c15b35e181f1a14d842acc4169026104e5c2ad2aae404a2e50768e450ea916dbe81d62841f94e569c099e479bf641ede30b591d6ecd1e02b02528376f39f9d7a9b1610c56124c008ff732395b8f73362bad33f21f5e4cf944f1fb6c258044ae3a450e17087a539a2c79528e5c75da733a161a74d376dbf1572aa55cd3e2940bae3fb6cafcede7fa7dc28399168b6f509b8418945d85d693a9aebee87f91d7e7561a2ce44b044cfa1f2e6c59c0241e54a9c3a7b9a77799656692c3ffdccbcc9cc2cc757c48e7b34ac2c6d680771d8a3149f30b059c93129fabc8ed37705cf60df578eaa16fb7864a54ffcbf7d127dbc899f39f34191b480571a39c33e1769203ad5abd7ea034f13e9f24b30be9482edc9f748a5463301d101aaa91bd0e10475f7085e39e624abe60a62fc58b763f62ee823259bf7f7916ea425091b456622234fd1a32434e4bae634c74b0dbeee4374cc81e52ef50ea35417dfe933b846753a8a00bd0138d2ff06306523e7795f6a7ba0a1350bf7337b648d98b522fbd59f135aa59e0631ceed9d339684ba98022bbded116f1d8c1ba7a435291142fc605b7738d9f93574ce263a4b2011acf8bc1f92818a1992a1de3a1a606830cfc0cbbb1abca4120ae6d105c1b331cf8b75caa5085b0fd66c803a7166dc343f970582a67475ae8ad9790d32b0f47c086a9a5b7473aa73fdb0cae8ee94908f78fde716534ff87367601f13fa7e20bf0d427b97b92ea4569509d8819f85fecb2636e9456a8540896c919351b9829eac74fe18c5a6f450d949da5025a4ffafa146621958889e6f3d9dc56044751b4dc5cbfa44918e6117a15db4731961fdd21389c40eedee894617b7c6a0f6bff0e8329c2a9ccaa77a205cbdd7bf792d2d66a6f368f612663653be13c91b8c28e525177d3ee26fe46d44103764f303af189f862a0bbe279fa648f322247eb0dba093a84ca6fbf393ce320c191b2b698dca896ad6e3f50d070346e27b8a2a4717dce1f58116972e62febc2e5b6f3244902b445d978cc99f0b6fec566c762b5eaa2932f47dd0ffbc77a03cb727d0a1c6766d5bd06a9053b7c9e9d55d4232710fa89087775514f0290badec22fef1d798ba40d75cef0b0f2851754b6bae699853c64ba25c232db8c1f87f147149b66ad47ba44f2d7fec03e826765bef7360c5c89a4a3fac60b3849715022da930ef6724d4dc257788fa01bdc1c946c37947b7c22d4bf02d44486881dba8809eccfdf9b2d7c19b814e7d1b9130ae727e96a40c5b6f278052ffaadcfc415e59894a1bc0bcfadd1a2e32c2951493243ef7347c59ade9e3dfea93d8e9f1ac5c282e1227332204e3708cdbf4fd613e2ddeef1d41fe2a6fbe3fad4240336f78a7a48bfe62cd95ab9575a7287cfc2631bd945a248d2e2fe1c3c1c9182f8ef54cf8715b73f891d2f2df4254376a315b33a08a25ecac9ed800c18d7d7d534c734a5b73feefe400ab2a18f8c84715d0bb43b8520e2dd5d2dd6a6d82a6d864d5b430bc8521d82e9409caa27fe1f328b06f466e2daf5ab2c3ad95602047881a37785bd0fa49a03e49b46d2ad9b89a57d9d7d70d859509500361a3058b32b9f481cadc661fdbcd51d957581c1716543d8dc3172c31ed20604fb345666e008f6732b2958177cc58e6c9b15b1ed8c6c50903658ab08bf74eba5035d84892d61877642385bad59cabb785bbabcbf769ae92c6c88ae273dff4c31df322fd261cb778bfa4eb5e7a8cc6cccb1b57d66523164862a995dc65c84519fee68ad0bcf2d61aece09385ddcbbf1790cd387159ebc4c6572e9b95eb938ff2a96d7396878efb336dd51965bc934118062ca28a2c645172605376913def891a2b28781c0e79dede4433ba0fd6ad6d602a72f8aecb2a239203e1141d02f1a8038d3e230d96edb2e2e5280f731545800c893a0ae1408ae7ebd20162212e3c7c114df244f4a22ecd9a80d585c3308486e0e8bdb27a527a4dc91ce34027d1be4555b59f930a783a441cff76422bad7b939b34cb678493edfc834f6938e170fb2d2ebf640b9acb498a49a01877b859bce6b5ef35020db01bd02a3525fccc8e4ed46389b3079be94ba20724a2710b7140ddfe85e5b4ce8e7489c309f0435ddd0130d3183a42e83964ddf334a"}]}}}}}}, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
shutdown(r1, 0x2)

456.694904ms ago: executing program 1 (id=1661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x2, 0x1)
write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[], 0x9)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0xed, [0x4, 0xfffffffffffffffe, 0x38f, 0x2, 0x7ff, 0x7], 0x1, &(0x7f0000000180)=[{}], &(0x7f00000004c0)=""/237}, &(0x7f0000000040)=0x78)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
connect$ax25(r4, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}]}]}, {0x0, [0x61, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x10000000)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000010240001801400018008000100e000000108000200e0000001070002"], 0x6c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce)

404.809626ms ago: executing program 0 (id=1662):
r0 = socket$netlink(0x10, 0x3, 0x0)
close(0x3)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
r3 = socket(0x2d, 0x2, 0x0)
sendto$llc(r3, 0x0, 0x0, 0x10004000, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x620, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x20040800)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080010}, 0x4005)
write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x5c, 0x30, 0x48b, 0x0, 0x1, {}, [{0x48}]}, 0x5c}, 0x1, 0x0, 0x0, 0x645f71d20fba1eba}, 0x4000)

207.687727ms ago: executing program 2 (id=1663):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

183.475226ms ago: executing program 4 (id=1664):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0xfde9bc7ab12bba78, 0xffffffffffffffff, 0xad9b9000)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f0000001040)=""/4071, 0xfffffffffffffdab, 0x10076, 0x0, 0x16)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/73, 0x49}], 0x1}, 0x7fffffff}], 0x2, 0x10002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000300)="cc874b00b5778cdbd7c5e7c6b977c3f69af11a2941491d069c5f56f71ffcd077c4e18e21172c43c5707cd48a24fecd24c8929de9deaa23bebbdab4f6162149192a70741b91f2471461a6788afefea77c4cea5ea80a7635f840bfaf74ed17b21ea3ce4114a0b2775e6ab9e4be1272168c4bbf894623bd8960acf8a33b144327fa1da2525286f5182e383eaa15e50a1d732aa06777cb1248ca6bb47e1a6089dec77aad", &(0x7f0000000000), 0x2}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000002c0))
r2 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x24030000, 0x0, 0x4050000}, 0x4008040)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

91.181407ms ago: executing program 0 (id=1665):
r0 = socket(0x2, 0x3, 0xff)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket(0x1e, 0x80000, 0xbfc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="01000100670700000000000000010000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000010000a00703000035cf52530599b474"], 0x48}}, 0x811)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20004804)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x60, 0x0, 0x0)

78.950551ms ago: executing program 2 (id=1666):
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="7897a98225ad7159cd0f27a4af3ff442684cd57987050eb037a27c9c80c5713a2e21644d35d492b470816069cc6cdfa89d2c58abf1a9bd2189b8a75d4e0a369e0e542a56a029bc", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900e000000106001a004e23000008001900e000000108001800ac1414bb060003000700000006001d0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0xc40) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) (rerun: 64)

0s ago: executing program 4 (id=1667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0xf5ffffff, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)

kernel console output (not intermixed with test programs):

syz.0.368'.
[  105.120483][ T7125] netlink: 'syz.4.369': attribute type 2 has an invalid length.
[  105.178845][ T7125] l24): entered promiscuous mode
[  105.376839][ T7137] bridge0: left allmulticast mode
[  105.456414][ T7137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.467440][ T7137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.569992][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.603989][ T1100] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.618644][ T1100] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.640618][ T1100] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.736828][ T7160] netlink: 68 bytes leftover after parsing attributes in process `syz.4.376'.
[  105.924018][ T7163] syzkaller0: entered promiscuous mode
[  105.929806][ T7163] syzkaller0: entered allmulticast mode
[  106.528143][ T7190] raw_sendmsg: syz.3.389 forgot to set AF_INET. Fix it!
[  106.733116][ T7207] FAULT_INJECTION: forcing a failure.
[  106.733116][ T7207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.792516][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.2.392 Not tainted syzkaller #0 PREEMPT(full) 
[  106.792542][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  106.792552][ T7207] Call Trace:
[  106.792559][ T7207]  <TASK>
[  106.792566][ T7207]  dump_stack_lvl+0xe8/0x150
[  106.792597][ T7207]  should_fail_ex+0x412/0x560
[  106.792624][ T7207]  _copy_from_user+0x2d/0xb0
[  106.792656][ T7207]  __sys_bpf+0x229/0x950
[  106.792684][ T7207]  ? __pfx___sys_bpf+0x10/0x10
[  106.792725][ T7207]  ? ksys_write+0x242/0x270
[  106.792746][ T7207]  ? __pfx_ksys_write+0x10/0x10
[  106.792771][ T7207]  __x64_sys_bpf+0x7c/0x90
[  106.792795][ T7207]  do_syscall_64+0x14d/0xf80
[  106.792820][ T7207]  ? trace_irq_disable+0x3b/0x150
[  106.792844][ T7207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.792862][ T7207]  ? clear_bhb_loop+0x40/0x90
[  106.792883][ T7207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.792900][ T7207] RIP: 0033:0x7f529dd9c799
[  106.792918][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.792932][ T7207] RSP: 002b:00007f529ec55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  106.792951][ T7207] RAX: ffffffffffffffda RBX: 00007f529e015fa0 RCX: 00007f529dd9c799
[  106.792963][ T7207] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a
[  106.792975][ T7207] RBP: 00007f529ec55090 R08: 0000000000000000 R09: 0000000000000000
[  106.792986][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.792996][ T7207] R13: 00007f529e016038 R14: 00007f529e015fa0 R15: 00007fff0eb28798
[  106.793024][ T7207]  </TASK>
[  107.658004][ T7223] netlink: 'syz.2.398': attribute type 10 has an invalid length.
[  108.179884][ T7272] __nla_validate_parse: 5 callbacks suppressed
[  108.179904][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'.
[  108.294944][ T7280] netlink: 108 bytes leftover after parsing attributes in process `syz.0.413'.
[  108.324531][ T7280] netlink: 108 bytes leftover after parsing attributes in process `syz.0.413'.
[  108.578638][ T7286] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  108.680317][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.419'.
[  108.708753][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.419'.
[  108.857775][ T7305] vlan0: entered promiscuous mode
[  108.873144][ T7305] geneve1: entered promiscuous mode
[  108.878557][ T7305] vlan0: entered allmulticast mode
[  108.883678][ T7308] Bluetooth: MGMT ver 1.23
[  108.891144][ T7305] geneve1: entered allmulticast mode
[  109.058795][ T7315] netlink: 256 bytes leftover after parsing attributes in process `syz.3.425'.
[  109.070885][ T7315] netlink: 'syz.3.425': attribute type 1 has an invalid length.
[  109.107600][ T7315] netlink: 10308 bytes leftover after parsing attributes in process `syz.3.425'.
[  109.347249][ T7331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.431'.
[  109.365067][ T7334] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  109.743136][ T2504] block nbd1: Connection timed out, retrying (0/4 alive)
[  109.751946][ T2504] block nbd1: Connection timed out, retrying (0/4 alive)
[  109.759715][ T2504] block nbd1: Connection timed out, retrying (0/4 alive)
[  109.767547][   T11] block nbd1: Dead connection, failed to find a fallback
[  109.777857][   T11] block nbd1: shutting down sockets
[  109.784342][ T2504] block nbd1: Connection timed out, retrying (0/4 alive)
[  109.791656][   T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.802679][   T11] Buffer I/O error on dev nbd1, logical block 1, async page read
[  109.810709][   T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.820958][   T11] Buffer I/O error on dev nbd1, logical block 0, async page read
[  109.829140][   T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.838778][   T11] Buffer I/O error on dev nbd1, logical block 3, async page read
[  109.846801][   T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.856559][   T11] Buffer I/O error on dev nbd1, logical block 2, async page read
[  109.865585][ T5812] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.876405][ T5812] Buffer I/O error on dev nbd1, logical block 0, async page read
[  109.884647][ T5812] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.894298][ T5812] Buffer I/O error on dev nbd1, logical block 1, async page read
[  109.902162][ T5812] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.911794][ T5812] Buffer I/O error on dev nbd1, logical block 2, async page read
[  109.919881][ T5812] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.929626][ T5812] Buffer I/O error on dev nbd1, logical block 3, async page read
[  109.937583][ T5812] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.947900][ T5812] Buffer I/O error on dev nbd1, logical block 0, async page read
[  109.957489][ T5812] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  109.967201][ T5812] Buffer I/O error on dev nbd1, logical block 1, async page read
[  109.976209][ T5812] ldm_validate_partition_table(): Disk read failed.
[  109.984028][ T5812] Dev nbd1: unable to read RDB block 0
[  109.990313][ T5812]  nbd1: unable to read partition table
[  110.000986][ T5812] ldm_validate_partition_table(): Disk read failed.
[  110.008207][ T5812] Dev nbd1: unable to read RDB block 0
[  110.014413][ T5812]  nbd1: unable to read partition table
[  110.051452][ T7364] xt_l2tp: invalid flags combination: 0
[  110.897723][ T7397] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.998000][ T7397] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.090568][ T7397] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.158968][ T7397] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.287418][ T3029] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.319894][ T3029] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.365455][  T362] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.381611][  T362] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.672395][ T7436] netlink: 'syz.2.468': attribute type 1 has an invalid length.
[  111.702266][ T7436] netlink: 5 bytes leftover after parsing attributes in process `syz.2.468'.
[  111.745846][ T7439] delete_channel: no stack
[  111.853699][ T7443] IPv6: Can't replace route, no match found
[  112.117008][ T7453] netlink: 'syz.2.475': attribute type 4 has an invalid length.
[  112.133927][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'.
[  112.359547][ T7464] FAULT_INJECTION: forcing a failure.
[  112.359547][ T7464] name failslab, interval 1, probability 0, space 0, times 0
[  112.375393][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.4.479 Not tainted syzkaller #0 PREEMPT(full) 
[  112.375417][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  112.375427][ T7464] Call Trace:
[  112.375434][ T7464]  <TASK>
[  112.375441][ T7464]  dump_stack_lvl+0xe8/0x150
[  112.375471][ T7464]  should_fail_ex+0x412/0x560
[  112.375497][ T7464]  should_failslab+0xa8/0x100
[  112.375521][ T7464]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  112.375540][ T7464]  ? __alloc_skb+0x186/0x7d0
[  112.375565][ T7464]  ? __alloc_skb+0x1d0/0x7d0
[  112.375586][ T7464]  ? __local_bh_enable_ip+0xd0/0x130
[  112.375612][ T7464]  __alloc_skb+0x1d0/0x7d0
[  112.375641][ T7464]  netlink_sendmsg+0x5d4/0xb40
[  112.375674][ T7464]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.375701][ T7464]  ? aa_sock_msg_perm+0xf1/0x1b0
[  112.375724][ T7464]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  112.375746][ T7464]  ____sys_sendmsg+0x972/0x9f0
[  112.375772][ T7464]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.375798][ T7464]  ? import_iovec+0x73/0xa0
[  112.375826][ T7464]  ___sys_sendmsg+0x2a5/0x360
[  112.375856][ T7464]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.375906][ T7464]  ? __fget_files+0x2a/0x420
[  112.375932][ T7464]  ? __fget_files+0x3a0/0x420
[  112.375965][ T7464]  __x64_sys_sendmsg+0x1bd/0x2a0
[  112.375985][ T7464]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  112.376011][ T7464]  ? __pfx_ksys_write+0x10/0x10
[  112.376041][ T7464]  do_syscall_64+0x14d/0xf80
[  112.376064][ T7464]  ? trace_irq_disable+0x3b/0x150
[  112.376087][ T7464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.376105][ T7464]  ? clear_bhb_loop+0x40/0x90
[  112.376126][ T7464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.376143][ T7464] RIP: 0033:0x7f7a57f9c799
[  112.376159][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.376173][ T7464] RSP: 002b:00007f7a58e09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.376191][ T7464] RAX: ffffffffffffffda RBX: 00007f7a58215fa0 RCX: 00007f7a57f9c799
[  112.376204][ T7464] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008
[  112.376215][ T7464] RBP: 00007f7a58e09090 R08: 0000000000000000 R09: 0000000000000000
[  112.376225][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.376235][ T7464] R13: 00007f7a58216038 R14: 00007f7a58215fa0 R15: 00007ffdd94c4ad8
[  112.376263][ T7464]  </TASK>
[  112.699847][ T7467] ip6erspan0: entered allmulticast mode
[  113.441776][ T7514] __nla_validate_parse: 2 callbacks suppressed
[  113.441793][ T7514] netlink: 27 bytes leftover after parsing attributes in process `syz.1.492'.
[  113.584610][ T7525] syzkaller0: entered promiscuous mode
[  113.599133][ T7525] syzkaller0: entered allmulticast mode
[  113.627210][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'.
[  113.646577][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'.
[  113.687623][ T7527] FAULT_INJECTION: forcing a failure.
[  113.687623][ T7527] name failslab, interval 1, probability 0, space 0, times 0
[  113.692380][ T7532] x_tables: duplicate entry at hook 3
[  113.702576][ T7527] CPU: 0 UID: 0 PID: 7527 Comm: syz.0.498 Not tainted syzkaller #0 PREEMPT(full) 
[  113.702601][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  113.702611][ T7527] Call Trace:
[  113.702618][ T7527]  <TASK>
[  113.702625][ T7527]  dump_stack_lvl+0xe8/0x150
[  113.702655][ T7527]  should_fail_ex+0x412/0x560
[  113.702682][ T7527]  should_failslab+0xa8/0x100
[  113.702705][ T7527]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  113.702726][ T7527]  ? __alloc_skb+0x1d0/0x7d0
[  113.702749][ T7527]  ? __local_bh_enable_ip+0xd0/0x130
[  113.702782][ T7527]  __alloc_skb+0x1d0/0x7d0
[  113.702805][ T7527]  ? netlink_ack_tlv_len+0x6c/0x210
[  113.702831][ T7527]  netlink_ack+0x146/0xa50
[  113.702852][ T7527]  ? __pfx_genl_rcv_msg+0x10/0x10
[  113.702872][ T7527]  ? __lock_acquire+0x6b5/0x2cf0
[  113.702903][ T7527]  netlink_rcv_skb+0x2b6/0x4b0
[  113.702927][ T7527]  ? __pfx_genl_rcv_msg+0x10/0x10
[  113.702946][ T7527]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  113.702984][ T7527]  ? down_read+0x272/0x2e0
[  113.703000][ T7527]  ? genl_rcv+0xd/0x40
[  113.703019][ T7527]  genl_rcv+0x28/0x40
[  113.703034][ T7527]  netlink_unicast+0x80f/0x9b0
[  113.703064][ T7527]  ? __pfx_netlink_unicast+0x10/0x10
[  113.703085][ T7527]  ? netlink_sendmsg+0x650/0xb40
[  113.703107][ T7527]  ? skb_put+0x11b/0x210
[  113.703134][ T7527]  netlink_sendmsg+0x813/0xb40
[  113.703166][ T7527]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.703191][ T7527]  ? aa_sock_msg_perm+0xf1/0x1b0
[  113.703214][ T7527]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  113.703236][ T7527]  ____sys_sendmsg+0x972/0x9f0
[  113.703262][ T7527]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.703287][ T7527]  ? import_iovec+0x73/0xa0
[  113.703315][ T7527]  ___sys_sendmsg+0x2a5/0x360
[  113.703337][ T7527]  ? __pfx____sys_sendmsg+0x10/0x10
[  113.703387][ T7527]  ? __fget_files+0x2a/0x420
[  113.703410][ T7527]  ? __fget_files+0x3a0/0x420
[  113.703443][ T7527]  __x64_sys_sendmsg+0x1bd/0x2a0
[  113.703463][ T7527]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  113.703488][ T7527]  ? __pfx_ksys_write+0x10/0x10
[  113.703517][ T7527]  do_syscall_64+0x14d/0xf80
[  113.703541][ T7527]  ? trace_irq_disable+0x3b/0x150
[  113.703580][ T7527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.703597][ T7527]  ? clear_bhb_loop+0x40/0x90
[  113.703619][ T7527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.703636][ T7527] RIP: 0033:0x7facc819c799
[  113.703652][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.703666][ T7527] RSP: 002b:00007facc9088028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  113.703683][ T7527] RAX: ffffffffffffffda RBX: 00007facc8415fa0 RCX: 00007facc819c799
[  113.703695][ T7527] RDX: 000000002004c000 RSI: 0000200000000000 RDI: 0000000000000003
[  113.703706][ T7527] RBP: 00007facc9088090 R08: 0000000000000000 R09: 0000000000000000
[  113.703716][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.703727][ T7527] R13: 00007facc8416038 R14: 00007facc8415fa0 R15: 00007ffca3889178
[  113.703755][ T7527]  </TASK>
[  114.023910][ T7529] FAULT_INJECTION: forcing a failure.
[  114.023910][ T7529] name failslab, interval 1, probability 0, space 0, times 0
[  114.037035][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.1.497 Not tainted syzkaller #0 PREEMPT(full) 
[  114.037059][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  114.037069][ T7529] Call Trace:
[  114.037077][ T7529]  <TASK>
[  114.037084][ T7529]  dump_stack_lvl+0xe8/0x150
[  114.037112][ T7529]  should_fail_ex+0x412/0x560
[  114.037139][ T7529]  should_failslab+0xa8/0x100
[  114.037163][ T7529]  __kmalloc_cache_noprof+0x88/0x660
[  114.037182][ T7529]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  114.037208][ T7529]  ? __xdp_reg_mem_model+0x1e3/0x5d0
[  114.037230][ T7529]  __xdp_reg_mem_model+0x1e3/0x5d0
[  114.037252][ T7529]  ? __pfx___xdp_reg_mem_model+0x10/0x10
[  114.037269][ T7529]  ? page_pool_create_percpu+0x7f9/0xb80
[  114.037290][ T7529]  xdp_reg_mem_model+0x22/0x40
[  114.037304][ T7529]  bpf_test_run_xdp_live+0x295/0x1cf0
[  114.037330][ T7529]  ? bpf_dispatcher_change_prog+0xae0/0xd70
[  114.037358][ T7529]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  114.037386][ T7529]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  114.037422][ T7529]  ? 0xffffffffa0201a48
[  114.037435][ T7529]  ? 0xffffffffa02036f0
[  114.037468][ T7529]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  114.037496][ T7529]  ? _copy_from_user+0x94/0xb0
[  114.037518][ T7529]  ? bpf_test_init+0x113/0x150
[  114.037547][ T7529]  ? xdp_convert_md_to_buff+0x5b/0x330
[  114.037569][ T7529]  bpf_prog_test_run_xdp+0x81c/0x1160
[  114.037601][ T7529]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  114.037625][ T7529]  ? __fget_files+0x2a/0x420
[  114.037650][ T7529]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  114.037671][ T7529]  bpf_prog_test_run+0x2c7/0x340
[  114.037689][ T7529]  __sys_bpf+0x643/0x950
[  114.037713][ T7529]  ? __pfx___sys_bpf+0x10/0x10
[  114.037747][ T7529]  ? ksys_write+0x242/0x270
[  114.037765][ T7529]  ? __pfx_ksys_write+0x10/0x10
[  114.037787][ T7529]  __x64_sys_bpf+0x7c/0x90
[  114.037807][ T7529]  do_syscall_64+0x14d/0xf80
[  114.037827][ T7529]  ? trace_irq_disable+0x3b/0x150
[  114.037847][ T7529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.037862][ T7529]  ? clear_bhb_loop+0x40/0x90
[  114.037881][ T7529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.037895][ T7529] RIP: 0033:0x7f19b919c799
[  114.037910][ T7529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.037922][ T7529] RSP: 002b:00007f19ba043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  114.037939][ T7529] RAX: ffffffffffffffda RBX: 00007f19b9415fa0 RCX: 00007f19b919c799
[  114.037949][ T7529] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a
[  114.037958][ T7529] RBP: 00007f19ba043090 R08: 0000000000000000 R09: 0000000000000000
[  114.037967][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  114.037975][ T7529] R13: 00007f19b9416038 R14: 00007f19b9415fa0 R15: 00007fff2b279cc8
[  114.038000][ T7529]  </TASK>
[  114.583267][ T7555] netlink: 27 bytes leftover after parsing attributes in process `syz.2.507'.
[  114.833506][ T7565] netlink: 'syz.4.508': attribute type 1 has an invalid length.
[  114.841203][ T7565] netlink: 224 bytes leftover after parsing attributes in process `syz.4.508'.
[  114.984809][ T7580] x_tables: duplicate underflow at hook 2
[  115.188367][ T7587] netlink: 48 bytes leftover after parsing attributes in process `syz.2.517'.
[  115.216414][ T7591] netlink: 27 bytes leftover after parsing attributes in process `syz.4.519'.
[  115.221852][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.517'.
[  115.256956][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.517'.
[  115.367459][ T7598] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0
[  115.405961][ T7597] IPVS: stopping backup sync thread 7598 ...
[  115.504006][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'.
[  116.211635][ T7634] netlink: 'syz.0.534': attribute type 6 has an invalid length.
[  116.229354][ T7634] syzkaller0: entered promiscuous mode
[  116.237424][ T7634] syzkaller0: entered allmulticast mode
[  116.320560][ T7639] netlink: 'syz.4.536': attribute type 1 has an invalid length.
[  116.330006][ T7639] netlink: 'syz.4.536': attribute type 2 has an invalid length.
[  116.338735][ T7639] netlink: 'syz.4.536': attribute type 1 has an invalid length.
[  116.410435][ T7639] netlink: 'syz.4.536': attribute type 1 has an invalid length.
[  116.742799][ T7654] "syz.0.541" (7654) uses obsolete ecb(arc4) skcipher
[  116.770664][ T7658] bond0: entered promiscuous mode
[  116.778412][ T7658] bond_slave_0: entered promiscuous mode
[  116.786357][ T7658] bond_slave_1: entered promiscuous mode
[  116.795089][ T7658] syz_tun: entered promiscuous mode
[  116.856438][ T7664] netlink: 'syz.4.545': attribute type 1 has an invalid length.
[  117.078074][ T7674] syzkaller0: entered promiscuous mode
[  117.123684][ T7675] sctp: [Deprecated]: syz.4.547 (pid 7675) Use of int in maxseg socket option.
[  117.123684][ T7675] Use struct sctp_assoc_value instead
[  118.009921][ T7711] netlink: 'syz.0.562': attribute type 22 has an invalid length.
[  118.037023][ T7711] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[  118.089887][ T7715] wg1: entered promiscuous mode
[  118.105414][ T7715] wg1: entered allmulticast mode
[  118.423866][ T7725] netlink: 'syz.1.568': attribute type 2 has an invalid length.
[  118.437666][ T7723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.466590][ T7725] �9: entered promiscuous mode
[  118.554649][ T7723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.627636][ T7731] nbd: socks must be embedded in a SOCK_ITEM attr
[  118.646612][ T7733] __nla_validate_parse: 7 callbacks suppressed
[  118.646633][ T7733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'.
[  118.686851][ T7723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.725383][ T5300] IPVS: starting estimator thread 0...
[  118.731690][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.572'.
[  118.748301][ T7733] bond0: entered promiscuous mode
[  118.755353][ T7733] bond_slave_0: entered promiscuous mode
[  118.761273][ T7733] bond_slave_1: entered promiscuous mode
[  118.783652][ T7733] gretap0: entered promiscuous mode
[  118.803576][ T7733] debugfs: 'hsr1' already exists in 'hsr'
[  118.809806][ T7733] Cannot create hsr debugfs directory
[  118.816760][ T7735] IPVS: using max 30 ests per chain, 72000 per kthread
[  118.824059][ T7733] hsr1: entered promiscuous mode
[  118.889752][ T7723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.059756][  T362] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.076793][  T362] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.142450][  T362] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.159984][  T362] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.624992][ T7776] syzkaller0: entered promiscuous mode
[  119.630924][ T7776] syzkaller0: entered allmulticast mode
[  120.204455][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.599'.
[  120.487778][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[  120.565394][ T7836] sctp: [Deprecated]: syz.4.607 (pid 7836) Use of int in max_burst socket option deprecated.
[  120.565394][ T7836] Use struct sctp_assoc_value instead
[  120.585234][ T7836] netlink: 120 bytes leftover after parsing attributes in process `syz.4.607'.
[  120.594562][ T7836] netlink: 'syz.4.607': attribute type 1 has an invalid length.
[  120.603193][ T7836] netlink: 64 bytes leftover after parsing attributes in process `syz.4.607'.
[  120.667277][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'.
[  121.304381][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.615'.
[  121.487313][ T7878] macsec1: entered promiscuous mode
[  121.492578][ T7878] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  121.950720][ T7902] netlink: 'syz.3.626': attribute type 1 has an invalid length.
[  122.156361][ T7912] sctp: [Deprecated]: syz.4.628 (pid 7912) Use of int in max_burst socket option deprecated.
[  122.156361][ T7912] Use struct sctp_assoc_value instead
[  122.206027][ T7912] netlink: 120 bytes leftover after parsing attributes in process `syz.4.628'.
[  122.220986][ T7912] netlink: 'syz.4.628': attribute type 1 has an invalid length.
[  122.235209][ T7912] netlink: 64 bytes leftover after parsing attributes in process `syz.4.628'.
[  122.264735][ T7905] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  122.277260][ T7905] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  122.354966][ T7902] bond2: (slave gretap1): making interface the new active one
[  122.364940][ T7902] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  122.389081][ T7909] macvlan1: entered promiscuous mode
[  122.394529][ T7909] macvlan1: entered allmulticast mode
[  122.401066][ T7909] bond2: entered promiscuous mode
[  122.407017][ T7909] gretap1: entered promiscuous mode
[  122.413512][ T7909] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  122.427630][ T7909] bond2: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  122.440700][ T7909] bond2: left promiscuous mode
[  122.445777][ T7909] gretap1: left promiscuous mode
[  122.743733][ T7921] syzkaller0: entered promiscuous mode
[  122.760837][ T7921] syzkaller0: entered allmulticast mode
[  122.780908][ T7936] syzkaller0: left promiscuous mode
[  122.797915][ T7936] syzkaller0: left allmulticast mode
[  124.197856][ T7963] "syz.0.642" (7963) uses obsolete ecb(arc4) skcipher
[  124.320322][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.589364][ T7942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.615931][ T7942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.925702][ T7956] tipc: Started in network mode
[  124.943012][ T7956] tipc: Node identity 080211, cluster identity 4711
[  124.955989][ T7956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.975527][ T3029] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.008757][ T3029] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.053046][ T7984] bridge_slave_0: invalid flags given to default FDB implementation
[  125.109377][ T3029] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.143326][ T3029] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.241258][ T7997] sctp: [Deprecated]: syz.2.649 (pid 7997) Use of int in max_burst socket option deprecated.
[  125.241258][ T7997] Use struct sctp_assoc_value instead
[  125.300428][ T7997] __nla_validate_parse: 1 callbacks suppressed
[  125.300446][ T7997] netlink: 120 bytes leftover after parsing attributes in process `syz.2.649'.
[  125.376119][ T7997] netlink: 'syz.2.649': attribute type 1 has an invalid length.
[  125.383882][ T7997] netlink: 64 bytes leftover after parsing attributes in process `syz.2.649'.
[  125.394865][ T8003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'.
[  125.490959][ T8009] "syz.1.653" (8009) uses obsolete ecb(arc4) skcipher
[  126.022688][ T8038] sctp: [Deprecated]: syz.3.664 (pid 8038) Use of int in max_burst socket option deprecated.
[  126.022688][ T8038] Use struct sctp_assoc_value instead
[  126.079650][ T8036] virt_wifi0: mtu less than device minimum
[  126.092504][ T5881] tipc: Node number set to 134353152
[  126.142226][ T8046] "syz.0.667" (8046) uses obsolete ecb(arc4) skcipher
[  126.157481][ T8038] netlink: 120 bytes leftover after parsing attributes in process `syz.3.664'.
[  126.189000][ T8038] netlink: 'syz.3.664': attribute type 1 has an invalid length.
[  126.210288][ T8038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.664'.
[  126.226961][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'.
[  126.316662][ T8050] netlink: 148 bytes leftover after parsing attributes in process `syz.1.669'.
[  126.556506][ T8068] RDS: rds_bind could not find a transport for ::ffff:172.20.20.50, load rds_tcp or rds_rdma?
[  126.666246][ T8075] sctp: [Deprecated]: syz.4.679 (pid 8075) Use of int in max_burst socket option deprecated.
[  126.666246][ T8075] Use struct sctp_assoc_value instead
[  126.716337][ T8075] netlink: 260 bytes leftover after parsing attributes in process `syz.4.679'.
[  126.757374][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.679'.
[  126.875501][ T8085] sctp: [Deprecated]: syz.2.680 (pid 8085) Use of int in maxseg socket option.
[  126.875501][ T8085] Use struct sctp_assoc_value instead
[  127.114700][ T8092] netlink: 'syz.1.685': attribute type 1 has an invalid length.
[  127.139350][ T8092] 8021q: adding VLAN 0 to HW filter on device bond2
[  127.166341][ T8092] bond2: (slave veth3): Enslaving as an active interface with a down link
[  127.197207][ T8092] bond2: (slave veth5): Enslaving as an active interface with a down link
[  127.214498][ T8092] bond2: entered allmulticast mode
[  127.225909][ T8092] netlink: 'syz.1.685': attribute type 4 has an invalid length.
[  127.391995][ T8100] netlink: 192 bytes leftover after parsing attributes in process `syz.3.686'.
[  127.974677][ T8121] syzkaller0: entered promiscuous mode
[  127.998011][ T8121] syzkaller0: entered allmulticast mode
[  128.090238][ T8134] sctp: [Deprecated]: syz.3.699 (pid 8134) Use of int in max_burst socket option deprecated.
[  128.090238][ T8134] Use struct sctp_assoc_value instead
[  128.134861][ T8129] tipc: Started in network mode
[  128.139944][ T8129] tipc: Node identity ba3e999480b1, cluster identity 9
[  128.154434][ T8129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.198921][ T8129] syzkaller0: entered promiscuous mode
[  128.205802][ T8129] syzkaller0: entered allmulticast mode
[  128.230500][ T8140] x_tables: duplicate underflow at hook 1
[  128.342878][ T8149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.409218][ T8132] tipc: Resetting bearer <eth:syzkaller0>
[  128.425402][ T8151] macvlan0: entered allmulticast mode
[  128.432044][ T8151] hsr0: entered allmulticast mode
[  128.439530][ T8151] hsr_slave_0: entered allmulticast mode
[  128.445744][ T8151] hsr_slave_1: entered allmulticast mode
[  128.463094][ T8127] tipc: Resetting bearer <eth:syzkaller0>
[  128.487045][ T8127] tipc: Disabling bearer <eth:syzkaller0>
[  128.685101][ T8168] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  128.850115][ T8175] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  129.147938][ T8188] netlink: 'syz.2.717': attribute type 1 has an invalid length.
[  129.188770][ T8188] 8021q: adding VLAN 0 to HW filter on device bond3
[  129.223561][ T8188] bond3: (slave veth3): Enslaving as an active interface with a down link
[  129.272360][ T8188] bond3: (slave veth5): Enslaving as an active interface with a down link
[  129.307165][ T8188] bond3: entered allmulticast mode
[  129.321285][ T8188] netlink: 'syz.2.717': attribute type 4 has an invalid length.
[  130.042987][ T8227] netlink: 'syz.0.730': attribute type 1 has an invalid length.
[  130.109813][ T8227] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.151444][ T8232] bond1: (slave veth3): Enslaving as an active interface with a down link
[  130.204853][ T8227] bond1: (slave veth5): Enslaving as an active interface with a down link
[  130.243384][ T8232] bond1: entered allmulticast mode
[  130.274818][ T8227] netlink: 'syz.0.730': attribute type 4 has an invalid length.
[  130.494662][ T8244] tipc: Enabled bearer <udp:syz2>, priority 10
[  130.597865][ T8254] sctp: [Deprecated]: syz.0.737 (pid 8254) Use of int in max_burst socket option deprecated.
[  130.597865][ T8254] Use struct sctp_assoc_value instead
[  130.599988][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.616627][ T8254] __nla_validate_parse: 12 callbacks suppressed
[  130.616643][ T8254] netlink: 260 bytes leftover after parsing attributes in process `syz.0.737'.
[  130.668810][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'.
[  130.837606][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'.
[  130.875928][ T8264] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  130.906460][ T8264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.740'.
[  131.150375][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'.
[  131.185602][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'.
[  131.459030][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'.
[  131.614034][ T7968] tipc: Node number set to 982489492
[  131.624646][ T8300] netlink: 'syz.0.754': attribute type 4 has an invalid length.
[  131.646786][ T8300] netlink: 'syz.0.754': attribute type 4 has an invalid length.
[  131.663754][ T8300] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[  131.672378][ T8300] netlink: 228 bytes leftover after parsing attributes in process `syz.0.754'.
[  131.682373][ T8298] erspan0: entered promiscuous mode
[  132.087522][ T8314] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  132.134213][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'.
[  132.143749][ T8317] caif0: Master is either lo or non-ether device
[  132.170350][ T8323] netlink: 'syz.4.760': attribute type 10 has an invalid length.
[  132.214943][ T8323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.760'.
[  132.245584][ T8323] dummy0: entered allmulticast mode
[  132.258468][ T8323] bridge0: port 3(dummy0) entered blocking state
[  132.279566][ T8323] bridge0: port 3(dummy0) entered disabled state
[  132.337687][ T8323] dummy0: entered promiscuous mode
[  132.531762][ T8339] FAULT_INJECTION: forcing a failure.
[  132.531762][ T8339] name failslab, interval 1, probability 0, space 0, times 0
[  132.552992][ T8339] CPU: 1 UID: 0 PID: 8339 Comm: syz.4.763 Not tainted syzkaller #0 PREEMPT(full) 
[  132.553017][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  132.553027][ T8339] Call Trace:
[  132.553033][ T8339]  <TASK>
[  132.553040][ T8339]  dump_stack_lvl+0xe8/0x150
[  132.553078][ T8339]  should_fail_ex+0x412/0x560
[  132.553106][ T8339]  should_failslab+0xa8/0x100
[  132.553129][ T8339]  __kmalloc_cache_noprof+0x88/0x660
[  132.553150][ T8339]  ? device_add+0xbe/0xb70
[  132.553173][ T8339]  device_add+0xbe/0xb70
[  132.553190][ T8339]  ? device_initialize+0x24b/0x440
[  132.553210][ T8339]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  132.553232][ T8339]  wakeup_source_register+0x18a/0x380
[  132.553253][ T8339]  ep_insert+0xf34/0x1a40
[  132.553290][ T8339]  ? __pfx_ep_insert+0x10/0x10
[  132.553327][ T8339]  ? bpf_lsm_capable+0x9/0x20
[  132.553355][ T8339]  do_epoll_ctl+0x7f4/0xe80
[  132.553386][ T8339]  __x64_sys_epoll_ctl+0x165/0x1b0
[  132.553414][ T8339]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  132.553446][ T8339]  do_syscall_64+0x14d/0xf80
[  132.553464][ T8339]  ? trace_irq_disable+0x3b/0x150
[  132.553483][ T8339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.553500][ T8339]  ? clear_bhb_loop+0x40/0x90
[  132.553519][ T8339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.553533][ T8339] RIP: 0033:0x7f7a57f9c799
[  132.553555][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.553567][ T8339] RSP: 002b:00007f7a58e09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  132.553588][ T8339] RAX: ffffffffffffffda RBX: 00007f7a58215fa0 RCX: 00007f7a57f9c799
[  132.553599][ T8339] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  132.553606][ T8339] RBP: 00007f7a58e09090 R08: 0000000000000000 R09: 0000000000000000
[  132.553614][ T8339] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[  132.553625][ T8339] R13: 00007f7a58216038 R14: 00007f7a58215fa0 R15: 00007ffdd94c4ad8
[  132.553648][ T8339]  </TASK>
[  132.810142][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  133.143723][ T8363] gre1: entered allmulticast mode
[  133.339468][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  133.437390][ T8378] sctp: [Deprecated]: syz.3.774 (pid 8378) Use of int in max_burst socket option deprecated.
[  133.437390][ T8378] Use struct sctp_assoc_value instead
[  133.508321][ T8364] syz.0.772 (8364) used greatest stack depth: 17472 bytes left
[  133.786421][ T8389] netlink: 'syz.1.777': attribute type 12 has an invalid length.
[  134.005605][ T8394] block nbd4: NBD_DISCONNECT
[  134.556582][ T8420] netlink: 'syz.3.790': attribute type 30 has an invalid length.
[  134.638217][ T8420] bond3: option arp_missed_max: invalid value (0)
[  134.648140][ T8420] bond3: option arp_missed_max: allowed values 1 - 255
[  134.658579][ T8420] bond3 (unregistering): Released all slaves
[  135.026600][ T8445] syzkaller0: entered promiscuous mode
[  135.035607][ T8445] syzkaller0: entered allmulticast mode
[  135.453739][ T8476] sctp: [Deprecated]: syz.4.809 (pid 8476) Use of int in maxseg socket option.
[  135.453739][ T8476] Use struct sctp_assoc_value instead
[  135.756770][ T8486] ip6gretap0: entered allmulticast mode
[  135.833366][ T8491] __nla_validate_parse: 8 callbacks suppressed
[  135.833388][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'.
[  136.050161][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807af5b800: rx timeout, send abort
[  136.551190][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805ba07800: rx timeout, send abort
[  136.559981][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807af5b800: abort rx timeout. Force session deactivation
[  136.818321][ T8529] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  136.851070][ T8529] bond4 (unregistering): Released all slaves
[  136.857627][ T8536] FAULT_INJECTION: forcing a failure.
[  136.857627][ T8536] name failslab, interval 1, probability 0, space 0, times 0
[  136.875793][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.1.829 Not tainted syzkaller #0 PREEMPT(full) 
[  136.875817][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  136.875828][ T8536] Call Trace:
[  136.875835][ T8536]  <TASK>
[  136.875842][ T8536]  dump_stack_lvl+0xe8/0x150
[  136.875872][ T8536]  should_fail_ex+0x412/0x560
[  136.875900][ T8536]  should_failslab+0xa8/0x100
[  136.875923][ T8536]  __kmalloc_cache_noprof+0x88/0x660
[  136.875944][ T8536]  ? sctp_add_bind_addr+0x8c/0x370
[  136.875969][ T8536]  sctp_add_bind_addr+0x8c/0x370
[  136.875992][ T8536]  sctp_copy_local_addr_list+0x314/0x4f0
[  136.876016][ T8536]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  136.876036][ T8536]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  136.876054][ T8536]  ? sctp_association_new+0x1894/0x25e0
[  136.876079][ T8536]  ? sctp_v6_is_any+0x64/0x80
[  136.876102][ T8536]  ? sctp_copy_one_addr+0x93/0x360
[  136.876125][ T8536]  sctp_bind_addr_copy+0xb3/0x3c0
[  136.876146][ T8536]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  136.876176][ T8536]  sctp_connect_new_asoc+0x2ff/0x6b0
[  136.876204][ T8536]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  136.876233][ T8536]  ? __local_bh_enable_ip+0xd0/0x130
[  136.876254][ T8536]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  136.876276][ T8536]  ? security_sctp_bind_connect+0x7e/0x2c0
[  136.876298][ T8536]  sctp_sendmsg+0x1528/0x2c10
[  136.876336][ T8536]  ? __pfx_sctp_sendmsg+0x10/0x10
[  136.876363][ T8536]  ? aa_sk_perm+0x6d5/0x900
[  136.876399][ T8536]  ? __pfx_aa_sk_perm+0x10/0x10
[  136.876424][ T8536]  ? sock_rps_record_flow+0x19/0x350
[  136.876449][ T8536]  ? __pfx_inet_sendmsg+0x10/0x10
[  136.876476][ T8536]  ? inet_sendmsg+0x2f4/0x370
[  136.876501][ T8536]  ? __pfx_inet_sendmsg+0x10/0x10
[  136.876527][ T8536]  __sys_sendto+0x5de/0x710
[  136.876556][ T8536]  ? __pfx___sys_sendto+0x10/0x10
[  136.876579][ T8536]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  136.876617][ T8536]  ? __fget_files+0x3a0/0x420
[  136.876653][ T8536]  ? ksys_write+0x242/0x270
[  136.876674][ T8536]  ? __pfx_ksys_write+0x10/0x10
[  136.876699][ T8536]  __x64_sys_sendto+0xde/0x100
[  136.876728][ T8536]  do_syscall_64+0x14d/0xf80
[  136.876752][ T8536]  ? trace_irq_disable+0x3b/0x150
[  136.876775][ T8536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.876793][ T8536]  ? clear_bhb_loop+0x40/0x90
[  136.876816][ T8536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.876833][ T8536] RIP: 0033:0x7f19b919c799
[  136.876850][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.876865][ T8536] RSP: 002b:00007f19ba043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  136.876884][ T8536] RAX: ffffffffffffffda RBX: 00007f19b9415fa0 RCX: 00007f19b919c799
[  136.876897][ T8536] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[  136.876908][ T8536] RBP: 00007f19ba043090 R08: 0000200000000140 R09: 000000000000001c
[  136.876919][ T8536] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000002
[  136.876929][ T8536] R13: 00007f19b9416038 R14: 00007f19b9415fa0 R15: 00007fff2b279cc8
[  136.876957][ T8536]  </TASK>
[  137.183983][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cadfc00: rx timeout, send abort
[  137.192495][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805ba07800: abort rx timeout. Force session deactivation
[  137.204600][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cadfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  137.639311][ T8557] netlink: 'syz.3.836': attribute type 10 has an invalid length.
[  137.711211][ T8557] team0: Failed to send options change via netlink (err -105)
[  137.732993][ T8557] team0: Port device dummy0 added
[  137.936320][ T8572] netlink: 60 bytes leftover after parsing attributes in process `syz.1.843'.
[  137.946672][ T8572] netlink: 60 bytes leftover after parsing attributes in process `syz.1.843'.
[  137.956228][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'.
[  138.048225][ T8577] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.845'.
[  138.098228][ T8577] netlink: Conntrack attr has 4 unknown bytes
[  138.243386][ T8580] FAULT_INJECTION: forcing a failure.
[  138.243386][ T8580] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.258504][ T8587] netlink: 'syz.4.850': attribute type 21 has an invalid length.
[  138.280292][ T8587] netlink: 156 bytes leftover after parsing attributes in process `syz.4.850'.
[  138.306778][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(full) 
[  138.306802][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  138.306811][ T8580] Call Trace:
[  138.306818][ T8580]  <TASK>
[  138.306826][ T8580]  dump_stack_lvl+0xe8/0x150
[  138.306862][ T8580]  should_fail_ex+0x412/0x560
[  138.306888][ T8580]  _copy_to_user+0x31/0xb0
[  138.306916][ T8580]  simple_read_from_buffer+0xe1/0x170
[  138.306946][ T8580]  proc_fail_nth_read+0x1bb/0x230
[  138.306973][ T8580]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.306997][ T8580]  ? rw_verify_area+0x2a6/0x4d0
[  138.307016][ T8580]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.307041][ T8580]  vfs_read+0x20c/0xa70
[  138.307057][ T8580]  ? fdget_pos+0x246/0x320
[  138.307079][ T8580]  ? __pfx_do_recvmmsg+0x10/0x10
[  138.307101][ T8580]  ? __pfx___mutex_lock+0x10/0x10
[  138.307128][ T8580]  ? __pfx_vfs_read+0x10/0x10
[  138.307149][ T8580]  ? __fget_files+0x2a/0x420
[  138.307176][ T8580]  ? __fget_files+0x3a0/0x420
[  138.307210][ T8580]  ? __fget_files+0x2a/0x420
[  138.307242][ T8580]  ksys_read+0x150/0x270
[  138.307263][ T8580]  ? __pfx_ksys_read+0x10/0x10
[  138.307291][ T8580]  do_syscall_64+0x14d/0xf80
[  138.307315][ T8580]  ? trace_irq_disable+0x3b/0x150
[  138.307337][ T8580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.307353][ T8580]  ? clear_bhb_loop+0x40/0x90
[  138.307374][ T8580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.307391][ T8580] RIP: 0033:0x7f529dd5cfce
[  138.307408][ T8580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  138.307423][ T8580] RSP: 002b:00007f529ec54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  138.307442][ T8580] RAX: ffffffffffffffda RBX: 00007f529ec556c0 RCX: 00007f529dd5cfce
[  138.307455][ T8580] RDX: 000000000000000f RSI: 00007f529ec550a0 RDI: 0000000000000004
[  138.307465][ T8580] RBP: 00007f529ec55090 R08: 0000000000000000 R09: 0000000000000000
[  138.307476][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.307487][ T8580] R13: 00007f529e016038 R14: 00007f529e015fa0 R15: 00007fff0eb28798
[  138.307515][ T8580]  </TASK>
[  138.791804][ T8605] FAULT_INJECTION: forcing a failure.
[  138.791804][ T8605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.805321][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: syz.4.855 Not tainted syzkaller #0 PREEMPT(full) 
[  138.805345][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  138.805355][ T8605] Call Trace:
[  138.805361][ T8605]  <TASK>
[  138.805367][ T8605]  dump_stack_lvl+0xe8/0x150
[  138.805396][ T8605]  should_fail_ex+0x412/0x560
[  138.805421][ T8605]  _copy_from_iter+0x1d3/0x1670
[  138.805446][ T8605]  ? unwind_next_frame+0xa5/0x23c0
[  138.805476][ T8605]  ? __lock_acquire+0x6b5/0x2cf0
[  138.805498][ T8605]  ? __pfx__copy_from_iter+0x10/0x10
[  138.805537][ T8605]  tun_get_user+0x275/0x3dd0
[  138.805570][ T8605]  ? aa_file_perm+0x192/0x15e0
[  138.805596][ T8605]  ? aa_file_perm+0x50e/0x15e0
[  138.805618][ T8605]  ? __pfx_tun_get_user+0x10/0x10
[  138.805639][ T8605]  ? aa_file_perm+0x192/0x15e0
[  138.805677][ T8605]  ? __lock_acquire+0x6b5/0x2cf0
[  138.805707][ T8605]  ? ref_tracker_alloc+0x35c/0x4c0
[  138.805734][ T8605]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  138.805762][ T8605]  ? tun_get+0x1c/0x2f0
[  138.805790][ T8605]  ? tun_get+0x1c/0x2f0
[  138.805813][ T8605]  ? tun_get+0x1c/0x2f0
[  138.805842][ T8605]  tun_chr_write_iter+0x113/0x200
[  138.805869][ T8605]  vfs_write+0x61d/0xb90
[  138.805895][ T8605]  ? __pfx_vfs_write+0x10/0x10
[  138.805923][ T8605]  ? __fget_files+0x2a/0x420
[  138.805956][ T8605]  ksys_write+0x150/0x270
[  138.805978][ T8605]  ? __pfx_ksys_write+0x10/0x10
[  138.806008][ T8605]  do_syscall_64+0x14d/0xf80
[  138.806033][ T8605]  ? trace_irq_disable+0x3b/0x150
[  138.806058][ T8605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.806075][ T8605]  ? clear_bhb_loop+0x40/0x90
[  138.806097][ T8605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.806114][ T8605] RIP: 0033:0x7f7a57f9c799
[  138.806132][ T8605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.806148][ T8605] RSP: 002b:00007f7a58e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.806167][ T8605] RAX: ffffffffffffffda RBX: 00007f7a58215fa0 RCX: 00007f7a57f9c799
[  138.806180][ T8605] RDX: 00000000000000d6 RSI: 0000200000000380 RDI: 0000000000000004
[  138.806191][ T8605] RBP: 00007f7a58e09090 R08: 0000000000000000 R09: 0000000000000000
[  138.806202][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.806212][ T8605] R13: 00007f7a58216038 R14: 00007f7a58215fa0 R15: 00007ffdd94c4ad8
[  138.806241][ T8605]  </TASK>
[  139.174744][ T8610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.858'.
[  139.191921][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'.
[  139.426394][ T8626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.864'.
[  139.968071][ T8655] FAULT_INJECTION: forcing a failure.
[  139.968071][ T8655] name failslab, interval 1, probability 0, space 0, times 0
[  139.995061][ T8655] CPU: 0 UID: 0 PID: 8655 Comm: syz.0.874 Not tainted syzkaller #0 PREEMPT(full) 
[  139.995087][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  139.995098][ T8655] Call Trace:
[  139.995106][ T8655]  <TASK>
[  139.995114][ T8655]  dump_stack_lvl+0xe8/0x150
[  139.995143][ T8655]  should_fail_ex+0x412/0x560
[  139.995171][ T8655]  should_failslab+0xa8/0x100
[  139.995202][ T8655]  ? alloc_empty_file+0x55/0x1d0
[  139.995226][ T8655]  kmem_cache_alloc_noprof+0x87/0x650
[  139.995253][ T8655]  alloc_empty_file+0x55/0x1d0
[  139.995278][ T8655]  alloc_file_pseudo+0x155/0x240
[  139.995305][ T8655]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  139.995328][ T8655]  ? do_raw_spin_unlock+0xf5/0x210
[  139.995349][ T8655]  ? _raw_spin_unlock+0x28/0x50
[  139.995379][ T8655]  sock_alloc_file+0xb8/0x2e0
[  139.995399][ T8655]  ? __sys_socket+0x12b/0x1b0
[  139.995424][ T8655]  __sys_socket+0x13c/0x1b0
[  139.995450][ T8655]  __x64_sys_socket+0x7a/0x90
[  139.995474][ T8655]  do_syscall_64+0x14d/0xf80
[  139.995498][ T8655]  ? trace_irq_disable+0x3b/0x150
[  139.995522][ T8655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.995539][ T8655]  ? clear_bhb_loop+0x40/0x90
[  139.995559][ T8655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.995576][ T8655] RIP: 0033:0x7facc819c799
[  139.995593][ T8655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.995608][ T8655] RSP: 002b:00007facc9088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  139.995627][ T8655] RAX: ffffffffffffffda RBX: 00007facc8415fa0 RCX: 00007facc819c799
[  139.995640][ T8655] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c
[  139.995651][ T8655] RBP: 00007facc9088090 R08: 0000000000000000 R09: 0000000000000000
[  139.995662][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.995673][ T8655] R13: 00007facc8416038 R14: 00007facc8415fa0 R15: 00007ffca3889178
[  139.995701][ T8655]  </TASK>
[  140.560424][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.877'.
[  141.004126][ T8687] unsupported nlmsg_type 40
[  141.359063][ T8707] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  141.393852][ T8707] 8021q: adding VLAN 0 to HW filter on device bond4
[  141.411926][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'.
[  141.445609][ T8707] vlan1: entered promiscuous mode
[  141.450683][ T8707] bond4: entered promiscuous mode
[  141.460082][ T8707] vlan1: entered allmulticast mode
[  141.465875][ T8707] bond4: entered allmulticast mode
[  141.486285][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.890'.
[  141.505395][ T8707] bond4: (slave bridge4): making interface the new active one
[  141.513183][ T8707] bridge4: entered promiscuous mode
[  141.518637][ T8707] bridge4: entered allmulticast mode
[  141.526407][ T8707] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  141.698298][ T8724] netlink: 'syz.3.894': attribute type 1 has an invalid length.
[  141.746166][ T8724] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  141.764931][ T8724] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  141.793098][ T8728] sctp: [Deprecated]: syz.0.891 (pid 8728) Use of int in maxseg socket option.
[  141.793098][ T8728] Use struct sctp_assoc_value instead
[  141.847490][ T8724] macvlan1: entered promiscuous mode
[  141.853037][ T8724] macvlan1: entered allmulticast mode
[  141.859461][ T8724] bond3: entered promiscuous mode
[  141.866153][ T8724] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  141.895246][ T8724] bond3: left promiscuous mode
[  142.066951][ T8735] netlink: 'syz.3.896': attribute type 8 has an invalid length.
[  142.149779][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'.
[  142.544137][ T8751] netlink: 72 bytes leftover after parsing attributes in process `syz.1.900'.
[  142.671164][ T8758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.758403][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'.
[  142.793743][ T8764] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  142.811478][ T8758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.864407][ T8769] netlink: 'syz.1.907': attribute type 4 has an invalid length.
[  142.990987][ T8776] netlink: zone id is out of range
[  143.001164][ T8776] netlink: zone id is out of range
[  143.010172][ T8776] netlink: zone id is out of range
[  143.018363][ T8776] netlink: zone id is out of range
[  143.041980][ T8776] netlink: zone id is out of range
[  143.048524][ T8776] netlink: zone id is out of range
[  143.111542][ T8780] netlink: 'syz.1.911': attribute type 4 has an invalid length.
[  143.152144][ T8780] netlink: 'syz.1.911': attribute type 4 has an invalid length.
[  143.334723][ T8795] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0
[  143.347189][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'.
[  143.578127][ T8809] netlink: 'syz.4.922': attribute type 5 has an invalid length.
[  143.594734][ T8799] netlink: 'syz.0.919': attribute type 1 has an invalid length.
[  143.669982][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'.
[  143.697039][ T8799] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.761896][ T8821] macvtap0: entered promiscuous mode
[  143.805285][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'.
[  143.865989][ T8799] xt_CT: No such helper "syz1"
[  143.906259][ T8809] macvtap0 (unregistering): left promiscuous mode
[  144.001563][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  144.491237][ T8855] netlink: 'syz.4.933': attribute type 1 has an invalid length.
[  144.526382][ T8855] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.539497][ T8852] batadv0: entered promiscuous mode
[  144.572357][ T8852] net_ratelimit: 9 callbacks suppressed
[  144.572374][ T8852] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  144.711785][ T8855] bond3: (slave veth3): Enslaving as an active interface with a down link
[  144.779423][ T8863] bond3: (slave veth5): Enslaving as an active interface with a down link
[  144.821702][ T8866] bond3: entered allmulticast mode
[  144.834728][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.937'.
[  145.722368][ T8919] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  145.953643][ T8932] "syz.0.955" (8932) uses obsolete ecb(arc4) skcipher
[  146.331981][ T8958] sctp: [Deprecated]: syz.1.959 (pid 8958) Use of int in maxseg socket option.
[  146.331981][ T8958] Use struct sctp_assoc_value instead
[  146.732569][ T8978] netlink: 'syz.4.968': attribute type 1 has an invalid length.
[  146.787490][ T8978] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.901051][ T8983] bond4: (slave veth7): Enslaving as an active interface with a down link
[  146.929844][ T8984] bond4: (slave veth9): Enslaving as an active interface with a down link
[  146.962148][ T8990] __nla_validate_parse: 2 callbacks suppressed
[  146.962163][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  146.981028][ T8978] bond4: entered allmulticast mode
[  147.041016][ T8978] netlink: 'syz.4.968': attribute type 4 has an invalid length.
[  147.265270][ T9000] netlink: 'syz.1.974': attribute type 33 has an invalid length.
[  147.273170][ T9000] netlink: 152 bytes leftover after parsing attributes in process `syz.1.974'.
[  147.337543][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'.
[  147.367538][ T9004] openvswitch: netlink: Flow key attr not present in new flow.
[  147.446947][ T9010] netlink: 'syz.0.977': attribute type 1 has an invalid length.
[  147.621661][ T9022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.641725][ T9015] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  148.039853][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'.
[  148.222013][ T9052] "syz.1.986" (9052) uses obsolete ecb(arc4) skcipher
[  148.294364][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  148.490271][ T9065] vlan2: entered promiscuous mode
[  148.495983][ T9065] batadv_slave_1: entered promiscuous mode
[  148.642266][ T9078] netlink: 7 bytes leftover after parsing attributes in process `syz.4.994'.
[  148.852411][ T9087] x_tables: duplicate entry at hook 3
[  148.868459][ T9087] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  148.886257][ T9087] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  148.894326][ T9093] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1000'.
[  148.914334][ T9087] ieee802154 phy0 wpan0: encryption failed: -22
[  148.926889][ T9091] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001
[  148.935735][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'.
[  148.992521][ T9098] FAULT_INJECTION: forcing a failure.
[  148.992521][ T9098] name failslab, interval 1, probability 0, space 0, times 0
[  149.021881][ T9098] CPU: 1 UID: 0 PID: 9098 Comm: syz.2.1001 Not tainted syzkaller #0 PREEMPT(full) 
[  149.021907][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  149.021918][ T9098] Call Trace:
[  149.021925][ T9098]  <TASK>
[  149.021934][ T9098]  dump_stack_lvl+0xe8/0x150
[  149.021962][ T9098]  should_fail_ex+0x412/0x560
[  149.021991][ T9098]  should_failslab+0xa8/0x100
[  149.022019][ T9098]  __kmalloc_cache_noprof+0x88/0x660
[  149.022040][ T9098]  ? nfnetlink_rcv+0xfe1/0x27b0
[  149.022066][ T9098]  nfnetlink_rcv+0xfe1/0x27b0
[  149.022126][ T9098]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  149.022164][ T9098]  ? ref_tracker_free+0x693/0x840
[  149.022215][ T9098]  ? __netlink_deliver_tap+0x807/0x850
[  149.022239][ T9098]  ? netlink_deliver_tap+0x2e/0x1b0
[  149.022280][ T9098]  netlink_unicast+0x80f/0x9b0
[  149.022310][ T9098]  ? __pfx_netlink_unicast+0x10/0x10
[  149.022334][ T9098]  ? netlink_sendmsg+0x650/0xb40
[  149.022356][ T9098]  ? skb_put+0x11b/0x210
[  149.022385][ T9098]  netlink_sendmsg+0x813/0xb40
[  149.022418][ T9098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.022447][ T9098]  ? aa_sock_msg_perm+0xf1/0x1b0
[  149.022471][ T9098]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  149.022494][ T9098]  ____sys_sendmsg+0x972/0x9f0
[  149.022522][ T9098]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.022550][ T9098]  ? import_iovec+0x73/0xa0
[  149.022580][ T9098]  ___sys_sendmsg+0x2a5/0x360
[  149.022600][ T9098]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.022649][ T9098]  ? __fget_files+0x2a/0x420
[  149.022673][ T9098]  ? __fget_files+0x3a0/0x420
[  149.022708][ T9098]  __x64_sys_sendmsg+0x1bd/0x2a0
[  149.022729][ T9098]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  149.022757][ T9098]  ? __pfx_ksys_write+0x10/0x10
[  149.022788][ T9098]  do_syscall_64+0x14d/0xf80
[  149.022812][ T9098]  ? trace_irq_disable+0x3b/0x150
[  149.022837][ T9098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.022855][ T9098]  ? clear_bhb_loop+0x40/0x90
[  149.022877][ T9098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.022894][ T9098] RIP: 0033:0x7f529dd9c799
[  149.022911][ T9098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.022925][ T9098] RSP: 002b:00007f529ec55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.022945][ T9098] RAX: ffffffffffffffda RBX: 00007f529e015fa0 RCX: 00007f529dd9c799
[  149.022958][ T9098] RDX: 0000000004000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  149.022970][ T9098] RBP: 00007f529ec55090 R08: 0000000000000000 R09: 0000000000000000
[  149.022981][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.022991][ T9098] R13: 00007f529e016038 R14: 00007f529e015fa0 R15: 00007fff0eb28798
[  149.023021][ T9098]  </TASK>
[  149.458983][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1006'.
[  149.495241][ T9113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1006'.
[  149.708286][ T9122] syzkaller0: entered promiscuous mode
[  149.714254][ T9122] syzkaller0: entered allmulticast mode
[  149.777395][ T9129] "syz.1.1014" (9129) uses obsolete ecb(arc4) skcipher
[  149.839552][ T9134] sctp: [Deprecated]: syz.1.1015 (pid 9134) Use of int in max_burst socket option deprecated.
[  149.839552][ T9134] Use struct sctp_assoc_value instead
[  149.868744][ T9134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.881601][ T9134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.096851][ T9143] xfrm1: entered promiscuous mode
[  150.324814][ T9155] syzkaller0: entered promiscuous mode
[  150.330375][ T9155] syzkaller0: entered allmulticast mode
[  150.340723][ T9155] tipc: Started in network mode
[  150.347271][ T9155] tipc: Node identity 92961a4e68fa, cluster identity 4711
[  150.354921][ T9155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.416671][ T9154] tipc: Resetting bearer <eth:syzkaller0>
[  150.438206][ T9154] tipc: Disabling bearer <eth:syzkaller0>
[  150.942437][ T9182] validate_nla: 1 callbacks suppressed
[  150.942455][ T9182] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  150.985038][ T9182] 8021q: adding VLAN 0 to HW filter on device bond4
[  151.046070][ T9182] bond4: (slave veth7): Enslaving as an active interface with a down link
[  151.088537][ T9182] bond4: (slave veth9): Enslaving as an active interface with a down link
[  151.111285][ T9182] bond4: entered allmulticast mode
[  151.139586][ T9182] netlink: 'syz.1.1034': attribute type 4 has an invalid length.
[  151.346390][ T9195] sctp: [Deprecated]: syz.1.1040 (pid 9195) Use of int in max_burst socket option deprecated.
[  151.346390][ T9195] Use struct sctp_assoc_value instead
[  151.399951][ T9198] "syz.0.1041" (9198) uses obsolete ecb(arc4) skcipher
[  151.420420][ T9195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.443749][ T9200] sctp: [Deprecated]: syz.2.1039 (pid 9200) Use of int in maxseg socket option.
[  151.443749][ T9200] Use struct sctp_assoc_value instead
[  151.453891][ T9195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.499933][ T9202] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  151.530940][ T9202] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.571937][ T9202] bond2: (slave veth7): Enslaving as an active interface with a down link
[  151.611025][ T9202] bond2: (slave veth9): Enslaving as an active interface with a down link
[  151.637907][ T9202] bond2: entered allmulticast mode
[  151.654421][ T9202] netlink: 'syz.0.1042': attribute type 4 has an invalid length.
[  152.102145][ T9228] "syz.4.1052" (9228) uses obsolete ecb(arc4) skcipher
[  152.517658][ T9248] __nla_validate_parse: 6 callbacks suppressed
[  152.517677][ T9248] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1061'.
[  152.602505][ T9250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.611303][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.873930][ T9259] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1064'.
[  152.913816][ T9259] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  152.931414][ T9261] sctp: [Deprecated]: syz.1.1065 (pid 9261) Use of int in maxseg socket option.
[  152.931414][ T9261] Use struct sctp_assoc_value instead
[  152.976957][ T9263] bond0: option arp_validate: invalid value (55553)
[  153.254414][ T9273] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'.
[  153.308627][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'.
[  154.024537][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'.
[  154.162478][ T9306] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1081'.
[  154.220828][ T9316] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1084'.
[  154.230412][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'.
[  154.329609][ T9319] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  154.352221][ T9319] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  154.457385][ T9327] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.310482][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1096'.
[  155.396955][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'.
[  155.815348][ T9374] FAULT_INJECTION: forcing a failure.
[  155.815348][ T9374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.924888][ T9374] CPU: 0 UID: 0 PID: 9374 Comm: syz.1.1100 Not tainted syzkaller #0 PREEMPT(full) 
[  155.924915][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  155.924926][ T9374] Call Trace:
[  155.924933][ T9374]  <TASK>
[  155.924941][ T9374]  dump_stack_lvl+0xe8/0x150
[  155.924970][ T9374]  should_fail_ex+0x412/0x560
[  155.924998][ T9374]  _copy_to_user+0x31/0xb0
[  155.925034][ T9374]  bpf_test_finish+0x53c/0x6b0
[  155.925066][ T9374]  ? __pfx_bpf_test_finish+0x10/0x10
[  155.925097][ T9374]  ? rep_movs_alternative+0x4a/0x90
[  155.925120][ T9374]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  155.925160][ T9374]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  155.925188][ T9374]  ? __fget_files+0x2a/0x420
[  155.925218][ T9374]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  155.925243][ T9374]  bpf_prog_test_run+0x2c7/0x340
[  155.925265][ T9374]  __sys_bpf+0x643/0x950
[  155.925292][ T9374]  ? __pfx___sys_bpf+0x10/0x10
[  155.925332][ T9374]  ? ksys_write+0x242/0x270
[  155.925353][ T9374]  ? __pfx_ksys_write+0x10/0x10
[  155.925379][ T9374]  __x64_sys_bpf+0x7c/0x90
[  155.925404][ T9374]  do_syscall_64+0x14d/0xf80
[  155.925427][ T9374]  ? trace_irq_disable+0x3b/0x150
[  155.925451][ T9374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.925469][ T9374]  ? clear_bhb_loop+0x40/0x90
[  155.925490][ T9374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.925508][ T9374] RIP: 0033:0x7f19b919c799
[  155.925524][ T9374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.925539][ T9374] RSP: 002b:00007f19ba043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  155.925558][ T9374] RAX: ffffffffffffffda RBX: 00007f19b9415fa0 RCX: 00007f19b919c799
[  155.925571][ T9374] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  155.925583][ T9374] RBP: 00007f19ba043090 R08: 0000000000000000 R09: 0000000000000000
[  155.925594][ T9374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  155.925604][ T9374] R13: 00007f19b9416038 R14: 00007f19b9415fa0 R15: 00007fff2b279cc8
[  155.925633][ T9374]  </TASK>
[  156.227997][ T9388] netlink: 'syz.3.1106': attribute type 22 has an invalid length.
[  156.236269][ T9388] netlink: 'syz.3.1106': attribute type 1 has an invalid length.
[  156.414613][ T9400] netlink: 'syz.0.1105': attribute type 13 has an invalid length.
[  156.422581][ T9400] netlink: 'syz.0.1105': attribute type 17 has an invalid length.
[  156.889966][ T9400] bridge0: left promiscuous mode
[  156.899284][ T9400] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.909735][ T9400] 8021q: adding VLAN 0 to HW filter on device team0
[  156.924073][ T9400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.942469][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.987945][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.014431][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.086908][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.612225][ T9447] __nla_validate_parse: 5 callbacks suppressed
[  157.612243][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1120'.
[  157.685989][ T9447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1120'.
[  157.740010][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1120'.
[  157.779488][ T9447] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  157.789111][ T9447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1120'.
[  157.855406][ T9455] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  157.863108][ T9456] netlink: 'syz.2.1123': attribute type 1 has an invalid length.
[  158.037011][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'.
[  158.088535][ T9463] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  158.114770][ T9463] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  158.153804][ T9478] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  158.185644][ T9456] macvlan0: entered promiscuous mode
[  158.190970][ T9456] macvlan0: entered allmulticast mode
[  158.199459][ T9456] bond6: entered promiscuous mode
[  158.206326][ T9456] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  158.229633][ T9456] bond6: left promiscuous mode
[  158.351665][ T9478] 8021q: adding VLAN 0 to HW filter on device bond5
[  158.424830][ T9476] bond5: (slave veth11): Enslaving as an active interface with a down link
[  158.457760][ T9480] bond5: (slave veth13): Enslaving as an active interface with a down link
[  158.468462][ T9485] bond5: entered allmulticast mode
[  158.506806][ T9476] netlink: 'syz.1.1129': attribute type 4 has an invalid length.
[  158.791842][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'.
[  159.023917][ T9517] veth7: entered promiscuous mode
[  159.078914][ T9530] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1141'.
[  159.361960][ T9545] netlink: 'syz.3.1142': attribute type 1 has an invalid length.
[  159.614551][ T9553] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  159.627151][ T9553] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  159.709797][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'.
[  159.746875][ T9554] macvlan1: entered promiscuous mode
[  159.765256][ T9554] macvlan1: entered allmulticast mode
[  159.778805][ T9554] bond5: entered promiscuous mode
[  159.792256][ T9554] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  159.821724][ T9554] bond5: left promiscuous mode
[  160.194703][ T9579] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1154'.
[  160.350781][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'.
[  160.387475][ T9590] macvlan0: entered promiscuous mode
[  160.407714][ T9590] macvlan0: entered allmulticast mode
[  160.422703][ T9590] veth1_to_batadv: entered allmulticast mode
[  160.701975][ T9606] netlink: 'syz.2.1162': attribute type 1 has an invalid length.
[  160.895867][ T9609] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  160.908006][ T9609] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  161.044151][ T9606] macvlan0: entered promiscuous mode
[  161.066062][ T9606] macvlan0: entered allmulticast mode
[  161.073049][ T9606] bond7: entered promiscuous mode
[  161.078926][ T9606] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  161.092581][ T9606] bond7: left promiscuous mode
[  161.771099][ T9661] x_tables: ip6_tables: mh match: only valid for protocol 135
[  162.381479][ T9681] netlink: 'syz.2.1180': attribute type 1 has an invalid length.
[  163.007646][ T9684] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  163.040273][ T9684] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  163.131633][ T9686] macvlan0: entered promiscuous mode
[  163.153853][ T9686] macvlan0: entered allmulticast mode
[  163.170448][ T9686] bond8: entered promiscuous mode
[  163.187992][ T9686] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  163.272459][ T9686] bond8: left promiscuous mode
[  163.330561][ T9706] netlink: 'syz.4.1185': attribute type 1 has an invalid length.
[  163.340270][ T9710] __nla_validate_parse: 1 callbacks suppressed
[  163.340287][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1185'.
[  163.356259][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1185'.
[  163.468340][ T9712] syzkaller0: entered promiscuous mode
[  163.473996][ T9712] syzkaller0: entered allmulticast mode
[  163.590503][ T9727] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1189'.
[  163.599762][ T9727] netlink: 175 bytes leftover after parsing attributes in process `syz.1.1189'.
[  163.645785][ T9729] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1191'.
[  163.664142][ T7968] IPVS: starting estimator thread 0...
[  163.752864][ T9732] IPVS: using max 28 ests per chain, 67200 per kthread
[  164.467380][ T9756] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  164.882458][ T9767] "syz.3.1199" (9767) uses obsolete ecb(arc4) skcipher
[  165.491199][ T9756] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  165.521583][ T9771] veth0_to_bridge: entered promiscuous mode
[  165.738660][ T9770] veth0_to_bridge: left promiscuous mode
[  165.753785][ T9781] netlink: 'syz.2.1204': attribute type 1 has an invalid length.
[  165.784929][ T9783] netlink: 'syz.1.1205': attribute type 1 has an invalid length.
[  165.890536][ T9781] 8021q: adding VLAN 0 to HW filter on device bond9
[  165.936480][ T9787] bond9: (slave veth9): Enslaving as an active interface with a down link
[  165.989708][ T9783] 8021q: adding VLAN 0 to HW filter on device bond6
[  166.041894][ T9792] bond6: (slave veth15): Enslaving as an active interface with a down link
[  166.070702][ T9791] bond9: (slave veth11): Enslaving as an active interface with a down link
[  166.101282][ T9797] bond6: (slave veth17): Enslaving as an active interface with a down link
[  166.111113][ T9781] bond9: entered allmulticast mode
[  166.126136][ T9783] bond6: entered allmulticast mode
[  166.138623][ T9807] netlink: 'syz.2.1204': attribute type 4 has an invalid length.
[  166.318267][ T9812] "syz.4.1210" (9812) uses obsolete ecb(arc4) skcipher
[  166.546795][ T9823] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  166.575980][ T9824] netlink: 'syz.1.1215': attribute type 1 has an invalid length.
[  166.764486][ T9829] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  166.784518][ T9829] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  166.837412][ T9839] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1222'.
[  166.843884][ T9837] macvlan0: entered promiscuous mode
[  166.854554][ T9837] macvlan0: entered allmulticast mode
[  166.861427][ T9837] bond7: entered promiscuous mode
[  166.873809][ T9840] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1221'.
[  166.885155][ T9837] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  166.912423][ T9837] bond7: left promiscuous mode
[  166.938165][ T9833] syzkaller0: entered promiscuous mode
[  166.944558][ T9833] syzkaller0: entered allmulticast mode
[  167.202831][ T9852] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001
[  167.420008][ T9867] FAULT_INJECTION: forcing a failure.
[  167.420008][ T9867] name failslab, interval 1, probability 0, space 0, times 0
[  167.432726][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.1.1231 Not tainted syzkaller #0 PREEMPT(full) 
[  167.432750][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  167.432761][ T9867] Call Trace:
[  167.432768][ T9867]  <TASK>
[  167.432775][ T9867]  dump_stack_lvl+0xe8/0x150
[  167.432803][ T9867]  should_fail_ex+0x412/0x560
[  167.432830][ T9867]  should_failslab+0xa8/0x100
[  167.432852][ T9867]  ? skb_clone+0x212/0x3a0
[  167.432871][ T9867]  kmem_cache_alloc_noprof+0x87/0x650
[  167.432892][ T9867]  ? __bpf_redirect+0xcb4/0x12a0
[  167.432919][ T9867]  skb_clone+0x212/0x3a0
[  167.432941][ T9867]  bpf_clone_redirect+0x16a/0x4b0
[  167.432973][ T9867]  ? bpf_test_run+0x1d1/0x830
[  167.432997][ T9867]  bpf_prog_1939c40fbf65037b+0x5f/0x68
[  167.433032][ T9867]  ? __pfx___schedule+0x10/0x10
[  167.433069][ T9867]  ? preempt_schedule_thunk+0x16/0x30
[  167.433090][ T9867]  ? preempt_schedule_common+0x82/0xd0
[  167.433113][ T9867]  ? bpf_test_run+0x1d1/0x830
[  167.433139][ T9867]  ? bpf_test_timer_continue+0x10c/0x320
[  167.433167][ T9867]  bpf_test_run+0x354/0x830
[  167.433210][ T9867]  ? __pfx_bpf_test_run+0x10/0x10
[  167.433251][ T9867]  ? eth_type_trans+0x455/0x6d0
[  167.433283][ T9867]  ? convert___skb_to_skb+0x3d/0x5b0
[  167.433309][ T9867]  bpf_prog_test_run_skb+0xd22/0x1c90
[  167.433345][ T9867]  ? __fget_files+0x2a/0x420
[  167.433369][ T9867]  ? __fget_files+0x3a0/0x420
[  167.433392][ T9867]  ? __fget_files+0x2a/0x420
[  167.433422][ T9867]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  167.433446][ T9867]  bpf_prog_test_run+0x2c7/0x340
[  167.433469][ T9867]  __sys_bpf+0x643/0x950
[  167.433496][ T9867]  ? __pfx___sys_bpf+0x10/0x10
[  167.433538][ T9867]  ? ksys_write+0x242/0x270
[  167.433559][ T9867]  ? __pfx_ksys_write+0x10/0x10
[  167.433586][ T9867]  __x64_sys_bpf+0x7c/0x90
[  167.433611][ T9867]  do_syscall_64+0x14d/0xf80
[  167.433635][ T9867]  ? trace_irq_disable+0x3b/0x150
[  167.433659][ T9867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.433678][ T9867]  ? clear_bhb_loop+0x40/0x90
[  167.433700][ T9867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.433717][ T9867] RIP: 0033:0x7f19b919c799
[  167.433734][ T9867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.433750][ T9867] RSP: 002b:00007f19ba043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  167.433769][ T9867] RAX: ffffffffffffffda RBX: 00007f19b9415fa0 RCX: 00007f19b919c799
[  167.433783][ T9867] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a
[  167.433794][ T9867] RBP: 00007f19ba043090 R08: 0000000000000000 R09: 0000000000000000
[  167.433806][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  167.433816][ T9867] R13: 00007f19b9416038 R14: 00007f19b9415fa0 R15: 00007fff2b279cc8
[  167.433846][ T9867]  </TASK>
[  167.821140][ T9871] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1234'.
[  167.940332][ T9873] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1233'.
[  167.975281][ T9880] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1238'.
[  168.729308][ T9927] sctp: [Deprecated]: syz.1.1253 (pid 9927) Use of int in maxseg socket option.
[  168.729308][ T9927] Use struct sctp_assoc_value instead
[  168.744435][ T9927] netlink: 'syz.1.1253': attribute type 10 has an invalid length.
[  168.769446][ T9927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.791923][ T9927] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  169.001294][ T9938] netlink: 'syz.2.1256': attribute type 4 has an invalid length.
[  169.066807][ T9943] xt_hashlimit: size too large, truncated to 1048576
[  169.176771][ T9952] __nla_validate_parse: 2 callbacks suppressed
[  169.176790][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'.
[  169.209560][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'.
[  169.220263][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'.
[  169.294063][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1259'.
[  169.584371][ T9978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1261'.
[  169.917313][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  170.249780][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'.
[  170.505880][T10034] netlink: 'syz.4.1283': attribute type 8 has an invalid length.
[  170.588432][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'.
[  170.806189][T10052] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  170.869780][T10055] netlink: 'syz.2.1289': attribute type 1 has an invalid length.
[  170.929615][T10055] 8021q: adding VLAN 0 to HW filter on device bond10
[  172.041529][T10051] bond10: (slave veth13): Enslaving as an active interface with a down link
[  172.144608][T10055] bond10: (slave veth15): Enslaving as an active interface with a down link
[  172.164588][T10065] bond10: entered allmulticast mode
[  172.197281][T10070] netlink: 'syz.2.1289': attribute type 4 has an invalid length.
[  172.424453][T10091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1300'.
[  172.475350][T10091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1300'.
[  172.592155][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.602276][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.611219][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.433928][T10125] netlink: 'syz.4.1312': attribute type 1 has an invalid length.
[  174.124645][T10120] vlan0: entered promiscuous mode
[  174.129862][T10120] geneve1: entered promiscuous mode
[  174.135614][T10120] vlan0: entered allmulticast mode
[  174.140861][T10120] geneve1: entered allmulticast mode
[  174.151132][T10126] virt_wifi0 speed is unknown, defaulting to 1000
[  174.167193][T10126] virt_wifi0 speed is unknown, defaulting to 1000
[  174.188697][T10126] virt_wifi0 speed is unknown, defaulting to 1000
[  174.255647][T10126] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  174.327153][T10126] virt_wifi0 speed is unknown, defaulting to 1000
[  174.370245][T10126] virt_wifi0 speed is unknown, defaulting to 1000
[  174.398553][T10126] virt_wifi0 speed is unknown, defaulting to 1000
[  174.436559][T10126] virt_wifi0 speed is unknown, defaulting to 1000
[  174.446346][T10126] virt_wifi0 speed is unknown, defaulting to 1000
[  174.473739][T10145] __nla_validate_parse: 2 callbacks suppressed
[  174.473757][T10145] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1318'.
[  174.858278][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'.
[  175.090642][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'.
[  175.201342][ T1110] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.210437][ T1110] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.219622][ T1110] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.228602][ T1110] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.398169][T10188] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1332'.
[  175.502392][T10194] netlink: 'syz.2.1334': attribute type 25 has an invalid length.
[  175.511209][T10194] netlink: 'syz.2.1334': attribute type 3 has an invalid length.
[  175.520424][T10194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1334'.
[  175.551489][T10194] netlink: 'syz.2.1334': attribute type 10 has an invalid length.
[  175.563557][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1334'.
[  175.577064][T10198] netlink: zone id is out of range
[  175.597662][T10198] netlink: zone id is out of range
[  175.608897][T10198] netlink: zone id is out of range
[  175.614921][T10198] netlink: zone id is out of range
[  175.636415][T10194] team0: Port device geneve0 added
[  175.641039][T10202] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1335'.
[  175.669912][T10198] netlink: zone id is out of range
[  175.676874][T10198] netlink: zone id is out of range
[  175.682084][T10202] hsr0: left allmulticast mode
[  175.688531][T10198] netlink: zone id is out of range
[  175.720768][T10202] hsr_slave_0: left allmulticast mode
[  175.720896][T10207] "syz.0.1337" (10207) uses obsolete ecb(arc4) skcipher
[  175.726408][T10202] hsr_slave_1: left allmulticast mode
[  175.746025][T10202] macvlan0: entered promiscuous mode
[  175.761749][T10202] macvlan0: left allmulticast mode
[  175.836643][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'.
[  176.259745][T10230] "syz.3.1344" (10230) uses obsolete ecb(arc4) skcipher
[  176.384111][T10234] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1345'.
[  176.483534][T10236] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1347'.
[  176.636187][T10241] sctp: [Deprecated]: syz.2.1349 (pid 10241) Use of int in max_burst socket option deprecated.
[  176.636187][T10241] Use struct sctp_assoc_value instead
[  176.655467][T10241] netlink: 'syz.2.1349': attribute type 1 has an invalid length.
[  177.231569][T10257] netlink: 'syz.4.1355': attribute type 10 has an invalid length.
[  177.276849][T10262] netlink: 'syz.0.1356': attribute type 3 has an invalid length.
[  177.589664][T10278] "syz.3.1364" (10278) uses obsolete ecb(arc4) skcipher
[  177.742091][T10288] net_ratelimit: 351 callbacks suppressed
[  177.742111][T10288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.238124][T10317] virt_wifi0 speed is unknown, defaulting to 1000
[  179.093088][T10350] "syz.0.1392" (10350) uses obsolete ecb(arc4) skcipher
[  179.390704][T10358] virt_wifi0 speed is unknown, defaulting to 1000
[  179.467499][T10370] FAULT_INJECTION: forcing a failure.
[  179.467499][T10370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.513500][T10370] CPU: 1 UID: 0 PID: 10370 Comm: syz.1.1396 Not tainted syzkaller #0 PREEMPT(full) 
[  179.513543][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  179.513555][T10370] Call Trace:
[  179.513562][T10370]  <TASK>
[  179.513570][T10370]  dump_stack_lvl+0xe8/0x150
[  179.513598][T10370]  should_fail_ex+0x412/0x560
[  179.513625][T10370]  _copy_from_user+0x2d/0xb0
[  179.513653][T10370]  bpf_test_init+0xd8/0x150
[  179.513678][T10370]  bpf_prog_test_run_xdp+0x529/0x1160
[  179.513706][T10370]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  179.513730][T10370]  ? __fget_files+0x2a/0x420
[  179.513767][T10370]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  179.513791][T10370]  bpf_prog_test_run+0x2c7/0x340
[  179.513812][T10370]  __sys_bpf+0x643/0x950
[  179.513839][T10370]  ? __pfx___sys_bpf+0x10/0x10
[  179.513878][T10370]  ? ksys_write+0x242/0x270
[  179.513898][T10370]  ? __pfx_ksys_write+0x10/0x10
[  179.513922][T10370]  __x64_sys_bpf+0x7c/0x90
[  179.513946][T10370]  do_syscall_64+0x14d/0xf80
[  179.513969][T10370]  ? trace_irq_disable+0x3b/0x150
[  179.513993][T10370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.514009][T10370]  ? clear_bhb_loop+0x40/0x90
[  179.514029][T10370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.514047][T10370] RIP: 0033:0x7f19b919c799
[  179.514064][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.514078][T10370] RSP: 002b:00007f19ba043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  179.514096][T10370] RAX: ffffffffffffffda RBX: 00007f19b9415fa0 RCX: 00007f19b919c799
[  179.514108][T10370] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a
[  179.514119][T10370] RBP: 00007f19ba043090 R08: 0000000000000000 R09: 0000000000000000
[  179.514129][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.514139][T10370] R13: 00007f19b9416038 R14: 00007f19b9415fa0 R15: 00007fff2b279cc8
[  179.514166][T10370]  </TASK>
[  179.744430][T10373] __nla_validate_parse: 13 callbacks suppressed
[  179.744449][T10373] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1398'.
[  179.877039][T10380] netlink: 'syz.1.1400': attribute type 1 has an invalid length.
[  179.932358][T10380] 8021q: adding VLAN 0 to HW filter on device bond8
[  179.962376][T10384] FAULT_INJECTION: forcing a failure.
[  179.962376][T10384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.008055][T10384] CPU: 0 UID: 0 PID: 10384 Comm: syz.3.1402 Not tainted syzkaller #0 PREEMPT(full) 
[  180.008080][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  180.008090][T10384] Call Trace:
[  180.008097][T10384]  <TASK>
[  180.008104][T10384]  dump_stack_lvl+0xe8/0x150
[  180.008130][T10384]  should_fail_ex+0x412/0x560
[  180.008154][T10384]  _copy_from_iter+0x1d3/0x1670
[  180.008182][T10384]  ? rcu_is_watching+0x15/0xb0
[  180.008222][T10384]  ? __pfx__copy_from_iter+0x10/0x10
[  180.008252][T10384]  ? netlink_sendmsg+0x650/0xb40
[  180.008275][T10384]  ? skb_put+0x11b/0x210
[  180.008303][T10384]  netlink_sendmsg+0x6c0/0xb40
[  180.008335][T10384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.008362][T10384]  ? aa_sock_msg_perm+0xf1/0x1b0
[  180.008386][T10384]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  180.008409][T10384]  ____sys_sendmsg+0x972/0x9f0
[  180.008435][T10384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.008461][T10384]  ? import_iovec+0x73/0xa0
[  180.008489][T10384]  ___sys_sendmsg+0x2a5/0x360
[  180.008512][T10384]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.008561][T10384]  ? __fget_files+0x2a/0x420
[  180.008585][T10384]  ? __fget_files+0x3a0/0x420
[  180.008618][T10384]  __x64_sys_sendmsg+0x1bd/0x2a0
[  180.008638][T10384]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  180.008665][T10384]  ? __pfx_ksys_write+0x10/0x10
[  180.008693][T10384]  do_syscall_64+0x14d/0xf80
[  180.008717][T10384]  ? trace_irq_disable+0x3b/0x150
[  180.008741][T10384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.008758][T10384]  ? clear_bhb_loop+0x40/0x90
[  180.008780][T10384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.008797][T10384] RIP: 0033:0x7f766339c799
[  180.008814][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.008829][T10384] RSP: 002b:00007f76641ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.008848][T10384] RAX: ffffffffffffffda RBX: 00007f7663615fa0 RCX: 00007f766339c799
[  180.008861][T10384] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000003
[  180.008872][T10384] RBP: 00007f76641ba090 R08: 0000000000000000 R09: 0000000000000000
[  180.008883][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.008893][T10384] R13: 00007f7663616038 R14: 00007f7663615fa0 R15: 00007fff8e706d68
[  180.008922][T10384]  </TASK>
[  180.301744][T10377] bond8: (slave veth19): Enslaving as an active interface with a down link
[  180.369323][T10377] bond8: entered allmulticast mode
[  180.410842][T10380] bond8: (slave veth21): Enslaving as an active interface with a down link
[  180.582480][T10400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1407'.
[  180.593942][T10400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1407'.
[  180.633465][T10399] xt_NFQUEUE: number of total queues is 0
[  180.732500][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1411'.
[  180.760746][T10412] "syz.3.1413" (10412) uses obsolete ecb(arc4) skcipher
[  180.843901][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'.
[  180.907933][T10420] netlink: 'syz.1.1416': attribute type 1 has an invalid length.
[  180.957410][T10424] netlink: 'syz.4.1418': attribute type 39 has an invalid length.
[  181.276313][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'.
[  181.568647][T10455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.577845][T10455] batadv_slave_0: entered promiscuous mode
[  181.586866][T10455] batadv_slave_0: entered allmulticast mode
[  181.612540][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1431'.
[  181.625938][T10457] sctp: [Deprecated]: syz.1.1430 (pid 10457) Use of int in maxseg socket option.
[  181.625938][T10457] Use struct sctp_assoc_value instead
[  181.914303][T10469] netlink: 'syz.3.1436': attribute type 1 has an invalid length.
[  181.937532][T10469] 8021q: adding VLAN 0 to HW filter on device bond6
[  181.957827][T10469] bond6: (slave gretap2): making interface the new active one
[  181.967193][T10469] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  182.197604][T10477] syz_tun: entered allmulticast mode
[  182.207080][T10476] syz_tun: left allmulticast mode
[  182.380195][T10482] "syz.2.1442" (10482) uses obsolete ecb(arc4) skcipher
[  182.387836][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'.
[  182.439695][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'.
[  182.547793][T10491] netlink: 'syz.1.1446': attribute type 1 has an invalid length.
[  182.687964][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1450'.
[  182.758190][T10500] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  182.810942][T10500] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  182.831720][T10505] batadv_slave_0: entered promiscuous mode
[  182.844750][T10505] batadv_slave_0: entered allmulticast mode
[  182.998140][T10525] "syz.2.1457" (10525) uses obsolete ecb(arc4) skcipher
[  183.005907][T10526] pimreg: tun_chr_ioctl cmd 21731
[  183.134697][T10532] xt_HMARK: proto mask must be zero with L3 mode
[  184.190505][T10552] FAULT_INJECTION: forcing a failure.
[  184.190505][T10552] name failslab, interval 1, probability 0, space 0, times 0
[  184.238720][T10552] CPU: 1 UID: 0 PID: 10552 Comm: syz.1.1467 Not tainted syzkaller #0 PREEMPT(full) 
[  184.238747][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  184.238758][T10552] Call Trace:
[  184.238765][T10552]  <TASK>
[  184.238773][T10552]  dump_stack_lvl+0xe8/0x150
[  184.238802][T10552]  should_fail_ex+0x412/0x560
[  184.238829][T10552]  should_failslab+0xa8/0x100
[  184.238851][T10552]  ? security_file_alloc+0x34/0x310
[  184.238870][T10552]  kmem_cache_alloc_noprof+0x87/0x650
[  184.238888][T10552]  ? rcu_is_watching+0x15/0xb0
[  184.238914][T10552]  ? trace_kmem_cache_alloc+0x29/0xf0
[  184.238935][T10552]  security_file_alloc+0x34/0x310
[  184.238956][T10552]  init_file+0x90/0x2b0
[  184.238982][T10552]  alloc_empty_file+0x6e/0x1d0
[  184.239007][T10552]  alloc_file_pseudo+0x155/0x240
[  184.239034][T10552]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  184.239057][T10552]  ? do_raw_spin_unlock+0xf5/0x210
[  184.239078][T10552]  ? _raw_spin_unlock+0x28/0x50
[  184.239108][T10552]  sock_alloc_file+0xb8/0x2e0
[  184.239128][T10552]  ? __sys_socket+0x12b/0x1b0
[  184.239158][T10552]  __sys_socket+0x13c/0x1b0
[  184.239185][T10552]  __x64_sys_socket+0x7a/0x90
[  184.239208][T10552]  do_syscall_64+0x14d/0xf80
[  184.239233][T10552]  ? trace_irq_disable+0x3b/0x150
[  184.239257][T10552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.239275][T10552]  ? clear_bhb_loop+0x40/0x90
[  184.239298][T10552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.239315][T10552] RIP: 0033:0x7f19b919c799
[  184.239332][T10552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.239347][T10552] RSP: 002b:00007f19ba043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  184.239367][T10552] RAX: ffffffffffffffda RBX: 00007f19b9415fa0 RCX: 00007f19b919c799
[  184.239380][T10552] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c
[  184.239390][T10552] RBP: 00007f19ba043090 R08: 0000000000000000 R09: 0000000000000000
[  184.239401][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.239412][T10552] R13: 00007f19b9416038 R14: 00007f19b9415fa0 R15: 00007fff2b279cc8
[  184.239441][T10552]  </TASK>
[  184.981655][T10577] __nla_validate_parse: 4 callbacks suppressed
[  184.981676][T10577] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1477'.
[  185.023995][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'.
[  185.256217][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'.
[  185.273181][T10584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1480'.
[  185.283059][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'.
[  185.294383][T10584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1480'.
[  185.509991][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'.
[  185.605468][T10599] FAULT_INJECTION: forcing a failure.
[  185.605468][T10599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.640806][T10599] CPU: 0 UID: 0 PID: 10599 Comm: syz.0.1487 Not tainted syzkaller #0 PREEMPT(full) 
[  185.640828][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  185.640837][T10599] Call Trace:
[  185.640843][T10599]  <TASK>
[  185.640849][T10599]  dump_stack_lvl+0xe8/0x150
[  185.640874][T10599]  should_fail_ex+0x412/0x560
[  185.640896][T10599]  _copy_from_user+0x2d/0xb0
[  185.640917][T10599]  bpf_test_init+0xd8/0x150
[  185.640938][T10599]  bpf_prog_test_run_skb+0x36f/0x1c90
[  185.640965][T10599]  ? __fget_files+0x2a/0x420
[  185.640986][T10599]  ? __fget_files+0x3a0/0x420
[  185.641008][T10599]  ? __fget_files+0x2a/0x420
[  185.641032][T10599]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  185.641053][T10599]  bpf_prog_test_run+0x2c7/0x340
[  185.641069][T10599]  __sys_bpf+0x643/0x950
[  185.641090][T10599]  ? __pfx___sys_bpf+0x10/0x10
[  185.641127][T10599]  ? ksys_write+0x242/0x270
[  185.641147][T10599]  ? __pfx_ksys_write+0x10/0x10
[  185.641170][T10599]  __x64_sys_bpf+0x7c/0x90
[  185.641193][T10599]  do_syscall_64+0x14d/0xf80
[  185.641216][T10599]  ? trace_irq_disable+0x3b/0x150
[  185.641240][T10599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.641257][T10599]  ? clear_bhb_loop+0x40/0x90
[  185.641276][T10599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.641291][T10599] RIP: 0033:0x7facc819c799
[  185.641308][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.641323][T10599] RSP: 002b:00007facc9088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  185.641342][T10599] RAX: ffffffffffffffda RBX: 00007facc8415fa0 RCX: 00007facc819c799
[  185.641355][T10599] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  185.641365][T10599] RBP: 00007facc9088090 R08: 0000000000000000 R09: 0000000000000000
[  185.641375][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.641384][T10599] R13: 00007facc8416038 R14: 00007facc8415fa0 R15: 00007ffca3889178
[  185.641409][T10599]  </TASK>
[  186.448261][T10620] netlink: 'syz.0.1492': attribute type 2 has an invalid length.
[  186.456480][T10620] netlink: 'syz.0.1492': attribute type 8 has an invalid length.
[  186.464838][T10620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1492'.
[  186.915079][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1499'.
[  186.975656][T10636] netlink: 212240 bytes leftover after parsing attributes in process `syz.2.1499'.
[  187.517121][T10653] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.526456][T10653] 8021q: adding VLAN 0 to HW filter on device team0
[  187.536496][T10653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.713777][T10661] netlink: 'syz.1.1509': attribute type 1 has an invalid length.
[  187.815899][T10661] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  187.827404][T10661] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  187.848193][T10663] syzkaller1: entered promiscuous mode
[  187.873083][T10663] syzkaller1: entered allmulticast mode
[  188.197434][T10685] netlink: 'syz.4.1519': attribute type 1 has an invalid length.
[  188.290231][T10694] netlink: ct family unspecified
[  188.312796][T10694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.326928][T10692] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  188.397034][T10692] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  188.448764][T10703] netlink: 'syz.3.1523': attribute type 1 has an invalid length.
[  188.459802][T10685] bond5: (slave gretap1): making interface the new active one
[  188.469200][T10685] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  188.497814][T10698] macvlan1: entered promiscuous mode
[  188.504797][T10698] macvlan1: entered allmulticast mode
[  188.511228][T10698] bond5: entered promiscuous mode
[  188.517009][T10698] gretap1: entered promiscuous mode
[  188.523923][T10698] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  188.536013][T10698] bond5: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  188.548476][T10698] bond5: left promiscuous mode
[  188.553644][T10698] gretap1: left promiscuous mode
[  188.750567][T10705] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  188.817447][T10705] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  188.922428][T10706] macvlan1: entered promiscuous mode
[  188.939473][T10706] macvlan1: entered allmulticast mode
[  188.963685][T10706] bond7: entered promiscuous mode
[  188.978169][T10706] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  189.001267][T10718] netlink: 'syz.4.1526': attribute type 1 has an invalid length.
[  189.011000][T10706] bond7: left promiscuous mode
[  189.059006][T10718] 8021q: adding VLAN 0 to HW filter on device bond6
[  189.101564][T10717] bond6: (slave veth11): Enslaving as an active interface with a down link
[  189.167898][T10718] bond6: (slave veth13): Enslaving as an active interface with a down link
[  189.200749][T10717] bond6: entered allmulticast mode
[  189.212548][T10717] netlink: 'syz.4.1526': attribute type 4 has an invalid length.
[  189.600761][T10747] netlink: 'syz.4.1538': attribute type 1 has an invalid length.
[  189.628763][T10742] virt_wifi0 speed is unknown, defaulting to 1000
[  189.734356][T10749] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  189.750162][T10749] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  189.778244][T10755] macvlan1: entered promiscuous mode
[  189.785022][T10755] macvlan1: entered allmulticast mode
[  189.791421][T10755] bond7: entered promiscuous mode
[  189.802044][T10755] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  189.817557][T10755] bond7: left promiscuous mode
[  189.858714][T10756] syzkaller0: entered promiscuous mode
[  189.864463][T10756] syzkaller0: entered allmulticast mode
[  190.170425][T10776] __nla_validate_parse: 12 callbacks suppressed
[  190.170445][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'.
[  190.243695][T10782] sctp: [Deprecated]: syz.3.1545 (pid 10782) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.243695][T10782] Use struct sctp_sack_info instead
[  190.287398][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'.
[  190.303015][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'.
[  190.345392][T10781] netlink: 'syz.0.1547': attribute type 12 has an invalid length.
[  190.354920][T10781] netlink: 'syz.0.1547': attribute type 13 has an invalid length.
[  190.563422][T10797] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  190.575197][T10797] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  190.638169][T10793] macvlan0: entered promiscuous mode
[  190.644421][T10793] macvlan0: entered allmulticast mode
[  190.651081][T10793] bond13: entered promiscuous mode
[  190.659907][T10793] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  190.673309][T10793] bond13: left promiscuous mode
[  190.698985][T10799] batadv_slave_0: entered promiscuous mode
[  190.705557][T10799] batadv_slave_0: entered allmulticast mode
[  190.717636][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1552'.
[  191.173104][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.287380][T10821] syzkaller0: entered promiscuous mode
[  191.293203][T10821] syzkaller0: entered allmulticast mode
[  191.331047][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1563'.
[  191.546230][T10835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1565'.
[  191.782445][T10834] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  191.803907][T10834] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  191.875644][T10836] macvlan2: entered promiscuous mode
[  191.891322][T10836] macvlan2: entered allmulticast mode
[  191.910601][T10836] bond3: entered promiscuous mode
[  191.920690][T10836] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  191.970669][T10836] bond3: left promiscuous mode
[  192.037824][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'.
[  192.058182][T10843] validate_nla: 2 callbacks suppressed
[  192.058202][T10843] netlink: 'syz.3.1567': attribute type 30 has an invalid length.
[  192.121302][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1567'.
[  192.211627][T10843] bond8: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  192.256169][T10843] bond8 (unregistering): Released all slaves
[  192.331946][T10861] virt_wifi0 speed is unknown, defaulting to 1000
[  192.381175][T10867] xt_TPROXY: Can be used only with -p tcp or -p udp
[  192.518051][T10871] FAULT_INJECTION: forcing a failure.
[  192.518051][T10871] name failslab, interval 1, probability 0, space 0, times 0
[  192.531456][T10871] CPU: 1 UID: 0 PID: 10871 Comm: syz.0.1578 Not tainted syzkaller #0 PREEMPT(full) 
[  192.531483][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  192.531494][T10871] Call Trace:
[  192.531501][T10871]  <TASK>
[  192.531508][T10871]  dump_stack_lvl+0xe8/0x150
[  192.531535][T10871]  should_fail_ex+0x412/0x560
[  192.531561][T10871]  should_failslab+0xa8/0x100
[  192.531584][T10871]  __kmalloc_noprof+0xe8/0x760
[  192.531604][T10871]  ? bpf_test_init+0x9f/0x150
[  192.531632][T10871]  bpf_test_init+0x9f/0x150
[  192.531658][T10871]  bpf_prog_test_run_flow_dissector+0x209/0x610
[  192.531695][T10871]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  192.531723][T10871]  ? __fget_files+0x2a/0x420
[  192.531749][T10871]  ? __fget_files+0x2a/0x420
[  192.531771][T10871]  ? __fget_files+0x3a0/0x420
[  192.531794][T10871]  ? __fget_files+0x2a/0x420
[  192.531822][T10871]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  192.531848][T10871]  bpf_prog_test_run+0x2c7/0x340
[  192.531868][T10871]  __sys_bpf+0x643/0x950
[  192.531896][T10871]  ? __pfx___sys_bpf+0x10/0x10
[  192.531934][T10871]  ? ksys_write+0x242/0x270
[  192.531955][T10871]  ? __pfx_ksys_write+0x10/0x10
[  192.531981][T10871]  __x64_sys_bpf+0x7c/0x90
[  192.532005][T10871]  do_syscall_64+0x14d/0xf80
[  192.532029][T10871]  ? trace_irq_disable+0x3b/0x150
[  192.532053][T10871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.532071][T10871]  ? clear_bhb_loop+0x40/0x90
[  192.532093][T10871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.532110][T10871] RIP: 0033:0x7facc819c799
[  192.532128][T10871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.532143][T10871] RSP: 002b:00007facc9088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  192.532180][T10871] RAX: ffffffffffffffda RBX: 00007facc8415fa0 RCX: 00007facc819c799
[  192.532193][T10871] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  192.532203][T10871] RBP: 00007facc9088090 R08: 0000000000000000 R09: 0000000000000000
[  192.532214][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.532223][T10871] R13: 00007facc8416038 R14: 00007facc8415fa0 R15: 00007ffca3889178
[  192.532258][T10871]  </TASK>
[  192.869725][T10881] netlink: 'syz.0.1582': attribute type 1 has an invalid length.
[  192.939474][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1579'.
[  192.952213][T10877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1579'.
[  193.070891][T10886] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  193.092096][T10886] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  193.140416][T10879] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  193.185871][T10881] macvlan2: entered promiscuous mode
[  193.211626][T10881] macvlan2: entered allmulticast mode
[  193.225913][T10881] bond4: entered promiscuous mode
[  193.231804][T10881] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  193.243358][T10881] bond4: left promiscuous mode
[  193.313688][T10892] virt_wifi0 speed is unknown, defaulting to 1000
[  193.334100][T10897] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20000
[  193.828077][T10935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.854990][T10935] openvswitch: netlink: Flow key attribute not present in set flow.
[  193.869483][T10930] virt_wifi0 speed is unknown, defaulting to 1000
[  193.898903][T10937] netlink: 'syz.0.1601': attribute type 1 has an invalid length.
[  194.016185][T10943] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  194.027350][T10943] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  194.058660][T10937] macvlan2: entered promiscuous mode
[  194.064576][T10937] macvlan2: entered allmulticast mode
[  194.070707][T10937] bond5: entered promiscuous mode
[  194.078250][T10937] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  194.097595][T10937] bond5: left promiscuous mode
[  194.136836][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.148759][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  194.411814][T10963] virt_wifi0 speed is unknown, defaulting to 1000
[  194.753656][T10984] openvswitch: netlink: Key type 9906 is out of range max 32
[  194.803595][T10984] ¾x9ÿ: renamed from bridge_slave_0
[  194.814785][T10977] virt_wifi0 speed is unknown, defaulting to 1000
[  194.954655][T10992] nbd: couldn't find device at index 4
[  195.173144][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.465116][T11009] nbd: socks must be embedded in a SOCK_ITEM attr
[  195.474676][T11009] block nbd2: shutting down sockets
[  195.630209][T11025] __nla_validate_parse: 8 callbacks suppressed
[  195.630228][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'.
[  195.645844][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'.
[  196.005107][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'.
[  196.026448][T11046] FAULT_INJECTION: forcing a failure.
[  196.026448][T11046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.059743][T11046] CPU: 0 UID: 0 PID: 11046 Comm: syz.2.1638 Not tainted syzkaller #0 PREEMPT(full) 
[  196.059771][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  196.059782][T11046] Call Trace:
[  196.059789][T11046]  <TASK>
[  196.059798][T11046]  dump_stack_lvl+0xe8/0x150
[  196.059827][T11046]  should_fail_ex+0x412/0x560
[  196.059854][T11046]  _copy_from_iter+0x1d3/0x1670
[  196.059882][T11046]  ? rcu_is_watching+0x15/0xb0
[  196.059909][T11046]  ? __pfx__copy_from_iter+0x10/0x10
[  196.059938][T11046]  ? netlink_sendmsg+0x650/0xb40
[  196.059960][T11046]  ? skb_put+0x11b/0x210
[  196.059988][T11046]  netlink_sendmsg+0x6c0/0xb40
[  196.060018][T11046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.060043][T11046]  ? aa_sock_msg_perm+0xf1/0x1b0
[  196.060067][T11046]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  196.060090][T11046]  ____sys_sendmsg+0x972/0x9f0
[  196.060115][T11046]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.060141][T11046]  ? import_iovec+0x73/0xa0
[  196.060170][T11046]  ___sys_sendmsg+0x2a5/0x360
[  196.060193][T11046]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.060243][T11046]  ? __fget_files+0x2a/0x420
[  196.060267][T11046]  ? __fget_files+0x3a0/0x420
[  196.060300][T11046]  __x64_sys_sendmsg+0x1bd/0x2a0
[  196.060320][T11046]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  196.060348][T11046]  ? __pfx_ksys_write+0x10/0x10
[  196.060377][T11046]  do_syscall_64+0x14d/0xf80
[  196.060402][T11046]  ? trace_irq_disable+0x3b/0x150
[  196.060425][T11046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.060450][T11046]  ? clear_bhb_loop+0x40/0x90
[  196.060472][T11046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.060490][T11046] RIP: 0033:0x7f529dd9c799
[  196.060508][T11046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.060523][T11046] RSP: 002b:00007f529ec55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.060542][T11046] RAX: ffffffffffffffda RBX: 00007f529e015fa0 RCX: 00007f529dd9c799
[  196.060555][T11046] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008
[  196.060566][T11046] RBP: 00007f529ec55090 R08: 0000000000000000 R09: 0000000000000000
[  196.060577][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.060587][T11046] R13: 00007f529e016038 R14: 00007f529e015fa0 R15: 00007fff0eb28798
[  196.060616][T11046]  </TASK>
[  196.452502][T11055] virt_wifi0 speed is unknown, defaulting to 1000
[  196.508809][T11068] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  196.675530][T11077] FAULT_INJECTION: forcing a failure.
[  196.675530][T11077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.704968][T11077] CPU: 1 UID: 0 PID: 11077 Comm: syz.0.1645 Not tainted syzkaller #0 PREEMPT(full) 
[  196.704995][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  196.705006][T11077] Call Trace:
[  196.705014][T11077]  <TASK>
[  196.705021][T11077]  dump_stack_lvl+0xe8/0x150
[  196.705050][T11077]  should_fail_ex+0x412/0x560
[  196.705078][T11077]  _copy_to_iter+0x589/0x17d0
[  196.705116][T11077]  ? __pfx__copy_to_iter+0x10/0x10
[  196.705140][T11077]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  196.705164][T11077]  ? lockdep_hardirqs_on+0x7a/0x110
[  196.705189][T11077]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  196.705212][T11077]  ? __skb_try_recv_datagram+0x3d4/0x4d0
[  196.705238][T11077]  __skb_datagram_iter+0xf8/0x980
[  196.705259][T11077]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  196.705288][T11077]  skb_copy_datagram_iter+0xb5/0x270
[  196.705311][T11077]  netlink_recvmsg+0x2c3/0xa50
[  196.705335][T11077]  ? __lock_acquire+0x6b5/0x2cf0
[  196.705365][T11077]  ? __pfx_netlink_recvmsg+0x10/0x10
[  196.705408][T11077]  ? __pfx_netlink_recvmsg+0x10/0x10
[  196.705433][T11077]  sock_recvmsg_nosec+0x10c/0x140
[  196.705460][T11077]  ____sys_recvmsg+0x3e3/0x4a0
[  196.705488][T11077]  ? __pfx_____sys_recvmsg+0x10/0x10
[  196.705521][T11077]  ? import_iovec+0x73/0xa0
[  196.705550][T11077]  ___sys_recvmsg+0x215/0x590
[  196.705567][T11077]  ? __lock_acquire+0x6b5/0x2cf0
[  196.705594][T11077]  ? __pfx____sys_recvmsg+0x10/0x10
[  196.705647][T11077]  do_recvmmsg+0x334/0x800
[  196.705675][T11077]  ? __pfx_do_recvmmsg+0x10/0x10
[  196.705705][T11077]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  196.705746][T11077]  __x64_sys_recvmmsg+0x198/0x250
[  196.705768][T11077]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  196.705798][T11077]  do_syscall_64+0x14d/0xf80
[  196.705822][T11077]  ? trace_irq_disable+0x3b/0x150
[  196.705846][T11077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.705865][T11077]  ? clear_bhb_loop+0x40/0x90
[  196.705887][T11077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.705904][T11077] RIP: 0033:0x7facc819c799
[  196.705922][T11077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.705937][T11077] RSP: 002b:00007facc9088028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  196.705956][T11077] RAX: ffffffffffffffda RBX: 00007facc8415fa0 RCX: 00007facc819c799
[  196.705972][T11077] RDX: 000000000000000d RSI: 0000200000005c40 RDI: 0000000000000004
[  196.705983][T11077] RBP: 00007facc9088090 R08: 0000000000000000 R09: 0000000000000000
[  196.705995][T11077] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001
[  196.706006][T11077] R13: 00007facc8416038 R14: 00007facc8415fa0 R15: 00007ffca3889178
[  196.706035][T11077]  </TASK>
[  197.090258][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'.
[  197.137270][T11084] FAULT_INJECTION: forcing a failure.
[  197.137270][T11084] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.153538][T11087] FAULT_INJECTION: forcing a failure.
[  197.153538][T11087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.153541][T11084] CPU: 1 UID: 0 PID: 11084 Comm: syz.0.1648 Not tainted syzkaller #0 PREEMPT(full) 
[  197.153563][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  197.153574][T11084] Call Trace:
[  197.153580][T11084]  <TASK>
[  197.153586][T11084]  dump_stack_lvl+0xe8/0x150
[  197.153612][T11084]  should_fail_ex+0x412/0x560
[  197.153637][T11084]  _copy_to_user+0x31/0xb0
[  197.153665][T11084]  simple_read_from_buffer+0xe1/0x170
[  197.153695][T11084]  proc_fail_nth_read+0x1bb/0x230
[  197.153722][T11084]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  197.153748][T11084]  ? rw_verify_area+0x2a6/0x4d0
[  197.153766][T11084]  ? __fget_files+0x2a/0x420
[  197.153789][T11084]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  197.153814][T11084]  vfs_read+0x20c/0xa70
[  197.153830][T11084]  ? fdget_pos+0x246/0x320
[  197.153857][T11084]  ? __pfx___mutex_lock+0x10/0x10
[  197.153883][T11084]  ? __pfx_vfs_read+0x10/0x10
[  197.153903][T11084]  ? __fget_files+0x2a/0x420
[  197.153930][T11084]  ? __fget_files+0x3a0/0x420
[  197.153953][T11084]  ? __fget_files+0x2a/0x420
[  197.153984][T11084]  ksys_read+0x150/0x270
[  197.154005][T11084]  ? __pfx_ksys_read+0x10/0x10
[  197.154033][T11084]  do_syscall_64+0x14d/0xf80
[  197.154056][T11084]  ? trace_irq_disable+0x3b/0x150
[  197.154080][T11084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.154097][T11084]  ? clear_bhb_loop+0x40/0x90
[  197.154118][T11084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.154135][T11084] RIP: 0033:0x7facc815cfce
[  197.154152][T11084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  197.154167][T11084] RSP: 002b:00007facc9087fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  197.154185][T11084] RAX: ffffffffffffffda RBX: 00007facc90886c0 RCX: 00007facc815cfce
[  197.154198][T11084] RDX: 000000000000000f RSI: 00007facc90880a0 RDI: 0000000000000004
[  197.154209][T11084] RBP: 00007facc9088090 R08: 0000000000000000 R09: 0000000000000000
[  197.154220][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  197.154230][T11084] R13: 00007facc8416038 R14: 00007facc8415fa0 R15: 00007ffca3889178
[  197.154260][T11084]  </TASK>
[  197.379874][T11087] CPU: 0 UID: 0 PID: 11087 Comm: syz.4.1650 Not tainted syzkaller #0 PREEMPT(full) 
[  197.379898][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  197.379908][T11087] Call Trace:
[  197.379915][T11087]  <TASK>
[  197.379922][T11087]  dump_stack_lvl+0xe8/0x150
[  197.379950][T11087]  should_fail_ex+0x412/0x560
[  197.379975][T11087]  strncpy_from_user+0x36/0x2b0
[  197.379999][T11087]  strncpy_from_user_nofault+0x71/0x150
[  197.380023][T11087]  bpf_probe_read_user_str+0x2a/0x70
[  197.380047][T11087]  bpf_prog_e3128b38aa61efed+0x46/0x4c
[  197.380064][T11087]  bpf_test_run_xdp_live+0xbaf/0x1cf0
[  197.380106][T11087]  ? bpf_test_run_xdp_live+0x438/0x1cf0
[  197.380139][T11087]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  197.380181][T11087]  ? 0xffffffffa02036c8
[  197.380195][T11087]  ? 0xffffffffa0207054
[  197.380225][T11087]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  197.380258][T11087]  ? _copy_from_user+0x94/0xb0
[  197.380281][T11087]  ? bpf_test_init+0x113/0x150
[  197.380299][T11087]  ? xdp_convert_md_to_buff+0x5b/0x330
[  197.380325][T11087]  bpf_prog_test_run_xdp+0x81c/0x1160
[  197.380361][T11087]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  197.380387][T11087]  ? __fget_files+0x2a/0x420
[  197.380416][T11087]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  197.380439][T11087]  bpf_prog_test_run+0x2c7/0x340
[  197.380461][T11087]  __sys_bpf+0x643/0x950
[  197.380488][T11087]  ? __pfx___sys_bpf+0x10/0x10
[  197.380525][T11087]  ? ksys_write+0x242/0x270
[  197.380546][T11087]  ? __pfx_ksys_write+0x10/0x10
[  197.380570][T11087]  __x64_sys_bpf+0x7c/0x90
[  197.380593][T11087]  do_syscall_64+0x14d/0xf80
[  197.380616][T11087]  ? trace_irq_disable+0x3b/0x150
[  197.380638][T11087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.380655][T11087]  ? clear_bhb_loop+0x40/0x90
[  197.380677][T11087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.380693][T11087] RIP: 0033:0x7f7a57f9c799
[  197.380709][T11087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.380723][T11087] RSP: 002b:00007f7a58e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  197.380743][T11087] RAX: ffffffffffffffda RBX: 00007f7a58215fa0 RCX: 00007f7a57f9c799
[  197.380755][T11087] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a
[  197.380766][T11087] RBP: 00007f7a58e09090 R08: 0000000000000000 R09: 0000000000000000
[  197.380786][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  197.380797][T11087] R13: 00007f7a58216038 R14: 00007f7a58215fa0 R15: 00007ffdd94c4ad8
[  197.380825][T11087]  </TASK>
[  197.966151][T11121] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1656'.
[  198.135132][T11124] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1658'.
[  198.542970][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.715985][T11128] FAULT_INJECTION: forcing a failure.
[  199.715985][T11128] name failslab, interval 1, probability 0, space 0, times 0
[  199.749658][T11128] CPU: 1 UID: 0 PID: 11128 Comm: syz.2.1659 Not tainted syzkaller #0 PREEMPT(full) 
[  199.749685][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  199.749697][T11128] Call Trace:
[  199.749704][T11128]  <TASK>
[  199.749713][T11128]  dump_stack_lvl+0xe8/0x150
[  199.749745][T11128]  should_fail_ex+0x412/0x560
[  199.749774][T11128]  should_failslab+0xa8/0x100
[  199.749798][T11128]  __kvmalloc_node_noprof+0x178/0x8a0
[  199.749820][T11128]  ? page_pool_create_percpu+0x2dd/0xb80
[  199.749841][T11128]  ? page_pool_create_percpu+0xaf/0xb80
[  199.749865][T11128]  page_pool_create_percpu+0x2dd/0xb80
[  199.749886][T11128]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  199.749911][T11128]  bpf_test_run_xdp_live+0x23d/0x1cf0
[  199.749938][T11128]  ? handle_mm_fault+0x2d13/0x3310
[  199.749990][T11128]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  199.750016][T11128]  ? __up_read+0x291/0x6b0
[  199.750051][T11128]  ? do_user_addr_fault+0xc6f/0x1340
[  199.750079][T11128]  ? irqentry_exit+0x59e/0x620
[  199.750105][T11128]  ? lockdep_hardirqs_on+0x7a/0x110
[  199.750129][T11128]  ? irqentry_exit+0x59e/0x620
[  199.750153][T11128]  ? trace_irq_disable+0x3b/0x150
[  199.750188][T11128]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  199.750219][T11128]  ? rep_movs_alternative+0x4a/0x90
[  199.750240][T11128]  ? _copy_from_user+0x94/0xb0
[  199.750266][T11128]  ? bpf_test_init+0x113/0x150
[  199.750287][T11128]  ? xdp_convert_md_to_buff+0x5b/0x330
[  199.750313][T11128]  bpf_prog_test_run_xdp+0x81c/0x1160
[  199.750352][T11128]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  199.750381][T11128]  ? __fget_files+0x2a/0x420
[  199.750411][T11128]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  199.750436][T11128]  bpf_prog_test_run+0x2c7/0x340
[  199.750458][T11128]  __sys_bpf+0x643/0x950
[  199.750486][T11128]  ? __pfx___sys_bpf+0x10/0x10
[  199.750527][T11128]  ? ksys_write+0x242/0x270
[  199.750549][T11128]  ? __pfx_ksys_write+0x10/0x10
[  199.750575][T11128]  __x64_sys_bpf+0x7c/0x90
[  199.750600][T11128]  do_syscall_64+0x14d/0xf80
[  199.750628][T11128]  ? trace_irq_disable+0x3b/0x150
[  199.750651][T11128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.750668][T11128]  ? clear_bhb_loop+0x40/0x90
[  199.750691][T11128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.750709][T11128] RIP: 0033:0x7f529dd9c799
[  199.750725][T11128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.750739][T11128] RSP: 002b:00007f529ec55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  199.750757][T11128] RAX: ffffffffffffffda RBX: 00007f529e015fa0 RCX: 00007f529dd9c799
[  199.750769][T11128] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  199.750780][T11128] RBP: 00007f529ec55090 R08: 0000000000000000 R09: 0000000000000000
[  199.750791][T11128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.750802][T11128] R13: 00007f529e016038 R14: 00007f529e015fa0 R15: 00007fff0eb28798
[  199.750831][T11128]  </TASK>
[  199.750910][T11128] page_pool_create_percpu() gave up with errno -12
[  200.061572][T11133] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1662'.
[  200.122071][T11136] syzkaller1: entered promiscuous mode
[  200.127830][T11136] syzkaller1: entered allmulticast mode
[  200.279176][T11136] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1661'.
[  200.318569][T11143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1665'.
[  200.328979][T11143] 
[  200.331336][T11143] ======================================================
[  200.338352][T11143] WARNING: possible circular locking dependency detected
[  200.345393][T11143] syzkaller #0 Not tainted
[  200.348615][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'.
[  200.349809][T11143] ------------------------------------------------------
[  200.365692][T11143] syz.0.1665/11143 is trying to acquire lock:
[  200.371765][T11143] ffffffff8e882e40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  200.379689][T11147] netlink: 'syz.2.1666': attribute type 30 has an invalid length.
[  200.381092][T11143] 
[  200.381092][T11143] but task is already holding lock:
[  200.381105][T11143] ffff88807c2b0538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  200.381153][T11143] 
[  200.381153][T11143] which lock already depends on the new lock.
[  200.381153][T11143] 
[  200.381159][T11143] 
[  200.381159][T11143] the existing dependency chain (in reverse order) is:
[  200.381166][T11143] 
[  200.381166][T11143] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  200.381192][T11143]        __mutex_lock+0x19f/0x1300
[  200.381218][T11143]        ip6_mc_source+0x1cc/0x17e0
[  200.442715][T11143]        do_ipv6_mcast_group_source+0x435/0x4c0
[  200.448959][T11143]        do_ipv6_setsockopt+0x16e9/0x3150
[  200.454669][T11143]        ipv6_setsockopt+0x59/0x170
[  200.459858][T11143]        do_sock_setsockopt+0x17c/0x1b0
[  200.465400][T11143]        __x64_sys_setsockopt+0x13d/0x1b0
[  200.471110][T11143]        do_syscall_64+0x14d/0xf80
[  200.476214][T11143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.482613][T11143] 
[  200.482613][T11143] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  200.490341][T11143]        lock_sock_nested+0x41/0x100
[  200.495626][T11143]        inet_shutdown+0x6a/0x390
[  200.500645][T11143]        nbd_mark_nsock_dead+0x2e9/0x560
[  200.506273][T11143]        sock_shutdown+0x15e/0x260
[  200.511377][T11143]        nbd_clear_sock+0x24/0x170
[  200.516473][T11143]        nbd_config_put+0x2dd/0x580
[  200.521661][T11143]        nbd_genl_connect+0x19d5/0x1cf0
[  200.527198][T11143]        genl_family_rcv_msg_doit+0x22a/0x330
[  200.533262][T11143]        genl_rcv_msg+0x61c/0x7a0
[  200.538287][T11143]        netlink_rcv_skb+0x232/0x4b0
[  200.543568][T11143]        genl_rcv+0x28/0x40
[  200.548057][T11143]        netlink_unicast+0x80f/0x9b0
[  200.553333][T11143]        netlink_sendmsg+0x813/0xb40
[  200.558607][T11143]        ____sys_sendmsg+0x972/0x9f0
[  200.563877][T11143]        ___sys_sendmsg+0x2a5/0x360
[  200.569064][T11143]        __x64_sys_sendmsg+0x1bd/0x2a0
[  200.574514][T11143]        do_syscall_64+0x14d/0xf80
[  200.579615][T11143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.586012][T11143] 
[  200.586012][T11143] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  200.593645][T11143]        __mutex_lock+0x19f/0x1300
[  200.598748][T11143]        nbd_queue_rq+0x37b/0x1100
[  200.603854][T11143]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  200.609908][T11143]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  200.616743][T11143]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  200.623228][T11143]        blk_mq_run_hw_queue+0x348/0x4f0
[  200.628851][T11143]        blk_mq_dispatch_list+0xd16/0xe10
[  200.634553][T11143]        blk_mq_flush_plug_list+0x48d/0x570
[  200.640433][T11143]        __blk_flush_plug+0x3ed/0x4d0
[  200.645788][T11143]        __submit_bio+0x28d/0x580
[  200.650798][T11143]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  200.656934][T11143]        block_read_full_folio+0x599/0x830
[  200.662731][T11143]        filemap_read_folio+0x137/0x3b0
[  200.668266][T11143]        do_read_cache_folio+0x358/0x590
[  200.673887][T11143]        read_part_sector+0xb6/0x2b0
[  200.679164][T11143]        adfspart_check_ICS+0xa5/0xa40
[  200.684609][T11143]        bdev_disk_changed+0x7ba/0x1550
[  200.690137][T11143]        blkdev_get_whole+0x380/0x510
[  200.695583][T11143]        bdev_open+0x31e/0xd30
[  200.700331][T11143]        blkdev_open+0x470/0x610
[  200.705270][T11143]        do_dentry_open+0x785/0x14e0
[  200.710545][T11143]        vfs_open+0x3b/0x340
[  200.715124][T11143]        path_openat+0x2e08/0x3860
[  200.720220][T11143]        do_file_open+0x23e/0x4a0
[  200.725230][T11143]        do_sys_openat2+0x113/0x200
[  200.730416][T11143]        __x64_sys_openat+0x138/0x170
[  200.735779][T11143]        do_syscall_64+0x14d/0xf80
[  200.740883][T11143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.747282][T11143] 
[  200.747282][T11143] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  200.754483][T11143]        __mutex_lock+0x19f/0x1300
[  200.759589][T11143]        nbd_queue_rq+0xc6/0x1100
[  200.764605][T11143]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  200.770653][T11143]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  200.777483][T11143]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  200.783972][T11143]        blk_mq_run_hw_queue+0x348/0x4f0
[  200.789604][T11143]        blk_mq_dispatch_list+0xd16/0xe10
[  200.795308][T11143]        blk_mq_flush_plug_list+0x48d/0x570
[  200.801189][T11143]        __blk_flush_plug+0x3ed/0x4d0
[  200.806544][T11143]        __submit_bio+0x28d/0x580
[  200.811558][T11143]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  200.817699][T11143]        block_read_full_folio+0x599/0x830
[  200.823496][T11143]        filemap_read_folio+0x137/0x3b0
[  200.829027][T11143]        do_read_cache_folio+0x358/0x590
[  200.834648][T11143]        read_part_sector+0xb6/0x2b0
[  200.839918][T11143]        adfspart_check_ICS+0xa5/0xa40
[  200.845359][T11143]        bdev_disk_changed+0x7ba/0x1550
[  200.850890][T11143]        blkdev_get_whole+0x380/0x510
[  200.856246][T11143]        bdev_open+0x31e/0xd30
[  200.860997][T11143]        blkdev_open+0x470/0x610
[  200.865918][T11143]        do_dentry_open+0x785/0x14e0
[  200.871191][T11143]        vfs_open+0x3b/0x340
[  200.875767][T11143]        path_openat+0x2e08/0x3860
[  200.880864][T11143]        do_file_open+0x23e/0x4a0
[  200.885871][T11143]        do_sys_openat2+0x113/0x200
[  200.891062][T11143]        __x64_sys_openat+0x138/0x170
[  200.896434][T11143]        do_syscall_64+0x14d/0xf80
[  200.901553][T11143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.907955][T11143] 
[  200.907955][T11143] -> #3 (set->srcu){.+.+}-{0:0}:
[  200.915067][T11143]        __synchronize_srcu+0xca/0x3e0
[  200.920517][T11143]        elevator_switch+0x1e8/0x7a0
[  200.925787][T11143]        elevator_change+0x2cc/0x450
[  200.931061][T11143]        elevator_set_default+0x36c/0x430
[  200.936765][T11143]        blk_register_queue+0x366/0x430
[  200.942295][T11143]        __add_disk+0x677/0xd50
[  200.947130][T11143]        add_disk_fwnode+0xfb/0x480
[  200.952313][T11143]        nbd_dev_add+0x72c/0xb50
[  200.957245][T11143]        nbd_init+0x168/0x1f0
[  200.961906][T11143]        do_one_initcall+0x250/0x8d0
[  200.967180][T11143]        do_initcall_level+0x104/0x190
[  200.972625][T11143]        do_initcalls+0x59/0xa0
[  200.977513][T11143]        kernel_init_freeable+0x2a6/0x3e0
[  200.983219][T11143]        kernel_init+0x1d/0x1d0
[  200.988055][T11143]        ret_from_fork+0x51e/0xb90
[  200.993153][T11143]        ret_from_fork_asm+0x1a/0x30
[  200.998432][T11143] 
[  200.998432][T11143] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  201.006240][T11143]        __mutex_lock+0x19f/0x1300
[  201.011346][T11143]        elevator_change+0x1b3/0x450
[  201.016614][T11143]        elevator_set_none+0xb5/0x140
[  201.021970][T11143]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  201.028285][T11143]        nbd_start_device+0x17f/0xb10
[  201.033654][T11143]        nbd_genl_connect+0x165b/0x1cf0
[  201.039194][T11143]        genl_family_rcv_msg_doit+0x22a/0x330
[  201.045250][T11143]        genl_rcv_msg+0x61c/0x7a0
[  201.050259][T11143]        netlink_rcv_skb+0x232/0x4b0
[  201.055532][T11143]        genl_rcv+0x28/0x40
[  201.060019][T11143]        netlink_unicast+0x80f/0x9b0
[  201.065294][T11143]        netlink_sendmsg+0x813/0xb40
[  201.070575][T11143]        ____sys_sendmsg+0x972/0x9f0
[  201.075845][T11143]        ___sys_sendmsg+0x2a5/0x360
[  201.081025][T11143]        __x64_sys_sendmsg+0x1bd/0x2a0
[  201.086474][T11143]        do_syscall_64+0x14d/0xf80
[  201.091577][T11143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.097978][T11143] 
[  201.097978][T11143] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  201.106580][T11143]        blk_alloc_queue+0x546/0x680
[  201.111859][T11143]        __blk_mq_alloc_disk+0x197/0x390
[  201.117480][T11143]        nbd_dev_add+0x499/0xb50
[  201.122411][T11143]        nbd_init+0x168/0x1f0
[  201.127071][T11143]        do_one_initcall+0x250/0x8d0
[  201.132348][T11143]        do_initcall_level+0x104/0x190
[  201.137787][T11143]        do_initcalls+0x59/0xa0
[  201.142622][T11143]        kernel_init_freeable+0x2a6/0x3e0
[  201.148326][T11143]        kernel_init+0x1d/0x1d0
[  201.153163][T11143]        ret_from_fork+0x51e/0xb90
[  201.158287][T11143]        ret_from_fork_asm+0x1a/0x30
[  201.163566][T11143] 
[  201.163566][T11143] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  201.170764][T11143]        __lock_acquire+0x15a5/0x2cf0
[  201.176130][T11143]        lock_acquire+0xf0/0x2e0
[  201.181058][T11143]        fs_reclaim_acquire+0x71/0x100
[  201.186503][T11143]        __kmalloc_cache_noprof+0x40/0x660
[  201.192304][T11143]        __ipv6_dev_mc_inc+0x44f/0xa50
[  201.197748][T11143]        pndisc_constructor+0xe0/0x150
[  201.203199][T11143]        pneigh_create+0x246/0x4b0
[  201.208300][T11143]        neigh_add+0x6ea/0xf70
[  201.213048][T11143]        rtnetlink_rcv_msg+0x77e/0xbe0
[  201.218497][T11143]        netlink_rcv_skb+0x232/0x4b0
[  201.223775][T11143]        netlink_unicast+0x80f/0x9b0
[  201.229049][T11143]        netlink_sendmsg+0x813/0xb40
[  201.234331][T11143]        ____sys_sendmsg+0x972/0x9f0
[  201.239603][T11143]        ___sys_sendmsg+0x2a5/0x360
[  201.244784][T11143]        __x64_sys_sendmsg+0x1bd/0x2a0
[  201.250228][T11143]        do_syscall_64+0x14d/0xf80
[  201.255329][T11143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.261727][T11143] 
[  201.261727][T11143] other info that might help us debug this:
[  201.261727][T11143] 
[  201.271934][T11143] Chain exists of:
[  201.271934][T11143]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  201.271934][T11143] 
[  201.284534][T11143]  Possible unsafe locking scenario:
[  201.284534][T11143] 
[  201.291967][T11143]        CPU0                    CPU1
[  201.297313][T11143]        ----                    ----
[  201.302663][T11143]   lock(&idev->mc_lock);
[  201.306982][T11143]                                lock(sk_lock-AF_INET6);
[  201.313993][T11143]                                lock(&idev->mc_lock);
[  201.320874][T11143]   lock(fs_reclaim);
[  201.324867][T11143] 
[  201.324867][T11143]  *** DEADLOCK ***
[  201.324867][T11143] 
[  201.333000][T11143] 3 locks held by syz.0.1665/11143:
[  201.338188][T11143]  #0: ffffffff8fbc6fc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  201.347592][T11143]  #1: ffffffff8fcf19e0 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4b0
[  201.357073][T11143]  #2: ffff88807c2b0538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  201.366722][T11143] 
[  201.366722][T11143] stack backtrace:
[  201.372595][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.0.1665 Not tainted syzkaller #0 PREEMPT(full) 
[  201.372616][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  201.372626][T11143] Call Trace:
[  201.372635][T11143]  <TASK>
[  201.372643][T11143]  dump_stack_lvl+0xe8/0x150
[  201.372666][T11143]  print_circular_bug+0x2e1/0x300
[  201.372692][T11143]  check_noncircular+0x12e/0x150
[  201.372717][T11143]  __lock_acquire+0x15a5/0x2cf0
[  201.372739][T11143]  ? trace_contention_end+0x3d/0x150
[  201.372763][T11143]  ? __mutex_lock+0x319/0x1300
[  201.372792][T11143]  lock_acquire+0xf0/0x2e0
[  201.372811][T11143]  ? __kmalloc_cache_noprof+0x40/0x660
[  201.372830][T11143]  ? in6_dev_get+0x1a/0x290
[  201.372846][T11143]  fs_reclaim_acquire+0x71/0x100
[  201.372865][T11143]  ? __kmalloc_cache_noprof+0x40/0x660
[  201.372881][T11143]  __kmalloc_cache_noprof+0x40/0x660
[  201.372898][T11143]  ? __ipv6_dev_mc_inc+0x44f/0xa50
[  201.372916][T11143]  __ipv6_dev_mc_inc+0x44f/0xa50
[  201.372936][T11143]  pndisc_constructor+0xe0/0x150
[  201.372961][T11143]  ? __pfx_pndisc_constructor+0x10/0x10
[  201.372985][T11143]  ? pneigh_create+0x15b/0x4b0
[  201.373006][T11143]  pneigh_create+0x246/0x4b0
[  201.373027][T11143]  neigh_add+0x6ea/0xf70
[  201.373045][T11143]  ? __pfx_neigh_add+0x10/0x10
[  201.373058][T11143]  ? __dev_queue_xmit+0x28b/0x3870
[  201.373085][T11143]  ? __pfx_neigh_add+0x10/0x10
[  201.373099][T11143]  rtnetlink_rcv_msg+0x77e/0xbe0
[  201.373122][T11143]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  201.373142][T11143]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  201.373163][T11143]  ? ref_tracker_free+0x693/0x840
[  201.373184][T11143]  ? __copy_skb_header+0xa3/0x4a0
[  201.373199][T11143]  ? __pfx_ref_tracker_free+0x10/0x10
[  201.373224][T11143]  netlink_rcv_skb+0x232/0x4b0
[  201.373246][T11143]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  201.373268][T11143]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.373293][T11143]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.373316][T11143]  netlink_unicast+0x80f/0x9b0
[  201.373338][T11143]  ? __pfx_netlink_unicast+0x10/0x10
[  201.373357][T11143]  ? netlink_sendmsg+0x650/0xb40
[  201.373378][T11143]  ? skb_put+0x11b/0x210
[  201.373402][T11143]  netlink_sendmsg+0x813/0xb40
[  201.373427][T11143]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.373455][T11143]  ? aa_sock_msg_perm+0xf1/0x1b0
[  201.373475][T11143]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.373493][T11143]  ____sys_sendmsg+0x972/0x9f0
[  201.373508][T11143]  ? futex_unqueue+0x211/0x240
[  201.373529][T11143]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.373546][T11143]  ? import_iovec+0x73/0xa0
[  201.373571][T11143]  ___sys_sendmsg+0x2a5/0x360
[  201.373588][T11143]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.373605][T11143]  ? futex_wait+0x29a/0x380
[  201.373636][T11143]  ? __fget_files+0x2a/0x420
[  201.373658][T11143]  ? __fget_files+0x3a0/0x420
[  201.373684][T11143]  __x64_sys_sendmsg+0x1bd/0x2a0
[  201.373718][T11143]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.373736][T11143]  ? rcu_is_watching+0x15/0xb0
[  201.373762][T11143]  do_syscall_64+0x14d/0xf80
[  201.373785][T11143]  ? trace_irq_disable+0x3b/0x150
[  201.373807][T11143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.373823][T11143]  ? clear_bhb_loop+0x40/0x90
[  201.373840][T11143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.373856][T11143] RIP: 0033:0x7facc819c799
[  201.373872][T11143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.373887][T11143] RSP: 002b:00007facc9088028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.373904][T11143] RAX: ffffffffffffffda RBX: 00007facc8415fa0 RCX: 00007facc819c799
[  201.373915][T11143] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000004
[  201.373926][T11143] RBP: 00007facc8232c99 R08: 0000000000000000 R09: 0000000000000000
[  201.373936][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.373946][T11143] R13: 00007facc8416038 R14: 00007facc8415fa0 R15: 00007ffca3889178
[  201.373964][T11143]  </TASK>